genua GmbH
Domagkstrasse 7
85551 Kirchheim, Germany
represented by its managing directors Matthias Ochs and Marc Tesch.
genua GmbH (hereinafter "genua") places a particularly high importance on the protection of your personal data. In this statement we would like to clearly describe the data we process as our web-site is visited.
Personal data is information that can be used either directly or indirectly to identify a person. Typical examples would be a name or a postal address. Personal data may be processed in one of the following cases:
This privacy notice fulfills the requirements laid out in Article 13 ff of the GDPR (General Data Protection Regulations). concerning the information to be provided when personal data is collected. Personal data is information that can be used either directly or indirectly to identify a person. Typical examples would be a name or a postal address. Personal data may be processed under the following conditions:
When consent is granted (in accordance with Art. 6, para. 1 (a) of the GDPR)
The purposes of processing personal data are defined by the consent granted. Once granted, consent can be permanently revoked at any time. Consent granted before the GDPR came into effect can also be revoked. Processes that have occurred before consent is revoked remain unaffected by the revoking of consent. For example: sending a newsletter.
When contractual obligations have to be met (in accordance with Art. 6, para. 1 (b) of the GDPR)
The purposes of the data processing are defined by the introduction of pre-contractual obligations preceding a contractually regulated business relationship or the fulfillment of obligations laid out in a closed contract.
When legal requirements have to be met (in accordance with Art. 6 para.1 (c) of the GDPR) or when it is in the public interest (in accordance with Art. 6 para.1 (e) of the GDPR)
The purposes of processing personal data are defined by the need to meet legal compliance (for example, fulfilling obligations to retain data).
When conflicting interests are to be weighed up (in accordance with Art. 6, para. 1 (f) of the GDPR)
The purposes of the processing are defined by weighing up our legitimate interests. It may be necessary to process user data over and above meeting the original contractual obligations. Our legitimate interests can justify further processing of user data, in so far as the user’s interests or fundamental rights and freedoms do not prevail. Our legitimate interests may include exercising legal claims or defending liability claims.
Data Categories
genua processes the following categories of personal data for the above-mentioned purposes:
- contact information such as first and family names, address, land line and cell/mobile telephone numbers, fax number and e-mail addresses;
- payment details that are necessary for the settlement of payment transactions or are required to prevent fraud;
- information that is required for the completion of a project or the processing of a contractual relationship with genua or that is freely provided by one of our contact persons.
Data Sources
We process personal data that we have acquired within the framework of our business relationship with users. We process personal data that we obtain or are legitimately forwarded by third parties from publicly accessible sources such as lists of debtors, land and real estate registers, commercial and associations registries, the press and the Internet, as far as is necessary for us to render our performance.
We would like to send you regular offers, news and other interesting information by e-mail. If you are interested, you can register for our newsletter. All you have to do is fill in the mandatory information marked with an asterisk and confirm that you want to subscribe to genuletter by checking the box. Subsequently, you will receive an activation link to the specified e-mail address, which you can confirm with one click. Alternatively, you can copy the link and access it via the address bar of your web browser. In this way you complete the registration and agree to receive the newsletter. (Double opt-in procedure)
Your data will be processed exclusively for sending the newsletter. The processing is based on Art. 6 para. 1 p. 1 lit. a) GDPR. The following personal data is processed during registration and when receiving and using the newsletter:
-
E-mail address
-
Title
-
Last name
-
First name (optional)
-
Company (optional)
You can revoke your consent at any time and without giving reasons. For this purpose, you have two options to choose from:
-
You can unsubscribe from our newsletter by clicking on the "unsubscribe" link found in every newsletter.
-
You can send an informal e-mail with your unsubscribe request to datenschutz@genua.de.
-
You can visit our unsubscribe page to unsubscribe from the mailing list.
Upon receipt of your revocation, genua will no longer send you newsletters in the future and, if necessary, delete your data collected during registration.
We would like to send you news and other interesting information by e-mail. If you are interested, you can register for our newsletter. All you have to do is fill in the mandatory information marked with an asterisk and confirm that you want to subscribe to partnerannounce by checking the box. Subsequently, you will receive an activation link to the specified e-mail address, which you can confirm with one click. Alternatively, you can copy the link and access it via the address bar of your web browser. In this way you complete the registration and agree to receive the newsletter. (Double opt-in procedure)
Your data will be processed exclusively for sending the newsletter. The processing is based on Art. 6 para. 1 p. 1 lit. a) GDPR. The following personal data is processed during registration and when receiving and using the newsletter:
-
Title
-
First name (optional)
-
Last name
-
E-mail address
-
Company (optional)
You can revoke your consent at any time and without giving reasons. For this purpose, you have three options to choose from:
-
You can unsubscribe from our newsletter by clicking on the "unsubscribe" link found in every newsletter.
-
You can send an informal e-mail with your unsubscribe request to datenschutz@genua.de.
