Privacy Policy

JADBio – Gnosis DA S.A. is committed to protect your privacy. This privacy policy applies to those who visit www.jadbio.com and www.gnosisda.gr and subdomains of these     domains (“website” or collectively “websites”), as well as users of JADBio – Gnosis DA S.A. (“JADBio”, “We”, “Us” or “Our”) services/products (“Service” or collectively “Services”). 

This privacy policy describes how JADBio collects, stores, processes and shares the personal information you provide with us. It also refers to the security measures for the protection of your personal information, the authorization rules for their safest accessibility and the tracking technologies we use. 

In the aspect of the complete legality of the whole process, our privacy policy also includes the list of rights you legally owe regarding the processing of your personal information, as well as the explicit consent you provide us with, in order to process your personal information in terms of providing our services in the best way.

What information do we collect?

Personal and sensitive Information

JADBio may collect, process and store basic identifiable information from you, such as name, company name, telephone number, physical address(es), email address(es), etc, as well as further information from the sign-up process, such as your IP address. JADBio may also collect, process and store the dataset(s) that you may upload, including genetic and/or biometric information, owned by you or another third party. This is a special category of sensitive personal identifiable information (PII) and you are the sole and explicit liable entity for their origin (collectively, “Personal and sensitive Information”). 

Credit card information

JADBio uses certain third-party payment processors (“Payment Processors”) to process personal financial information such as name, phone number, address, zip postal code, and credit card or bank account information for the purposes of allowing you to purchase a JADBio subscription  via our website. If you make any payment through our website, your credit card and other billing details may be stored by the Payment Processors, for the purpose of completing your purchase. JADBio does not store your credit card or billing details and such details cannot be accessed by our staff or any other party.

Non-Personal Information

JADBio may collect non-personally identifiable information from you such as the data processing results, as well as the type of browser you use, your operating system, the screen resolution of your browser, your ISP, your IP address, which pages you view on the website      and the time and duration of your visits to the website (collectively, “Non-Personal Information”).               

User Communications

If you communicate with us, we may collect and process information relating to that communication whether it takes the form of email, fax, letter, forum posting, testimonials or any other form of communication between you and JADBio or submitted by you to the website (collectively, “User Communications”). 

When this communication comes with an e-mail, our reply contains a disclaimer, including that JADBio is not responsible for this communication in the event of its alteration, modification or falsification, nor is it liable for any loss or alteration or other damage to the data or to your computer system due to the use of data either contained in this message or transmitted with it.      

Data Collection Information

For every personal, credit card and non-personal information you share with us, you need to be aware for/that:

  • The recipients of your data are employees, contractors, public authorities and the online payment platform that JADBio uses for order-to-cash completion process. All previous parties are GDPR compliant and committed in company’s data protection policy;
  • the existence of automated decision-making, including profiling, and, in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
  • Data and data processing results are stored for as long as the account is active. Upon a delete-account request, any information being stored, stops being accessible to both its owner and the JADBio system. Once the data retention period ends, all your information is permanently erased from JADBio and affiliated software servers.

What do we use your information for?

The Company uses the obtained Personal Data for the following purposes:

  • delivery of services, handling of your orders, processing payments, and communicating with you about your orders and promotional offers
  • advertising purposes (sending newsletters etc)
  • improve our services
  • comply with legal obligations
  • general operations and business administration;
  • employment and contracting purposes
  • receipt of services from service providers
  • other legitimate business purposes

JADBio entity will process Personal Data in accordance with all applicable laws and applicable contractual obligations. More specifically, JADBio will not process Personal Data unless at least one of the following requirements is met:

  • the Data Subject has given Consent to the processing of their Personal Data for one or more specific purposes
  • processing is necessary for the performance of a contract, to which the Data Subject is a party, or in order to take steps at the request of the Data Subject prior to entering into a contract
  • processing is necessary for compliance with a legal obligation, to which the Data Controller is subject
  • processing is necessary in order to protect the vital interests of the Data Subject or of another natural person
  • processing is necessary for the purposes of the legitimate interests, pursued by the Data Controller or by a third party (except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject, in particular where the Data Subject is a child)

There are certain circumstances in which Personal Data may be further processed for purposes that go beyond the original purpose, for which Personal Data was collected. When making a determination as to the compatibility of the new reason for processing, guidance and approval must be obtained from the DPO before any such processing may commence.

