Privacy Policy

Data Controller

XENOGENE, S.L.

Tax ID (CIF): B93406692

Address: Calle Tampa, 2 – 29007 Málaga, Spain

Phone: +34 951 15 23 23

Purpose of Data Processing

The personal data we collect through our forms (contact, analysis requests, downloads, subscriptions, or contracting) will be processed for the following purposes:

Respond to information or contact requests
Manage the contracting and delivery of our diagnostic services
Issue personalized technical or microbiological reports
Send informative communications related to our services (only with consent)
Comply with applicable legal obligations in healthcare and tax matters

Legal Basis

The legal basis for processing is:

Data subject's consent: For sending commercial communications
Performance of a contract: For the provision of diagnostic services
Compliance with legal obligations: In healthcare and tax matters
Legitimate interest: To respond to inquiries and information requests

Data Retention Period

Your personal data will be retained for the following periods:

Contact inquiries:

Until the purpose is fulfilled or you request deletion
Diagnostic services:

During the contractual relationship and for applicable legal periods (up to 10 years for medical records)
Commercial communications:

Until consent is withdrawn

Data Recipients

Your personal data may be shared with the following categories of recipients:

Healthcare Providers

Medical centers, clinics, and healthcare professionals who request our services

Technology Providers

Hosting, email, and IT service providers under data processing agreements

Legal Authorities

When required by applicable laws and regulations

Payment Processors

Secure payment gateways (PayPal, etc.) for transaction processing

Your Rights

As a data subject, you have the following rights that you can exercise at any time:

Access and Control Rights

Right of access: Obtain information about your data
Right to rectification: Correct inaccurate data
Right to erasure: Request deletion of your data
Right to restriction: Limit data processing

Additional Rights

Right to data portability: Receive your data in a structured format
Right to object: Object to certain processing activities
Automated decisions: Not subject to automated decision-making
Right to lodge a complaint: File complaint with supervisory authority

How to Exercise Your Rights

To exercise any of your rights, you can contact us through:

Email: contact@xenogene.es

Postal address: Calle Tampa, 2 – 29007 Málaga, Spain

Subject line: "Exercise of GDPR Rights"

Please include a copy of your ID document in your request and clearly specify the right you wish to exercise.

Security Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

SSL/TLS encryption for data transmission
Secure data storage with access controls
Regular security audits and updates
ISO 15189 accredited laboratory standards
Staff training on data protection

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure adequate protection through:

European Commission adequacy decisions
Standard contractual clauses approved by the EU
Privacy Shield framework (for US-based services)

Privacy Questions

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Email:

contact@xenogene.es

Phone:

+34 951 15 23 23