At genEplanet, personal genetics, d.o.o. (GenePlanet), your privacy is our top priority. GenePlanet is committed to the responsible handling of your Personal data, which is secured at all administrative, technical, and physical levels.
By agreeing to this Privacy Policy, you agree to allow genEplanet d.o.o., (Cesta na Poljane 24, 1000 Ljubljana, Slovenia, represented by Marko Bitenc) to collect, process, and store your Personal data (including your genetic information) in accordance with the content of this Privacy Policy.
When you order our analysis, use our website at https://geneplanet.com, app.geneplanet.com platform, and mobile application, GenePlanet collects, processes, and stores your Personal data. Our Privacy Policy describes the procedures we follow in collecting, storing, and processing your Personal data, and outlines how we ensure provision of your personal control within our services.
Consent: of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal data relating to him or her.
Controller pertains to a natural or legal person, public authority, agency or any other body which alone or jointly determines the purposes and means of processing Personal data; When the purposes and means of processing are determined by European Union law or the laws of its Member States, the controller (or the specific criteria for the appointment of a controller) may be determined by European Union law or the laws of its Member States.
Genetic data pertains to Personal data relating to an individual's inherited or acquired genetic characteristics, providing unique information on their physiology and health. Genetic data is the result of the analysis of an individual's biological sample.
Individual-level Information: information about a single individual’s genotypes, diseases, blood markers, answers to your lifestyle questions, body measurements or other traits/characteristics, which is not necessarily tied to Registration Information.
Personal data pertains to any information relating to an identified or identifiable individual. An identifiable individual is one who can be identified directly or indirectly, in particular by indicating an identifier such as a name, identification number, location data, web identifier, or by indicating one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Processing pertains to any operation or set of operations carried out on Personal data or sets of Personal data (using or not using automated means), including collecting, recording, organising, structuring, storing, adapting or modifying, retrieving, inspecting, using, disclosing by transmission, dissemination or otherwise making available, adapting or combining, restricting, deleting or destroying.
Processor pertains to a natural or legal person, public authority, agency, or any other body which processes Personal data on behalf of the controller.
Services: GenePlanet’s products, software, services, and website (including but not limited to text, graphics, images, and other material and information) as accessed from time to time by the user, regardless if the use is in connection with an account or not.
Your Personal data is processed if any of the following legal bases apply:
a) you have given consent to the processing of your Personal data for one or more specific purposes. You can withdraw your consent at any time. Please note that revoking the collection and processing of your Personal data does not affect the legality of Personal data processing based on consent given before it was withdrawn and that we may continue to process your Personal data despite the withdrawal of consent in as much as there is a legal basis for it;
b) processing is necessary for the performance of the agreed-upon contract or in order to take steps at your request prior to entering into a contract;
c) processing is necessary to fulfil a specific legal obligation that applies to GenePlanet;
d) processing is necessary for the protection of vital interests;
e) processing is necessary for the performance of a task performed in the public interest or in the exercise of official authority;
f) processing is necessary for legitimate interests, except where such interests are outweighed by your interests or fundamental rights and freedoms that require Personal data protection.
GenePlanet, based on the appropriate legal basis, derived from your consent for Personal data processing and/or concluded contract, processes and stores your Personal data as follows:
PRODUCT PERSONAL INFORMATION RETENTION PERIOD
VeniSafe;
A DNA test based on a saliva sample, which detects an increased risk of Deep Vein Thrombosis and Pulmonary Embolism through presence of genetic variants that have a proven connection to an increased risk.
relevant cardiovascular Personal medical history
condition/age of onset
known genetic variants related to venous thromboembolism
relevant cardiovascular family medical history
condition/age of onset/relationship
known genetic variants related to venous thromboembolism in the family
GenePlanet will retain the Personal data and your biological sample for 5 years after the test results are released.
