Open Disclosure

Communication to patients\doctors:

In keeping with the Patient Safety (Notifiable Incidents and Open Disclosure) Act 2023, it is the policy of Eurofins Biomnis that requesting clinicians and patients are communicated with in an open, honest, transparent and empathetic  manner following a patient safety or notifiable incident; that they are provided with a sincere and meaningful apology, especially when they are harmed as a result of such incidents; and that this communication process is initiated in a timely manner. Open disclosure is a feature of high-quality health care, and is an important contributor to patient safety.

Privacy Notice

This Privacy Notice is intended to assist you in making informed decisions when using the website and our services and/or to understand how your personal information may be processed by us as a result of providing the services or when you apply to work at Eurofins Biomnis / Eurofins Pathology / Eurofins Lablink, Eurofins Clinical Genetics, (“Eurofins”). Please take a moment to read and understand it. This privacy notice should be read in conjunction with our Cookies Notice.

Cookie Notice.
Eurofins Data Protection Officer

Email: DPO@CTIE.eurofinseu.com 

Please note: Where the laboratory is required by law or authorised by contractual arrangements to release confidential information, the original requestor will be notified of the information to be released, unless prohibited by law. This applies in particular to the notification of infectious diseases.  We are obliged by law to notify cases of notifiable diseases to Public Health. Such notification includes the diagnosis, patient name and date of birth, and patient address. https://www.hpsc.ie/notifiablediseases/notifyinginfectiousdiseases/  

DATA CONTROLLER & DATA PROCESSOR INFORMATION

Eurofins Biomnis Ireland Limited, Eurofins Pathology, Eurofins Lablink, Eurofins Clinical Genetics

("Eurofins");

Address: Three Rock Road, Sandyford Business Estate, Dublin 18, D18 A4C0, Ireland

NOTE:

Eurofins is both a Data Controller and a Data Processor, with different obligations.

As a Data Controller, we process data, for example for our employees and/or prospective
candidates that may apply to advertised positions with Eurofins and/or individuals that

contact us regarding our services.

As a Data Processor, we process data on behalf of our Clients (‘Data Controllers’),
including healthcare professionals (Doctors/GPs/Consultants/Hospitals) involving patient

data. Should a ‘Data Subject Access Request (DSAR)’ be made to Eurofins as a Data

Processor by a Patient and/or by someone representing a Patient, then the Client must be

notified of such request in compliance with data protection legislation and regulation, as the

Client is responsible to engage directly with the patient and address the Patient’ DSAR

request.

The Client decides as to whether such health data / information is to be disclosed to a Patient. Eurofins does not disclose processed health data / health information directly to a Patient.

WHAT PERSONAL INFORMATION DO WE COLLECT AND HOW?

We collect the personal information through your completion of the ‘Web-Form’ Contact Us - and/or when you submit information to us by other means (e.g. electronic email, facsimile, post).

When you use the Web-Form, such personal information usually consists of:

• data about your identity such as your last name, your first name.
• data about the name of your company / organisation.
• information on how to contact you such as your e-mail address and phone number.
• data about your query. 

The purpose of the web-form is for queries you have. We will then reply and contact you by email or phone in response to provide more information regarding your specific enquiry. You should only give us the personal information requested in the web-form and if you do not agree to provide us with this information, you must not fill in the web form.

Information that is provided by you through other means will be assessed, processed and responded to.

WHY DO WE USE PERSONAL INFORMATION ABOUT YOU?

We will use the information we collect through the web-form for the following purposes:

• To contact you.
• Provide, administer and communicate with you
• Process, evaluate and respond to your requests and enquiries
• Administer and communicate with you about your query regarding our business services
• Provide investor and client / customer services. 

Depending on your business relationship you have with us and/or your type of query we may process the following types of data:

• To verify your identity
• To deliver our services
• To improve, develop and market new services.
• To carry out requests made by you on the website web-form in relation to our services
• To investigate or manage complaints.
• To comply with any applicable law, or the requirements of a regulator
• For recruitment purposes 

To undertake these as listed above we may process the following personal information:

If you are a visitor to the website and use the web-form:

• Name and job title.
• Contact information including the company you work for, email address and social media account where appropriate
• Information such as your IP address, your preferences, and interests in our business.
• Other information relevant to the provision of Services.

