Data protection

Notice: Our privacy policy is currently only available in German. The translation is in progress.

Introduction

Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on the handling of your data that is processed through the use of our website. Your data is processed in accordance with the statutory data protection regulations.

Our website may contain links to websites of other providers that are not covered by this data protection information. If the collection, processing or use of personal data is associated with the use of the websites of other providers, please refer to the data protection notices of the respective providers.

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection laws. Current status is November 2024.

The data protection guidelines apply to all our pages:

• www.geniusbytes.com
• tic.geniusbytes.com
• jobs.geniusbytes.com
• www.geniusbytes-partner.com

Definitions

Our data protection information should be simple and understandable for everyone. The term „personal data“ is defined in the General Data Protection Regulation (hereinafter „GDPR“). This defines "personal data" as any information relating to an identified or identifiable person. This includes data such as your IP address or information about how you use this website.

As a rule, the official terms of the GDPR are used in this data protection notice. The official terms are explained in Art. 4 GDPR.

Responsible person, data protection officer

The controller pursuant to Art. 4 No. 7 GDPR is :

Genius Bytes Software Solutions GmbH
Merianstr. 30
44801 Bochum
E-mail: info@geniusbytes.com
Phone: +49 234 53034292

You can reach the data protection officer as follows

Proliance GmbH
Dominik Fünkner
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de

When contacting the data protection officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information, such as a copy of your ID, with your enquiry.

Data processing during operation of the website

Webhosting

This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.

Usage data and server log files

When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status
• Web browser and operating system used
• (Complete) IP address of the requesting computer
• Amount of data transferred

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The log files are used to analyse system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1, sentence 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After 7 days at the latest, the data is anonymised by shortening the IP address at domain level so that it is no longer possible to establish a reference to the individual user.

The data may also be processed in anonymised form for statistical purposes. At no time will this data be stored together with other personal data of the user, compared with other databases or passed on to third parties.

Data processing in connection with cookies and similar technologies

Accessing and storing information in terminal equipment

By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TDDDG. In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TDDDG with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

Cookies and similar technologies

General information

We use services on this website that use cookies and similar technologies to store data in the browser of your end device and to read previously stored data. Cookies, the local storage memory of your browser, pixels and so-called tags can be used for this purpose.

Cookies are small text files that can be stored and read on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session for a certain period of time.

In addition to cookies, we may use the local storage memory of your browser to store and read data. We may also integrate pixels into our websites. Pixels are small individualised image files that are loaded when the page is loaded and can be used to track user activity. Finally, we may use tags (markers) on our websites. Tags are small HTML or Java Script code fragments or markers that enable services for website analysis or user tracking to differentiate or identify users and track certain user activities.

Further information on the cookies and similar technologies we use can be found below in the descriptions of the categories of cookies and in our consent management platform, which is displayed to you when you visit our website. You can call up our „cookie banner“ again here and change your settings.

Please note that without the use of certain cookies and similar technologies, our websites may not be displayed correctly and some functions may no longer be technically available.

Category Necessary cookies

Services in this category may use cookies and similar technologies to store and read information on your device. We use these,

• to enable the website to be displayed and to provide its basic functions, in particular page navigation and access to secure areas,
• to enable the submission and withdrawal of consent,
• to protect our forms from unauthorised entries,
• to protect our website from cyber attacks and attempted fraud,
• Some of the cookies and similar technologies used only contain information on certain settings and are not personally identifiable.

The use of the services as well as corresponding cookies and similar technologies in this category is based on § 25 para. 2 no. 1, no. 2 TDDDG. Subsequent data processing is carried out on the basis of Art. 6 para. 1, sentence 1 lit. f GDPR.

Category User settings

Services in this category may use cookies and similar technologies to store and read information on your device. We use these,

• to make our website appealing to you,
• to enable the loading of content from third-party providers,
• to provide you with certain settings and other functions of the website.

The use of the services and corresponding cookies and similar technologies in this category is based on your consent in accordance with Section 25 (1) TDDDG. Subsequent data processing takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Category Analytical cookies

Services in this category may use cookies and similar technologies to store and read information on your device. We use these,

• to count and distinguish you as an individual website visitor and to create statistical analyses of your interactions and your use of our websites,
• to customise our websites and adapt them to the interactions of the users and
• to monitor the technical functionality of our website and to enable error correction.

For this purpose, we and the services regularly store individual pseudonymous identifiers (recognition features) consisting of numbers and letters in cookies on your end device when you visit our website and read them out again when you visit our website again.

