Safe Harbor Privacy Policy
DNA Diagnostics Center (DDC) is a leading provider of private DNA testing. Since 1995, DDC has performed hundreds of thousands of genetic tests. DDC offers comprehensive DNA testing services in several specialty areas, focusing primarily on relationship establishment.
Protecting the privacy of its clients is important to DDC. DDC and its subsidiaries, branches, divisions, and business units in the United States adhere to the Safe Harbor Principles published by the U.S. Department of Commerce with respect to all such data.
This statement outlines the general policy and practices of DDC for implementing the Principles, including the types of information it gathers, how it uses that information, and the choices affected individuals have regarding DDC's use of, and the individual's ability to correct, that information.
Set forth below is DDC's Privacy Policy.
Scope
This Policy applies to all personal information received by DDC in the United States from the European Union (EU) in any format, including electronic, paper, or verbal.
Definitions
The following definitions apply throughout this Policy:
Agent
Any third party that uses personal information provided to DDC to perform tasks on behalf of and under the instruction of DDC.
DDC
DNA Diagnostics Center, its subsidiaries, branches, divisions, and business units in the United States.
Personal Information
Any information or set of information that identifies an individual, or could be used by or on behalf of DDC to identify an individual. Personal information does not include information that is publicly available that has not been combined with non–public personal information.
Sensitive Personal Information
Personal information that reveals race, ethnic origin, political opinion, religious or philosophical beliefs, or trade union membership, or that concerns health or sex life. In addition, DDC will treat as sensitive personal information any information received from a third party where that third party treats and identifies the information as sensitive.
Privacy Principles Notice
When DDC collects personal information directly from individuals in the EU, it will inform them about the purposes for which it collects their personal information and the choices and means, if any, that DDC offers individuals for limiting the use and disclosure of their personal information. Notice will be provided in clear and conspicuous language when individuals are first asked to provide personal information to DDC, or as soon as practicable thereafter, and in any event before DDC uses or discloses the information for a purpose other than that for which it was originally collected.
If DDC receives personal information from its subsidiaries, affiliates, or other entities in the EU, it will use such information in accordance with the notices such entities provided and the consents or choices made by the individual about whom such personal information relates.
Choice
DDC will offer individuals the opportunity to choose whether their personal information is (a) to be disclosed to a non-agent third party (unless allowed or required by contract), or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual.
For sensitive personal information, DDC will give individuals the opportunity to affirmatively and explicitly consent (e.g., through a signature) to the disclosure of the information to a non-agent third party or the use of the information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. DDC will provide individuals with reasonable methods to exercise their choices. Data Integrity
DDC will use personal information only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. DDC will take reasonable steps to ensure that personal information is relevant to its intended use, accurate, complete, and current.
Onward Transfer
DDC will obtain assurances from its agents that they will safeguard personal information consistently with this Policy. If DDC has knowledge that an agent is using or disclosing personal information in a manner contrary to this Policy, DDC will take reasonable steps to prevent or stop the use or disclosure.
Access
Upon request, DDC will grant individuals reasonable access to personal information that it holds about them. In addition, DDC will take reasonable steps to permit individuals to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete.
Security
DDC will take reasonable precautions to protect personal information in its possession from loss, misuse and unauthorized access, disclosure, alteration, and destruction.
Enforcement
DDC will conduct compliance reviews of its relevant privacy practices to verify adherence to this Policy. Any employee that DDC determines is in violation of this Policy will be subject to disciplinary action up to and including termination of employment.
Dispute Resolution
Any questions or concerns regarding the use or disclosure of personal information should be directed to the DDC Privacy Department at the address given below. DDC will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with the principles contained in this Policy. For complaints that cannot be resolved between DDC and the complainant, DDC has agreed to participate in the dispute resolution procedures of the panel established by the European data protection authorities to resolve disputes pursuant to the Safe Harbor Principles.
Limitation on Application of Principles
Adherence by DDC to these Safe Harbor Principles may be limited (a) to the extent required to respond to a legal or ethical obligation; and (b) to the extent expressly permitted by an applicable law, rule, or regulation.
Contact Information
Questions or comments regarding this policy should be submitted to:
DDC
Attn: Privacy Department—Safe Harbor
One DDC Way
Fairfield, OH 45014
privacy-officer@dnacenter.com
(513) 881-4078
Changes to this Policy
This Policy may be amended from time to time, consistent with the requirements of the Safe Harbor Principles. DDC will post appropriate notice about such changes and amendments.
|
