Privacy Policy

1. Who we are

This Privacy Policy explains how GenXMap ("GenXMap", "we", "us") collects, uses and protects personal data through genxmap.com and in the course of our R&D, wet-lab and computational biology services. GenXMap is a French company headquartered at 9 Rue Jacques Réattu, 13009 Marseille, France, with laboratories hosted at the Méditerranée Infection Building (IHU Méditerranée Infection), 19-21 Boulevard Jean Moulin, 13005 Marseille, France.

2. Data we collect

We collect two broad categories of data:

• Website visitors: information you provide directly, such as your name, email address, company and message content when you contact us by email or through a form.
• Project & client data: information associated with samples and datasets submitted to us for analysis under a signed agreement. Where this data includes personal, clinical or genetic information about third parties (e.g. research subjects or patients), the client remains the data controller for that information, and GenXMap acts as a processor under the terms of the applicable data processing agreement.

3. Why we process data

We process personal data on the following legal bases: performance of a contract (project delivery), our legitimate interest in responding to enquiries and operating our business, and consent where explicitly requested (for example, optional communications).

4. How long we keep it

Website enquiry data is retained only as long as needed to respond and follow up. Project data is retained for the period defined in the applicable service agreement, or as required by applicable regulatory obligations, after which it is deleted or returned in line with the agreed terms.

5. Who we share it with

We do not sell personal data. Data may be shared with vetted subcontractors or technology partners strictly to deliver a project (for example, a specialized analysis partner), always under a confidentiality or data processing agreement. We do not share data for advertising purposes.

6. Data security

We apply enterprise-grade technical and organizational measures (access controls, encryption in transit and confidentiality agreements) to protect the data we handle, whether website enquiries or project data.

7. International transfers

Our infrastructure and laboratories are based in France. Where a service provider is located outside the European Economic Area, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect the data transferred.

8. Your rights

Under the GDPR, you have the right to access, correct, delete or restrict the use of your personal data, to object to certain processing, and to request data portability. To exercise any of these rights, contact us at contact@genxmap.com. You also have the right to lodge a complaint with the French data protection authority (CNIL).

9. Cookies

Our sites use cookies as described in our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the most recent revision. Material changes will be reflected on this page.

11. Contact

Questions about this policy can be sent to contact@genxmap.com or +33 7 69 44 16 18 or +33 4 13 73 24 81.