European Privacy Policy

Effective Date: March 18, 2025

SAGA Diagnostics US, Inc., located at 860 Aviation Parkway, Ste 300, Morrisville, NC 27560, and its affiliated companies in the United States and Europe, including SAGA DX, Inc., SAGA Diagnostics AB, and SAGA Diagnostics UK, Ltd., (collectively “SAGA”), respect your right to privacy, and are committed to protecting your personal data and ensuring compliance with all applicable data protection laws.

This European Data Privacy Statement (the “Statement”) contains specific information for individuals located within the European Economic Area (“EEA”) or United Kingdom (“UK”), about whom SAGA may have collected Personal Data to explain SAGA’s legal basis for processing your Personal Data, and why and how we use it.

Legal Basis for Processing Your Personal Data

SAGA applies the General Data Protection Regulation (GDPR) EU 2016/679 to all Personal Data we control or process on behalf of others. SAGA may process your Personal Data because:

We need to manage and fulfill the obligations under contracts and agreements.
To provide support and/or information or services you requested.
We have received your consent to process your Personal Data for specific purposes.
SAGA must comply with its legal obligations.

In addition, SAGA will process your Personal Data on the basis SAGA has a legitimate interest, so long as it does not interfere with or override your individual interests, rights or freedoms.

Personal Data of Patients

SAGA may collect Personal Data of patients in the course of providing our clinical laboratory testing and related services, including, pseudonymized patient demographic information, medical history and whole genome sequencing data. SAGA may process this Personal Data for the following purposes: providing clinical laboratory services as part of clinical studies/research and scientific publications.

Personal Data of Employees

SAGA collects Personal Data of our employees in the course of their employment with us, the employee’s name, address, other contact information, and job title and salary information. SAGA may process this Personal Data for general HR administrative functions, including hiring, performance assessment, promotion, and benefits determinations.

Personal Data of Third-Party Service Providers and Consultants

SAGA may collect Personal Data of individuals who provide services on our behalf or who we have been engaged to perform services for, including name, biographical information, address, and other contact information. SAGA may process this Personal Data to carry out the service agreements or other contracts it has with these individuals or their organizations.

GDPR Transfer of Data

SAGA’s European affiliates, with offices in the EEA, store, and transfer data, including Personal Data, to the United States and process it there. The level of data protection in the United States is considered not to be the same as in the EEA according to the absence of a respective adequacy decision of the EU Commission. SAGA ensures that such transfers are carried out in compliance with the applicable data protection laws and regulations. Any transfers to third countries outside the EEA are secured through appropriate contractual guarantees such as the EU Commission’s Standard Contractual Clauses for transfers to the United States where applicable. You may request and receive a copy of such documents from us.

Your Data Protection Rights under the General Data Protection Regulation (GDPR)

If you are a resident of the EEA or UK, you have certain data protection rights. SAGA aims to take reasonable steps to allow you to correct, amend, delete or limit the Processing of your Personal Data.

If you wish to be informed about what Personal Data we hold about you and if you want it to be removed from our systems, please contact us utilizing the contact info listed below.
Under the GDPR, you have the following data protection rights:

Right of access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you.
Right to rectify the personal data that we hold about you. This enables you to ask us to have any incomplete or inaccurate information we hold about you corrected.
Right to erase your personal data. This enables you to ask us, in certain situations, to delete or remove personal data where there is no legitimate reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
Right to restrict the Processing of your personal data. This enables you to ask us, in certain circumstances, to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
Right to object to the Processing of your personal data where we rely on a legitimate interest (or those of a third party), and there is something about your situation which makes you object to processing on this ground.
Right to data portability. This enables you to ask us, in certain circumstances, to provide you with the personal data you have provided for us in a structured, commonly used and machine-readable format or to transmit the personal data that you have provided to us to another party.
The right to withdraw consent at any time where SAGA relied on your consent to process your Personal Data.
Automated decision-making. The right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

If you are an EEA or UK resident and want to exercise a data subject right in connection to your personal data, please submit using the contact information listed below.

Please note that we may ask you to verify your identity before responding to such requests. This is to ensure that personal data is not disclosed to any person who has no right to receive it.

Data Protection Supervisory Authority under GDPR

You have the right to lodge a complaint to a Data Protection Supervisory Authority about our collection and Processing of your Personal Data. For more information, please contact your local data protection authority in the EEA. Click here for a list of European authorities.

Contact Information. If you have questions about this Statement, you can write to us at the following address:

Data Protection Officer (GDPR):

SAGA Diagnostics AB

Scheelevagen 2, MV406

223 81 Lund

Sweden

+46 73 301 72 42

Attn: Privacy Officer

SAGA Diagnostics US, Inc.

860 Aviation Parkway, Ste 300

Morrisville, NC 27560

(919) 371-0283