Adopted: May 07, 2025
1. Identity and contact details of the controller
Your contact as controller within the meaning of the European General Data Protection Regulation („GDPR”) and other national data protection laws of the member states as well as other provisions of data protection law is:
Genesis Cloud GmbH
Neuhauser Str. 17
80331 Munich
Germany
https://www.genesiscloud.com
contact@genesiscloud.com
(hereinafter referred to as "we", "us" or "our")
2. Data processing on our website
2.1. Website functions
2.1.1 Temporary storage of your personal data
Legal basis
Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR. Such processing is based on our legitimate interests to present our website’s content to you and to enable you to interact with our website.
Purpose
The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.Your personal data are stored in log files to ensure the functionality of the website. Your personal data also help us to optimise the website and to ensure that our IT systems are secure. Your personal data will not be processed in any other way.
Duration of storage
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.If your personal data is stored in log files, they will be erased after one month at the latest. If the log files are stored beyond this period, your personal data will be anonymized so that it is no longer possible to assign them to a website visitor.
2.1.2 Use of technically necessary cookies
Legal basis
Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR. Such processing is based on our legitimate interests to present our website’s content to you and to enable you to interact with our website.
Purpose
The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that your browser is recognised again after a page change. Your personal data will not be processed in any other way.
Duration of storage
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens, in particular, as soon as the relevant session has ended.
Objection and rectification option
An overview of the technically necessary cookies used on our website can be found via our Cookie Policy linked in the banner at the bottom of our website.
Cookies are stored on your computer and transmitted from the computer to our website. Therefore, you have complete control over the use of cookies. By adjusting the settings of your browser, you can deactivate or restrict the transmission of cookies. You can also, at any time, delete cookies that have already been stored. This can also be done automatically. However, if you deactivate cookies for our website, you might not be able to use all website's functions to their full extent.
2.1.3 Feedback and comment feature
Legal basis
The legal basis for the processing of your personal data in the context of the feedback and comment feature of our website is Art. 6 (1) lit. f GDPR. This is based on our legitimate interest to communicate with you and to respond to your inquiries and/or your comments and feedback.
Purpose
The processing of your personal data within the context of the feedback and comment feature serves to enable transparent and individual communication between you and us, and and serves as a source of information for other visitors of our website. In addition, we process your personal data in order to be able to defend ourselves against third-party liability claims in the event of the publication of illegal feedback entries or comments.
Duration of storage
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In our case this happens when the feedback entry or comment is deleted.
Objection and rectification option
You have the right to object to the processing of your personal data in the context of the feedback and comment feature of our website at any time. In this case, however, we will no longer be able to publish your feedback entry or comment on our website.
2.1.4 Google reCAPTCHA
Legal basis
The legal basis for the processing of your personal data in the context of the anti-spam and anti-tampering protection using Google reCAPTCHA is Art. 6 (1) lit. f GDPR.
Purpose
The purpose of the processing of your personal data in the context of the anti-spam and anti-tampering protection using Google reCAPTCHA is to protect the input fields provided on our website from abusive content (“spam”) by robot programs (“bots”).
Duration of storage
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.
2.2. Communication and marketing
2.2.1 Creating an account / Signing up
Legal basis
Legal basis for the processing of your personal data in the context of creating a customer account is Art. 6 (1) lit. b GDPR. The data processing carried out in the context of the verification process as part of the account creation is based on Art. 6 (1) lit. f GDPR. Our legitimate interests are to avoid fraud or other criminal activities relating to the creation of an account and secure our potential legal claims.
Purpose
Your registration enables in particular the conclusion of contracts as well as the nurturing of our customer relationship. The processing of your personal data in the context of registration and creation of a customer account is necessary for the performance of a contract between you and us. The verification process in form of verifying a customer’s phone number as well as provided credit card ensures the authenticity of your account. The phone number verification process is executed by Twilio Verify, a service provided by Twilio (ISO 27001 certified). This service is started by a customer when clicking on “verify phone number” and finished by entering the pin code, which was received via text message, on the screen. The storage and usage of the provided phone number is done exclusively for this process. For information on GDPR compliant usage of these data visit Twilio’s privacy policy as well as Twilio’s Data Protection Addendum.
