Privacy Policy

The Genelec websites (www.genelec.com, www.genelec.fi, www.genelec.se, www.genelec.dk, support.genelec.com, community.genelec.com) and all their subpages and campaign pages are operated by or on behalf of Genelec Oy. Genelec Oy comply with the laws and regulations regarding personal data protection and we place great importance on protecting your privacy. This Privacy Policy prescribes the type of information that we collect, and how we use and manage personal information.

Genelec always aims to operate in a way that all personal data will be:

  1. processed lawfully, fairly and in a transparent manner in relation to individuals.
  2. collected for specified, explicit and legitimate purposes and not processed beyond those.
  3. adequate, relevant and limited to what’s necessary in relation to the purposes for which they are processed.
  4. accurate and, where necessary, kept up to date.
  5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  6. processed in a manner that ensures appropriate security of the personal data.

You can visit our site freely without having to register or subscribe for services.


Types of Personal Data, Purpose and Legal Basis for Processing of Personal Information

Personal information refers to any information that can be personally identifiable. Genelec may collect your personal data when you engage with us via various channels, such as our website, forums, dealers and customer support.

Personal Data

Basic information such as name*, customer number, username and/or other credentials from subscribing to newsletter or registering to the Genelec Community, preferred language

Contact information such as e-mail address, phone number, address information, delivery address

Information related to the company’s contact persons

Purpose of Processing

Delivering and improving our products and services (including Aural ID service) according to your needs

Fulfilling our contractual and other promises and obligations

Billing

Direct marketing

Bookkeeping

Legal Basis

Legitimate interest

Performance of a contract

Consent (private persons) or legitimate interest (companies)

Legal obligation

Aural ID information: e-mail address, name, video and 3D model of your facial features, head and upper torso

Delivering and improving Aural ID service according to your needs

Creating 3D model based on user’s facial features, head and upper torso

Performance of a contract

Consent

Possible direct marketing opt-outs

Serving customers interest of not receiving direct marketing

Legitimate interest in being able to fulfil our legal obligation to ensure opt-out from direct marketing in accordance with the law

Information you provide in connection with the events we host, registration data, special diets, invoicing data

Organizing events

Legitimate interest in being able to host events and invoice when applicable

Consent regarding health data (e.g. allergies)

Information of the customer relationship and the contract such as registration of Genelec products, information of past and current contracts and orders (e.g. from Genelec Webshop), correspondence with you and other communication, payment information and other information which you have voluntarily provided to our systems

Compliance with our contractual and other promises and obligations

Billing

Managing the customer relationship

Bookkeeping

Performance of a contract

Legitimate interest in managing and developing the customer relationship

Legal obligation

Data of the connection and terminal device you are using such as the IP address, device ID or other device identifier and cookies (please see our cookie policy for further information)

Targeting advertising in our online services

Analyzing and profiling behavior

Consent

We may use the personal information collected for Aural ID for research purposes, to improve the service and algorithms, and to create research publications. All published information will be anonymized.

We use automated systems to collect the personal information. If you submit your email address either through registering to our Community, or subscribing to our newsletter, or through any other form submission, we will be able to connect your browsing history on Genelec websites to your email address and any other personal information you submit to us, unless you opt out of the information collection.


Sources of Your Personal Information

We receive your personal information primarily from you directly. We may also receive information from the population register, authorities, credit information companies, contact information service providers and other similar reliable sources.

For the purposes described in this privacy policy, personal data may also be collected and updated from publicly available sources and based on information received from authorities or other third parties within the limits of the applicable laws and regulations. Such updating of data is performed manually or by automated means.


Disclosures of Your Personal Information

We may disclose your personal data to the following parties:

• companies within our group;
• third parties we use to help deliver our products to you – e.g. payment service providers/gateways, warehouses and delivery companies;
• other third parties, such as marketing agencies or website hosts, marketing communication platforms, analytics and reporting systems.

