The protection and security of your (hereinafter "user") personal data within the meaning of Art. 4 No. 1 (hereinafter "PD") of the General Data Protection Regulation (hereinafter "GDPR") are important to us. Accordingly, we comply with the statutory provisions, in order to provide the PD of each user with appropriate protection. Hereinafter, we would like to inform you about the scope and pur-pose of the processing of PD:
Re:Genesis London Limited t/as Genesis Mannequins (hereinafter "Genesis") processes PD exclusively within the scope of the GDPR and within the regulations referred to under Art. 95 GDPR in conjunction with Sections 11-15a of the Telemedia Act ("TMG").
This privacy policy (hereinafter "PP") provides the information in accordance with Art. 13 GDPR for the general use of the www.genesis-display.com website.
- Contact details of the controller (Art. 13 Subsection 1 Letter a) GDPR):
Genesis Mannequins | 15/16 Hickman Avenue | Highams Park, London | E4 9JG, UK, is responsible for the operation of the website and consequently for the handling of PD. - Contact details of the Data Protection Representative (Art. 13 Subsection 1 Letter a) GDPR):
The responsible Data Protection Representative for Genesis is
Mr Welsch
datadim GmbH
E-mail: data.protection(at)genesis-display.com
- Type of personal data
- Accessing the website
Each time the website is accessed and with a download of documents in the freely accessible area of the website, the following logfiles of the respective user are recorded automatically:
- (1) Information about the browser type and the version used
- (2) The user's operating system
- (3) The address of the previously visited website
- (4) The user's IP address
- (5) Date and time of the access
- (6) Error codes
- Making contact by e-mail
If the user takes the opportunity to make contact with Genesis by e-mail, the e-mail address, including all of the technical data associated with the e-mail, as well as the message content, are stored. In particular, the e-mail address can be PD within the meaning of Art. 4 No. 1 GDPR, if personalised, as well as the mes-sage content or parts thereof. - Use of the contact form
Genesis processes the data provided by the user through the contact form:
- Company,
- Salutation,
- Surname,
- E-mail address,
- Town,
- Country,
- Message content
The data to be provided here are partly those of Art. 4 No. 1 GDPR. - Catalogue order
If the user orders catalogues offered by Genesis, it processes the data provided by the user through the order form:
- Company,
- Gender,
- Surname,
- First name,
- E-mail address,
- Telephone number,
- Street and telephone number,
- Town,
- Country.
The data to be provided here are partly those of Art. 4 No. 1 GDPR.
- Submission of application documents
Application documents can also be submitted by e-mail to info@genesis-display.com. The data processed within this context are PD within the meaning of Art. 4 No. 1 GDPR. - Newsletter
The opportunity exists of subscribing to a free newsletter. The e-mail provided by the user is processed during the course of this.
- Purpose of collection and storage of PD (Art. 13 Subsection 1 Letter c) GDPR)
- Accessing the website
The log files are processed in order to ensure the functionality of the website. Furthermore, the data have the purpose of optimising the website and guaranteeing the security of information technology systems. No evaluation of the data takes place for marketing purposes. - Making contact
The data provided by the user within the scope of the contact opportunities are exclusively processed for the purpose of handling the user's concern. - Catalogue order
The data provided by the user within the scope of the ordering procedure are processed within the scope of contract initiation and for sending the requested catalogue(s). - Application documents
The processing of the data occurs for determining the qualification and suitability of the applicant for the position to be filled at Genesis. - Newsletter
The processing of the e-mail address is for sending the user the requested news-letter.
- Recipients/third parties/third country transmission (Art. 13 Subsection 1 Letter e) and f) GDPR)
In addition to Genesis, recipients of the data may be third parties, who process the data on behalf of Genesis, or have access to the data within the scope of the service for Genesis (e.g. IT service providers and mail order companies). In addition, inquiries from abroad will be forwarded to the Genesis partner in charge of that specific inquiry/country. If the GDPR applies, Art 6 Subsection 1 Letter b) GDPR provides the legal basis.
Sending of the user data to third parties (Art. 4 No. 10 GDPR) does not occur un-less the user expressly consents or it is necessary for the assertion, exercising or defence of legal claims and no reason exists for assuming that the user has an overriding legitimate interest in the non-disclosure of his data, or a legal obliga-tion exists for disclosure in accordance with Art. 6 Subsection 1 Letter c) GDPR.
All data are stored on servers/computers within the European Union. Sending to a third country does not occur and is also not intended.
Other sending of PD, for example to government institutions and authorities, only occurs within the scope of legal regulations.
- Cookies and analysis tools
- Cookies
Genesis uses so-called "cookies". Cookies are small text files which store settings of websites within the scope of website use, e.g. in the user's web browser. The purpose of cookies is to make the website easier to use. The cookies used by Genesis are:
- Session ID cookies
- Filter cookies
- Flag cookies
- Cookies for cookie information
Session ID cookies, filter cookies and flag cookies are only stored in the user's web browser for the current session and are deleted automatically when the browser is closed. The cookie for the cookie information has a lifetime of one year.
Every user is free to prevent the installation of such cookies with an appropriate browser setting. However, in this case, it may occur that not all functions of the website can be fully used. - Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter called “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA aims to check whether data on our website (e.g. in the contact form) are entered by a human or by an automated program. To do so, reCAPTCHA analyzes the behaviour of the website user in relation to different features. This analysis starts automatically as soon as the website user visits the website. reCAPTCHA analyzes different information for this analysis (e.g. IP address, the website user’s dwell time on the website and the user's mouse movements). The data recorded during the analysis are forwarded to Google.
