Our Commitment to GDPR

FuelYourDNA is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company handling sensitive genetic data, we take data protection extremely seriously and have implemented comprehensive measures to protect your rights.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

We will respond to all requests within 30 days as required by GDPR.

Special Category Data (Genetic Data)

Genetic data is classified as "special category data" under GDPR Article 9, which requires additional protections. We process your genetic data only with your explicit consent for the specific purpose of providing personalized nutrition recommendations.

Data Processing Activities

Data We Process

• Account Data: Name, email, password (hashed) — for account management
• Genetic Data: Uploaded DNA files, analyzed SNPs — for nutrition analysis
• Payment Data: Transaction records (no card numbers) — for billing
• Technical Data: IP address, browser info — for security and functionality

Legal Bases for Processing

• Consent: For processing genetic data and marketing communications
• Contract: For providing our analysis service
• Legal Obligation: For tax and accounting records
• Legitimate Interest: For security and fraud prevention

Data Transfers

Your data is primarily stored and processed within the European Union. If any data transfer outside the EU is necessary (e.g., for payment processing), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all sub-processors

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected users without undue delay if the breach poses a high risk
• Document the breach and remediation measures

Contact Our Data Protection Officer

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

This page was last updated on January 6, 2026.

Notre engagement envers le RGPD

FuelYourDNA s'engage pleinement à respecter le Règlement général sur la protection des données (RGPD). En tant qu'entreprise traitant des données génétiques sensibles, nous prenons la protection des données très au sérieux et avons mis en place des mesures complètes pour protéger vos droits.

Vos droits RGPD

En vertu du RGPD, vous disposez des droits suivants concernant vos données personnelles :

Nous répondrons à toutes les demandes dans un délai de 30 jours conformément au RGPD.

Données génétiques — Données de catégorie spéciale

Les données génétiques sont classées comme « données de catégorie spéciale » au titre de l'article 9 du RGPD, ce qui exige des protections supplémentaires. Nous ne traitons vos données génétiques qu'avec votre consentement explicite dans le seul but de vous fournir des recommandations nutritionnelles personnalisées.

Base légale du traitement

Nous traitons vos données sur les bases légales suivantes :

• Consentement explicite : Pour le traitement des données génétiques (article 9 du RGPD)
• Exécution du contrat : Pour fournir le service commandé
• Obligation légale : Pour la conformité aux lois et réglementations applicables
• Intérêt légitime : Pour la sécurité et la prévention de la fraude

Conservation des données

• Fichiers ADN bruts : Supprimés dans les 24 heures suivant l'analyse
• Marqueurs génétiques analysés : Conservés tant que votre compte est actif
• Données de compte : Conservées tant que le compte est actif + 30 jours
• Données de paiement : Selon les exigences légales (généralement 7 ans)

Exercer vos droits

Pour exercer l'un de vos droits RGPD, contactez notre délégué à la protection des données :

• E-mail : privacy@fuelyourdna.com
• Délai de réponse : Dans les 30 jours suivant la réception de votre demande
• Vérification d'identité : Nous pouvons vous demander de vérifier votre identité avant de traiter certaines demandes

Autorité de contrôle

Si vous n'êtes pas satisfait de notre traitement de vos données, vous avez le droit de déposer une réclamation auprès de :

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Site web : www.cnil.fr

Mises à jour de cette politique

Nous révisons périodiquement nos pratiques de conformité RGPD. Toute modification importante vous sera notifiée par e-mail ou via notre service.

Dernière mise à jour : Janvier 2026

Our Commitment to GDPR

FuelYourDNA is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company handling sensitive genetic data, we take data protection extremely seriously and have implemented comprehensive measures to protect your rights.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

We will respond to all requests within 30 days as required by GDPR.

Special Category Data (Genetic Data)

Genetic data is classified as "special category data" under GDPR Article 9, which requires additional protections. We process your genetic data only with your explicit consent for the specific purpose of providing personalized nutrition recommendations.

