Country Addenda — allergoSMART / AllergoGPT

Country Addenda — allergoSMART / AllergoGPT

All data is hosted and processed in Germany; no personal data leaves Germany.

United States (US)

• State laws apply (California CPRA, Virginia, Colorado, Connecticut, etc.).
• Notice at Collection and consumer rights: know, delete, correct, opt out of sale/sharing — we do not sell or share personal data.
• Health data treated as sensitive personal information.

United Kingdom (GB)

• UK GDPR + DPA 2018; supervisory authority: ICO.
• UK representative (Art. 27) assessment required.

India (IN)

• DPDP Act 2023: notice + consent model; named Grievance Officer required.

China (CN) — strongest caveat

• PIPL: separate consent for sensitive personal information mandatory.
• Do not launch in China without local counsel.

Australia (AU)

• Privacy Act / APPs. APP 8: notify users that data is stored overseas (Germany).
• Health information is sensitive — requires consent.

United Arab Emirates (AE)

• Federal PDPL: explicit consent; cross-border transfer requires safeguards.
• Local counsel review recommended before launch.