Privacy Policy
Last Updated: April 2026
1. Introduction
Genesis Motor Europe GmbH ('GME', 'we', 'us' or 'our') is committed to protecting your personal data and ensuring transparency about how it is collected, used, and shared.
Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what rights you have with regard to your personal data processed by us.
We encourage you to read this Policy carefully to understand how your personal data is handled.
This Privacy Policy ('Policy') explains how your personal data is processed when you use the "Genesis Motor Europe Media Centre" website ('Website').
This Policy applies only to the "Genesis Motor Europe Media Centre" website. If you use other Genesis services, separate privacy notices will apply. For details on how we use cookies and similar tracking technologies to process your personal data, please refer to our Cookie Policy.
You are not obliged to provide your personal data. However, your personal data may be necessary for the provision of certain services and functionalities. Therefore, without your personal data, we may not be able to provide the requested service.
2. Who is responsible for processing your data?
The responsible data controller for any personal data collected and processed as set out in this Policy is:
Genesis Motor Europe GmbH, Kaiserleipromenade 5, 63067 Offenbach am Main, Germany
3. How can you contact the controller and the data protection officer?
If you have any questions about or in connection with this Policy or would like to complain about how we handle your personal data or you would like to exercise any of your rights (see section 9 below), please contact us by using the contact details provided in section 2. Alternatively, you may also contact our data protection officer via the contact details provided in section 2.
4. What categories of personal data are processed, for what purposes and on what legal basis?
4.1. Ensuring stability, security and efficiency of the Website
We collect your IP address to ensure system stability, security, and efficiency.
Purpose of processing:
- Ensuring the security and integrity of our Website.
- Preventing fraud and unauthorized access.
- Performing system diagnostics and improving Website performance.
Categories of data subjects:
- Website users.
Scope of personal data processed:
- Timestamp: The time when the data is created or submitted.
- IP Address: The network address used by you to connect.
- Request ID / Submission ID: Unique identifiers used by the system to track and identify the request.
Legal basis for processing:
- Our legitimate interest (Article 6(1)(f), GDPR): to enhance our systems, make your usage of the Website more convenient or ensure the security of our Website.
- The processing of your personal data is necessary to provide you with access to our Website and its features, in accordance with the applicable Terms of Use (Article 6(1)(b), GDPR).
Period of processing:
- The log files and the relevant data captured in them will be deleted within one month.
Source of the data:
- The data is automatically transmitted to the web server.
4.2. News Alerts & Browser Notifications
We offer a "News Alerts" subscription feature on our Website, so you can stay up to date with the press releases posted on the Website.
Purpose of processing:
- To notify you whenever new press releases are published.
Categories of data subjects:
- Website users.
Scope of personal data processed:
- Email address, user browser identifier, IP address of user.
Legal basis for processing:
- Your consent (Article 6(1)(a), GDPR).
Period of processing:
- Until you choose to unsubscribe.
Source of the data:
- The data is provided directly by you.
4.3. Media Cart
The Media Cart lets you collect the content you would like to download or send via email.
Purpose of processing:
- To provide you with a feature that lets you collect media content for downloading and sharing.
Categories of data subjects:
- Website users.
- Recipients of the Media Cart sent by you.
Scope of personal data processed:
- The media content you added to the Media Cart is stored in browser cache.
- When sending a Media Cart: your name, your email address, the name of the recipient, the email address of the recipient, the subject of the email and the e-mail message (optional).
Legal basis for processing:
- Our legitimate interest (Article 6(1)(f), GDPR) in operating and providing the Website features.
- The processing of your personal data is necessary to provide you with access to our Website and its features, in accordance with the applicable Terms of Use (Article 6(1)(b), GDPR).
Period of processing:
- Data stored in browser local storage until you empty the media cart.
Source of the data:
- The data is automatically collected whenever you add media content to the cart.
4.4. Social Sharing Functionality
We provide social media sharing buttons on our Website, allowing you to share content directly via third-party social media platforms (e.g., by posting links or content to your social media accounts).
Purpose of processing:
- To enable you to share Website content on social media platforms.
- To facilitate user interaction and increase the visibility of our content.
Categories of data subjects:
- Story or Asset URL, description, asset preview URL is passed to social media sites.
Scope of personal data processed:
- Browser and device information.
- Referrer URL (i.e., the page you are sharing).
Legal basis for processing:
- Our legitimate interest (Article 6(1)(f), GDPR) in operating and providing the Website features.
- The processing of your personal data is necessary to provide you with access to our Website and its features, in accordance with the applicable Terms of Use (Article 6(1)(b), GDPR).
Period of processing:
- The data is not retained by us.