The use of pseudonyms makes it possible to distinguish and recognise individual users. However, the natural person behind a pseudonym cannot usually be directly identified, especially not by name, without further additional data.

Other technologies can also be used regularly to read recognition features from your end device, such as in the case of browser or device fingerprinting, in which data from the properties of the browser you use (e.g. type and version of the browser) and its configuration (e.g. preferred language), from the properties of your end device (e.g. manufacturer and model of your mobile phone, operating system or the hardware you use (e.g. screen resolution) are used to recognise you as a different person. (e.g. preferred language), characteristics of your end device (e.g. manufacturer and model of your mobile phone, operating system) or the hardware you use (e.g. screen resolution) are used to recognise you as a different user under a pseudonym.

The use of the services and corresponding cookies and similar technologies in this category is based on your consent in accordance with Section 25 (1) TDDDG. Subsequent data processing takes place on the basis of your consent in accordance with Art. 6 para. 1, sentence 1 lit. a GDPR.

Category Marketing Cookies

Services in this category may use cookies and similar technologies to store and read information on your device. We use these,

• to count and distinguish you as an individual website visitor and to create statistical analyses of your interactions and your use of our websites,
• to track your interactions with adverts placed by us via third-party providers on other websites across different end devices and websites (so-called conversion tracking),
• to be able to track and analyse your interactions with our website and to subsequently make these the basis of targeted advertising campaigns in advertising networks aimed at you or a specific target group to which you belong (so-called retargeting and remarketing),

For this purpose, we and the services regularly store individual pseudonymous identifiers (recognition features) consisting of numbers and letters in cookies when you visit another website or when you visit our website on your end device and read them again when you visit this website or a new website.

Other technologies can also be used regularly to read recognition features from your end device, such as in the case of so-called browser or device fingerprinting, in which data from the properties of your browser used (e.g. type and version of the browser) and its configuration (e.g. preferred language) or from the properties of your end device (e.g. manufacturer and model of your mobile phone, operating system or hardware used by you (e.g. screen resolution) are used to recognise you as a different user. (e.g. preferred language) or characteristics of your end device (e.g. manufacturer and model of your mobile phone, operating system) or the hardware you use (e.g. screen resolution) are used to recognise you as a different user under a pseudonym.

If you identify yourself with your clear data such as name or e-mail address or enter your own user data on our websites or log in to social networks or online services of third-party providers who also provide us with corresponding services for tracking and advertising, pseudonymous recognition features can also be linked to your clear data or user data.

In this way, we or the providers of the services can create and analyse comprehensive pseudonymous or non-pseudonymous user profiles in order to subsequently use them for targeted advertising based on your interests.

The use of the services and corresponding cookies and similar technologies in this category is based on your consent in accordance with Section 25 (1) TDDDG. Subsequent data processing takes place on the basis of your consent in accordance with Art. 6 para. 1, sentence 1 lit. a GDPR.

Consent management via the Borlabs Cookie consent management platform

We use the consent management tool Borlabs Cookie on our websites, with the help of which we manage your consent to the use of cookies and similar technologies.

Description of data processing and purpose: We use the service to manage your consents to the use of cookies and similar technologies and to the subsequent data processing operations.

If you give your consent via our consent banner, the service processes the following data:

• the IP address of the connection you are using,
• the description of the web browser and operating system used,
• the language used by your browser and operating system,
• the address of the website on which you give your consent,
• the date and time of consent,
• the country from which you are making your enquiry,
• a pseudonym used to distinguish between different users,
• Your consent status with regard to the cookies and similar technologies used by us or with regard to the services used, which serves as proof of your consent.

This data is logged on the provider's servers. As part of the data processing, cookies are used to store your consent status in your end device, to read it out again when you visit the site again and to compare it.

In this way, we are able to check your consent status on all subsequent and future visits to our websites and to activate or deactivate cookies and other technologies in accordance with your decision to use them when you visit the site again.

The purpose and our legitimate interest are to use cookies and similar technologies on our websites in compliance with data protection regulations and to enable you to easily revoke your declarations of consent.

Legal basis for data processing: If we use cookies and similar technologies as part of the integration of the service or if data is stored on your end device or read from there by the service, this is done in accordance with Section 25 (2) No. 2 TDDDG. Subsequent data processing takes place on the basis of Art. 6 para. 1, sentence 1 lit. f GDPR.

Recipients: As part of the use of the platform, the data collected via our websites is transmitted to the following recipients: Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg.