-
You can visit our unsubscribe page to unsubscribe from the mailing list.
Upon receipt of your revocation, genua will no longer send you newsletters in the future and, if necessary, delete your data collected during registration.
For the dispatch of the partner announcement we use the following service provider, which is our processor according to Art. 28 GDPR:
CleverReach GmbH & Co. KG
//CRASH Building
Schafjückenweg 2
26180 Rastede
Germany
The personal data collected when ordering goods or services will be used by genua to manage your customer account and to fulfill and process your order, and if applicable will only be passed on to third parties (e.g. to a transport company commissioned with shipping) for this purpose. In addition, this data will be further used within the scope of legal regulations. genua will inform you by phone, by e-mail or via post about interesting offers concerning the same or similar goods or services as well as a little gesture for special occasions. In addition, genua conducts customer customer feedback surveys from time to time to make the products even better for you. If you do not (or no longer) wish to receive such information or promotions, you can informally object to this at any time with effect for the future to genua (e.g. e-mail: datenschutz@genua.de). Such an objection will not incur any costs beyond the transmission costs according to the prime rates.
The processing of your data is based on our legitimate interest in being able to present similar goods and services to you as well as to strengthen our business relationship in various manners, Art. 6 para. 1 p. 1 lit. f) GDPR.
You also have the option of contacting genua by telephone. You may be asked to provide personal data that is required to process your request. In this context, genua regularly collects your name and the reason for the call. The legal basis for data processing is genua's legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. This results from the economic, idealistic and technical interest in answering your inquiry and communicating with you.
genua regularly uses the services of Bundesdruckerei GmbH for this purpose. This service provider acts as a processor for genua; a corresponding data processing agreement has been concluded in accordance with Art. 28 GDPR.
genua organizes webinars, during which the name and, if applicable, the profile picture and chat of the participants are transmitted to all other participants. genua works with the service provider Microsoft Corporation in this regard. genua has concluded a data processing agreement with Microsoft in accordance with Art. 28 GDPR.
To participate in a webinar, you can register on the webinar website (specific URL that provides information about the webinar, such as date, time, and content). When registering, the following information will be requested:
- First name
- Last name
- Email address
- Consent to Microsoft's terms and conditions
Additional information, such as address, industry, and position, may also be required for registration and will be requested on a case-by-case basis.
a) Processing of Data in the Context of Webinars
To participate in webinars, we need to process various types of data. The following personal data are therefore subject to processing for the purpose of conducting the webinar:
- User information: e.g., display name, online status (optional), profile picture (optional), email address
- Meeting metadata: e.g., date, time, duration, meeting ID, participation status, and location
The camera and microphone functions are generally deactivated by genua. Exceptions are possible, but in such cases, the participant is responsible for using these functions and making the data available.
A recording of the webinar will generally be made.
During the webinar, you have the option to use the chat function. In this case, the text inputs, links, or content shared, as well as social interactions (such as emojis, pictograms, like buttons for comments, or sending GIFs), will be processed to display them to the participants. These keyboard inputs (hereinafter referred to as "chats") will be stored to send valuable information, such as URLs to helpful documents, to all participants by email after the event. The chat logs will be deleted after sending the information.
b) Legal Basis for Data Processing
As a participant in our webinar, we process your data based on your consent to participate in the webinar in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR. Additionally, Art. 6 Para. 1 S. 1 lit. f) GDPR serves as the legal basis for data processing during the webinar with regard to meeting metadata.
You can revoke your consent at any time without giving reasons by canceling your participation. Please note that the recording cannot be adjusted retrospectively.
c) Storage of Data
A recording of the webinar will generally be made. genua will transparently communicate this in advance and obtain the consent of all participants if necessary.
The recordings will be made available to all participants for 60 days via a link.
No automated decision-making within the meaning of Art. 22 GDPR is used.
d) Recipients of Data
Personal data processed in connection with participation in webinars will generally only be transmitted to our processor, Microsoft, i.e., the service provider that supports us in conducting the webinars.
Data will only be transmitted to third parties if genua is legally obligated to do so (e.g., by court order) or if the data subjects have explicitly consented to the transmission of their data.
Within genua, only the organizers and co-organizers have the authorization to view the list of participants.
During the webinar, other participants have access to the following data of the other participants:
- Display name (usually first and last name)
- Chat inputs (optional, if the participant enters something)
- Profile picture (optional, if the participant has set a profile picture)
The recording contains your display name and, if applicable, your profile picture. Chat contributions are not recorded. You can also deactivate your camera and microphone, if activated by genua, before the start of the recording in the registration window. The recording can be published on the genua partner portal, genua online campus, the genua website, or the genua YouTube channel. The storage duration is based on the topicality of the topic.
e) Data Processing outside the European Union
To the extent possible, genua has restricted storage locations to data centers in Germany or within the European Union. Therefore, data processing generally does not take place outside the European Union (EU).
