Privacy Notice – Customer Satisfaction Survey

In this Privacy Notice we would like to inform you about the collection and processing of your personal data with regard to the customer satisfaction survey you are invited to take part in.

Your feedback will help us to understand how to improve your experience with us and to identify trends and opportunities for growth. Your feedback will help us to gain a more comprehensive view of the services delivered to you by our network of authorized agents and repairers.

We take your privacy very seriously and we will process your personal data only in accordance with applicable data protection and privacy law. 

Who is responsible for processing my data and how can I contact the controller?

Hyundai Motor UK Limited, with registered office in Birchwood Building, Springfield Drive, Leatherhead, Surrey, KT22 7LP (“HMUK”) is responsible for the processing of your personal data as explained in this Privacy Notice. HMUK will be referred as “we”, “our” or “us” in this Privacy Notice.

If you have any questions about or in connection with this Privacy Notice or would like to complain about our handling of your personal data or exercise any of your rights, please contact us by using the above contact details or you may also contact Hyundai Motor UK Limited or our data protection officer by email at [email protected]

What categories of personal data are processed, for what purposes and on what legal basis?

We collect and process the following personal data:

a. Salutation;
b. First name
c. Last name;
d. Email address;
e. Survey responses;
f. Current Genesis car model;
g. Post-survey check-ins data.

Some of these data (a., b., c. d. and f.) are already available in our customer database. The survey responses and any personal data emerging during our post-survey check-ins (e. and g.) will be collected directly from you.

We process your personal data (a., b., c. and d.) because we would like to invite you, as our customer, to take part in a satisfaction survey that will help us to find out more about your customer experience and to improve our products and services. Our lawful basis for processing your data is our legitimate interest, covered under Art. 6 (1)(f) UK GDPR. As our customer, you may expect our interest in wanting to learn about your opinion. If you do not wish to receive this type of communication, you can exercise your right to object as explained below in this privacy notice. 

If you decide to take part in the survey, we will process your data (a., b., c., d., e. and f.) for the analysis of your feedback, based on your consent according to Art. 6 (1)(a) and (7) UK GDPR. This is because, by deciding to complete the survey, you are consenting to the processing of your personal data. This will help us to enhance the customer experience, for example by investigating recurring issues or concerns.

If you do not want to share your personal data, we invite you not to take part in the survey. Based on your feedback that you provided, we may contact you to learn more about your experience with us and, if needed, to take necessary actions as part of our customer service endeavors. The legal basis for processing your personal data (a., b., c., d., e., f. and g.) is our legitimate interest (Art. 6 (1)(f) UK GDPR) in improving our customers’ experience, in fulfilling our commitments towards them and, in general, in refining the quality of our products and services.

Furthermore, the survey is designed to evaluate the performance of our business partners, such as agents and repairers. Your satisfaction will be used as a key metric to gauge the overall quality of the services provided by our partners and your feedback will be shared with them. The legal basis for processing your data is our legitimate interest (Art. 6 (1)(f) UK GDPR) in measuring the performance of our business partners. As a result, your feedback might be part of our communication with our business partners and, as such, we have a legal obligation (Art. 6 (1)(c) GDPR) to keep it in our records, according to the applicable tax and commercial law.

We process your personal data to conduct analytics. In particular, we use your data to perform analysis and predictions in order to improve our business processes, products and services. We believe that we have a legitimate interest (Art. 6(1)(f) UK GDPR) in analysing your data to improve our business processes and operations; to improve our product or service offerings; to generate insights about user behavior and trends. In the course of the processing, in order to comply with the principle of data minimisation, the personal data concerned is properly pseudonymized. This includes the removal of all direct personal identifiers (e.g. name, email), which are then replaced by an Account ID. Indirectly traceable identifiers are retained. After pseudonymisation, the data is analysed in our analytics systems. At no point is the direct personal reference restored. 

The results of the analysis (in particular, dashboards and key figures) are always aggregated and presented as anonymous data.

Participation in this survey is purely voluntary. However, in the event that you provide feedback that may be linked to an existing or potential dispute or claim, we shall retain your personal data (a., b., c., d., e. and f.) for the purpose of protecting our rights. This is a legitimate interest pursued by us as referred to in Art. 6(1)(f) UK GDPR. 

Please note that the denial or withdrawing of you consent might prevent you from participating in the survey. You are always welcomed to provide a feedback by contacting us on our website and fill out the form: https://www.genesis.com/uk/en/index.html.

With whom is my data shared?

Any access to your personal data at HMUK is restricted to those individuals that have a need to know in order to fulfill their job responsibilities.

Your personal data may be transferred for the respective purposes to the recipients and categories of recipients listed below and processed by those recipients for the respective purposes:

  • Private third parties – We receive and transmit your personal data from and to certain affiliated private entities that support us in conducting the survey. Furthermore, survey responses and any personal data emerging during post-survey check-ins may be shared with our authorized agents and/or repairers to gain a better understanding of your customer experience and for the purpose of assessing, measuring and evaluating the quality of the services provided by them to you.
  • Data processors – We transmit your personal data to certain third parties (for example, service providers, marketing agencies, etc.), that process your data on behalf of us under appropriate instructions as necessary for the respective processing purposes. The data processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process your personal data only as instructed.
  • Governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law. 

Is my data transferred abroad?

Your personal data may be transferred to other countries which may have different data protection standards than your country of residence. In this case we will take reasonable measures to maintain an adequate level of data protection and inform you separately as far as necessary under applicable law.

How long will my data be stored?

The data processed for the purpose of inviting you to take part in the satisfaction survey will be stored for 1 year after we deliver you the survey invitation. Afterwards we will delete your personal data, unless we have other reasons, already disclosed to you, to keep them in our systems. 

The survey responses and any personal data emerging during our post-survey check-ins will be stored for a period of 6 years, as mandated by the applicable commercial and tax law.

Your data will be processed for analytics purposes for a period of 5 years since its collection. 

What rights do I have and how can I exercise them?

If you have given your consent to the processing of your personal data, you can withdraw your consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to your consent withdrawal.

Pursuant to applicable data protection law, you have the following rights with respect to the processing of your personal data. Please note that these rights might be limited under the applicable national data protection law.

  • Right of access: You have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to your personal data. This information includes – inter alia – the purposes of the processing, the categories of your personal data concerned, and the recipients or categories of recipients to whom your personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
    You also have the right to obtain a copy of the personal data about you undergoing processing. For any further copies you might request, we may charge a reasonable fee based on administrative costs.
  • Right to rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  • Right to erasure ("right to be forgotten"): Under certain circumstances, you have the right to obtain from us the erasure of your personal data and we may be obliged to erase your personal data.
  • Right to restriction of processing: Under certain circumstances, you have the right to obtain from us restriction of processing your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
  • Right to data portability: Under certain circumstances, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right, without hindrance from us, to transmit those data or have it transmitted directly by us to another entity.
  • Right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to processing your personal data, and we can be required to no longer process your personal data. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.
  • Right to lodge complaint: You also have the right to lodge a complaint with the competent data protection supervisory authority, for example in your country of origin.

To exercise your rights please contact us as stated above.

Updated January 2024.