Used Vehicle Locator - Privacy Policy 

Genesis Motor UK Ltd (“Genesis”, “we”, “us”, “our”) is committed to protecting the privacy and the security of your personal data.

Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what rights you have with regard to your personal data processed by us.

This Privacy Policy applies to personal data that we collect for the purposes described below. This Privacy Policy applies exclusively to the processing of personal data on the Used Vehicle Locator, which is hosted on a different website  from the one you are currently browsing. Further down below you will find a dedicated section outlining the cookie policy for the Used Vehicle Locator.

If we collect your information otherwise (for example when registering with other Genesis services), information on the processing of your personal data for such services will be provided separately. If you have any questions regarding the processing of your personal data related to other services provided by us, please use the contact information provided below.

You are not obliged to provide your personal data. However, your personal data may be necessary for the provision of certain services and functionalities (for example, for using the compare function, for sending inquiries, test drive requests etc.). Therefore, without your personal data, we may not be able to provide the requested service.

The responsible data controller for any personal data collected and processed as set out in this Policy is:

Genesis Motor UK Ltd, Birchwood Building Springfield Drive, Leatherhead, Surrey, United Kingdom, KT22 7LP
privacy@uk.genesis.com

If you have any questions about or in connection with this Privacy Policy or would like to complain about how we handle your personal data or you would like to exercise any of your rights (see section 9 below), please contact us by using the contact details provided in section 2. 

4.1 Informational use of this website
When you visit this website for informational reasons, i.e. without registering for any of our provided services and without providing us with personal data in any other form, your browser transfers certain data to our web server. This occurs for technical reasons, and it is necessary to make the requested information available to the user.

Purpose of processing:

• To provide access to the contents on our website
• To ensure system stability and efficiency
• To implement proper safeguards as to the security of our website and services

Categories of data subjects:

• Website users

Scope of personal data processed:

• Technical website connection information (for example, IP addresses, HTTP Header fields (such as timestamp, URL, referrer, DNT (“do not track”) and user agent, the requested content or submitted request). The IT systems responsible for the correct operations of the website automatically collect your data.

Legal basis for processing:

• Our legitimate interest (Article 6(1)(f), UK GDPR): to provide you access to the functionalities of our website, to enhance our systems, make your usage of the websites more convenient or ensure the security of our websites.

Period of processing:

• The data is retained for the duration of the user session.

Recipients of your personal data:

• Genesis Motor Europe GmbH
• Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms).

4.2 Contact form for general inquiries and test drives
If you are interested in learning more about a vehicle or scheduling a test drive, you can contact the relevant dealer directly using a dedicated form on our website. Please be aware that your request, along with any personal data you provide, will be directly forwarded to the dealer without being stored by us. 

Purpose of processing:

• To receive and transmit your requests

Categories of data subjects:

• Website users

Scope of personal data processed:

• Contact data (title, first and last name, e-mail address, telephone, postcode)
• Preferred dealer
• The vehicle referenced in your request, including the VIN
• The content of your request
• Language code

Legal basis for processing:

• Our legitimate interest (Article 6(1)(f), UK GDPR) to receive and transmit your requests

Period of processing:

The data is not stored by us, and it will be immediately transmitted to the relevant dealer. For detailed information on how the contacted dealer manages your personal data, including their storage practices and retention periods, we encourage you to reach out to them directly.

Recipients of your personal data:

• Dealers
• Genesis Motor Europe GmbH
• Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

4.3. Google Maps
We use Google Maps on our website to help you locate a dealer and to create a static map displaying the dealer’s location. If you choose to access directions, you are redirected to Google’s website/app to complete your experience. For additional information about how your personal data is processed through Google Maps, we encourage you to read Google’s Privacy Policy. 

Purpose of processing:

• Displaying online maps and finding a dealer

Categories of data subjects:

• Website users

Scope of personal data processed:

• The personal data processed by Google Maps includes location data, IP address, search and usage history, device information, Google account data, activity data, user-generated content, contact/address book data (if permitted), and transaction data.

Legal basis for processing:

• Our legitimate interest (Article 6(1)(f), UK GDPR): to enhance our systems, make your usage of the websites more convenient or ensure the security of our websites.

Period of processing:

• The data is not retained beyond the page load.

Recipients of your personal data:

• Genesis Motor Europe GmbH
• Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

Any access to your personal data is restricted to those individuals that have a need to know in order to fulfil their job responsibilities.

We may transfer your personal data for the respective purposes to the recipients and categories of recipients listed below and as stated in section 4.

• Unaffiliated private third parties – In certain cases, we may share your personal data with trusted, unaffiliated third parties who assist us in delivering our products and services to you efficiently.
  
  Affiliated private third parties – We are part of the Hyundai group. In some cases, after careful review, we may transfer your personal data to other entities in the group (e.g. our local entities in your country of residence), each of which will process your personal data as an independent data controller or as a joint controller with us (for example, for administrative support etc.).
  