Duration of storage
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens at the latest when you delete your customer account regarding the data stored at Genesis Cloud. The duration of storage of phone number information is outlined on Twilio’s privacy policy page (paragraph “Data about our customers’ end users”).
You can delete your customer account at any time. In this case, your personal data will be immediately erased at Genesis Cloud, insofar as legal retention periods do not prevent erasure. For information on phone numbers retention visit Twilio’s privacy policy page.
2.2.2 Contact form
Legal basis
Legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR. This is based on our legitimate interest to offer you an additional option of contacting us and to respond to you queries. If you contact us in order to conclude a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.
Purpose
The processing of your personal data when contacting us only takes place to process your request.
Duration of storage
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of any personal data sent in the course of contacting us, this happens when your request has been processed and no legal retention periods prevent erasure.
2.2.3 Newsletter
Legal basis
Legal basis for the processing of your personal data in the context of sending the newsletter is your given consent, Art. 6 (1) lit. a GDPR.
Purpose
The processing of your personal data in this context serves to send the newsletter to you, in order to provide you with updates and offers as well as to promote turnover by selling goods or services.
Duration of storage
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. Your personal data will be stored until you unsubscribe from our newsletter or withdraw your consent otherwise.
Objection and rectification option
You can withdraw your consent to receiving the newsletter at any time or use the unsubscribe link included in each newsletter to object to receiving the newsletter for the future.
2.2.4 Comfort improvement, website optimisation, user behaviour analysis and display of personalised advertising
Legal basis
Legal basis for the processing of your personal data in the context of the use of cookies and comparable technologies such as pixels, tags, web beacons, browser fingerprinting, etc. (“tracking cookies”) for the purpose of comfort improvement, website optimization, user behaviour analysis and the display of personalised advertising after combining your contract master data and your purchase history is your declared consent pursuant to Art. 6 (1) lit. a GDPR.
Purpose
The processing of your personal data enables us to optimise the user-friendliness of our website and promote turnover by selling goods or services.
Duration of storage
Your personal data will be erased as soon as you withdraw your declared consent, or your personal data are no longer necessary to achieve the purpose for which they were collected.
Objection and rectification option
You will find an overview of the tracking cookies used on our website in the Cookie Policy, which is also linked in the cookie banner at the bottom of the page.
You can revoke your declared consent to the processing of your personal data within the context of the use of tracking cookies at any time for the future by proceeding as follows:
• Change of the consent settings on our website
On our website, we offer you the possibility and choice to simply decline the processing of your personal data in the context of the use of tracking cookies. To do this, you must follow the corresponding “Decline all” link at the cookie banner displayed at the footer of this website.
By withdrawing your consent, a further cookie is set on your computer, which indicates us to use no tracking cookies. If you delete this cookie, you will be asked for your consent again the next time you visit our website.
• Changing the settings of your browser
Alternatively, you can deactivate or restrict the transmission of cookies in general by changing the settings in your browser. You can delete already stored cookies at any time. This can also be done automatically. If technically necessary cookies for our website are also deactivated, it is possible that not all functions of the website can be used to their full extent.
• Special case: Google Analytics
If you do not want your personal data to be processed by Google Analytics, you can also install the browser add-on to deactivate Google Analytics. This add-on instructs the JavaScript of Google Analytics (ga.js, analytics.js and dc.js) executed on websites not to allow the sending of information to Google Analytics.
If you want to disable Google Analytics, go to the page below and install the Google Analytics disablement add-on for your browser. For detailed information on installing and uninstalling the add-on, please refer to the relevant help resources for your browser.
The latest versions of Internet Explorer occasionally load the add-on to disable Google Analytics after personal information has already been sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any data collected is immediately deleted from the server that collected it. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, the add-on will reset these cookies within a short period of time to ensure that your Google Analytics browser add-on continues to work properly.
The browser add-on to disable Google Analytics does not prevent personal data from being sent to the website or other tracking services.
You can find more information on this at:
https://marketingplatform.google.com/about/analytics/terms/us/
or
https://support.google.com/analytics/answer/6004245?hl=en
IP anonymization is activated on our website.
