This privacy policy delineates the personal data processing activities exclusively associated with the information gathered through our website. SOPHiA GENETICS customers are encouraged to access the dedicated privacy policies for SOPHiA DDM™ and SOPHiA CarePath™ directly through the respective platforms.
1. WHO WE ARE?
SOPHiA GENETICS values the privacy of the website’s users and the confidentiality of their data. That is why SOPHiA GENETICS is committed to treating your Personal Data with care, integrity, and transparency.
SOPHiA GENETICS SA, which is headquartered at La Piece, 12, CH-1180
Rolle, Switzerland, and its subsidiaries1 (“SOPHiA GENETICS”, “we”, “us” and “our”), act as Data Controllers collecting and using your Personal Data when you visit our website www.sophiagenetics.com.
This Privacy Policy explains how your Personal Data may be used in this context. It may be amended from time to time based on applicable data protection laws, regulations, and guidelines provided by public authorities (“Applicable Data Protection Laws”).
Should you provide us with data not covered by our website privacy policy, such data shall be covered by a distinct contractual relationship, as well as applicable laws and regulations.
2. WHAT DATA DO WE COLLECT?
We collect data that could identify you either directly (e.g. your name or surname) or indirectly (e.g. through your IP address). Those are Personal Data.
While visiting our website, personal data may be collected depending on your interactions with us. We distinguish the data collected automatically and the data you provide to us.
Data automatically collected
Website usage analytics
Those data are generated through cookies while you are using the website to provide information regarding the page you visited, the website you are coming from, the video that you played, etc. Our website installs cookies or similar technologies that allow us to measure the audience of our publications, improve the interface and the presentation of our website to propose the best user experience possible.
Click here for more information on the Cookies Policy.
Data that you provide directly
When you request a demo for one of our solutions, when you subscribe to our webinar, or when you contact us, you provide data allowing us to respond to your requests and to provide you with the best answers.
Contact requests, prospect support
| The type of data we collect | Personal Data concerning the identity of requestors, prospects or partners contacting us via our contact forms, including first name, last name, email address, phone number, country, contact purpose and message. |
| Why do we use them |
These Personal Data are necessary to process your request and adapt our answers to best suit your demand. We make sure that each contact form limits the collection of Personal Data to what is necessary and indicates the required information to provide. |
| Retention | Personal Data concerning our prospects shall be kept for three (3) years from the time they are collected or from the last contact sent by the prospect, without prejudice to any retention obligations or limitation periods. |
Applying candidates
| The type of data we collect |
Personal Data concerning the identity of an applicant for a SOPHiA GENETICS’ job offer, including but not limited to first name, last name, email address, phone numbers, residence address, photography, birth date, nationality, residence permit, professional and academic background, resumes and cover letters. Each job offer form limits the collection of Personal Data to what is necessary and indicates the required information to provide. Sensitive information, such as race or sexual orientation, is not necessary for the job application process. If an applicant decides to include such information, the sensitive data will be processed in accordance with Applicable Data Protection Laws. |
| Why do we use them |
These Personal Data are necessary to process your application. Each job offer form limits the collection of Personal Data to what is necessary and indicates the required information to provide. |
| Retention | Personal Data shall be kept for two (2) years from the time they are collected or from the last contact sent by the applicant, without prejudice to any retention obligations or limitation periods. |
3. WHY ARE WE ALLOWED TO USE YOUR DATA?
We can collect and process your Personal Data when one of the following applies:
Your consent – This applies when you have specifically given us your permission to use your personal data for responding to one of your requests.
This is also applicable when you accept our cookies – Find out more in our Cookie Policy.
The performance of a contract – for the entering or the performance of a contract between SOPHiA GENETICS and yourself representing a (prospect) customer, a (prospect) partner or as an applicant with regards to processing operations, marketing and relationship monitoring;
Our legitimate interest – This applies where SOPHiA GENETICS conduct operations for the purpose of compiling statistics, marketing, promoting, and developing and/or improving SOPHiA GENETICS’ products and services, as well the defense of SOPHiA GENETICS’ rights and interests;
Compliance with legal obligations – This applies where SOPHiA GENETICS is required to process data with regard to invoicing and accounting purposes or the management of requests or for responding to the exercise of your rights.
4. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
As a general rule, we do not provide, sell or lease your Personal Data to any third parties for their marketing use without your express consent.
