Privacy Policy
Information pursuant to the General Data Protection Regulation (GDPR) and the Telecommunications and Digital Services Data Protection Act (TDDDG)
Version:
10 September 2026
This Privacy Policy explains which personal data genese.de GmbH processes when you visit this website and when you use its contact, information and recruitment services. It applies to the websites available at genese.de. Additional privacy notices may apply to products, customer portals or other services.
1 Privacy at a Glance
General Information
Personal data means any information relating to an identified or identifiable natural person. When you visit this website, technical data required for the secure provision of the website is processed. We receive additional data when you contact us via a form, by email, by telephone or through another communication channel offered by us, or when you apply for a position with us.
Purposes of Processing
- secure, stable and reliable operation of the website
- handling general enquiries as well as enquiries concerning products, services, quotations and information material
- conducting recruitment procedures
- protecting forms against automated submissions and misuse
2 Controller and Data Protection Officer
Controller
genese.de GmbH
Leerkämpe 7
28259 Bremen
Germany
Telephone: +49 421 56561 0
Fax: +49 421 56561 56
Email: mail@genese.de
Website: https://www.genese.de
Managing Directors authorised to represent the company: Dipl.-Inform. Oliver Otto and Anja Otto
Data Protection Officer
You can contact the Data Protection Officer of genese.de GmbH at:
genese.de GmbH
Data Protection Officer
Leerkämpe 7
28259 Bremen
Email: datenschutz@genese.de
3 Hosting, Server Logs and Email Service
Hosting by STRATO
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes data on our behalf that is generated when the website is accessed. This may include, in particular, your IP address, date and time of access, the requested URL, amount of data transferred, referrer URL, browser type, browser version, operating system and access status.
The processing is necessary to deliver the website, ensure its stability and security, and detect technical disruptions or attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website. Log data is deleted or anonymised as soon as it is no longer required for these purposes, unless a security-related investigation or statutory retention requirement necessitates longer storage.
We have entered into a data processing agreement with STRATO pursuant to Article 28 GDPR. Further information is available at https://www.strato.de/datenschutz/.
Email Service Provided by STRATO
Our business email communications are also sent and received via the email servers of STRATO GmbH. If a website form is forwarded to us by email or you contact us directly by email, STRATO processes, in particular, the sender and recipient addresses, date and time, technical transmission data, subject line, message content and attachments on our behalf.
The applicable legal basis depends on the content of the communication. For enquiries relating to a contract or steps taken prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. General business enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in maintaining orderly and secure business communications. Applicant data is processed on the legal bases specified in the section on job applications.
4 Contact and Product Enquiries
Contact Form and Requests for Product Information
You can contact us via our forms and request information about our products and services. Depending on the form, we process, in particular, your name, business contact details, telephone number, email address, company, the subject selected and your message. Mandatory fields are identified accordingly. Voluntary information helps us respond to your enquiry more effectively.
The form data is processed on our web server hosted by STRATO and forwarded via STRATO’s email servers to the responsible employees of genese.de GmbH. Data is only disclosed to other recipients where this is necessary in order to process your enquiry or where such disclosure is permitted by law.
Where the enquiry relates to steps taken prior to entering into a contract or to the performance of a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in processing enquiries and providing the requested product information. Any additional marketing communications will only take place where permitted by law or where you have given your consent.
We delete the data once the enquiry has been fully resolved, unless statutory retention obligations or legitimate interests, such as documenting a business relationship or establishing, exercising or defending legal claims, require longer retention. Documents relevant to contracts and billing are retained for the periods prescribed by law.
Enquiries by Email, Telephone or Fax
If you contact us by email, telephone or fax, we process the contact details you provide and the content of your enquiry in order to respond to it and, where necessary, to contact you with follow-up questions. The legal bases and deletion criteria set out in the preceding section apply.
5 Job Applications
Applications via the Web Form
When you apply via our web form, we process, in particular, the position applied for, your name, email address, telephone number, your message and the application documents you upload.
Application documents may contain additional information, such as your address, date of birth, qualifications, employment history, references and an application photograph. Please provide only information that is necessary for the recruitment process.
The form data and uploaded files are processed on the web server hosted by STRATO and forwarded via STRATO’s email servers to the employees of genese.de GmbH involved in the recruitment process. Access is restricted to persons who require the data for the purposes of the recruitment process.
Applications by Email or WhatsApp
You may also apply by email to bewerbung@genese.de or via the WhatsApp contact option provided on the careers page. Applications submitted by email are transmitted via STRATO’s email servers.
If you apply via WhatsApp, the provider of the messaging service also processes communication data and metadata under its own responsibility for data protection. The provider in Europe is generally Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Further details are available in WhatsApp’s Privacy Policy at https://www.whatsapp.com/legal/privacy-policy-eea.
Using WhatsApp is voluntary. You may submit your application via the web form, by email or by post without any disadvantage. Please do not send information via WhatsApp that is not necessary for your application, and do not send particularly sensitive data.
