Privacy Policy
Last updated on 27 August 2021
This privacy policy applies to the platform "Skrinings.lv" (thereafter – "platform"), provided and maintained by Longenesis, company Reg. No. 40203211852, the address of which is Zaubes Street 9A-23, Riga, Latvia (thereafter – "Longenesis", "us", "we", or "our").
This page informs you of our policies regarding the safe and lawful processing of personal data when you use the platform. This privacy policy informs and explains how Longenesis protects and cares for the personal data in its possession.
We will not use or share your personal data with anyone except as described in this Privacy Policy.
We use your personal data for providing and improving the platform. By using the platform, you agree to the collection and processing of personal data and information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are available here.
This Privacy Policy and any dispute or claim arising out of or in connection with it or its subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of the Republic of Latvia.
When processing personal data, Longenesis complies with the laws and regulations in force in the Republic of Latvia, the binding instructions and regulations issued by the responsible authorities, as well as the European Union legislation in general, and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data [..] in particular.
1. Personal Data Collection
We collect personal data about you when you provide such personal data directly to us, when third parties such as our service providers provide us with personal data about you, or when personal data about you is automatically collected in connection with your use of the platform.
2. Use of personal data
We use the personal data and information we collect to provide, maintain, and improve the platform:
We share personal data in the following circumstances or as otherwise described in this policy:
3. Cookies
A cookie consists of information sent by a web server to a web browser, and it is stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.
We may use both "session" cookies and "persistent" cookies on the website. We will use the session cookies to keep track of you whilst you navigate the website and persistent cookies to enable our website to recognize you when you visit our website again. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiration date.
We use cookies to collect information in order to improve our services for you.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provides information on how to accept cookies, disable cookies or to notify you when receiving a new cookie.
If you do not accept cookies, you may not be able to use some features of the platform and we recommend that you leave them turned on.
4. Service Providers
We may employ third party companies and individuals to ensure proper provision of the platform, to provide and perform services on our behalf, and/or to assist us in analysing how the platform is used.
The specific tasks where we use service provider to facilitate may include:
These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose. Third party services have access only to those data identifiers, such as name, identification number, location, that are required to perform their tasks.
The third party systems we use to ensure the proper provision of services:
5. Security
The security of your Personal data is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the personal data we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure.
However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal data we have collected from you.
You are responsible for keeping your password and user details confidential. We will not ask you for your password (except when you log in to the platform).
Your personal data will be kept for as long as it is required for the purposes for which the personal data are processed and in accordance with the laws of the Republic of Latvia.
After the retention period expires, all documents containing personal data will be permanently deleted, destroyed or made anonymous in a form which does not permit identification of data subjects. Longenesis will not notify you about the deletion, destruction or making anonymous of your personal data nor ask your permission to delete or destroy personal data after the retention period.
Please note that certain personal data retained on computer files may be available after the retention period for a certain time period in data backup systems until those files in the data backup system are overwritten. Usually, files in the data backup systems are not overwritten at once, leaving an appropriate margin for the possibility of restoring data at the needed time.
6. Access and Your rights
If at any time you wish to know whether we have any of your personal data, you may send a request to us (see section "11. Contacts") and we will respond to your request within a reasonable timeframe. You can also access, correct, or request deletion of your personal data and information by logging into your account or contacting us.
Further to that, you have the following rights under data protection laws:
We may withhold personal information to the extent and manner permitted by law.
7. Links to Other Sites
The platform may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
8. Business Transaction
If the platform is involved in a merger, acquisition or asset sale, your Personal data may be transferred as a business asset. In such cases, we will provide notice before your Personal Information is transferred and/or becomes subject to a different Privacy Policy.
9. Data used for decision making
The resulting data is not used to make automated decisions. Input and output data are used for informational purposes only - generating a personalized report to the user, based on risk calculation using input data, as well as sending invitations to participate into research activities.
10. Policy Amendments
This Privacy Policy is effective as of 27 August 2021 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on the platform.
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the platform after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.
11. Contacts
If you have any enquiries relating to this policy, our handling of your personal information generally or in relation to your data protection rights, please contact us at privacy@longenesis.com or Zaubes Street 9A-23, Riga, Latvia, LV-1013.
In any case, any natural person always has the right to submit a complaint to the Data State Inspectorate of Latvia, address: Blaumana Street 11/13-11, Riga, LV-1011, Latvia.
This privacy policy applies to the platform "Skrinings.lv" (thereafter – "platform"), provided and maintained by Longenesis, company Reg. No. 40203211852, the address of which is Zaubes Street 9A-23, Riga, Latvia (thereafter – "Longenesis", "us", "we", or "our").