Cancer Screen;
A DNA test based on a saliva sample, which detects selected mutations, that have a proven link to an increased risk of certain types of cancer.
patient disease history
patient's family disease history
known family mutations
GenePlanet will retain the Personal data and your biological sample for 5 years after the test results are released.
Lifestyle DNA, MyLifestyle, MyAncestry and MyHealth;
DNA tests, based on the fact that there is a link between numerous genetic variants and individual dietary and body needs. The Personal nutrigenetic guide therefore identifies the specific characteristics of each of us and guides individuals on the path to optimal health and well-being.
Raw DNA data
GenePlanet will retain the Personal data and your biological sample for 5 years after the test results are released.
My Heart;
A blood test which consists of analysis of crucial cardiovascular blood markers with intent to protect your health with Personalised recommendations.
Blood markers value
GenePlanet will retain the Personal Information for 5 years after the test results are released. Your biological sample will not be kept after the analysis.
Health Score and Food ID;
A calculation, made from other analysis' results and provided information (mostly from answers on a questionnaire and provided body measurements and values).
Body measurements and values information
GenePlanet will retain the personal Information for 5 years after the test results are released.
PGx (brand name: MyPharmaGenetics / MyMeds);
A DNA pharmacogenomics test based on a saliva sample. The test determines the presence of genetic variants with known effect on the metabolism and response to medications.
name
surname
date of birth
contact information (telephone number/email)
raw DNA data
GenePlanet will retain the Personal data and your biological sample for 5 years after the test results are released.
PERSONAL INFORMATION CATEGORY DESCRIPTION RETENTION PERIOD
Account Creation information
Email address
A password that you provide us with when you create a GenePlanet account
GenePlanet will retain the Personal Information you provide while creating your account until you ask us to delete it.
Account Activation information When you activate your GenePlanet account, we collect:
Name, surname
Gender
Height
Weight
Ancestral background
Country of residence
Answers to selected questions regarding your lifestyle
GenePlanet will retain the Personal data and your biological sample for 5 years after the test results are released.
Genetic Information and Results of the analysis We convert your DNA into machine-readable code, which is used to provide your Genetic Information and a basis for creation of the Results of the analysis later.
GenePlanet will retain the Personal Information included in the results of the analysis for 5 years after the test results are released.
4. When is your data shared, and whom is it shared with?
GenePlanet does not share your Personal data (including genetic information) with third parties, except when necessary to perform the analysis or if requested by a legitimised authority (such as a government agency).
Your data is shared with:
personnel authorised by GenePlanet, who need the information to ensure smooth execution of our contracts;
selected business partners in order to carry out the contracts they have entered into with you or with us. This category includes: the laboratory, application and website development companies, hosting-system management and maintenance, data storage, and virtual infrastructure, as well as payment processing companies and accounting firms.
When choosing business partners with whom we share your Personal data, GenePlanet strictly adheres to all security measures and verifies that the operations of the organisations to which we transfer data comply with the legislation in the field of Personal data protection.
GenePlanet takes a number of security measures to prevent the transmission of Personal data to countries outside the European Economic Community. GenePlanet does not transfer Personal data to countries outside the European Economic Community unless a country or territory meets relevant Personal data protection criteria, and provided that the data subjects have guaranteed rights and legal remedies to protect their Personal data. In cases of data transmission outside the European Economic Community, you have the right to obtain a copy of the data transfer security measures we provide from our Data Protection Officer (DPO).
Geneplanet app’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Depending on the Product you’ve chosen, your biological sample will be analysed as follows:
LGC Genomics LTD
Name of the Product you have purchased or subscribed to Name of the Laboratory the analysis of your biological sample will take place Location where the analysis of your biological sample will take place
VeniSafe LGC Genomics LTD Copenhagen (Denmark)
Cancer Screen BGI Europe Copenhagen (Denmark)
MyOral Novogene LTD UK (Cambridge)
MyLifestyle, MyHealth, MyAncestry Novogene LTD UK (Cambridge)
MyHeart Adria Lab Laboratorijska Diagnostika, d.o.o. Ljubljana
Lifestyle DNA LGC Genomics LTD Hoddesdon (Great Britain)
PGx (brand name: MyPharmaGenetics / MyMeds) DanteLabs L'Aquila (Italy)
5. Your rights and access to your data
a) Right of information and access:
You have the right to obtain confirmation of whether GenePlanet is processing your Personal data and, if so, access that Personal data. If your Personal data is to be exported to third countries, you have the right to request a copy of the security measures we take to protect the Personal data that are the subject of these exports. Access to these documents is granted through our DPO.