In any circumstance, where Consent for data processing has not been obtained for the specific processing purpose, JADBio will address the following additional conditions, in deciding whether the data processing operations may still proceed:

  • any link between the purpose, for which Personal Data was collected, and the reasons for the intended further processing;
  • the context in which Personal Data has been collected, in particular regarding the relationship between the Data Subject and the Data Controller;
  • the nature of Personal Data, in particular whether Sensitive Personal Data, or Personal Data related to criminal convictions and offences is being processed;
  • the possible consequences of the intended further processing for the Data Subject; and
  • the existence of appropriate safeguards pertaining to further processing, which may include encryption, anonymization or pseudonymization.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information:

  • Data is uploaded and downloaded using the secure HTTPS and SSL protocols to protect against data sniffing during the uploading process.
  • Data is stored behind AWS firewalls to protect against hacking.
  • Data is encrypted at rest to protect against security breaches (https://docs.aws.amazon.com/efs/latest/ug/encryption.html)
  • Data is encrypted at transit between AWS EFS / S3 and AWS processing cores.
  • AWS Shield Distributed Denial of Service (DDoS) protection service to minimize application downtime and latency.
  • Data can optionally be encrypted via user-defined passwords. These passwords will only be available to the user and not known to Amazon or JADBio engineers and employees. This user-defined encryption will further protect against cases of hacking of user devices / application clients and provide added security in the unlikely event of a successful hacking of AWS nodes. Note this requires engineering effort to complete per customer.

Cookies or other tracking technologies?

Cookies are small files that a website  or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the websites or service providers systems to recognize your browser and capture and remember certain information.

JADBio uses cookies or similar technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our website      or service.

Performance Cookies

We collect cookies on our website and/or Services to capture information about page visits (e.g. “performance cookies”). This information is anonymous, and we use this information only internally to deliver the most effective content to our users. Information from the cookie is used to gauge page popularity, analyze traffic patterns on our website and/or Services and guide development of other improvements to our websites and/or Services.

Targeting, Performance, and Functionality Cookies

We employ some tracking methods (e.g. “targeting, performance, and functionality cookies”). We track “opens” via a tracking pixel in the email- meaning we track who opens our mail messages and when you open our mail messages; and we track “clicks” via encoded URLs-meaning we track whether you click on the links contained in our mail messages. This information is used internally only to help us deliver relevant messaging. 

Functionality and Necessary Cookies

We do not require that you accept cookies and you may withdraw your consent to our use of cookies at any time by adjusting your browser’s privacy settings, however, some functionality on our website (e.g. “functionality cookies”), our product or service check-out process, and Services may be disabled or impaired if you decline to accept cookies (e.g. “necessary cookies”).

Opting Out of Cookies

By using the website      and Services, you consent to the placement of the cookies referenced above. You can, however, set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. You may also change your cookie settings through preference options in our website and/or Services, where applicable. Please be aware that upon selecting your preferences, that we will use a cookie to remember your preferences.

Do we share any information to external parties?

We do not sell, trade, or otherwise transfer to outside parties your personal information. We will share your personal information with third parties only in the ways that are described in this privacy policy. However, non-personally identifiable information may be provided to other parties for improving our services and marketing purposes     .

  • Service Providers

We may provide your personal information to companies that provide services to help us with our business activities such as processing your payment. These companies are authorized to use your personal information only as necessary to provide these services to us.

  • With your consent

We share information about you with third parties when you give us consent to do so. For example, we often display personal testimonials of satisfied customers on our public websites. With your consent, we may post your name alongside the testimonial.

  • Third-Party Widgets

Our blogs and forums might contain widgets and social media features, such as the Twitter “tweet” or Facebook “like” buttons. These widgets and features may collect your IP address, which page you are visiting on the websites or services, and may set a cookie to enable the feature to function properly. Widgets and social media features are either hosted by a third party or hosted directly on our Services. Your interactions with these features are governed by the privacy policy of the company providing it.

  • Legal Disclaimer

We may also disclose your personal information as required by law, such as to comply with a      legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

We need to clarify here that we have applied all possible measures by our side to ensure that every third party provided with your personal information is GDPR and data protection compliant, in order to ensure the protection of your personal information at the maximum level. 

In the event JADBio is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information.

We may also disclose your personal information to any other third party with your prior consent.

