US Genetic and Consumer Health Data Privacy Notice

1. Controller and scope

Linus Ammer, trading as Abakos-Systeme, Schönrain 10, 84152 Mengkofen, Germany, email gggeogens.eu, provides this notice as a precaution for purchasers habitually resident in California, Washington or Nevada. It supplements the general Privacy Information.

The analysis is not medical. Because California and Washington may define genetic and inferred information broadly, we conservatively treat the local genome file, local genotype calls, similarity results and haplogroups as covered data.

2. Categories, source and purpose

The sole source is the genome file selected by the purchaser. The browser locally reads genotypes and locally infers archaeogenetic similarity, quality information and, where supported, Y-DNA and mtDNA haplogroups. The sole purpose is the genealogical entertainment and research view requested by the purchaser and its local export.

GeoGens, the provider, Paddle and the servers receive neither the genome file nor individual variants, genetic results or haplogroups. Server-side processing is limited to the order, contract, consent, licence, payment and refund data described in the general Privacy Information.

3. No sharing, sale or secondary use

Genetic or consumer health data is not shared with or sold to any third party. There are therefore no categories of recipients or third parties for that data. It is not used for advertising, profiling, research, product development, insurance, employment, law enforcement or any purpose not requested by the purchaser. GeoGens stores no biological samples, uses no geofence and does not request separate consent for uses that do not occur.

4. Consent, on-device storage and deletion

Before the file is opened, the purchaser must expressly consent to the described local processing for the selected analysis. Without consent GeoGens does not open the file. Consent can be withdrawn prospectively at any time.

Local working data remains in the purchaser's browser profile. It can be removed in the genome dialog or by deleting GeoGens site data. Exported result files remain under the purchaser's sole control. Because the provider cannot access this local data, it cannot read or erase it remotely, but will provide deletion assistance on request.

5. Access, correction, withdrawal and deletion

Requests can be made without creating an account by emailing gggeogens.eu or writing to the address above. State the purchase jurisdiction, the right invoked and, if available, the order reference and purchase email. We request only what is required to authenticate the request.

Washington and Nevada requests are generally answered within 45 days; any legally permitted extension will be explained. California withdrawal and deletion requests are completed within 30 days where GIPA applies. Server-side deletion includes recipients and processors where applicable; no genetic data is stored there. Washington backup deletion is completed within six months and Nevada backup deletion within the locally permitted period if covered data should ever exist server-side contrary to the intended data flow.

6. Appeal and complaint

A consumer who disagrees with a response may email gggeogens.eu with the subject “Privacy appeal”. To the extent feasible for a sole proprietorship, the appeal is reviewed separately from the initial handling and a reasoned decision is issued within 45 days.

A complaint may also be made to the Attorney General of the relevant state. Washington rights under the Consumer Protection Act remain unaffected. Nothing in this notice limits mandatory statutory remedies.

7. Security and changes

Local processing, disabled network primitives in the analysis worker, data minimisation, encrypted transport for order-only communications and access controls protect the data. Material changes will be posted with a new effective date, and a new consent will be obtained before any new or materially different use.