We also use subcontractors that process personal data on our behalf. We have outsourced our servers to an external service provider's data center, who is managing the physical and cyber security of the data center where your personal data is stored.


Data Retention Policy

All Personal Information we collect is collected for a stated purpose. Unless you request that we delete your data, we retain the Personal Information for as long as the stated purpose is valid. Different retention periods apply to different types of personal information.

Note that if you have explicitly opted in for our newsletters, we will keep your data and send you newsletters until you request otherwise.

We regularly review the need for data storage taking into account the applicable legislation. In addition, we take all reasonable actions to ensure that no incompatible, outdated or inaccurate personal data are stored in the register taking into account the purpose of the processing. We correct or erase such data without delay.


Securing Your Data

Genelec will take reasonable precautions to secure your personal data and prevent unauthorized access to it. Access to our systems is protected with firewalls, and access is granted only to trusted services via secure channels. All data traffic is encrypted by default, and all passwords are salted and stored in an encrypted form. Each user has a personal username and password to the systems where personal data are stored.


Forum Posts

When you create posts on the Genelec Community Forum, we do not check the posts for any personal information whether text, images or in any other format. Our forum software (Liferay) contains tools for you to edit or delete your posts.


Cross-border Data Transfers

We may transfer personal data outside the EU/EEA. When personal data is processed outside the EU/EEA, we make sure that the subcontractor has committed to use the EU Commission’s standard contractual clauses.

Information that you post on the Genelec Community Forum will be available globally.


Rights of Data Subjects

You have the right to inspect the personal data stored in the register concerning yourself and the right to demand rectification or erasure of the data. If you have access to your data, you may edit the data yourself. Insofar as the processing is based on consent, you also have the right to withdraw or change your consent. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal of the consent.

You have the right to object or to demand restriction of the processing of your data and to lodge a complaint with the supervisory authority.

On grounds relating to your particular situation, you also have the right to object other processing activities when the legal basis of processing is legitimate interest. In connection with your request, you shall identify the specific situation, based on which you object to the processing. We can refuse the request of objection only on legal grounds.


Children’s Privacy

Genelec online services are meant to be used by adults unless otherwise specified. If we ever request personal information from a person who is under 16 years old, we also require parental contact information and consent. Persons under 13 years old may not use Genelec online services even with a parental consent.

If you suspect we have personal information of a child, please contact us immediately at mydata@genelec.com and we will review and delete the information, if necessary, as soon as possible.


Updating This Statement

Should we make amendments to this privacy policy, we will place the amended policy on our website, with an indication of the amendment date. If the amendments are significant, we may also inform you about this by other means, for example by sending an email or placing a bulletin on our homepage. We recommend that you review this privacy policy from time to time to ensure you are aware of any amendments made.


Recruitment Privacy Notice

This Privacy Notice applies to all personal data provided by you in your job application and any subsequent information supplied by you in connection with your application.

The data collected will be controlled by Genelec HR. The data will be used for evaluating the candidate’s suitability for open positions at Genelec. The legal basis for the processing is a request by the data subject prior to entering in an employment contract. If your application results in an employment relationship with Genelec, your information will also be transferred to Genelec’s HR system.

The data will be accessed by relevant Genelec HR representatives and persons participating in the selection. By default, the data will be stored in the EU. However, when needed, the data may be accessed by Genelec persons participating in the selection from outside of the EU.

The data will be stored 12 months after the application submitted by the candidate.

Genelec will support data subject’s rights, including access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability. The data subject has the right to lodge a complaint with a supervisory authority (data protection authority). If you have any questions about the privacy notice, please send an email to mydata@genelec.com.


Contact Genelec

If you have questions about this Privacy Policy or Genelec’s processing of your personal data, please contact us at:

Genelec Oy
Olvitie 5,
FI-74100 Iisalmi, Finland

or send e-mail to mydata@genelec.com