Source of the data:
- The data is collected directly from you through your interaction with the sharing buttons.
5. With whom is your data shared?
In some cases, we may disclose your personal data to third parties. This will be done solely in connection with the purposes of processing set out above and in compliance with applicable laws. The possible recipients of your personal data include the following companies, institutions, or persons:
-
Hyundai group companies: We may disclose your personal data to other companies that are members of the Hyundai group, including our affiliated companies in Europe for our internal administrative purposes (Art. 6(1)(f) GDPR).
-
Service providers (IT, logistics, finance, facility management): We may disclose your personal data to our service providers (IT, logistics, finance, facility management) for the purpose of operating our business or in connection with the provision and sale of our services or products. For this purpose, we have entered into data processing agreements in accordance with Art. 28(3) GDPR with each of these service providers to the extent that they are our processors.
In particular, we share your data with EPRESSPACK, 35 rue Berger 75001 Paris - France.
Courts and regulatory bodies: We may disclose your personal data to courts and regulatory bodies where we have a legal obligation to do so (Art. 6(1)(c) GDPR) or for the purpose of protecting our interests or enforcing our rights (Art. 6(1)(f) GDPR).
Outside professional advisors: We may disclose your personal data to our tax consultants, auditors, accountants, legal advisors and other outside professional advisors for the purpose of operating our business (Art. 6(1)(f) GDPR). In some cases, we may also disclose the data for the purpose of protecting our interests or enforcing our rights (Art. 6 (1)(f) GDPR).
Third party acquirers: In the event that we sell or transfer all or any relevant portion of our assets or business (including reorganization, or liquidation), we may disclose your personal data to third party acquirers.
Others: We may also disclose your personal data to other third parties, but only if you have requested us to do so (Art. 6(1)(a) GDPR) or if such disclosure is necessary for the performance of our contract with you (Art. 6(1)(b) GDPR).
If you click an external link, some of your data such as your IP address will be transmitted to the link's destination. This is technically necessary due to the TCP/IP protocol on which the Internet is based.
6. Is your data transferred abroad?
Within the scope of the activities set out above, your personal data may be transferred to other countries which may have different data protection standards than your country of residence. In this case we have applied appropriate safeguards with the involved third parties in place to ensure an adequate level of protection for personal data. Please note that personal data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to reach an adequate level of data protection also when sharing your personal data with such countries (for example, by concluding specific agreements the recipient of your data, or we will ask for your explicit consent to such transfer).
7. How is your data secured?
We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorized personnel have access to personal data. In order to protect your personal data transmitted via our Website, we use SSL encryption.
8. How long will your data be stored?
Your personal data is generally stored for as long as necessary in relation to the purposes and in order to provide you with our Website and its features. Besides, we generally store your data to the extent needed to meet our legal obligations and to protect our rights: for example, we will store your data in accordance with statutory retention periods.
Insofar more specific retention periods will apply, you can refer to the information on the period of processing of your personal data as indicated in section 4 of this Policy.
9. What rights do you have and how can you exercise them?
You have certain rights in relation to your personal data that you can exercise towards us. In accordance with applicable data protection laws these rights may be restricted under certain conditions.
You can always exercise your rights at any time by contacting us via the contact information as stated in section 3 of this Policy.
Generally, you have the following rights:
Right of access: You have the right to obtain from us confirmation as to whether or not we process your personal data and, where that is the case, to request access to your personal data. You also have the right to obtain a copy of your personal data which we process.
Right to rectification: You have the right to the rectification of any inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data updated, including by means of providing a supplementary statement.
Right to erasure ('right to be forgotten'): Under certain circumstances, you have the right to the erasure of your personal data and we may be obliged to erase your personal data.
Right to restriction of processing: Under certain circumstances, you have the right to have a restriction placed on the processing of your personal data. This means that your data will generally not be processed by us with the exception of storage.
Right to data portability: Under certain circumstances, you have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right, without hindrance from us, to transfer this data or have it transferred directly by us to another entity.
Right to object: You have the right to object to processing of personal data for the purposes of direct marketing and, under certain circumstances, when the processing of data for other purposes is based on legitimate interest.
Right to complain: You also have the right to make a complaint with the competent data protection supervisory authority in your country.
Right to withdraw consent: If you have given your consent to the processing of your personal data, you can withdraw your consent at any time with the effect for future processing. The withdrawal of the consent does not affect the processing that took place prior to the withdrawal of the consent.
10. Changes to the Privacy Policy
GME may revise this Policy periodically. The date of the latest update will be shown at the top of the Policy. If any changes to our privacy practices are significant, we will inform you as required by the applicable law.