2.3. Data protection and legal disputes
2.3.1 Data subjects' requests pursuant to Art. 12 et seq. GDPR
Legal basis
Legal basis for the processing of your personal data in the context of processing your data protection related-request (“data subjects' request”) is Art. 6 (1) lit. c in connection with Art. 12 et seq. GDPR. Legal basis for the subsequent documentation regarding the handling of your data subject's request in accordance with the legal provisions is Art. 6 (1) lit. f GDPR and our related legitimate interest in the defense and exercise of legal claims in line with applicable statutes of limitation.
Purpose
The purpose of processing your personal data in the context of handling your data subject's request is to answer your data protection-related enquiry. The subsequent documentation regarding the processing of your request is to fulfil the obligation of accountability required by law, Art. 5 (2) GDPR.
Duration of storage
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the processing of data subject's requests, in line with the applicable statute of limitation in Germany, this is three years after the conclusion of the respective procedure.
2.3.2 Defending and enforcing legal claims
Legal basis
Legal basis for the processing of your personal data in the context of defending and enforcing legal claims in relation to our website or services as defined in our Terms of Service is Art. 6 (1) lit. f GDPR. This is based on our legitimate interest related to the establishment, exercise or defense of potential legal claims.
Purpose
In particular, the purpose of processing your personal data in the context of defending and enforcing legal claims is the defence of unjustified claims and the legal enforcement of claims and rights.
Duration of storage
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the event that administrative or court proceedings have been completed or the statutory limitation period has expired, your data will be deleted.
3. Other data processing outside the scope of our website
3.1. Application process
Legal basis
• Personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) lit. a GDPR, Art. 88 (1) GDPR and § 26 (2) Bundesdatenschutzgesetz (BDSG) is the legal basis.
For the processing of personal data which is necessary for hiring decisions, Art. 6 (1) lit. b GDPR, Art. 88 (1) GDPR and § 26 (1) BDSG, § 611a Bürgerliches Gesetzbuch (BGB) serves as the legal basis.
Insofar as the processing of personal data is necessary to comply a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR is the legal basis.
In the event that vital interests of you or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR is the legal basis.
If the processing is necessary to safeguard a legitimate interest of ours or of a third party and if your interests, fundamental rights and freedoms do not override the former, Art. 6 (1) lit. f GDPR is the legal basis for the processing.
• Special categories of personal data
Insofar as we obtain your consent for the processing of special categories of personal data (Art. 9 (1) GDPR) such as religious affiliation, racial or ethnic origin and health data, Art. 9 (2) lit. a GDPR is the legal basis.
If the processing of special categories of personal data is necessary to enable us to exercise our rights under labor law, social security and social protection law and to comply with our obligations in this respect and there is no reason to assume that your legitimate interest in the exclusion of processing prevails, the legal basis for processing is Art. 9 (2) lit. b GDPR, Art. 88 (1) GDPR and § 26 (3) BDSG.
If the processing of special categories of personal data is necessary for the protection of vital interests, the legal basis for the processing is Art. 9 (2) lit. c GDPR.
If the processing relates to special categories of personal data which have manifestly been made public by you, the legal basis is Art. 9 (2) lit. e GDPR.
If the processing of special categories of personal data is necessary for the purposes of preventive or occupational medicine or for the assessment of the working capacity of the employee, the legal basis is Art. 9 (2) lit. h GDPR.
Purpose
Your personal data will be processed for the purpose of establishing the employment relationship, in particular for the fulfilment of contractual, legal, if applicable, collective agreement and social security obligations.
Duration of storage
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were stored. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which we are subject. Data will also be erased if a storage period prescribed by the aforementioned standards expires, unless it is necessary to continue storing the data in order to conclude or fulfil a contract.
Afterwards we store your data for the following periods, among others:
- Application files and application data will be stored for up to 6 months after the decision not to appoint a candidate, on the basis of the burden of proof of discrimination according to the legal term of §§ 21 (5), 22 Allgemeines Gleichbehandlungsgesetz (AGG).
- Application documents will otherwise be stored until the dissolution or termination of the employment relationship.
3.2. LinkedIn page
Legal basis
Legal basis for the processing of your personal data in the context of the operation of our LinkedIn page is Art. 6 (1) lit. f GDPR. This is based on our legitimate interest related to the improvement of the content displayed on our LinkedIn page.