Storage period: By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of 6 months. No further storage of the data processed by the service and made available to us in our own systems takes place.

Google Fonts

We incorporate web fonts on our websites using Google Fonts, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of data processing and purpose: Google Fonts enables us to use web fonts. For this purpose, the required Google Fonts are loaded from your web browser into your browser cache when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display.

Since Google Fonts is provided by Google and is reloaded from its servers when the page is accessed, the usage data technically required for accessing the page is also transmitted. In this respect, Google also receives your IP address, which is technically required to retrieve the content.

We use Google Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly.

Legal basis for data processing: The legal basis for the integration and use of the service is your consent, provided that you have given it via our consent management platform. The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 para. 1, sentence 1 lit. a GDPR.

The use is voluntary and can be freely revoked at any time with effect for the future.

Recipients: As part of the use of the service, the data collected via our websites is transmitted to the following recipients:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In principle, we have no influence on further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at: Google Privacy Policy.

Data processing in third countries: When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA. For data transfers to the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).

Storage period: By integrating the services on our websites, data is transmitted to the above-mentioned recipients and processed there for as long as is necessary to achieve the stated purposes.

Matomo

On this website, we use the web analysis service software Matomo (matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand („Matomo“).

Description of data processing and purpose: Data is collected and stored for the statistical analysis of user behaviour and for optimisation and marketing purposes. Pseudonymised user profiles can be created and evaluated from this data for the same purpose. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Among other things, cookies make it possible to recognise the Internet browser.

The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

The information generated by the cookie in the pseudonymised user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

If you do not agree to the storage and analysis of this data from your visit, you can revoke your consent to the storage and use at any time by clicking below. In this case, a so-called opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you.

You are not opted out. Uncheck this box to opt-out. You are currently opted out. Check this box to opt-in.
This opt out feature requires JavaScript.
The tracking opt-out feature requires cookies to be enabled.

Legal basis for data processing: The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 para. 1, sentence 1 lit. a GDPR.

Recipients: As part of the use of the services, the data collected via our websites is transmitted to the following recipients:
InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.

Data processing in third countries: When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in New Zealand. For data transfers to New Zealand, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR. (eur-lex.europa.eu).

Storage period: By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of 12 months. No further storage of the data processed by the service and made available to us in our own systems takes place.

Font Awesome

Our website uses Font Awesome for the standardised display of fonts and symbols. The provider is Fonticons Inc, 307 S Main St 202, Bentonville, AR 72712, USA.

Description of data processing and purpose: When you call up a page, your browser loads the required fonts into your browser cache in order to display texts, fonts and symbols correctly. For this purpose, the browser you are using must connect to Font Awesome's servers. As a result, Font Awesome becomes aware that this website has been accessed via your IP address.

Legal basis for data processing: The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 para. 1, sentence 1 lit. a GDPR.

Recipients: As part of the use of the service, the data collected via our websites is transmitted to the following recipients:

• Fonticons, Inc, 307 S Main St Ste 202, Bentonville, AR 72712, USA.

Data processing in third countries: When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA. For data transfers to the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR.

Fonticons Inc. is currently not certified according to the principles of the EU-U.S. Data Privacy Framework. If your data is transferred to third countries for which no adequacy decision exists or for which the company is not certified, there is a risk that local authorities may access your data for security and monitoring purposes without you being informed or having the right to appeal.

To ensure an adequate level of data protection when transferring your data to the third country, standard data protection clauses of the European Commission are concluded in accordance with Art. 46 para. 2 lit. c GDPR. They oblige the recipient of the data to process it in accordance with the European level of protection.

If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual or organisational measures are taken to secure the transfer of data. We also regularly review and assess whether these additional measures continue to guarantee an adequate level of data protection or whether further supplementary measures may need to be taken.

Further information about Font Awesome can be found in Font Awesome's privacy policy at: fontawesome.com.

Storage period: By integrating the services on our websites, data is transmitted to the above-mentioned recipients and processed there for as long as is necessary to achieve the stated purposes. No further storage of the data processed by the service and made available to us in our own systems takes place.

Vimeo

Videos from „Vimeo“ are integrated on this website. „Vimeo“ is operated by Vimeo.com Inc, 330 West 34th Street, 5th Floor, New York, New York 10001, USA.

Description of data processing and purpose: The Google Analytics tracking tool is automatically integrated into videos from „Vimeo“ that are embedded on our website. We have no influence on the tracking settings and the analysis results collected via this tool, nor can we view them. In addition, web beacons are set for website visitors via the embedding of „Vimeo videos“.