The reCAPTCHA analyses are running entirely in the background. Website users are not notified that an analysis is taking place.
The data are processed based on Art. 6 Para. 1 lit. f GDPR. Website operators have a legitimate interest in protecting their web offers against abusive automated spying and against SPAM.
For more information about Google reCAPTCHA and Google's privacy statement, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
Caution: If this cookie is deleted, the consequence of this is that the opt-out cookie is also deleted and may need to be reactivated
Social media links
The references on the www.genesis-display.com website to the web-sites/platforms of:
Facebook
Twitter
LinkedIn
Instagram
Pinterest
are exclusively links, not plugins. Genesis does not use plugins of social networks or similar. By activating the links, the user is led to the website of the respective separate provider. The relevant privacy policies of the respective websites apply to these.
- Furthermore, plugins of the YouTube website, operated by Google, are used. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). If the user clicks on our embedded video, a link is created to the YouTube servers. The YouTube server is notified which of our web pages he has visited.
If the user is logged into his YouTube account, this enables YouTube to allocate the surfing behaviour of the user directly to his personal profile. This can be pre-vented by the user by logging out of his YouTube account before accessing the website.
Additional information about handling user data can be found in the YouTube privacy policy under: https://www.google.de/intl/de/policies/privacy.
- Legal basis for data processing (Art. 13 Subsection 1 Letter c) GDPR)
- Accessing the website
The legal basis for the processing of the data using cookies, analysis tools and social media links and the log files is Art. 6 Subsection 1 Letter f) GDPR. - Making contact by e-mail
The legal basis for the processing of data, which are sent during the course of sending an e-mail, is Art. 6 Subsection 1 Letter f) GDPR, if the sender is not yet a customer or is not already otherwise in a relationship with us. If a contractual connection already exists or if this is to be directly instigated at the sender's initiative, the legal basis is Art. 6 Subsection 1 Letter b) GDPR. - Use of the contact form
The legal basis for the processing of the data provided is Art. 6 Subsection 1 Letter a) GDPR. Prior to sending the data entered in the form, you give your consent to sending your data and processing of the same for the purpose of processing the enquiry. - Catalogue order
If a contractual connection already exists or if this is to be directly instigated by sending the catalogue(s), the legal basis is Art. 6 Subsection 1 Letter b) GDPR. - Submission of application documents
The legal basis for processing, particularly temporary storage of the data provided in the application documents, is Section 26 GDPR (new). - Newsletter
The legal basis for processing the data after the user subscribes to the newsletter is the existence of consent by the user Art. 6 Subsection 1 Letter a) GDPR
- Duration of storage (Art. 13 Subsection 2 Letter a) GDPR)
The data are stored until they are no longer required to achieve the purpose of their collection or until a granted consent is revoked, each subject to the restrictions of Art. 17 Subsection 3 GDPR.
This is the case as follows:
- Logfiles: are deleted automatically every 14 days
- Website visit/web analysis: deleted after 6 months
- Download of catalogues: 1 year from completion of the download, unless it involves a customer, in which case it is 10 years.
- Order for paper catalogues: 1 year after delivery of the catalogue, except for customers, here the deadline is 10 years.
- Sending of contact form / e-mail: The data are deleted one year after re-plying to the enquiry, provided that additional communication has not taken place on the same topic prior to this deadline expiring or the data continue to be required on the basis of a contractual relationship (for the purpose of contract processing/execution) or if they must be retained on the basis of statutory retention duties in accordance with the statutory time limit.
- Application documents: The data are deleted 6 months after issuing the rejection. The documents of those applicants who are hired by Genesis will be transferred to a personnel file.
- Newsletter: the data stored for newsletters will be erased when the subscriber revokes his consent
- Cookies/analysis tools, see above
- Rights of the user (Art. 13 Subsection 2 Letter b) - e), Art. 7 Subsection 3 GDPR)
If the legal preconditions exist, the user has the right at any time to information about PD which we have stored about him, Art. 15 GDPR, as well as the right to correction, Art. 16 GDPR, restriction of processing, Art. 18 GDPR, selection of his data, Art. 17 GDPR.
If the user has asserted a right to correction, deletion or restriction of processing vis-à-vis Genesis, Genesis will notify all possible recipients, to whom the respective PD were disclosed, about this correction or deletion of the data or restriction of processing, unless this proves to be impossible or is associated with unreasonable time and effort.
The user also has the right to revoke consent which has been granted as a one-off (Art. 7, Art. 6 Subsection 1 Letter a) GDPR), Art. 7 Subsection 3 GDPR. The proper revocation of the consent shall not affect the lawfulness of the data collection which has occurred until that time.
Furthermore, the user has the right to file an objection at any time against the processing of the PD relating to him, which occurs on the basis of Art. 6 Subsection 1 Letter e) or f) GDPR, for reasons which arise from the specific situation, Art. 21 GDPR.
Additionally, the user has the right to receive his PD which he has provided to Genesis in a structured, commonly-used and machine-readable format (right of data transferability, Art. 20 GDPR), if the statutory preconditions exist.
The user shall contact the offices referred to under Clause 1 or 2 in order to exercise these rights.
Ceteris paribus, the user has a right to make a complaint to a supervisory authority, if the statutory preconditions exist, Art. 77 GDPR.