User Rights

The company, acting as the controller and processor of your personal information, supports you to be aware of your rights, based on GDPR and other relevant legal regimes, in a fair and transparent way. The company establishes a system to enable and facilitate the exercise of your rights, which are the following and required by the law:

  • Right of access: In accordance with Art. 15 GDPR, you have the right to obtain confirmation from us as to whether or not your personal data is processed by us (including employees, contractors and directors) or any other third party, and request      access to your personal information. Where possible, you have the right to obtain remote access to a secure system of the company, which would provide you with direct access to your Personal Data. The information about personal data processing includes the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom your personal data have been or may be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. Also, you may have the right to obtain a copy of your personal data undergoing processing. For additional copies requested, we may charge a reasonable fee based on administrative costs.
  • Right to rectification: In accordance with Art. 16 GDPR, you may have the right to obtain from us the rectification of inaccurate personal data. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  • Right to erasure: In accordance with Art. 17 GDPR, you have the right to request that we delete your personal data. The Company may be required to destroy personal information based on your valid request. In this respect, the company undertakes the obligation to immediately assess the erasure of personal information in the following cases:
  1. Personal information is no longer needed in relation to the purpose, for which it was collected or received;
  2. you withdraw the consent, on which the processing was based, and there is no other legal ground for data processing operations;
  3. you object to the processing, and there are no other overriding legitimate grounds for the data processing; and/or
  4. Your personal information has to be erased for compliance with the legal obligations under the EU or US, or other jurisdictions, to which the Company, as the Controller, is subject.

The Company provides appropriate methods for facilitating the exercise of this right. In particular, you can make an electronic request to dpo@jadbio.com. The Company is required to respond to such a request without undue delay (and, the latest, within one month), or to provide you with the reasons why it does not intend to comply with the request.

In any case, please keep in mind that we may keep your personal data if it is still necessary for:

  1. fulfilling our legal and accounting obligations;
  2. archival, historical, or scientific research or statistical purposes; or
  3. determination, exercise, or defense of our legal claims.
  • Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to request that we restrict the processing of your personal data. In this case, the respective personal data will be marked accordingly and may only be processed by us for certain purposes.
  • Right to personal data portability: In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and/or to request the transfer of this personal data to another entity. You may also be provided with the information concerning the processing of your Personal Data in a concise, transparent, intelligible and easily accessible form and using a clear language.
  • Right to object: If you have given your consent to the processing of your data in accordance with Art. 7 III GDPR, you may revoke your consent at any time in the future. The declaration of revocation must be addressed to us and must be presented in writing or delivered by email. Right to lodge a complaint with a Supervisory Authority

California Privacy Rights

This section applies only to California consumers. It describes how we collect, use, and share California consumers’ Personal Information in our role as a business, and the rights applicable to such residents. If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access.

For purposes of this section “Personal Information” has the meaning given in the California Consumer Privacy Act (“CCPA”).

  • How We Collect, Use, and Share your Personal Information

We might collect the following statutory categories of Personal Information:

  1. Identifiers, such as names, addresses, telephone numbers, fax numbers, physical addresses, email addresses. We collect this information directly from you or from third party sources.
  2. Internet or network information, such as browsing and search history. We collect this information directly from your device.
  3. Geolocation data, such as IP address. We collect this information from your device.
  4. Other personal information, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Service.

The business and commercial purposes for which we collect this information are described in this Privacy Policy. The categories of third parties to whom we “disclose” this information for a business purpose are described in this Privacy Policy.

  • Your California Rights
  1. You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.
  2. The right of access means that you have the right to request that we disclose what Personal Information we have collected, used and disclosed about you in the past 12 months.
  3. The right of deletion means that you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.
  4. The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.
  5. JADBio does not sell Personal Information to third parties (pursuant to California Civil Code §§ 1798.100–1798.199, also known as the California Consumer Privacy Act of 2018).
  • How to Exercise your California Rights

You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent’s identity to protect your Personal Information.

Please use the contact details below, if you would like to:

  • Access this policy in an alternative format;
  • Exercise your rights;
  • Learn more about your rights or our privacy practices; or
  • Designate an authorized agent to make a request on your behalf.

User Access and Choice

Upon request, JADBio will provide you with information about whether we hold any of your personal information. You may access, correct or request deletion of your personal information by logging in to your account or by contacting us at dpo@jadbio.com. We will respond to your request according to the GDPR timeframe requirements.