Data Processing Activities

Data We Process

• Account Data: Name, email, password (hashed) — for account management
• Genetic Data: Uploaded DNA files, analyzed SNPs — for nutrition analysis
• Payment Data: Transaction records (no card numbers) — for billing
• Technical Data: IP address, browser info — for security and functionality

Legal Bases for Processing

• Consent: For processing genetic data and marketing communications
• Contract: For providing our analysis service
• Legal Obligation: For tax and accounting records
• Legitimate Interest: For security and fraud prevention

Data Transfers

Your data is primarily stored and processed within the European Union. If any data transfer outside the EU is necessary (e.g., for payment processing), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all sub-processors

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected users without undue delay if the breach poses a high risk
• Document the breach and remediation measures

Contact Our Data Protection Officer

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

This page was last updated on January 6, 2026.

Our Commitment to GDPR

FuelYourDNA is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company handling sensitive genetic data, we take data protection extremely seriously and have implemented comprehensive measures to protect your rights.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

We will respond to all requests within 30 days as required by GDPR.

Special Category Data (Genetic Data)

Genetic data is classified as "special category data" under GDPR Article 9, which requires additional protections. We process your genetic data only with your explicit consent for the specific purpose of providing personalized nutrition recommendations.

Data Processing Activities

Data We Process

• Account Data: Name, email, password (hashed) — for account management
• Genetic Data: Uploaded DNA files, analyzed SNPs — for nutrition analysis
• Payment Data: Transaction records (no card numbers) — for billing
• Technical Data: IP address, browser info — for security and functionality

Legal Bases for Processing

• Consent: For processing genetic data and marketing communications
• Contract: For providing our analysis service
• Legal Obligation: For tax and accounting records
• Legitimate Interest: For security and fraud prevention

Data Transfers

Your data is primarily stored and processed within the European Union. If any data transfer outside the EU is necessary (e.g., for payment processing), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all sub-processors

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected users without undue delay if the breach poses a high risk
• Document the breach and remediation measures

Contact Our Data Protection Officer

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

This page was last updated on January 6, 2026.

Our Commitment to GDPR

FuelYourDNA is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company handling sensitive genetic data, we take data protection extremely seriously and have implemented comprehensive measures to protect your rights.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

We will respond to all requests within 30 days as required by GDPR.

Special Category Data (Genetic Data)

Genetic data is classified as "special category data" under GDPR Article 9, which requires additional protections. We process your genetic data only with your explicit consent for the specific purpose of providing personalized nutrition recommendations.

Data Processing Activities

Data We Process

• Account Data: Name, email, password (hashed) — for account management
• Genetic Data: Uploaded DNA files, analyzed SNPs — for nutrition analysis
• Payment Data: Transaction records (no card numbers) — for billing
• Technical Data: IP address, browser info — for security and functionality

Legal Bases for Processing

• Consent: For processing genetic data and marketing communications
• Contract: For providing our analysis service
• Legal Obligation: For tax and accounting records
• Legitimate Interest: For security and fraud prevention

Data Transfers

Your data is primarily stored and processed within the European Union. If any data transfer outside the EU is necessary (e.g., for payment processing), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all sub-processors

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected users without undue delay if the breach poses a high risk
• Document the breach and remediation measures

Contact Our Data Protection Officer

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

This page was last updated on January 6, 2026.

Our Commitment to GDPR

FuelYourDNA is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company handling sensitive genetic data, we take data protection extremely seriously and have implemented comprehensive measures to protect your rights.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

We will respond to all requests within 30 days as required by GDPR.

Special Category Data (Genetic Data)

Genetic data is classified as "special category data" under GDPR Article 9, which requires additional protections. We process your genetic data only with your explicit consent for the specific purpose of providing personalized nutrition recommendations.

Data Processing Activities

Data We Process

• Account Data: Name, email, password (hashed) — for account management
• Genetic Data: Uploaded DNA files, analyzed SNPs — for nutrition analysis
• Payment Data: Transaction records (no card numbers) — for billing
• Technical Data: IP address, browser info — for security and functionality

Legal Bases for Processing

• Consent: For processing genetic data and marketing communications
• Contract: For providing our analysis service
• Legal Obligation: For tax and accounting records
• Legitimate Interest: For security and fraud prevention

Data Transfers

Your data is primarily stored and processed within the European Union. If any data transfer outside the EU is necessary (e.g., for payment processing), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all sub-processors

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify affected users without undue delay if the breach poses a high risk
• Document the breach and remediation measures

Contact Our Data Protection Officer

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

This page was last updated on January 6, 2026.