Below you will find information regarding the processing of your personal data in connection with your use of the website available at: www.genus.one (the “Website”), as well as the processing of your personal data in some other cases. 

WHO IS THE CONTROLLER OF YOUR DATA?

The controller, i.e. the entity which determines the purposes and means of processing your personal data, is GenusOne Oy Ltd with its registered office in Helsinki, Urho Kekkosen katu 4-6 E 00100 Helsinki, Finland (“GenusOne”).

Your personal data is processed by GenusOne in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).

HOW CAN YOU CONTACT THE CONTROLLER?

You can contact GenusOne:

• in writing to the company’s address: Urho Kekkosen katu 4-6 E 00100 Helsinki, Finland,
• electronically by writing to the e-mail address: office@genus.one
• or by telephone by calling +48 600 367 478.

FOR WHAT PURPOSES IS YOUR PERSONAL DATA PROCESSED?

Data processing in connection with e-mail, written or telephone contact or contact via contact form

When you contact GenusOne by e-mail, post, telephone or contact form on the Website, the company receives your personal data directly from you. GenusOne processes it in order to respond to your request, which is its legitimate interest under Article 6(1)(f) of the GDPR.

You provide your personal data voluntarily in this case, but without it GenusOne will not be able to respond to your enquiry.

GenusOne will process your personal data provided to the company in connection with your enquiry for the period necessary to respond or until you lodge an effective objection to the processing of your personal data. 

Processing of personal data of Contractors or Clients 

If GenusOne enters into a contract with you, the company receives personal data directly from you and processes it for the following purposes:

• entering into and performing a contract with you – on the basis of Article 6(1)(b) of the GDPR;
• ongoing contact regarding the performance of the contract, handling of any complaints, fraud prevention, maintaining business relationships, which is the company’s legitimate interest under Article 6(1)(f) of the GDPR;
• fulfilling obligations resulting from the provisions of law including tax settlements and keeping accounting records – on the basis of Article 6(1)(c) of the GDPR in connection with the provisions of tax law and other relevant acts of law; 
• to establish, assert and defend claims, which is the company’s legitimate interest pursuant to Article 6(1)(f) of the GDPR.

The provision of personal data to the extent necessary for GenusOne to fulfil its legal obligations is mandatory and results from the relevant legal provisions. The provision of personal data for the conclusion of a contract is voluntary, but necessary for the conclusion of this contract and its performance. 

Personal data is stored for the period of execution of the contract and then until the legal obligations to store data ceases or until the expiry of the period of limitation of claims.

Processing of personal data of Representatives (persons representing Clients or Contractors)

If the company’s Client or Contractor (whether an individual, company or other type of entity) is represented by you or you have been appointed by them for ongoing contact in connection with the conclusion and performance of a contract, GenusOne receives your personal data from the Client or Contractor or directly from you.

GenusOne then processes your identification data (e.g. first names, surnames, name of the entity you represent or with which you cooperate, job title/role title, scope of matters you deal with), data concerning the power of attorney granted (e.g. date of power of attorney, type and scope of power of attorney granted), contact data (e.g. business telephone number, email).

GenusOne processes your personal data for the following purposes:

• entering into and performing the contract between the Contractor or Client and GenusOne, in particular to verify your authority to enter into the contract on behalf of the Contractor or Client and to contact you as the contact person in connection with the performance of the contract – on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest pursued by both GenusOne and its Contractor or Client, which is to enable us to perform the contract efficiently on an ongoing basis and to enable us to verify your authority to enter into the contract on behalf of the Contractor or Client;
• fulfilling obligations resulting from the provisions of law including tax settlements and keeping accounting records – on the basis of Article 6(1)(c) of the GDPR in connection with the provisions of tax law and other relevant acts of law;
• establishing, asserting or defending claims between a Contractor or Client and GenusOne, which is the company’s legitimate interest pursuant to Article 6(1)(f) of the GDPR;
• establishing or maintaining a business relationship with a Contractor or Customer through you, which is the company’s legitimate interest under Article 6(1)(f) of the GDPR.

If you provide company with your personal data directly, this is voluntary, while necessary for the conclusion and performance of the contract and the establishment of the business relationship. Failure to provide personal data will result in the impossibility of concluding and performing the aforementioned contract as well as maintaining the business relationship. 

Your personal data is stored for the period of execution of the contract and then until the legal obligations to store data ceases or until the expiry of the period of limitation of claims.

Processing of personal data in social media

GenusOne maintains its profile on LinkedIn – https://www.linkedin.com/company/genus-one/

In connection with the operation of the above profile, GenusOne acquires your personal data in connection with your subscription to GenusOne page (clicking the “Watch” icon etc.), your publication of a comment under any of the posts posted on the GenusOne LinkedIn page, as well as in connection with sending the company a message via LinkedIn. GenusOne processes your personal data in particular as follows:

• your user ID / your identification data and other information to the extent published by you on your own profile on LinkedIn;
• your profile picture;
• the content of the comments and the content of the conversation you have with the company through LinkedIn;
• statistical data on visits to GenusOne LinkedIn profile.