Since we use the Microsoft Teams video conferencing software, please note the following information:
- When accessing the Microsoft Teams website, Microsoft is responsible for data processing. Accessing this website (https://teams.microsoft.com/) is only required for downloading the necessary software if use is not possible directly and without downloading via an internet browser.
- Microsoft provides an extensive video tutorial at the following link: https://cloudblogs.microsoft.com/industry-blog/de-de/uncategorized/2020/05/14/microsoft-teams-video-tutorials-nutzliche-tipps-und-tricks/
- We recommend that you familiarize yourself with the software before an upcoming webinar to minimize technical delays during the sessions.
- Microsoft Teams is a service provided by Microsoft Corporation:
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA
(https://teams.microsoft.com/)
You can find more information on the use of Microsoft Teams at https://www.genua.de/fileadmin/rechtliches/Datenschutz_InformatonspflichtStandFebruar2023_EN.pdf
genua conducts compliance checks on its suppliers and customers.
a) Purpose and Legal Basis of Data Processing
For the purpose of maintaining and ensuring compliance with all norms, laws, and self-imposed regulations, as well as industry standards (including the prevention of money laundering and terrorist financing), when collaborating with business partners, genua processes personal data provided through this questionnaire, such as email address, address, and business premises, as well as personal data researched from publicly available sources (e.g., commercial register, internet, etc.).
The processing serves to safeguard the legitimate interest in avoiding serious breaches or potential breaches of applicable law or other serious matters, in accordance with Article 6(1)(f) of the GDPR.
In certain cases, we process your data to safeguard a legitimate interest of ours or of third parties, based on the comparison of data with name lists from EU anti-terror lists and country-specific embargo regulations. As a company, we are obligated under EU law to participate in the fight against terrorism and comply with embargoes. Individuals and organizations listed on these name lists are not allowed to (directly or indirectly) receive funds (prohibition on provision). For this reason, we are obliged to compare names with the name lists available to us.
There is no milder, equally effective means to achieve the legitimate interests. There are no overriding interests or fundamental rights and freedoms of the affected persons that contradict this.
b) Recipients of Personal Data
The data is used within genua for compliance checks and is processed exclusively by the personnel involved in the compliance audit.
We also transfer your personal data to external parties who are commissioned by us as external service providers to conduct sanctions list checks. It is also necessary to enter your data into company databases as part of the company compliance research. If required by law, we have concluded a data processing agreement with the external parties in accordance with Article 28 of the GDPR. Transfer to third parties for advertising purposes is not permitted and does not occur.
c) Obligation to Provide Data
The basic provision of personal data is required for the conclusion of a contract with genua. Failure to provide the data would result in the contract not being concluded.
d) Storage Period
Personal data is stored only as long as necessary to fulfill the purposes mentioned above or as required by the statutory retention periods. If there are statutory retention periods, we are obliged to store the data until the end of these periods. In general, we store your data as long as a business relationship exists with you. After the statutory retention periods have expired, we delete the data."
Personal data may be transferred to the following categories of recipients:
- public authorities, as required by statutory regulations;
- associated companies, as required by the company to meet contractual obligations or ensure the provision of services;
- information processors as laid out in Art. 28 of the GDPR for the purpose of order processing;
- third parties as a result of functional transfer.
In general, data is not transferred to countries outside the EU or the European Economic Area ("third countries"). Data transfer to third countries can only occur as part of the administration, development or operation of IT systems. Transfer only occurs in the following situations:
- when such a transfer is generally permitted because a legal requirement has been met or because the user has given their consent for the transfer and
- there is a particular case for transferring the data to a third country.
Personal data is only retained for as long as is required for the purposes described in the current document or as required by statutory regulations. genua is required to retain data until the end of any legally required retention periods. genua deletes such data after legal retention periods – which are primarily determined by commercial and tax regulations – have expired. Particularly relevant here are sections 147 of the German tax code and 257 of the German commercial code.
genua retains personal data for marketing measures until the user revokes their consent for a particular use of this data, for its use in general or until a measure is no longer legal. Any other user data is only retained as long as it is required for the purpose at hand (for example, until a contract has been fulfilled or settled) and delete this data once this purpose has been fulfilled.
Users have the right to the following at all times:
- access to information as laid out in Art. 15 of the GDPR;
- correction of information as laid out in Art. 16 of the GDPR;
- deletion of information as laid out in Art. 17 of the GDPR;
- restriction of processing as laid out in Art. 18 of the GDPR;
- transfer of information as laid out in Art. 20 of the GDPR;
- appeal as laid out in Art. 21 of the GDPR.
Users wishing to exercise any of the above rights should send an e-mail to datenschutz@genua.de or send a letter to the postal address listed under #1 above. In addition, users also have the right to complain to an ombudsman or other regulatory authority as laid out in Art. 77 para. 1 of the GDPR. Further information can be obtained from the relevant ombudsman or other regulatory authority.