This page informs you of our policies regarding the safe and lawful processing of personal data when you use the platform. This privacy policy informs and explains how Longenesis protects and cares for the personal data in its possession.
We will not use or share your personal data with anyone except as described in this Privacy Policy.
We use your personal data for providing and improving the platform. By using the platform, you agree to the collection and processing of personal data and information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are available here.
This Privacy Policy and any dispute or claim arising out of or in connection with it or its subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of the Republic of Latvia.
When processing personal data, Longenesis complies with the laws and regulations in force in the Republic of Latvia, the binding instructions and regulations issued by the responsible authorities, as well as the European Union legislation in general, and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data [..] in particular.
1. Personal Data Collection
We collect personal data about you when you provide such personal data directly to us, when third parties such as our service providers provide us with personal data about you, or when personal data about you is automatically collected in connection with your use of the platform.
- We collect and process personal data you provide directly to us. For example, you share personal data directly with us when you create a user profile, as well as any other information you choose to provide.
- Identifiers obtained from a third party service, for example, identifiers from "Google Auth" obtained through user authentication using Auth0, Inc.;
- We also collect information that your browser sends whenever you visit the platform ("Log Data"). This Log Data may include information about your device and about your visits to and use of the platform (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation). In addition, we may use third party services such as Google Analytics that collect, monitor and analyse this type of information in order to increase our Service's functionality. These third party service providers have their own privacy policies addressing how they use such information.
- We also may collect and store information that you provide us for the purpose of subscribing to our website services, email notifications and/or newsletters and any other information that you choose to send us.
2. Use of personal data
We use the personal data and information we collect to provide, maintain, and improve the platform:
- Create and maintain your user profile;
- To provide information on available research projects for which you can manage your participation, agree, withdraw or renew your participation in the research project;
- To ensure the operation of the questionnaire module - for the determination of disease risks and generation of personalized reports. Voluntarily entered and obtained data is used for informational purposes only - generation of a personalized report to the user by performing a risk calculation using the entered data.
- Send you technical notices, security alerts, and support and administrative messages;
- Respond to your comments and questions and provide customer service;
- Communicate with you about new content, products, services, and features offered by Longenesis and provide other news and information we think will interest you (you can contact us to opt out of these communications at any time - please see section "11. Contacts");
- Monitor and analyse trends, usage, and activities in connection with the platform;
- Detect, investigate, and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of the platform and others;
- Debug to identify and repair errors in the platform;
- Comply with our legal and financial obligations; and
- Carry out any other purpose described to you at the time the information was collected.
We share personal data in the following circumstances or as otherwise described in this policy:
- Starting and providing the functionality of the platform - to engage society into research initiatives and to help teams of researchers gather information of study participants, including the questionnaires completed by the participants. Certain groups of researchers shall have access to users' personal data only to the extent specified in the consent document voluntary signed by participants. The participant has the right to withdraw consent to the use of his / her data in the specific study at any time.
- The data set metrics are placed in an anonymized form within the framework of data collection available to verified and authorized scientific and research organizations. Data is anonymised - it is not linked in any way to the individual(s) of the sample. Anonymization as well as deployment is separate from data storage and processing servers and data warehouses, which means that there is no risk of personalized selection. This feature helps research teams to select potential cohorts, and to prepare and send invitations to such user groups. How are invitations sent when querying through anonymous data? The framework is not interconnected with the platform, which ensures security and data privacy. When you make a selection, querying parameters are created and forwarded to the platform. This invitation is sent to users as a new form of consent. In the event that the user does not approve it, the system will not add the user to a specific study. If the user agrees to the terms and conditions that will be described in the individual consent forms, then the user is added to a specific research project and the user is provided with research project specific data entry modules, etc. (which will be described in the individual consent forms). The User has the right to withdraw consent at any time, subject to the terms of the project-specific consent requirements.
- We share personal data with vendors, service providers, and consultants that need access to personal information in order to perform services for us, such as companies that assist us with web hosting, storage, and other infrastructure, analytics, payment processing, fraud prevention and security, customer service, communications, and marketing. Personal data is shared to a third party in a minimized manner to the extent necessary for the platform and according to the agreement concluded with them.
- We may disclose personal data with legal, governmental, and institutional authorities if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements. If we are going to disclose your personal information in response to a legal process, we will give you notice so you can challenge it (for example by seeking court intervention), unless we are prohibited by law or believe doing so may endanger others or cause illegal conduct. We will object to legal requests for information about users of the platform that we believe are improper.
- We may share personal data with legal, governmental, and institutional authorities if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of the platform, our users, the public, or others.