  These are in particular, but not limited to:
  • Hyundai Motor Company, 12 Heolleung-ro, Seocho-gu, Seoul, South Korea;
  • Genesis Motor Europe GmbH, Strahlenbergerstraße 110-112, 63067 Offenbach am Main, Germany.
• Data processors – Certain third parties, whether affiliated or unaffiliated, may receive your personal data to process such data on behalf of us under appropriate instructions as necessary for the respective processing purposes. The data processors will be subject to contractual obligations to ensure the implementation of appropriate technical and organisational security measures to safeguard the personal data, and to process the personal data only as instructed.
  
  The current data processors are involved in particular, but not limited to in the following processes:
  • We are using data processors for providing us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms).
  • We engage data processors for the operation and maintenance as well as content creation for our website.
  • Governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law. Some disclosures are required by law (for example, court orders or requests from the police). In these cases, we will process your data because we are subject to a legal obligation (Article 6(1)(c), UK GDPR) to do so.

If you click on an external link, for example for our brochure, some of your data such as your IP address will be transmitted to the link’s destination. This is technically necessary due to the TCP/IP protocol on which the Internet is based.

Within the scope of the activities set out above and in our Cookie Policy, your personal data may be transferred to other countries which may have different data protection standards than your country of residence. In this case we have applied appropriate safeguards with the involved third parties in place to ensure an adequate level of protection for personal data. Please note that personal data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to reach an adequate level of data protection also when sharing your personal data with such countries (for example, by concluding specific agreements the recipient of your data, or we will ask for your explicit consent to such transfer). 

We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. In order to protect your personal data transmitted via our website, we use SSL encryption. You can recognise such encrypted connections by the prefix https:// in the address bar of your browser.

Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.

Your personal data is generally stored for as long as necessary in relation to the purposes and in order to provide you with our services. Besides, we generally store your data to the extent needed to meet our legal obligations and to protect our rights: for example, we will store your data in accordance with statutory retention periods. Insofar more specific retention periods will apply, you can refer to the information on the period of processing of your personal data as indicated in section 4 above.

You have certain rights in relation to your personal data that you can exercise towards us. In accordance with applicable data protection laws these rights may be restricted under certain conditions.

You can always exercise your rights at any time by contacting us via the contact information as stated in section 3.

Generally, you have the following rights:

9.1. Right of access: You have the right to obtain from us confirmation as to whether or not we process your personal data and, where that is the case, to request access to your personal data. You also have the right to obtain a copy of your personal data which we process.

9.2. Right to rectification: You have the right to the rectification of any inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data updated, including by means of providing a supplementary statement.

9.3. Right to erasure (“right to be forgotten”): Under certain circumstances, you have the right to the erasure of your personal data and we may be obliged to erase your personal data.

9.4. Right to restriction of processing: Under certain circumstances, you have the right to have a restriction placed on the processing of your personal data. This means that your data will generally not be processed by us with the exception of storage.

9.5. Right to data portability: Under certain circumstances, you have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right, without hindrance from us, to transfer this data or have it transferred directly by us to another entity. 

9.6. Right to object: You have the right to object to processing of personal data for the purposes of direct marketing and, under certain circumstances, when the processing of data for other purposes is based on legitimate interest.

9.7. Right to complain: You also have the right to make a complaint with the competent data protection supervisory authority in your country.

9.8. Right to withdraw consent: If you have given your consent to the processing of your personal data, you can withdraw your consent at any time with the effect for future processing. The withdrawal of the consent does not affect the processing that took place prior to the withdrawal of the consent.

We may change and/or supplement this Privacy Policy from time to time in the future. Such changes and/or supplements may be necessary due to the implementation of new technologies or the introduction of new services. We will publish the changes on https://www.genesis.com/uk/en/privacy-policy.html and/or inform you accordingly (for example, via email or hard copy letter).

Where we provide addresses and contact information of companies and organizations in this privacy policy, please note that both may change over time. Therefore, we recommend checking the relevant information before contacting us.

We use cookies and similar technologies on our website to enhance our site navigation, to analyze and improve our site usage and services, and to assist in our marketing efforts. The collected information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. You have the right and possibility to choose not to allow some types of cookies. This Cookie Policy applies exclusively to the processing of personal data on the Used Vehicle Locator, which is hosted on a different website from the one you are currently browsing. To learn more about how we handle your personal data on the Used Vehicle Locator website, please refer to the Privacy Policy  provided earlier on this page.

Depending on the company managing the used cookies we are using different types of cookies:

• Own cookies: these cookies are created and managed by our website editor. 
• Third party cookies: these cookies are set by external providers.

Depending on their purpose we use the different categories of cookies:

• Strictly necessary cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
• Performance cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and we will not be able to monitor its performance.
• Functional cookies: These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.
• Targeting cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

You can choose your preferences to allow all cookies, not to allow some types of cookies or reject all cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. 

You may choose which cookies you want on this website by setting your browser or your Cookie Preferences here . The Cookie Preferences can also be found at the bottom of each site page of the Used Vehicle Locator. You can revoke your consent to the cookies at any time for the future.