  • Data Retention

We will retain your information as needed to provide you services. Upon a delete-account request, any information being stored stops being accessible to both its owner and the JADBio system. As already said, once the data retention period ends, all your information is permanently erased from JADBio and affiliated software servers . However, we will identify your account in our database as “deleted” or “closed”.

  • Opt-out Preferences

When you register for an account, we will use your name and email address to send periodic emails to you of both informative and marketing material (like newsletters etc). We will also send you service-related email announcements on rare occasions when it is necessary to do so. You do not have an option to opt out of these emails, which are not promotional in nature.

Respecting      your privacy, we give you the choice  to stop receiving such  emails by following the unsubscribe instructions included in these emails or you can contact us at dpo@jadbio.com.

Our Policy towards Children

The JADBio products and/or services are not directed at persons under 16 and we do not knowingly collect Personal Information from children under 16. If you become aware that your child has provided us with Personal Information, without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.

Please also visit our Terms and Conditions section establishing your consent to the use, disclaimers, and limitations of liability governing the use of this website.

Explicit Consent

I acknowledge that JADBio entity may use my personal data for the following purposes based on the legal grounds for a lawful processing set forth by the EU General Data Protection Regulation 2016/679 of 27 April 2016 (the “GDPR”) or applicable national law, i.e., without a consent.

Based on Article 6 para 1 (b) – (f) of the GDPR, such purposes may include the following:

  • performance of a contract or in order to take steps at my request prior to entering into a contract (e.g., data necessary for the exercise of employee’s/sub-contractor’s task; salary information and bank account details for the payment of wages);
  • compliance with legal obligations to which JADBio is subject (e.g., data processing for social security purposes);
  • protecting my vital interests;
  • performance of a task carried out in the public interest or in the exercise of official authority vested in JADBio;
  • legitimate interests pursued by JADBio or a third party, except where such interests are overridden by my interests or fundamental rights and freedoms, which require protection of personal data.

The current processing actions within JADBio, which are based on the above purposes mainly, include storing and processing of employment records, accounting and tax records, reporting to public authorities in cases prescribed by applicable law. Other purposes may also be outlined by respective law or other applicable national law, by which the respective JADBio  entity is bound and under which it may have additional obligations or rights to process data of Data Subjects. JADBio Data Privacy Team may be contacted for a full list of possible lawful personal data processing purposes based on the GDPR and respective applicable national laws, which are in the scope of the above outlined purpose areas.

JADBio may also process personal data of Data Subjects based on their given consent. 

I am aware that my personal data may be processed by JADBio or another JADBio entity as a controller under the GDPR and/or other relevant legislation. I confirm that I have read, understood and accepted the JADBio Fair Processing Notice and I agree to comply with it. I confirm that I am aware of my rights in respect of my personal data under the GDPR, including the right to be informed, to request access, to correct mistakes, right of rectification, erasure and portability of data, to object and restrict processing, to be aware of the existence of automated decision-making and to lodge a complaint with a supervisory authority.

WITHDRAWAL TERMS

Please be informed that the refusal/withdrawal of prior given consent will itself have no adverse legal consequences for you. In case you want to withdraw your freely given consent, in full or in part, please contact JADBio Data Privacy Team via email, phone or by post with a request to withdraw your consent. Where there is no other legal ground for the processing and none of the exceptions provided in the GDPR apply, JADBio will erase or anonymize your personal data without undue delay and in any event within one month of receipt of your withdrawal. If you have any questions or in case you would like to understand your rights connected to the withdrawal of your consent in more detail, please contact JADBio Data Privacy Team.

I confirm that I am informed about my right to withdraw consent and the procedure of withdrawal.

In case of any misunderstandings and/or uncertainties or the necessity to update your personal data, please contact JADBio Data Privacy Team as follows:

JADBio – Gnosis DA S.A.
N. Plastira 100, Vassilika Vouton,
700 13 Heraklion
Greece

dpo@jadbio.com, contact@jadbio.com

Changes to our Privacy Policy

We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Contacting Us

If there are any questions regarding this Privacy Policy, the practices of this website or your dealings with this website, you may contact us using the information below:

dpo@jadbio.com

JADBio – Gnosis DA S.A.
N.Plastira 100, Vasilika Vouton
70013, Heraklion, Greece

GNOSIS Data Analysis Inc
3154 Glendale Blvd, Los Angeles, CA 90039, USA

Read our Terms & Conditions