CENTOGENE GmbH, Am Strande 7, 18055 Rostock, Germany (“CENTOGENE”, “we” or “us”) acts as the responsible controller for the collection, use, storage, or disclosure (“processing”) of your or the Patient’s personal data. “Personal data” means any information relating to an identified or identifiable natural person. If you have any questions on CENTOGENE’s data processing or want to make use of your or the Patient’s data protection rights, you can contact our data protection officer directly at the address above with the addition: Attn: Data Protection Officer, or via email at dataprivacy@centogene.com.
Your physician recommends a genetic and / or biochemical analysis (“Analysis”) to be performed by CENTOGENE for you / the person for whom you are the custodian or legal guardian (“You”). Your physician will collect Your sample as is required for the Analysis which will either be biological material or raw DNA sequencing data (“Sample”)
We collect a Sample and other personal data, including first name, last name, address, date of birth, gender, family relations, ethnicity, nationality, insurance information, patient code number (CGXXXXXXXX), disease, symptoms, and other medical information, including image material if provided (Art. 6 para. 1 a); Art. 9 para. 2 a) GDPR), which will then be processed in our databank. The Sample is analyzed using state-of-the-art scientific methods and the extracted data is processed with the collected data in our databank. We then provide the results containing biochemical, genetic and health data to Your physician. Unless You consent otherwise as set out below, this data will be anonymized, which means that it will not be possible to reidentify You. However, the data may be of scientific importance when improving diagnosis and treatment of rare diseases, including scientific publications.
We archive the personal data and Sample for up to 10 years after the last result has been reported. We delete or anonymize the personal data and destroy the biological material thereafter if this has not already happened. You also have the option to process the personal data and donate the Sample for scientific (including commercial) research purposes. Then, personal data and Sample will be stored for up to 20 years after the last result has been reported. After this 20-year period has passed, the Sample may be anonymized and stored in our archive in anonymized form for further scientific (including commercial) research purposes.
In principle, we process personal data ourselves. Any transfer of personal data to a third party only takes place (1) with either explicit consent, (2) in order to fulfil a legal obligation or (3) if such transfer is permitted by law:
The Sample will be analyzed and processed in Germany. In principle, we process personal data solely within Germany, the European Union, and the European Economic Area (“EEA”), where GDPR-provisions apply. If the treating physician, and other recipients are located in a so-called third country outside the EEA where GDPR provisions do not apply, Your personal data shall be transferred to this third country. Such transfer will only take place with Your consent.
If we engage a data processor based outside the EEA, we may transfer the personal data to such third country, provided that, either (1) the European Commission has decided that this third country already provides an adequate level of data protection or (2) we establish appropriate data protection safeguards with the data processor, e.g. by concluding so- called “standard contractual clauses”, respectively including supplemental clauses containing additional safeguards. In such cases, You have a right to request a copy of these “standard contractual clauses”. To do so, please contact our data protection officer.
To exercise the rights, please contact our data protection officer at CENTOGENE GmbH, Am Strande 7, 18055 Rostock, Germany Attn: Data Protection Officer, or via email at dataprivacy@centogene.com.