- We share personal data with our lawyers and other professional advisors in connection with agreed services they provide to us and where it is necessary to obtain advice or otherwise protect and manage our business interests.
- Personal data is shared between and among Longenesis and our current and future parents, affiliates, and subsidiaries and other companies under common control and ownership.
- We share personal data with your consent or at your direction.
- We also might share aggregated or de-identified information that you have submitted to the platform. In such situations the information cannot reasonably be used to identify you.
3. Cookies
A cookie consists of information sent by a web server to a web browser, and it is stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.
We may use both "session" cookies and "persistent" cookies on the website. We will use the session cookies to keep track of you whilst you navigate the website and persistent cookies to enable our website to recognize you when you visit our website again. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiration date.
We use cookies to collect information in order to improve our services for you.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provides information on how to accept cookies, disable cookies or to notify you when receiving a new cookie.
If you do not accept cookies, you may not be able to use some features of the platform and we recommend that you leave them turned on.
4. Service Providers
We may employ third party companies and individuals to ensure proper provision of the platform, to provide and perform services on our behalf, and/or to assist us in analysing how the platform is used.
The specific tasks where we use service provider to facilitate may include:
- Providing customer service;
- Sending marketing communications;
- Conducting research and analysis.
These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose. Third party services have access only to those data identifiers, such as name, identification number, location, that are required to perform their tasks.
The third party systems we use to ensure the proper provision of services:
- Google, Inc. Google Analytics Tool - This tool stores information about your website visit. The data stored is anonymous and helps our team improve the quality of the website. You can read more about the terms of service provided by these tools and their privacy policies here and here.
- Auth0, Inc. tool for authorization. We use this tool to provide registration and/or authorization functionality, taking care of the accessibility, security, privacy and convenience of the service (the tool also allows authorization through popular platforms such as Google user accounts). Read more about this tool here.
- Amazon Web Services, Inc. products and tools for server and database deployment - we use this to ensure the service of the platform is available online, risk estimation and personalized reporting, data storage and encryption algorithms are implemented to protect and minimize the risks of unauthorized access. Read more here.
5. Security
The security of your Personal data is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the personal data we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure.
However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal data we have collected from you.
You are responsible for keeping your password and user details confidential. We will not ask you for your password (except when you log in to the platform).
Your personal data will be kept for as long as it is required for the purposes for which the personal data are processed and in accordance with the laws of the Republic of Latvia.
After the retention period expires, all documents containing personal data will be permanently deleted, destroyed or made anonymous in a form which does not permit identification of data subjects. Longenesis will not notify you about the deletion, destruction or making anonymous of your personal data nor ask your permission to delete or destroy personal data after the retention period.
Please note that certain personal data retained on computer files may be available after the retention period for a certain time period in data backup systems until those files in the data backup system are overwritten. Usually, files in the data backup systems are not overwritten at once, leaving an appropriate margin for the possibility of restoring data at the needed time.
6. Access and Your rights
If at any time you wish to know whether we have any of your personal data, you may send a request to us (see section "11. Contacts") and we will respond to your request within a reasonable timeframe. You can also access, correct, or request deletion of your personal data and information by logging into your account or contacting us.
Further to that, you have the following rights under data protection laws:
- to remove the permission for our use of cookies;
- to correct and update your information;
- to request information concerning processing of your personal data;
- to have your information erased (if there exist no lawful reason for keeping it);
- to restrict further processing of your information;
- to withdraw previous consent for data processing
- to request a copy of your personal data;
- to transfer your information in a machine-readable format to you or to another controller;
- to object to the use of your information processed on the basis of legitimate interests (unless we have an overriding lawful reason) or for direct marketing.
We may withhold personal information to the extent and manner permitted by law.
7. Links to Other Sites
The platform may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
8. Business Transaction
If the platform is involved in a merger, acquisition or asset sale, your Personal data may be transferred as a business asset. In such cases, we will provide notice before your Personal Information is transferred and/or becomes subject to a different Privacy Policy.
9. Data used for decision making
The resulting data is not used to make automated decisions. Input and output data are used for informational purposes only - generating a personalized report to the user, based on risk calculation using input data, as well as sending invitations to participate into research activities.
10. Policy Amendments
This Privacy Policy is effective as of 27 August 2021 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on the platform.
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the platform after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.
11. Contacts
If you have any enquiries relating to this policy, our handling of your personal information generally or in relation to your data protection rights, please contact us at privacy@longenesis.com or Zaubes Street 9A-23, Riga, Latvia, LV-1013.
In any case, any natural person always has the right to submit a complaint to the Data State Inspectorate of Latvia, address: Blaumana Street 11/13-11, Riga, LV-1011, Latvia.