Privacy Policy

Genova Diagnostics Web Site Privacy Policy

Genova Diagnostics Inc. (GDX) is committed to protecting the privacy of your personal and health information.

Genova Diagnostics Inc. is the sole owner of the information collected on this site. We will not sell, share or rent this information to others in ways different from what is disclosed in this statement. This site contains links to other sites: Genova Diagnostics Inc. is not responsible for the privacy practices or the content of such websites.

This privacy policy sets out how GDX uses and protects any information that you give us when you use this website. GDX is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

What information we may collect:

• Name and degree type
• Contact information including email address
• Communication preferences related to GDX communications (newsletters, emails, etc.)
• Business information related to establishing an account with GDX
• Interactions with our website such as pages visited, forms completed, etc.

What we do with the information we gather:

We require this information to understand your needs and provide you with a better overall experience with GDX, and in particular for the following reasons:

• Internal record keeping.
• We may use the information to improve our products and services.
• Optimize our website and applications associated with our website.
• Periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customize the website according to your interests.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

When you submit sensitive information via the website, your information is protected both online and off- line. Any website area where patient or customer information is displayed is secured by encryption-protected passwords, and transmission of sensitive information is protected using SSL encryption.

Your personal information is also restricted in our workplace. Only Genova Diagnostics Inc. employees who need the information to perform a specific task have access to personally identifiable information. Our employees are trained on our security and privacy practices, and our servers that contain personally identifiable information are kept in a secure environment.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. The cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Please note: this may prevent you from taking full advantage of the website.

To manage your cookie preferences please visit our cookie preferences page.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to:

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

GDPR Compliance

In accordance with the European Union's General Data Protection Regulation (GDPR), Genova Diagnostics Inc. will comply with all requests for personal information from EU citizens, effective May 25, 2018. Please note that exceptions do apply to specific information requests.

For more information or to make a request, please contact our Senior Quality Manager, Compliance Officer or Data Protection Officer at info@gdx.net.

Notification of Changes

Genova Diagnostics Inc. will change and update this policy whenever needed, so please check the policy often. We will identify that the policy has changed by changing the effective date at the bottom of this page. If at any point Genova Diagnostics Inc. decides to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users via an email. Users will have a choice as to whether or not we use their information in a different manner.

Genova Diagnostics Notice of Privacy Practices

I. THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

II. Genova Diagnostics is legally required to safeguard your protected health information (PHI).
PHI includes information that can be used to identify you that Genova Diagnostics has created or received about your past, present, or future health or condition, the provision of healthcare to you, or the payment of this healthcare. We recognize the importance of PHI and take all steps appropriate and necessary to maintain the privacy of your PHI.

Genova Diagnostics is required by law to maintain the privacy of PHI and provide you with notice of our legal duties and privacy practices with respect to PHI. This document describes how Genova Diagnostics uses and discloses your PHI.

Genova Diagnostics reserves the right to change the terms of this notice and our privacy policies at any time, which will apply to the PHI we already have. Before any changes are made to our policies, we will promptly change this notice. You may print this for your records or request a copy of this notice from the contact person in section V.

III. How we may use and disclose your PHI.
It is our policy to use or disclose PHI only as permitted by law as follows:

• To carry out treatment. (Example: test results made available to the authorizing healthcare provider)
• To obtain payment for treatment. (Example: Filing insurance, billing for services)
• For healthcare operations. We may disclose your PHI in order to operate this lab and evaluate the quality of our testing in compliance with laws and regulations that affect us.

Use or Disclosure In Accordance With an Authorization
Genova Diagnostics may use and disclose your PHI for purposes other than treatment, payment, or health care operations only with your written authorization which you may revoke at any time. The following section details specific uses and disclosures where consent or authorization is unnecessary:

Use or Disclosure Where Consent or Authorization is Unnecessary
Genova Diagnostics may use or disclose your health information; to the extent you have been notified in advance and had the opportunity to object in whole or in part, under the following circumstances:

• To notify family, friends, or other individuals involved with your care or in the payment for your health care.
• In an emergency where the opportunity to object is not practical due to emergency circumstances or your incapacity; consent may be obtained retroactively.
• To an entity authorized to assist in disaster relief efforts.
• As required by federal, state, or local law.
• To a public health authority to carry out public health activities.
• To a government authority, under certain circumstances, in the event we reasonably believe you are a victim of abuse, neglect, or domestic violence.
• To a health oversight agency to conduct health oversight activities such as audits, civil, administrative or criminal investigations, inspections, licensure or disciplinary actions.
• To carry out judicial or administrative proceedings.
• To a medical examiner to identify a decedent or determine cause of death.
• For the purpose of conducting medical research.
• To comply with worker's compensation laws.

IV. What Rights You Have Regarding Your PHI
Genova Diagnostics is committed to protecting your individual rights as they relate to your PHI.

• You have the right to authorize uses and disclosures of your PHI, and can request restrictions on future uses and disclosures of your PHI. We reserve the right to refuse to grant specific restrictions but, if we agree, will be bound by such restrictions. You may not limit the uses and disclosures that we are legally required or allowed to make.
• You have the right to receive communications in an alternative manner or at an alternative location - i.e. an alternative address or communications sent electronically.
• You have the right to access, inspect, and obtain copies of your own PHI unless otherwise prohibited by law.
• You have the right to request access to your laboratory results. You may do this by contacting Customer Service, who will direct you to the Genova Diagnostics electronic access page for patients.
• You have the right to request that your PHI be amended.
• You have the right to receive an accounting of all disclosures made in accordance with an authorization.
• You have the right to request or print a copy of this Notice of Privacy Practices.

V. How To Complain About Our Privacy Practices
If you believe we may have violated your privacy rights, you may file a complaint with our Compliance Officer or a Quality Manager at Genova Diagnostics. Please contact:

Earlene Clark, Compliance Officer
63 Zillicoa Street
Asheville, NC 28801
800-522-4762
eclark@gdx.net

Denise Bosket
Office of Quality
63 Zillicoa Street
Asheville, NC 28801
800-522-4762
dbosket@gdx.net

For further action, you may contact The U.S. Department of Health and Human Services. Genova Diagnostics will take no retaliatory action against you if you file a complaint about our privacy practices.

VI. Effective Date of Original Notice: April 14, 2003
Updated: May 25, 2018