Genelec always aims to operate in a way that all personal data will be:
- processed lawfully, fairly and in a transparent manner in relation to individuals.
- collected for specified, explicit and legitimate purposes and not processed beyond those.
- adequate, relevant and limited to what’s necessary in relation to the purposes for which they are processed.
- accurate and, where necessary, kept up to date.
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
- processed in a manner that ensures appropriate security of the personal data.
You can visit our site freely without having to register or subscribe for services.
Types of Personal Data, Purpose and Legal Basis for Processing of Personal Information
Personal information refers to any information that can be personally identifiable. Genelec may collect your personal data when you engage with us via various channels, such as our website, forums, dealers and customer support.
Basic information such as name*, customer number, username and/or other credentials from subscribing to newsletter or registering to the Genelec Community, preferred language
Contact information such as e-mail address, phone number, address information, delivery address
Information related to the company’s contact persons
Purpose of Processing
Delivering and improving our products and services (including Aural ID service) according to your needs
Fulfilling our contractual and other promises and obligations
Performance of a contract
Consent (private persons) or legitimate interest (companies)
Aural ID information: e-mail address, name, video and 3D model of your facial features, head and upper torso
Delivering and improving Aural ID service according to your needs
Creating 3D model based on user’s facial features, head and upper torso
Performance of a contract
Possible direct marketing opt-outs
Serving customers interest of not receiving direct marketing
Legitimate interest in being able to fulfil our legal obligation to ensure opt-out from direct marketing in accordance with the law
Information you provide in connection with the events we host, registration data, special diets, invoicing data
Legitimate interest in being able to host events and invoice when applicable
Consent regarding health data (e.g. allergies)
Information of the customer relationship and the contract such as registration of Genelec products, information of past and current contracts and orders (e.g. from Genelec Webshop), correspondence with you and other communication, payment information and other information which you have voluntarily provided to our systems
Compliance with our contractual and other promises and obligations
Managing the customer relationship
Performance of a contract
Legitimate interest in managing and developing the customer relationship
Targeting advertising in our online services
Analyzing and profiling behavior
We may use the personal information collected for Aural ID for research purposes, to improve the service and algorithms, and to create research publications. All published information will be anonymized.
We use automated systems to collect the personal information. If you submit your email address either through registering to our Community, or subscribing to our newsletter, or through any other form submission, we will be able to connect your browsing history on Genelec websites to your email address and any other personal information you submit to us, unless you opt out of the information collection.
Sources of Your Personal Information
We receive your personal information primarily from you directly. We may also receive information from the population register, authorities, credit information companies, contact information service providers and other similar reliable sources.
Disclosures of Your Personal Information
We may disclose your personal data to the following parties:
• companies within our group;
• third parties we use to help deliver our products to you – e.g. payment service providers/gateways, warehouses and delivery companies;
• other third parties, such as marketing agencies or website hosts, marketing communication platforms, analytics and reporting systems.
We also use subcontractors that process personal data on our behalf. We have outsourced our servers to an external service provider's data center, who is managing the physical and cyber security of the data center where your personal data is stored.
Data Retention Policy
All Personal Information we collect is collected for a stated purpose. Unless you request that we delete your data, we retain the Personal Information for as long as the stated purpose is valid. Different retention periods apply to different types of personal information.
Note that if you have explicitly opted in for our newsletters, we will keep your data and send you newsletters until you request otherwise.
We regularly review the need for data storage taking into account the applicable legislation. In addition, we take all reasonable actions to ensure that no incompatible, outdated or inaccurate personal data are stored in the register taking into account the purpose of the processing. We correct or erase such data without delay.
Securing Your Data
Genelec will take reasonable precautions to secure your personal data and prevent unauthorized access to it. Access to our systems is protected with firewalls, and access is granted only to trusted services via secure channels. All data traffic is encrypted by default, and all passwords are salted and stored in an encrypted form. Each user has a personal username and password to the systems where personal data are stored.
When you create posts on the Genelec Community Forum, we do not check the posts for any personal information whether text, images or in any other format. Our forum software (Liferay) contains tools for you to edit or delete your posts.
Cross-border Data Transfers
We may transfer personal data outside the EU/EEA. When personal data is processed outside the EU/EEA, we make sure that the subcontractor has committed to use the EU Commission’s standard contractual clauses.
Information that you post on the Genelec Community Forum will be available globally.
Rights of Data Subjects
You have the right to inspect the personal data stored in the register concerning yourself and the right to demand rectification or erasure of the data. If you have access to your data, you may edit the data yourself. Insofar as the processing is based on consent, you also have the right to withdraw or change your consent. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal of the consent.
You have the right to object or to demand restriction of the processing of your data and to lodge a complaint with the supervisory authority.
On grounds relating to your particular situation, you also have the right to object other processing activities when the legal basis of processing is legitimate interest. In connection with your request, you shall identify the specific situation, based on which you object to the processing. We can refuse the request of objection only on legal grounds.
Genelec online services are meant to be used by adults unless otherwise specified. If we ever request personal information from a person who is under 16 years old, we also require parental contact information and consent. Persons under 13 years old may not use Genelec online services even with a parental consent.
If you suspect we have personal information of a child, please contact us immediately at email@example.com and we will review and delete the information, if necessary, as soon as possible.
Updating This Statement
FI-74100 Iisalmi, Finland
or send e-mail to firstname.lastname@example.org