Canada Privacy and Complaint Procedure

1. Accountability and Privacy Officer

Linus Ammer, trading as Abakos-Systeme, Schönrain 10, 84152 Mengkofen, Germany, is accountable for personal information controlled by GeoGens. Linus Ammer is the individual designated as Privacy Officer under PIPEDA. Contact: gggeogens.eu, telephone +49 152 27640571. PIPEDA does not require that person to be a Canadian citizen, resident or locally appointed representative.

The genome file and genetic analysis results remain on the purchaser's device and are not disclosed to GeoGens, Paddle or the servers. Canadian orders involve cross-border processing only of the order, purchaser-name, contract, consent, licence, payment and refund data described in the general Privacy Information.

2. Requests, access and correction

Send requests by email to gggeogens.eu or by post to the address above. Include “Canada privacy request”, the order reference and the email used for purchase; additional identity information is requested only where required for secure matching.

We acknowledge the request, locate the relevant records, explain use and disclosure on request, and provide correction or annotation. We generally respond within 30 days. If PIPEDA permits an extension, its length and reason are communicated within the first 30 days. A legally required refusal is explained in writing with the available complaint route. For local genome and result data we provide deletion instructions but cannot remotely administer data we cannot access.

3. Complaint handling

Complaints are logged with receipt date, subject and requested remedy. The Privacy Officer investigates the relevant process and records, invites any necessary additional information, and provides a written outcome, reasons and remedial action where appropriate. Substantiated errors are corrected and necessary organisational or technical changes are documented.

A person dissatisfied with the outcome may complain to the Office of the Privacy Commissioner of Canada. Mandatory rights under applicable provincial law remain unaffected.

4. Privacy breaches

GeoGens assesses every known loss, unauthorised access or unauthorised disclosure. Where there is a real risk of significant harm, the Office of the Privacy Commissioner of Canada and affected individuals are notified as soon as feasible, and other organisations are informed where legally required. A record of every breach is retained for at least 24 months regardless of severity.

5. Openness and changes

Purposes, recipients, retention and safeguards are described in the general Privacy Information. Material changes are published, and fresh consent is obtained before a new purpose that a person would not reasonably expect.