Privacy Statement

Privacy Statement for European Economic Area (EEA), Switzerland and UK residents

Last Updated: October 14, 2021

In the event that your Personal Information is covered by the EU General Data Protection Regulation 2016/679 (“GDPR”), the EU representative for Veracyte is HalioDx SAS, at 163 Avenue de Luminy, 13009 Marseille, France, and can be contacted at privacy@haliodx.com.

If you are a resident of the EEA, Switzerland or UK, you are entitled to the following rights in relation to your Personal Information:

  • The right to access: You have the right to request from us a copy of the Personal Information we hold about you.

  • The right to rectification: You have the right to request that we correct any Personal Information about you that is inaccurate, and to request that we complete the Personal Information we hold about you where you believe it is incomplete.

  • The right to erasure: You have the right to request that we erase your Personal Information, under certain conditions. In the event of an erasure request, we may retain a copy of your Personal Information for our record-keeping purposes and to avoid entering your Personal Information in our systems after your request.

  • The right to restrict processing: You have the right to request that we restrict the processing of your Personal Information, under certain conditions.

  • The right to object to processing: You have the right to object to our processing of your Personal Information, under certain conditions, and you have an unconditional right to object to the processing of your Personal Information for direct marketing purposes.

  • The right to data portability: You have the right to request that we transfer the Personal Information we have collected about you to another organization, or directly to you, under certain conditions. You can also request a copy of your Personal Information in a structured, common, and machine-readable format. 

  • The right to withdraw consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time. Your withdrawal of consent does not impact the lawfulness of our processing up to the point of consent withdrawal.

  • The right to make a complaint to your data protection regulator. The Information Commissioner’s Officer is the regulator in the UK and their details are here: https://ico.org.uk/make-a-complaint/. Here is a list of the regulators in the EU: https://edpb.europa.eu/about-edpb/board/members_en.

    To exercise the rights described above, please submit a request to us by emailing us at privacy@veracyte.com.

    Please note that there are exceptions to the various rights listed above. As an example, we may have a legal obligation to retain some of your Personal Information. We will respond to your request within 30 days, or otherwise in accordance with statutory deadlines.

  • The right to restrict processing: You have the right to request that we restrict the processing of your Personal Information, under certain conditions.