We use tools necessary for website operation based on our legitimate interest pursuant to Article 6(1)(f) UK GDPR to provide the basic functions of our website. We use all other non-essential (optional) tools based on your consent in accordance with Article 6(1)(a) UK GDPR.

The cookies and providers used are presented below. As the individual cookies are subject to occasional changes, they are not listed here in detail for reasons of practicability. In this respect, reference is made to the Cooke Preferences , in which the individual cookies are described in detail in each case, including the respective storage time.

We use OneTrust (OneTrust Technology Limited, 82 St. John Street, London, England, EC 1M 4JN) as our cookie consent management tool. With this privacy management solution, we offer the possibility to consent to the storage of cookies in a legally compliant manner and to ensure the revocation of consent. Furthermore, the consent is documented for legal proof and the setting of cookies is technically controlled. Cookies are used for this purpose, which saves your cookie settings on our websites. In this way, the cookie settings can be retained when you visit our website again, as long as you do not delete the cookies beforehand. You can adjust your settings at any time. OneTrust stores and operates the software as software as a service in the cloud.

In this relation, the following of your personal data are processed: 

• your IP address; 
• if consent is given, information on browser, country, device, pseudo-anonymous browser ID, retention of given/withdrawn consents by groups/solutions with indication of the time of change in order to be able to provide legal proof of the given consent.

Your personal data are processed to offer the possibility to consent to cookies and to document your consent, to ensure the withdrawal of consent and to control your settings. 

The data processing is based on our legitimate interest to manage and document your consent (Article 6(1)(f), UK GDPR).

We use Google Tag Manager on our website, a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for all persons located outside of the EEA or Switzerland by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)) to manage tags for tracking and analytics with own and third-party software. Tags are small code elements that help us to control which page or service elements and tools are activated and loaded in which order, among other things, to measure traffic and visitor behavior, understand the impact of our advertising, set up remarketing and target group orientation, and test and optimize our website.

The Google Tag Manager is just an auxiliary service that makes it easier to integrate and manage our tags via an interface. The Google Tag Manager only implements tags, which means that it does not use its own cookies and does not collect any personal data itself. It triggers other tags, which in turn may collect personal data. However, the Google Tag Manager does not access this data. 

For more information about Google and its privacy practices, please also visit the following links.

• Google’s Privacy Policy: https://policies.google.com/privacy?hl=en-GB&gl=gb 
• Google’s Tag Manager Use Policy: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

We use Google Analytics, a web analytics solution provided by Google LLC ("Google") that helps us to understand how you use this website and how we can improve the user experience. Web analysis is the collection, storage and analysis of data about the behaviour of website visitors.

To do so, Google Analytics sets cookies to monitor traffic levels, search queries, and site visits. Google Analytics will use this information to measure your activity on our website, compile statistical reports on overall content interaction activity, and provide other services relating to website activity and internet usage. Each time one of the individual pages of this website on which a Google Analytics has been integrated is called up, Google Analytics sends data to Google for the purpose of online analysis, including your personal data, such as your IP address.

Personal data collected through Google Analytics may be transferred abroad, including to the United States and other locations where Google operates data centers. As part of this process, Google may share the collected personal data with third parties. To safeguard your data and comply with global data privacy laws and regulations, Google uses Standard Contractual Clauses, Binding Corporate Rules, and additional security measures as its main transfer mechanisms, ensuring that data protection levels remain consistent across regions.

This data processing is carried out for website analytics purposes. It utilizes cookies to distinguish requests from different browsers and to store relevant information for retrospective analysis. Additionally, cookies may be used to link browsing activity with customer records.

The personal data processed by Google Analytics is:

• Geolocation data. Google Analytics estimates a user’s location based on their IP address, offering insights into city, country, and region. This data is primarily anonymized and aggregated for geographic analysis.
• Device and Browser Information. Information about the user’s device, like the model, screen resolution and operating system, as well as browser type and version, is collected to optimize the website experience across various devices and browsers.
• Cookies and Online Identifiers. These cookies help identify returning visitors and analyze user behavior, without storing directly identifying information.
• User Engagement Data. This includes details about how users interact with the site, such as pages viewed, time spent on each page, clicks, scrolling depth and other engagement metrics. 

We have activated the IP anonymization feature in Google Analytics, which will anonymize a visitor’s IP address (by masking the last octet) before it is stored. IP-addresses for EU, Swiss and UK user traffic are not transferred outside of these jurisdictions.

We obtain your consent for the operation of Google Analytics on this website (Article 6(1)(a), UK GDPR). You can withdraw your consent at any time by changing your cookie preference. Unless you decide to withdraw your consent, your data is stored for 14 months.

Further information and the applicable Google privacy policy can be found at https://policies.google.com/technologies/cookies.

If you would like to opt out of Google Analytics entirely, Google has developed an opt-out browser add-on that you can download and install for your web browser here: https://tools.google.com/dlpage/gaoptout.

Date: December 2024