Our Commitment to GDPR
FuelYourDNA is fully committed to compliance with the General Data Protection Regulation (GDPR). As a company handling sensitive genetic data, we take data protection extremely seriously and have implemented comprehensive measures to protect your rights.
Lawful Basis
We process your data based on your explicit consent and contractual necessity to provide our service.
Data Minimization
We only collect data strictly necessary for providing our genetic nutrition analysis.
Storage Limitation
Raw DNA files are deleted after processing. We retain only essential analyzed data.
Security by Design
Privacy and security are built into every aspect of our service from the ground up.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
| Right | Description | How to Exercise |
|---|---|---|
| Right of Access | Request a copy of all personal data we hold about you | Email privacy@fuelyourdna.com |
| Right to Rectification | Correct any inaccurate or incomplete data | Account settings or email |
| Right to Erasure | Request deletion of all your data ("right to be forgotten") | Account settings > Delete Account |
| Right to Portability | Receive your data in a machine-readable format | Account settings > Export Data |
| Right to Object | Object to certain types of data processing | Email privacy@fuelyourdna.com |
| Right to Restrict | Limit how we process your data | Email privacy@fuelyourdna.com |
| Withdraw Consent | Withdraw your consent at any time | Account settings or email |
We will respond to all requests within 30 days as required by GDPR.
Special Category Data (Genetic Data)
Genetic data is classified as "special category data" under GDPR Article 9, which requires additional protections. We process your genetic data only with your explicit consent for the specific purpose of providing personalized nutrition recommendations.
Our Genetic Data Handling:
- Raw DNA files are permanently deleted within 24 hours of analysis
- Only relevant nutritional markers are retained (not your entire genome)
- All genetic data is encrypted at rest using AES-256
- Access is strictly limited to essential automated processes
- Your genetic data is NEVER shared with third parties
Data Processing Activities
Data We Process
- Account Data: Name, email, password (hashed) — for account management
- Genetic Data: Uploaded DNA files, analyzed SNPs — for nutrition analysis
- Payment Data: Transaction records (no card numbers) — for billing
- Technical Data: IP address, browser info — for security and functionality
Legal Bases for Processing
- Consent: For processing genetic data and marketing communications
- Contract: For providing our analysis service
- Legal Obligation: For tax and accounting records
- Legitimate Interest: For security and fraud prevention
Data Transfers
Your data is primarily stored and processed within the European Union. If any data transfer outside the EU is necessary (e.g., for payment processing), we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Data processing agreements with all sub-processors
Data Breach Notification
In the unlikely event of a data breach affecting your personal data, we will:
- Notify the relevant supervisory authority within 72 hours
- Notify affected users without undue delay if the breach poses a high risk
- Document the breach and remediation measures
Contact Our Data Protection Officer
Data Protection Officer
Email: privacy@fuelyourdna.com
Address: FuelYourDNA - DPO, Pornichet, France
Response Time: Within 30 days
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:
CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr
This page was last updated on January 6, 2026.