b) Right to rectification:
You have the right to obtain the rectification of your inaccurate Personal data without undue delay. Taking into account the purposes of the processing, you have the right to supplement incomplete Personal data.
c) Right of erasure ("right to be forgotten"):
You have the right to request erasure of any Personal data concerning you without undue delay, and we have an obligation to delete Personal data without undue delay when the original purpose of processing this Personal data is no longer relevant or there is no legal basis to reject such a request.
d) The right to limit processing:
You have the right to request a restriction of the data processing if you do not agree to the processing of Personal data that is based on our legitimate interest. You may also request a restriction on the processing of data that is inaccurate or no longer required for processing.
e) Right to data portability:
You have the right to receive the Personal data you provided to GenePlanet and have this data transmitted to another controller.
f) Right to object:
For the reasons set out in more detail in the General Data Protection Regulation (GDPR), you have the right to object to the processing of your Personal data at any time.
g) Right to withdraw consent:
If your Personal data was collected with your consent, you have the right to withdraw your consent at any time.
h) The right to lodge a complaint with the supervisory authority:
You have the right to lodge a complaint with the Information Commissioner if you believe that the processing of your Personal data violates applicable law. You can file a complaint by sending an email to gp.IP (at) ip-rs.si, or by ordinary mail to the address: Information Commissioner of the Republic of Slovenija, Dunajska Cesta 22, 1000 Ljubljana, Slovenia.
i) Automated decision-making, including profiling:
You have the right to know whether you are subject to a decision based solely on automated processing, including profiling, that has legal effects concerning you or similarly significantly affects you.
Any request relating to exercising the rights related to Personal data protection can be sent by email to dpo@geneplanet.com or by ordinary mail to the address: genEplanet d.o.o., Cesta na Poljane 24, 1000 Ljubljana, Slovenia.
6. Security measures
GenePlanet maintains a comprehensive data protection program using administrative, physical, and technical protection measures to protect our users' Personal data.
We use measures to protect our users from inappropriate access, loss, misuse, or alteration of Personal data (including genetic data).
The security team at GenePlanet regularly reviews the implementation of our security and privacy practices and upgrades them as necessary to ensure the integrity of our system and your Personal data.
We use the latest security mechanism standards to process and store Personal data (including genetic information). We only work with companies that meet and commit to our safety standards. While we cannot guarantee that there will be no loss, misuse, or alteration of Personal data, we strive to prevent this from happening.
It is also important to protect yourself from unauthorised access to your Personal data by choosing a strong password that prevents unauthorised use of your computer or other electronic devices.
Your account password will only be valid for online sign-in, and we will not ask for your password in any other instance. In the event of unauthorised use of your account, please notify us immediately.
7. Data on children
GenePlanet is committed to protecting the privacy of both adults and children. Neither GenePlanet nor its services are intended for persons under 18 years of age.
8. Identity and contact details of the Data Protection Officer (DPO)
Contact information of the Data Protection Officer:
Name and surname: Andrej Kraševec
email address: dpo@geneplanet.com
You can contact us at any time by phone or send your questions by email.
9. Changes to the Privacy Policy
Any changes to this Privacy Policy will be posted on this site and, when necessary, notified by email. This will give you the opportunity to review the changes and decide whether you agree to continue using our services under the new terms. We encourage you to check back to this page several times to stay informed of your rights and how your Personal data is being processed.
Last updated: 02. 08. 2023