Legal Bases and Retention Period
We process applicant data for the purpose of deciding whether to establish an employment relationship on the basis of Section 26(1), sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) GDPR.
Where special categories of personal data are concerned, processing is governed by Article 9(2) GDPR and Section 26(3) BDSG. Please provide such data only where it is necessary for the recruitment process.
If no employment relationship is established, we generally delete applicant data no later than six months after completion of the recruitment process. Data may be retained for longer where this is necessary for the establishment, exercise or defence of legal claims or where a statutory obligation applies. The legal basis in such cases is Article 6(1)(f) GDPR.
If you are hired, the necessary application data will be transferred to your personnel file. Your data will only be included in an applicant pool on the basis of separate consent, which you may withdraw at any time with effect for the future.
6 Cookies and Access to Terminal Equipment
This website may use cookies and comparable technologies. Cookies are small pieces of information that are stored on or read from your terminal equipment.
Strictly necessary cookies may be used where they are essential for providing a digital service expressly requested by you. The legal basis for accessing your terminal equipment in this case is Section 25(2) no. 2 TDDDG. Subsequent processing of personal data is generally based on Article 6(1)(f) GDPR; our legitimate interest lies in the secure and functional provision of the website.
We use non-essential cookies or comparable forms of access only with your consent in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw or modify your consent at any time with effect for the future via the cookie settings provided on the website. Any processing carried out before withdrawal of consent remains lawful.
7 Google reCAPTCHA
We use Google reCAPTCHA v2 to protect the contact form against automated submissions and misuse. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When reCAPTCHA is loaded and used, data including your IP address, browser and device information, date and duration of your visit, interactions with the website and cookies may be transmitted to Google and analysed by Google. According to Google, reCAPTCHA uses, among other things, the _GRECAPTCHA cookie for risk analysis.
reCAPTCHA is activated only after you have given your consent. The legal bases are Section 25(1) TDDDG for storing or accessing information on your terminal equipment and Article 6(1)(a) GDPR for the subsequent processing of personal data. You may withdraw your consent at any time with effect for the future via the cookie settings.
Processing by Google companies in the United States cannot be ruled out. According to Google, data transfers are based, among other mechanisms, on the adequacy decision for the EU-U.S. Data Privacy Framework, provided that the respective recipient is certified, and on the European Commission’s Standard Contractual Clauses.
Further information is available at https://policies.google.com/privacy and https://developers.google.com/recaptcha.
8 External Links and Social Networks
Our website contains links to external services, including Google Maps and social networks. Merely providing such a link does not result in any data being transmitted to the respective provider as long as you do not follow the link.
Once you click the link, you leave our website. The operator of the external service is generally responsible for any subsequent data processing. Please refer to the respective provider’s privacy information.
9 Encryption and Data Security
This website uses TLS encryption. An encrypted connection can generally be recognised by the address beginning with “https” and by the lock symbol displayed by your browser.
However, emails are not necessarily end-to-end encrypted. Please use an appropriate secure transmission method for particularly confidential information.
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and unauthorised disclosure. These measures are reviewed and adjusted in line with the applicable risks and technological developments.
10 Recipients and Transfers to Third Countries
Within genese.de GmbH, access to personal data is restricted to those departments and individuals who require it for the relevant purpose.
External recipients may include, in particular, hosting and email service providers, IT service providers, communications service providers, advisers, public authorities or courts, where disclosure is necessary and legally permissible.
Processors are engaged on the basis of Article 28 GDPR.
Data is transferred to countries outside the European Union or the European Economic Area only where the requirements of Articles 44 et seq. GDPR are met. Where a specific service is referred to in this Privacy Policy, further information on potential transfers to third countries is provided in the corresponding section.
11 Retention Periods
Unless a specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the respective purpose.
After that time, we delete or anonymise the data unless statutory retention obligations, the preservation of evidence, or the establishment, exercise or defence of legal claims require longer retention.
Relevant periods include, in particular, retention periods under commercial and tax law as well as statutory limitation periods.
12 Your Rights
Where the statutory requirements are met, you have the following rights with respect to us:
- the right of access to your personal data pursuant to Article 15 GDPR
- the right to rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR
- the right to erasure pursuant to Article 17 GDPR
- the right to restriction of processing pursuant to Article 18 GDPR
- the right to data portability pursuant to Article 20 GDPR
- the right to object to processing pursuant to Article 21 GDPR
- the right to withdraw consent with effect for the future pursuant to Article 7(3) GDPR
To exercise your rights, please contact datenschutz@genese.de or the controller specified above.
Right to Object
Where we process your personal data on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
You may object at any time to the processing of your personal data for direct marketing purposes without having to provide grounds relating to your particular situation.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
In particular, you may contact the supervisory authority at your habitual residence, your place of work or the place of the alleged infringement.
The supervisory authority generally responsible for genese.de GmbH is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen.
Current contact details are available at https://www.datenschutz-bremen.de/.
13 Updates to this Privacy Policy
We update this Privacy Policy whenever changes in applicable law, the services we use or our data processing activities make this necessary. The current version published on this website applies.