GenusOne processes your personal data for the following purposes:

• to maintain a profile on LinkedIn, under the terms and conditions set by its operator, and to inform you through it about activities, services, events that the company organises, to share knowledge, as well as to build and maintain community and to communicate through the available functionalities of LinkedIn (comments, messages, including event sign-ups), which constitutes the company’s legitimate interest in accordance with Article 6(1)(f) of the GDPR;
• to conduct analyses of the functioning, popularity, use of LinkedIn profile, which is the company’s legitimate interest in accordance with Article 6(1)(f) of the GDPR. 

The provision of personal data is voluntary.

Information that is contained in private messages sent to GenusOne via LinkedIn will be stored for the time it takes to respond to the message or until you delete your user profile on LinkedIn, whichever comes first.

In the case of information held by GenusOne as part of comments shared by you, it will be available on GenusOne profile until you delete it.

Personal data collected by LinkedIn, i.e. history of posts, history of activity and sent messages, are subject to storage according to the LinkedIn terms and conditions.

Statistical data regarding visitors to GenusOne LinkedIn profile will be processed for the time that the data is available on LinkedIn in accordance with its terms and conditions.

Please note that apart from GenusOne, the controller of your personal data is the LinkedIn operator. Please also read the LinkedIn terms and conditions and privacy policy.

Processing of data in connection with sending requests concerning the exercise of rights under the GDPR

You have certain rights in relation to GenusOne processing of your personal data (see below in Privacy Policy), and you may address correspondence to the company regarding the exercise of these rights. In connection with such correspondence, GenusOne processes your identification data, contact data, and other data provided by you or any other person who sends a request on your behalf to exercise your rights under the GDPR. Where the application is not sent directly by you, but by a proxy or legal representative, GenusOne processes in addition data concerning that proxy or representative, i.e. their identification data, contact data and data concerning the type of empowerment.

GenusOne processes applicants’ personal data for the following purposes:

• contacting you regarding your request for the exercise of rights under the GDPR – on the basis of Article 6(1)(c) of the GDPR, as the processing of personal data is necessary for the fulfilment of the company’s legal obligation under Article 12(1)-(3) of the GDPR;
• archiving correspondence carried out on the handling of your request for the exercise of rights under the GDPR, for the purpose of proof and demonstrating that GenusOne has responded to your request in a timely manner, which is the company’s legitimate interest under Article 6(1)(f) of the GDPR.

The provision of personal data is necessary in order to fulfil the request made by you.

The personal data is processed for the duration of the correspondence and will then be archived for evidence purposes until the expiry of the period of limitation of claims.

RECIPIENTS OF PERSONAL DATA

Your personal data may be disclosed by GenusOne to other entities:

• its contractors, in particular entities providing accounting services, IT or hosting services, e-mail provider, with which GenusOne has concluded agreements on entrusting the processing of personal data;
• banks, couriers, post offices;
• entities authorised by law;
• if you publish content in connection with the GenusOne Linkedin profile, your personal data may also be visible to visitors to this profile.

AUTOMATED DECISION-MAKING

GenusOne does not make decisions about you based solely on automated processing, including profiling.

TRANSFER OF DATA OUTSIDE THE EEA

In connection with the maintenance of the LinkedIn profile, your personal data is processed through a social networking site whose servers may be located in the United States or another country outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, social network operator is required to apply appropriate safeguards, in particular EU Standard Contractual Clauses. In such case, you may request a copy of these relevant safeguards. You can find more detailed information in the LinkedIn privacy policy.

In connection with the use of the Google Analytics services by GenusOne, your personal data may be transferred to the USA on the basis of EU Standard Contractual Clauses.

YOUR RIGHTS

You have the following rights in relation to the company’s processing of your personal data:

• access to your personal data (Article 15 GDPR), including obtaining a copy of your data (Article 15(3) GDPR),
• to rectify (amend) or complete incomplete personal data (Article 16 GDPR),
• to request the erasure of personal data in cases provided for by law (Article 17 GDPR),
• to request the restriction of the processing of personal data (Art. 18 GDPR),
• to receive your data in a structured commonly used format and to have it transferred where the processing is based on your consent or contract by automated means (Article 20 GDPR),
• to object to the processing of your personal data where the processing is carried out for the company’s legitimate interest, on grounds related to your particular situation (Article 21 GDPR),
• to withdraw the consents granted at any time, without affecting the lawfulness of the processing that took place on the basis of the consents before their withdrawal. 

You can exercise the above rights by contacting GenusOne as indicated in section How can you contact the controller?

In addition, if you consider that the processing of your personal data violates the provisions of the  GDPR, you have the right to lodge a complaint to the competent supervisory authority.

COOKIES

Depending on your settings, in addition to technically necessary cookies, GenusOne may use cookies for statistical and analytical purposes. You can find more information about the use of cookies on the Website in the Terms of use.

CHANGES TO THE PRIVACY POLICY 

This Privacy Policy may be updated in the event of a change in legislation that affects the processing of your personal data, as well as if the GenusOne introduces changes in processing your personal data.

This Privacy Policy was introduced on 13.10.2022.