From time to time, we need some help to propose the best user experience. When this happens, we rely on various third-party service providers and contractors to provide services that support the website and our operations, including, without limitation, maintenance of our databases, distribution of emails and newsletters on our behalf, data analysis. Such third parties may have access to your Personal Data for the purpose of performing the service for which they have been engaged. However, such service providers shall remain under contractual obligations, particularly confidentiality obligations, for as long as they hold relevant Personal Data.
5. IN WHAT INSTANCE DO WE TRANSFER YOUR PERSONAL DATA?
Transfers between SOPHIA GENETICS and its subsidiaries
Our headquarters are in Switzerland and we work all over the world. Therefore, you acknowledge and consent that any data you provide, or we collect may be used, processed and/or transferred to Switzerland or to any jurisdiction where we have operational activities or other countries, territories, or jurisdictions as permitted under Applicable Data Protection Law.
We implement appropriate measures to protect your Personal Data when we transfer your Personal Data outside of your home country such as data transfer agreements that incorporate standard data protection clauses.
Transfers to third parties
We may share Personal Data with third parties, as established in this Privacy Policy, and consequently transfer Personal Data outside the country they came from. For example, we may transfer personal data to marketing or communication agency or to measure the audience of our website.
Before we transfer any data to third parties, we make sure that said third parties, which receive the data, offer the necessary standards of data protection required by Applicable Data Protection Law, either due to mandatory legal requirements or due to data protection agreements or contractual instruments signed with the third parties in question. All international data transfers are undertaken in accordance with Applicable Data Protection Law.
6. HOW DO WE COMPLY WITH LAW?
SOPHiA GENETICS cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We may be required to disclose the Personal Data of an individual in response to a lawful request by public authorities, to meet national security, law enforcement or other legal requirements.
7. HOW DO WE SECURE YOUR DATA?
We are committed to keeping your Personal Data secure in our daily activity and when you visit our website. We always consider the context and purposes of processing as well as the likelihood and impact of risks relating to your Personal Data to adapt our security measures. Therefore, we implement appropriate technical and organizational measures and apply strict procedures and security features to prevent unauthorized access, loss, or damage to data. We always use extra caution when we entrust third parties to handle your personal data and we require that they abide by the same standards as we apply.
8. DO WE PROCESS MINOR’S DATA?
The Website is not directed towards persons under the age of 18. We do not knowingly collect Personal Data from minors under the age of 18 who use the Website. If you become aware that a user under the age of 18 has used the Website, please contact SOPHiA GENETICS at [email protected]. If we become aware that a minor under 18 has provided us with Personal Data, SOPHiA GENETICS will take the necessary steps to have that Personal Data irrevocably removed.
9. YOUR RIGHTS
Exercise your rights
Depending where you are located and in accordance with Applicable Data Protection Law, you may:
– confirm the existence of data processing;
– access your Personal Data;
– review, update, correct, delete, restrict, block, object your Personal Data;
– request data portability pertaining to your Personal Data;
– request information from public and private entities with which we have shared your Personal Data;
– request information on the possibility of not providing consent and on the consequences of refusal;
– revoke your consent.
Limited use in our email list
If you no longer wish to receive new notices, email newsletters or other future promotional communications from us, you may choose to unsubscribe by clicking on the link at the bottom of any such communication and following the instructions thereto.
Alternatively, you may notify us by email at [email protected] with the word “remove” in the subject header, and we will remove your name from our email recipient list within five (5) days. Opt-out is not possible for necessary services or other administrative and transactional notices.
How to contact us
If you like to exercise one of your rights, please contact us first at:
Please attach a copy of your identification card or any other valid identification document with your signature, so that we may ascertain that any requests concerning your Personal Data indeed originate from you. We may retain an archived copy of your request in accordance with Applicable Data Protection Laws.
Complaint to Authorities
You may also file a complaint with your local data protection authority if you consider that any processing of your Personal Data infringes upon the requirements of the Applicable Data Protection Laws. However, we invite you to contact us prior to doing so.
10. CONTACT US – DATA PROTECTION OFFICER
11. CHANGES TO PRIVACY POLICY
This Privacy Policy is effective as of the date of its last revision. We reserve the right to change this Privacy Policy at any time. When we make changes, we will post the changed Privacy Policy at the Website, and it will become effective immediately.