In order to prevent the setting of Google Analytics tracking cookies, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: GA Opt-Out Plugin.

Legal basis for data processing: The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 para. 1, sentence 1 lit. a GDPR.

Recipients: As part of the use of the services, the data collected via our websites is transmitted to the following recipients:
Vimeo.com Inc, 330 West 34th Street, 5th Floor, New York, New York 10001, USA.

Data processing in third countries: When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA. For data transfers to the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework.

Storage period: By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of up to 24 months. No further storage of the data processed by the service and made available to us in our own systems takes place.

Social media links

Social networks (Xing, X (formerly Twitter), LinkedIn) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded.

For information on the handling of your personal data when using these websites, please refer to the respective data protection provisions of the providers you use.

Handling applicant data

We offer you the opportunity to apply for a job with us (e.g. via the online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.

Description of data processing and purpose: If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship.

Legal basis for data processing: Section 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

Recipient: Genius Bytes Software Solutions GmbH

Storage period: If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed.

The retention serves in particular to provide evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.

B2B e-mail advertising

Existing customer acquisition

Description of data processing and purpose: We process your personal data (title, first name, surname, business e-mail address), which we receive in connection with the conclusion of a contract, for the purpose and in our legitimate interest of sending you or your company personalised direct advertising as an existing customer for similar products, goods and services that are related to the previous conclusion of the contract.

Legal basis for data processing: Art. 6 para. 1, sentence 1 lit. f GDPR. Since we comply with the provisions of the exemption regulation of Section 7 (3) UWG and only process personal data that is related to your business activities in order to achieve the purpose, there are no apparent overriding interests on your part that conflict with our interest in data processing, provided you have not yet objected to the processing.

You can object to data processing at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. To exercise your right to object, please use the unsubscribe link in our advertising emails or contact us using the contact details above.

Recipient: Genius Bytes Software Solutions GmbH

Data processing for advertising purposes

Consent to receive promotional emails and the newsletter, newsletter tracking: Description of data processing and purpose: We process your personal data (title, first name, surname, business e-mail address) for the purpose of addressing you or your company in a personalised manner by e-mail or via our e-mail newsletter for advertising purposes and to inform you about our products, goods, services and offers only if you have given us your express consent to do so separately.

If you give us your consent, you also authorise us to process data on whether you have received our marketing emails and whether you have opened them, the extent to which you have interacted with the content, in particular which links you have clicked on and the extent to which you have read or skimmed our emails (newsletter tracking).

Legal basis for data processing: Your consent in accordance with Art. 6 para. 1, sentence 1 lit. a GDPR. Your consent is voluntary and can be withdrawn at any time with effect for the future. The withdrawal of your consent does not affect the lawfulness of the data processing carried out up to that point. To exercise your right of cancellation, please use the unsubscribe link in our promotional emails or in the newsletter or contact us using the contact details above.

Recipient: Sendinblue GmbH (Brevo), Köpenicker Straße 126, 10179 Berlin

Data processing in third countries: As part of this data processing, your data is not processed in countries outside the European Union (EU) and the European Economic Area (EEA).

Storage period: We store your data as long as you have not objected to data processing. We will then delete your data unless data processing is still permitted on the basis of another legal basis or is mandatory for us (e.g. in the event of statutory retention obligations).

Further data processing

Genius Bytes - Technical Information Centre

As our business partner, you can register and log in to our Technical Information Centre (TIC) at tic.geniusbytes.com.

Description of data processing and purpose: In order to use additional functions of our website https://tic.geniusbytes.com/, we offer the option of registering by providing personal data. We use the double opt-in procedure. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties.

The mandatory information requested during registration is labelled accordingly and must be provided in full. Otherwise we will reject the registration. The following data is collected as part of the registration process:

• First name/last name
• E-mail address
• password
• Freely selectable user name
• Partner property
• Seller status

At the time of registration, the IP address and the date and time of registration are also stored. As part of the registration process, the user's consent to the processing of this data is obtained. Registration is required for the provision of certain content and services on our website.

We use the data entered for this purpose only for the purpose of using the respective offer or service or for providing the services you have registered to use. In the event of important changes to our offers, services or benefits, for example regarding the scope of the offer or in the event of technically necessary changes, we will use the e-mail address provided during registration to inform you of this.

