Privacy Policy

SYNLAB Access
 

1. Introduction

SYNLAB Privacy Policy governs your access to our SYNLAB Access application, and explains how we collect, safeguard and disclose information that results from your use of our Service. We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Our Terms and Conditions (“Terms”) govern all use of our Service and together with the Privacy Policy constitutes your agreement with us (“agreement”).
 

2. Definitions

• SERVICE means the sts.plasma.synlab.com operated by SYNLAB International GmbH, Moosacher Straße 88, 80809 Munich.
• PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
• USAGE DATA is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit).
• DATA CONTROLLER means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Policy, service providers are a Data Controller of your data.
• DATA PROCESSORS means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
• DATA SUBJECT is any living individual who is the subject of Personal Data.
• THE USER is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
   

3. Data Protection Officer

You can contact our data protection officer, at any time with all data protection issues at dpo[@]synlab.com.

4. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you. Entered by customer e.g. via web shop or HL7 message
 

5. Personal Data Collected

While using our Service, we may ask you to provide us with certain personally Identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to: Name, Address, Date of birth, Racial or ethnic origin, Health information, Genetic information, Physical characteristic information (height, weight, etc), Credit card/bank account number, Email, Phone.

Processing of Personal Data

• SYNLAB Access allows clinics, hospitals and medical doctors to request laboratory diagnostics for patients covering the full spectrum of diagnostic services offered by SYNLAB Group.
• Personal data is being processed In order to facilitate medical diagnostic services. Improve the customer experience and reduce the risk of COVID19 or other infections. In order to fulfill contractual agreements with B2B/B2C customers.
• After Personal Data is collected from the data subjects, is it stored in Both central and federated depending on local legislation. That means whenever possible in SYNLAB central data center and depending on local legislation in country specific data centers. E.g. for Switzerland in DC Switzerland, for Hungary in data center Duesseldorf (in pilot & ramp-up phase partly in MS Azure Ireland/North Europe
   

6. Retention of Data

Data retention policy is defined according with the GDPR and national data protection laws.
 

7. Your Data Protection Rights Under General Data Protection Regulation (GDPR)

We protect your privacy and your personal data. We process your personal data in accordance with the content of this data protection declaration, the country-specific data protection regulations that apply to us and the General Data Protection Regulation ("GDPR").
 

8. Service Providers

We may employ third party companies and individuals to facilitate our Service (“Service Providers”), provide Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose which includes countries where SYNLAB ACCESS will be deployed plus data center locations plus Manila IT Service hub.
 

9. Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the DPA.

The competent lead supervisory authority for data protection under Art. 56 GDPR in the event of complaints is:

Bavarian State Office for Data Protection Supervision
Promenade 27 (castle)
91522 Ansbach
Phone: +49 981 53 1300
Fax: +49 981 53 98 1300
E-mail: poststelle@lda.bayern.de