Purpose
The processing of your personal data as part of the operation of our LinkedIn page enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the attractiveness of our LinkedIn page. This helps us to make our LinkedIn page more needs-based and user-friendly.
Categories of personal data
The personal data related to you, which are processed as part of the operation of our LinkedIn page, are provided to us by LinkedIn as statistics. This includes e.g. job function, country, industry, seniority, company size, and employment status data from your LinkedIn profile.
Duration of storage
Your personal data will be deleted by LinkedIn as soon as they are no longer necessary to achieve the purpose for which they were collected.
Objection and rectification option
If you do not want your personal data to be processed as part of the operation of our LinkedIn page, you have the option at any time to object to the processing of your personal data in this context for the future. In this case, we will forward your objection request to LinkedIn.You can find more information about the processing of your personal data by LinkedIn at: https://www.linkedin.com/legal/privacy-policy
Joint controllership
We operate our LinkedIn page together with LinkedIn. For this purpose, we have concluded an agreement with LinkedIn governing which of us fulfils which obligations pursuant to the GDPR.
You can read the main provisions of this agreement here :https://legal.linkedin.com/pages-joint-controller-addendum
4. Categories of recipients
Within our company, the offices and departments that receive personal data are those that need them to fulfil the aforementioned purposes. In some cases, we work together with different service providers and therefore transfer your personal data to other trusted recipients. These can include:
- human resources department
- possible superiors of the applicant concerned
- other departments
- financial accounting
- works council
- data protection officer
- severely disabled representatives
- equal opportunities officer
- controlling/auditing
- integration office in case of severe disability
- banking institutions
- insurance companies
- external service providers
- document shredder
- IT service provider
- lawyers, courts, tax consultants.
5. Data transfers to third countries
As part of the processing of your personal data, we may transfer your personal data to trustworthy and specially selected service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA).
We only work with service providers who provide us with the appropriate safeguards for the security of your personal data and can guarantee that your personal data will be processed strictly in accordance with the European data protection standards.
If we transfer personal data to third countries, we do so on the basis of a so-called “adequacy decision” of the European Commission (such as on the EU-U.S. Data Privacy Framework) or, in the absence of such a decision, on the basis of the standard contractual clauses for the transfer of personal data to third countries based on the European Commission Implementing Decision (EU) 2021/914 of 4 June 2021 (a copy is accessible here).
6. Your rights
Subject to the applicable statutory requirements, you have the following rights with regard to our processing of your personal data. You may exercise these rights by contacting us via the contact details in Section 1 above:
6.1. Right of access
You have the right to access as to whether and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:
- the purposes of the processing
- the categories of personal data concerned
- the recipients or categories of recipients of your personal data
- the envisaged period of storage or the criteria used to determine the envisaged period of storage the existence of the right to request from us the rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing any other rights you have
- any other rights you have
- where we have not obtained the personal data from you: any available information as to their source
- if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing.
6.2. Right to rectification
You have the right to rectification of inaccurate personal data and/or completion of incomplete personal data that is being processed by us.
6.3. Right to restriction of processing
You have the right to restriction of processing of your personal data, provided that'
- we verify the accuracy of your personal data being processed by us
- the processing of your personal data is unlawful
- you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing
- you have objected to the processing of your personal data and we are in the process of verifying your objection.
6.4. Right to erasure
You have the right to erasure of your personal data, provided that
- we no longer need your personal data for its original purpose
- you withdraw your consent and there is no other legal ground for processing your personal data
- you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing
- the processing of your personal data is unlawful
- the erasure of your personal data is required by law
- your personal data have been collected in relation to the offer of information society services when you were a minor.
6.5. Right to notification
If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data, unless this proves impossible or involves disproportionate effort.
6.6. Right to data portability
You have the right to receive your personal data processed by us by automated means on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasible, you have the right to have them directly transmitted from us to another controller.
6.7. Right to object
You have the right to object to the processing of your personal data on grounds relating to his or her particular situation. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time without restrictions.
6.8. Right to withdraw consent
You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.
6.9. Right to lodge a complaint with a supervisory authority
Regardless of any other administrative or judicial remedy, you have the right to lodge a complaint with your local competent supervisory authority, if you believe that the processing of your personal data by us violates the provisions of the GDPR.
The supervisory authority competent for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
