Legal information

Privacy policy

How we process personal data under the GDPR — what data we process about you on this website, why, and what rights you have in connection with it.

TransparencyYour data is safe with us

We process only what we genuinely need, and always for a clear purpose and on a clear legal basis.

Who is the data controller

The controller of the personal data processed in connection with this website is Genomac výzkumný ústav, s.r.o., with its registered office at Drnovská 1112/60, 161 00 Prague 6 – Ruzyně, Czech Republic, company no. 26475821, VAT no. CZ26475821, registered at the Municipal Court in Prague, section C, insert 84679 (hereinafter “we” or “Genomac”).

On matters of personal data protection you can contact us by e-mail at info@genomac.cz.

What personal data we process

The contact and order form (the Orders and appointments page) — your first name and surname, e-mail address, optionally a telephone number, the type of test selected and the content of your message. Submitting the form merely opens your e-mail client with a pre-filled message addressed to info@genomac.cz — we therefore do not store the form data in any database on this website; it reaches us directly as an ordinary e-mail.

Cookies and analytics data — see the separate Cookies and Google Analytics section below.

If you contact us by telephone, e-mail or in person, we also process the data you yourself provide in the course of that communication.

Cookies and Google Analytics

The website uses cookies. Essential cookies always run so that it works at all. Analytics (Google Analytics 4) and marketing (Google Ads) cookies are used only with your consent, which you give in the cookie bar on your first visit — you can change your choice at any time via the “Cookie settings” link in the website footer.

We use Google Consent Mode v2: until you give consent, Google receives no data from us that would allow you to be identified, and measurement takes place only in an anonymised/modelled form.

Google Analytics is operated by Google Ireland Limited, which, acting as a processor, processes data in accordance with its own privacy policy (policies.google.com/privacy).

Why and on what legal basis we process data

Handling your enquiry or order via the contact form — the legal basis is steps taken with a view to entering into a contract and our legitimate interest in replying to you (Art. 6(1)(b) and (f) GDPR).

Consent to cookies and analytics — the legal basis is your consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

Compliance with legal obligations, for example keeping accounting and tax records — Art. 6(1)(c) GDPR.

How long we keep data

We keep e-mails from the contact form and other correspondence for as long as is necessary to deal with your enquiry, and then for a reasonable further period in case of follow-up communication — at most 3 years from the last contact.

Data from accounting and tax records is kept for the period laid down by law (usually 10 years).

Consent to analytics and marketing cookies remains valid until you withdraw it, at most 24 months from the date it was given — after that period we will ask you for consent again on your next visit.

Genetic testing and biological samples

This website serves primarily to present our services. The purchase of a test and the payment itself take place in the e-shop mojegeny.cz, which has its own privacy policy and terms and conditions.

Genetic data obtained by analysing a sample is a special category of personal data (Art. 9 GDPR) and we process it only on the basis of your explicit consent given when ordering the test.

Samples are anonymised in the laboratory and processed exclusively by our molecular biologists. We keep them for the agreed period in case of follow-up consultations, after which they are safely destroyed.

Who we pass data to

We do not pass personal data from the contact form to any third party — it goes straight to our e-mail inbox.

For analytics purposes we pass anonymised/pseudonymised data to Google Ireland Limited (Google Analytics 4, and possibly Google Ads), and only if you have given consent to this.

We do not transfer data to countries outside the EU/EEA beyond the standard safeguards Google provides for data transfers under the EU standard contractual clauses.

Your rights

In connection with the processing of personal data you have the following rights under the GDPR. You can exercise them by e-mail at info@genomac.cz or in writing at our registered office.

Security and currency of this document

We have adopted technical and organisational measures to protect your personal data against unauthorised access, loss or misuse.

We may update this policy from time to time, for example in connection with changes in legislation or in the services we use on the website. The current version is always available on this page.

Last updated: 13 August 2026.