Privacy Policy at Clinical Genomics services

At Clinical Genomics we value your privacy. This page informs you of our policies regarding the collection, use,
and disclosure of personal data when you use our websites and the choices you have associated with that data.
This applies for all our services, including the Orderportal, Support System, Scout, Statina, and others.

Definitions

Personal Data means data about a living individual who can be identified from that data (or from that and other
information either in our possession or likely to come into our possession).

Usage Data is data collected automatically, either generated by the use of the Service or from the Service infrastructure
itself (for example, the duration of a page visit).

Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for
which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Policy,
we are a Data Controller of your data.

Data Processor (Service Provider) means any person (other than an employee of the Data Controller) who processes the data
on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more
effectively.

Data Subject is any living individual who is the subject of Personal Data.

The User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of
Personal Data.

When we refer to “CG”, “we” or “us” in this policy we mean the Clinical Genomics facility at Science for Life Laboratory,
which controls the information collected by us when you use our services.

What information we process

We collect several different types of information for various purposes to provide and improve our Service to you.
Personal data that is processed and stored by us when you create a CG account is your name, email address, affiliation
and contact information. We may also collect Usage Data.

This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser
type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those
pages, unique device identifiers, and other similar data.

Why we process information

CG processes your information for the following purposes

• To enable sign in to our Services, including the Orderportal, Statina and Scout
• To provide and maintain our Services
• To notify you about changes to our Services
• To provide customer support
• To personalize your experience with our Services
• To gather analysis or valuable information so that we can improve our Services
• To monitor the usage of our Services
• To detect, prevent, and address technical issues
• To provide you with news and general information about other services and events that we offer

You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link (if present),
instructions provided in any email we send (if provided) or by contacting us (in all situations).

The legal basis for processing your email address for these purposes is based on the contractual necessity to perform the
services requested by you.

Retention of data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We
will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we
are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and
policies.

Transfer of data

We may employ third party companies and individuals to facilitate our Services ("Service Providers"), to provide the
Services on our behalf, to perform Services-related services or to assist us in analyzing how our Services are used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not
to disclose or use it for any other purpose.

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of
Sweden.
Some of our Services (e.g., Support System ticketing system) use servers located in the United States. Please note that for
this Service we may transfer the data, including some of your Personal Data, to the United States and process it there.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that
transfer.

Your rights

You have the following rights under the General Data Protection Regulation:

• Right to remove consent
• Right to request removal of information
• Right to know what is being processed
• Right to correct errors in information
• Right to transfer data / data portability (request data to be moved)
• Right to limit what data is used for

To exercise any of these rights, please contact us at the address given in the Contact Information section below.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy
on this page. We will let you know via email and/or a prominent notice on our Services, prior to the change becoming
effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes.

Contact information

To make any request relating to your rights, or to ask general questions regarding our services, please contact us
at Clinical Genomics support