US Genetic and Consumer Health Data Privacy Notice

1. Controller and scope

Linus Ammer, handelnd unter Abakos-Systeme, Schönrain 10, 84152 Mengkofen, Germany, email contact@basedongenes.com. This notice supplements the general Privacy Information for users habitually resident in California, Washington or Nevada. The local genome file and locally calculated scores are conservatively treated as genetic or consumer-health data under the broad definitions in those laws.

2. Source, categories and purpose

The sole source is the user's own selected genome file. Depending on access, the browser locally reads genotypes and calculates one selected score or all 32 population-genetic scores with quality information. The sole purpose is the requested information and entertainment view and its local product package.

Based on Genes, Paddle and the servers receive neither the genome file, variants, identity-block hashes nor score results. Server-side processing is limited to the preview, order, contract, consent, licence, payment and refund data described in the general Privacy Information.

3. No sharing, sale or secondary use

Genetic or consumer-health data is not shared with or sold to third parties and is not used for advertising, profiling, research, product development, insurance, employment, law enforcement or any purpose not requested by the user. Based on Genes stores no biological samples and uses no geofence.

4. Consent, local storage and deletion

Express consent is required before the file is processed and may be withdrawn prospectively. The derived result is stored in the local browser database, tied to the compatible release, so it can be shown again on this device. “Remove local result” deletes the result and remembered file access; users control licences and downloaded files in their browser or file system. The provider cannot remotely read or erase data it cannot access, but provides assistance on request.

5. Access, correction, withdrawal and deletion

Requests can be made without an account by emailing contact@basedongenes.com or writing to the provider address. Only information required to match server-side records securely is requested. Washington and Nevada requests are generally answered within 45 days and permitted extensions are explained. California withdrawal and deletion requests are completed within 30 days where GIPA applies. Washington backups are deleted within six months if covered data should exist there contrary to the intended flow.

6. Appeal and complaint

A reasoned appeal can be requested at contact@basedongenes.com with the subject “Privacy appeal” and is generally answered within 45 days. Complaints may also be made to the relevant state Attorney General. Mandatory remedies, including rights under the Washington Consumer Protection Act, remain unaffected.

7. Security and changes

A network-isolated analysis worker, data minimisation, encrypted order communications and access controls protect the data. Material changes are posted with a new effective date, and fresh consent is obtained before a new or materially different purpose.