Legal basis for data processing: Art. 6 para. 1, sentence 1 lit. a GDPR. Insofar as the registration serves to conclude or execute a contract, Art. 6 para. 1, sentence 1 lit. b GDPR constitutes an additional legal basis. You can withdraw your consent at any time. The legality of the data processing that has already taken place remains unaffected by the cancellation.

Recipient: Genius Bytes Software Solutions GmbH

Storage period: The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is the case if the registration on our website is cancelled or amended. You have the option of cancelling your registration at any time. You can have the data stored about you amended at any time. Statutory retention periods remain unaffected.

We only transfer personal data to third parties if this is necessary in the context of contract processing. Any further transmission of the data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

Documentation of compliance with data protection

Description of data processing and purpose: If you provide us with a declaration of consent, we will process your personal data about the circumstances and time of submission (signature, e-mail address, telephone or fax number or IP address, if applicable) in order to be able to prove that you have consented to the data processing in question as part of our accountability obligation under Art. 5 para. 2 GDPR.

If you exercise your data subject rights under the GDPR against us, we will also process your personal data in order to be able to prove that we have complied with the GDPR when processing your enquiry as part of our accountability obligations pursuant to Art. 5 (2) GDPR.

Legal basis for data processing: The processing is carried out on the basis of Art. 6 para. 1, sentence 1 lit. c GDPR or Art. 6 para. 1, sentence 1 lit. f GDPR. Our legitimate interest lies in being able to document compliance with the requirements of the GDPR as part of our accountability.

Recipients: In addition, we may forward your personal data to our external data protection officer in connection with your enquiry, who supports us in complying with the requirements of the GDPR.

Storage period: We store your data for as long as is necessary to fulfil the aforementioned purpose. We regularly store data relating to a given consent until the end of 3 years from the end of the year in which we last made use of this consent. Data that we process in connection with the implementation of data subject rights is regularly stored for a period of 3 years from the end of the year in which you exercised your data subject right. We will then delete your data unless data processing is also permitted in other systems or on the basis of another legal basis or is mandatory for us.

Exercise or defence of legal claims

Description of data processing and purpose: We also process your data in individual cases for the purpose and in the interest of asserting legal claims, for example to enforce our claims due to unpaid invoices, insofar as your data is relevant to a legal dispute.

We also process your data in individual cases for the purpose and in the interest of defending against legal claims asserted against us, for example when asserting claims for material defects, if your data is relevant to a legal dispute.

Legal basis for data processing: Art. 6 para. 1, sentence 1 lit. f GDPR.

Recipients: If necessary, your data will be transmitted to tax consultants, auditors, financial or investigative authorities, lawyers, experts or courts to the extent required.

Storage period: We store your data in individual cases to the extent necessary for as long as this is required to achieve the aforementioned purpose. We will then delete your data unless data processing is also permitted in other systems or on another legal basis.

Fulfilment of other legal obligations

Description of data processing and purpose: We process personal data insofar as this is necessary for the fulfilment of a legal obligation. The scope of the data to be processed results from the legal obligation that we have to fulfil.

Legal basis for data processing: In these cases, Art. 6 para. 1, sentence 1 lit. c GDPR in conjunction with the respective legal standard that imposes such an obligation on us.

These may be standards from the German Fiscal Code (AO), e.g. Section 147 AO, the German Commercial Code (HGB), e.g. Section 257 HGB, or the German Code of Criminal Procedure (StPO).

Recipients: If necessary, your data will be transmitted to tax consultants, auditors, financial or investigative authorities, lawyers, experts or courts.

Storage period: We store your data to the extent necessary for as long as this is required to fulfil the aforementioned purpose. We will then delete your data unless data processing is also permitted in other systems or on another legal basis.

Enquiry by e-mail, telephone or contact form

Description of data processing and purpose: If you contact us by e-mail or telephone, your enquiry including all personal data resulting from it (e.g. name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

Legal basis for data processing: This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), provided that this has been requested; consent can be revoked at any time.

Recipient:
Genius Bytes Software Solutions GmbH
ecos office centre GmbH & Co. KG, Alfred-Herrhausen-Allee 3-5, 65760 Eschborn

Storage period: The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Your rights

Below you will find information on the data subject rights that the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

• The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. ...
• The right to demand the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR.
• The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, ...
• The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, ...
• The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
• The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. ...
• The right to withdraw consent granted pursuant to Art. 7 (3) GDPR: You have the right to withdraw consent to the processing of data once granted at any time with effect for the future. ...

Right to object: If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1, sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation.

Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an e-mail to info@geniusbytes.com.

Status: November 2024