If you are a client in receipt of our Services or prospective individual / client:

• Name and job title.
• Contact information including the company you work for and email address, where provided. o
• Payment information for use of our services.
• Information that you provide to us as part of us providing the services to you, which depends on the nature of your instructions to Eurofins.
• Information you provide to us for the purposes of attending meetings and events.
• Other information relevant to provision of our Services.

If you are a potential recruit to join Eurofins:

• Name and job title.
• Contact information including email address.
• Curriculum vitae, your education, employment history and similar matters and similar information that you may provide to us.
• Other information relevant to potential recruitment with Eurofins

WHICH PROCESSING GROUND(S) DO WE RELY UPON FOR PROCESSING YOUR PERSONAL INFORMATION?

Where we process personal data you provide, our legal basis in compliance with GDPR, for processing will vary depending on the circumstances. Ordinarily, the relevant legal basis is that the processing is:

• necessary for performing and/or to enter into a contract.
• necessary to comply with a legal obligation.
• for legitimate interests you have with our company.
• with your consent (which you may withdraw at any time)
   
  In order to process your personal data, depending on the situation, we rely on:
• the legitimate interests you have with our company by you using the web-form and/or website
• the legitimate interests you have with Eurofins and to reply to your query and enquires.
• recruiting of candidates to fill our present or future job vacancies within one of the companies of the Eurofins group.
• prevention of fraud.
• direct marketing.
• the necessity for the establishment, exercise or defence of legal claims.
• transfer of information within the group for administrative and/or referral purposes.
• maintenance (including but not limited to system fixes) of our database.
• legal obligations
• contract performance, including the continuous improvement of the services provided under such contracts.
• your consent.
   
  In order to process special category data, depending on the situation, we lawfully rely on:

Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, the provision of health (i.e. testing of samples provided to us by healthcare professionals on behalf of their patients) or for the management of our healthcare systems and services on the basis pursuant to contracts with a healthcare professionals (e.g. hospitals / GP Doctors).

In order to process personal data, we lawfully rely on at least one of the following GDPR regulatory requirements:

the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
processing is necessary for compliance with a legal obligation to which the data controller / data processor is subject;
processing is necessary for the purposes of legitimate interests 

WILL YOUR PERSONAL INFORMATION BE TRANSFERRED OUTSIDE THE EUROPEAN UNION?

Transfers are subject to appropriate safeguards in compliance with GDPR Article 46. Approved standard contractual clauses (together with equivalent terms required by other relevant/applicable laws) are to ensure we will comply with our legal and regulatory obligations in relation to personal information, including having a lawful basis for transferring personal information outside of EU and putting appropriate safeguards in place to ensure an adequate level of protection for the personal information.

Your personal data might be transferred outside the EU/EEA only to countries for which:

• the European Commission has issued an adequacy decision (which guarantees that an adequate level of protection of personal data is offered in that country).
• Or you have given explicit consent.
• appropriate safeguards have been provided, such as standard contractual data protection clauses. 

WHICH RIGHTS DO YOU HAVE OVER YOUR PERSONAL INFORMATION?

You have the following rights in relation to the personal data we hold for you:

• the right to be informed about the data we hold for you and what we do with it.
• the right for any inaccuracies in the data we hold for you, however they come to light, to be corrected. This is also known as ‘rectification.’
• the right to have data deleted in certain circumstances. This is also known as ‘erasure.’
• the right to restrict the processing of the data.
• the right to transfer the data we hold for you to another party. This is also known as ‘portability.’
• the right to object to the processing of your data.
• the right to regulate any automated decision-making and profiling of personal data.

You also have the right to complain to the relevant national data protection authority in case these rights are not complied with. An overview of the national data protection authorities is available at the following link https://www.edpb.europa.eu/about-edpb/about-edpb/members_en 

HOW LONG WILL WE KEEP YOUR DATA FOR?

Your personal data will be stored for a limited period of time, determined with regards to the necessity, and to serve the purposes for which data has been collected and processed. Also, please note that some data retention periods are set by other statute laws (legislation) and/or regulations, depending on the type of data processed (e.g. such as information needed for income tax and audit purposes, or information on aspects of health and safety, and/or information to defend litigation issues etc.).

Any queries you may have, should be sent by email to:

Eurofins Data Protection Officer 
Email: DPO@CTIE.eurofinseu.com