2. Processing of Personal Data

3. Categories of Data Recipients

Personal data may be transferred to the following categories of recipients:

• public authorities, as required by statutory regulations;
• associated companies, as required by the company to meet contractual obligations or ensure the provision of services;
• information processors as laid out in Art. 28 of the GDPR for the purpose of order processing;
• third parties as a result of functional transfer.

E) Contacting Us by Telephone

You also have the option of contacting genua by telephone. You may be asked to provide personal data that is required to process your request. In this context, genua regularly collects your name and the reason for the call. The legal basis for data processing is genua's legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. This results from the economic, idealistic and technical interest in answering your inquiry and communicating with you.

4. Transfer of Data to a Third Country

In general, data is not transferred to countries outside the EU or the European Economic Area ("third countries"). Data transfer to third countries can only occur as part of the administration, development or operation of IT systems. Transfer only occurs in the following situations:

• when such a transfer is generally permitted because a legal requirement has been met or because the user has given their consent for the transfer and
• there is a particular case for transferring the data to a third country.

5. Scoring

Personal data will not be used for automated by-case decisions, including profiling, as laid out in Art. 22, paras. 1 and 4 of the GDPR.

6. Security

E) Contacting Us by Telephone

You also have the option of contacting genua by telephone. You may be asked to provide personal data that is required to process your request. In this context, genua regularly collects your name and the reason for the call. The legal basis for data processing is genua's legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. This results from the economic, idealistic and technical interest in answering your inquiry and communicating with you.

7. Data Retention Period

Personal data is only retained for as long as is required for the purposes described in the current document or as required by statutory regulations. genua is required to retain data until the end of any legally required retention periods. genua deletes such data after legal retention periods – which are primarily determined by commercial and tax regulations – have expired. Particularly relevant here are sections 147 of the German tax code and 257 of the German commercial code.

genua retains personal data for marketing measures until the user revokes their consent for a particular use of this data, for its use in general or until a measure is no longer legal. Any other user data is only retained as long as it is required for the purpose at hand (for example, until a contract has been fulfilled or settled) and delete this data once this purpose has been fulfilled.

8. User Rights

Users have the right to the following at all times:

• access to information as laid out in Art. 15 of the GDPR;
• correction of information as laid out in Art. 16 of the GDPR;
• deletion of information as laid out in Art. 17 of the GDPR;
• restriction of processing as laid out in Art. 18 of the GDPR;
• transfer of information as laid out in Art. 20 of the GDPR;
• appeal as laid out in Art. 21 of the GDPR.

Users wishing to exercise any of the above rights should send an e-mail to datenschutz@genua.de or send a letter to the postal address listed under #1 above. In addition, users also have the right to complain to an ombudsman or other regulatory authority as laid out in Art. 77 (1) of the GDPR. Further information can be obtained from the relevant ombudsman or other regulatory authority.

8. User Rights

Users have the right to the following at all times:

• access to information as laid out in Art. 15 of the GDPR;
• correction of information as laid out in Art. 16 of the GDPR;
• deletion of information as laid out in Art. 17 of the GDPR;
• restriction of processing as laid out in Art. 18 of the GDPR;
• transfer of information as laid out in Art. 20 of the GDPR;
• appeal as laid out in Art. 21 of the GDPR.

Users wishing to exercise any of the above rights should send an e-mail to datenschutz@genua.de or send a letter to the postal address listed under #1 above. In addition, users also have the right to complain to an ombudsman or other regulatory authority as laid out in Art. 77 (1) of the GDPR. Further information can be obtained from the relevant ombudsman or other regulatory authority.

8. User Rights

Users have the right to the following at all times:

• access to information as laid out in Art. 15 of the GDPR;
• correction of information as laid out in Art. 16 of the GDPR;
• deletion of information as laid out in Art. 17 of the GDPR;
• restriction of processing as laid out in Art. 18 of the GDPR;
• transfer of information as laid out in Art. 20 of the GDPR;
• appeal as laid out in Art. 21 of the GDPR.

Users wishing to exercise any of the above rights should send an e-mail to datenschutz@genua.de or send a letter to the postal address listed under #1 above. In addition, users also have the right to complain to an ombudsman or other regulatory authority as laid out in Art. 77 (1) of the GDPR. Further information can be obtained from the relevant ombudsman or other regulatory authority.

8. User Rights

Users have the right to the following at all times:

• access to information as laid out in Art. 15 of the GDPR;
• correction of information as laid out in Art. 16 of the GDPR;
• deletion of information as laid out in Art. 17 of the GDPR;
• restriction of processing as laid out in Art. 18 of the GDPR;
• transfer of information as laid out in Art. 20 of the GDPR;
• appeal as laid out in Art. 21 of the GDPR.

Users wishing to exercise any of the above rights should send an e-mail to datenschutz@genua.de or send a letter to the postal address listed under #1 above. In addition, users also have the right to complain to an ombudsman or other regulatory authority as laid out in Art. 77 (1) of the GDPR. Further information can be obtained from the relevant ombudsman or other regulatory authority.