Our Compliance
Privacy Information for the processing of genetic data
This Privacy Information is given by Perta Labs Malta Ltd., with registered office at MST023 Mosta Technopark, Mosta MST3000, Malta, (hereinafter “Pera Labs”) in the capacity of Data Controller, pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter “Regulation”), with the intent to explain to you the purposes and means of processing of your personal data whenever you send us a biological sample and request Pera Labs analysis services.
Personal data categories
Pera Labs may process some of your personal data or the personal data from the person you legally represent (hereinafter “Data”) for the performance of the services you required.
Namely, Pera Labs may process genetic Data, which means data relating to inherited or acquired genetic characteristics which give unique information about a subject’s physiology or health and which result, in particular, from the analysis of a biological sample, whenever you require for the examination of a biological sample after buying the test;
Conferring us the aforementioned Data is necessary to enable Pera Labs to perform the services you required; in case of absence, Pera Labs cannot be able to perform the services you required.
Purposes and lawful basis for processing personal data
The personal Data shall be processed pursuant to Art. 9 (2) (a) of the Regulation in order to pursuit the following purposes:
i) carry out, upon your explicit consent, the genetic test you required;
ii) scientific research, upon your explicit and voluntary consent.
Please note that the absence of the consent for processing your personal data for the purposes referred to in point i), means that Pera Labs will not be able to perform the services you required.
The consent for the purposes of scientific research referred to in point ii), where applicable, can be withdrawn at any time. If you want to withdraw your consent to scientific research, you can write to privacy@peralabs.co.
Means of data processing
Your personal data shall be processed both by manual and electronic means, subjected to the Regulation provisions and from the Maltese national law, which includes any provisions from the Maltese Supervisory Authority for the protection of personal data.
Duration of processing activities and data retention period
The test, containing the genetic sample your sent us, will be destroyed right after the results are ready and available at your personal area in Pera Labs’ website (hereinafter “Customer Area”).
Your Data shall be processed for the period required to perform the requested services.
Until when you decide to deactivate your account on Dante Labs website, the report with the results will be kept available in your Customer Area to allow you to buy additional test analyses. After the account deactivation, your personal data will be retained for the following 10 years solely to comply with legal obligations and to eventually safeguard Pera Labs rights.
Furthermore, whenever you give us your consent to use your data for scientific research purposes, Pera Labs will process your personal data for as long as they are relevant to the research activities, until your consent is withdrawn.
Third parties’ categories
Dante Labs can rely on third parties for some types of data processing. In that case, these parties will be nominated Data Processors, pursuant to Art. 28 of the Regulation, and will receive the proper operative instructions, especially regarding the adoption of appropriate security measures, to guarantee data security and data confidentiality. Data subjects may require to Pera Labs a list of Data Processors writing to privacy@peralabs.co.
Data transfer to countries outside the European Economic Area
Pera Labs suppliers, responsible for the execution of activities related to the services you requested, may transfer your personal data to countries located outside the European Economic Area. The data transfer is regulated by standard contractual clauses adopted by the European Commission or with due regard for any other warranties provided by the Regulation.
Data subjects’ rights
We inform you that, as data subject, you are entitled to exercise the rights under Articles 15, 16, 17, 18, 19, 20, 21, 22, 23 of the Regulation writing to our e-mail address privacy@peralabslabs.co.
Among other things, you may:
ask and obtain information about whether or not Pera Labs is holding any of your personal data or whether or not your personal data are being processed and, in this case, you may have access to them;
ask and obtain a copy of your personal data that are processed by automated means in a structured, commonly used and machine-readable format; you can also claim the right to transmit those data to another controller;
ask and obtain the alteration and/or rectification of your personal data when you consider them to be inaccurate or incomplete;
ask and obtain the erasure – and/or a processing restriction – of your personal data whenever they are not necessary – or no longer necessary – to fulfil the purposes for which they were collected, hence upon expiry of the retention period.
Please note that you can lodge a complaint with the supervisory authority whenever your personal data are unlawfully processed.
Please be advised that Pera Labs has nominated a Data Protection Officer (DPO) that you may reach at the following address privacy@peralabs.co.
