1. Data controller
The controller of personal data is Multiplex SpA, Tax ID (RUT) 76.701.556-9, domiciled at Avenida del Valle Norte 725, floor 3, Huechuraba, Santiago, Chile.
To exercise your rights or for questions about this Policy, you can contact our data protection officer at contacto@multiplex.bio.
2. Applicable legal framework
We process personal data in accordance with Article 19 No. 4 of the Constitution, Law No. 19,628 on the Protection of Private Life, Law No. 21,719, Law No. 20,120 regarding genetic information and, where applicable, Law No. 20,584 and Law No. 19,496.
3. Data we process
Depending on the context of the relationship, we may process the following categories of data:
- Identification and contact data (name, email, phone, company and role).
- Health data and genetic data, which the law classifies as sensitive data.
- Data derived from sample analysis (results, reports and interpretations).
- Browsing and site-usage data (for example, via technical and analytics cookies).
4. Purposes of processing
- Respond to contact requests and prepare technical and commercial proposals.
- Develop, process and interpret genetic and epigenetic panels.
- Generate and deliver custom reports to the relevant party.
- Comply with legal, contractual and quality obligations.
- Improve our services and, with an appropriate legal basis, perform aggregate analytics.
5. Legal basis
Processing is based on the free, informed and specific consent of the data subject; on the performance of a contract or pre-contractual measures; on compliance with legal obligations; and, where applicable, on legitimate interest, provided the data subject's rights do not prevail.
Processing of sensitive and genetic data requires express consent, except for the exceptions established by law.
6. Sensitive data and genetic data
Genetic data receives reinforced protection. Its processing is also governed by Law No. 20,120, which enshrines its confidentiality and prohibits discrimination based on genetic heritage.
We apply separation of contexts between information of patients, companies and professionals, and principles of minimization and confidentiality. Details are in our Genetic Data Protection policy.
7. Use of anonymized information
Multiplex may use information in an anonymized form —that is, dissociated from the data subject's identity so that re-identification is not possible— for research, development and improvement of its products and services.
If the data subject does not wish their information to be used in this way, they may communicate this at any time to contacto@multiplex.bio and their request will be addressed.
8. Processors and third parties
We may rely on data processors (for example, laboratory providers, cloud hosting or CRM) that act under documented instructions and confidentiality and security obligations.
We do not sell personal data.
9. International transfers
When an international transfer is necessary, it will be carried out in accordance with the law, adopting adequate protection safeguards.
10. Retention period
We keep data only for as long as necessary for the described purposes and to comply with legal obligations. Once those periods expire, data is securely deleted or anonymized.
11. Security measures
We adopt technical and organizational measures to protect data against unauthorized access, loss or alteration, including access control, encryption and pseudonymization where appropriate.
12. Data subject rights
The data subject may exercise their rights of access, rectification, cancellation or erasure, objection, portability and blocking by writing to contacto@multiplex.bio, proving their identity.
If you believe your rights have not been duly addressed, you may file a complaint with the competent supervisory authority under Law No. 21,719.
13. Cookies
We use technical cookies necessary for the site to function and, with your consent, analytics cookies. You can manage your preferences from your browser.
14. Minors
Processing of minors' data is carried out with the authorization of their legal representative, in accordance with applicable regulations.
15. Changes to this Policy
We may update this Policy. The current version will always be the one published on this site, indicating its last-updated date.