Privacy Policy

1. What is this Privacy Policy about?

Hyundai Motor Company Italy S.r.l., with registered office in Milan, Via Giovanni Bensi no. 11 (“Genesis”, “we”, “us”, “our”), which operates the brand Genesis in Italy, is committed to protecting the privacy and the security of your personal data.

Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what rights you have with regard to your personal data processed by us.

For further information about how we handle your personal data (for example, with regard to cookies and other web tracking technologies), we invite you to navigate the tabs in the ribbon menu displayed above.

This Privacy Policy applies to personal data that we collect for the purposes described below, whether through this website or any other channels we operate that reference this notice.

If we collect your information otherwise (for example when registering with other Genesis services), information on the processing of your personal data for such services will be provided separately. If you have any questions regarding the processing of your personal data related to other services provided by us, please use the contact information provided below.

You are not obliged to provide your personal data. However, your personal data may be necessary for the provision of certain services and functionalities (for example, newsletters, “contact us”, etc.). Therefore, without your personal data, we may not be able to provide the requested service.

2. Who is responsible for processing my data?

The responsible data controller for any personal data collected and processed as set out in this Policy is:
Hyundai Motor Company Italy S.r.l., with registered office in Milan, Via Giovanni Bensi n. 11, which you can contact by sending an email to the mail box [email protected]

3. How can I contact the controller and the data protection officer?

3.1. If you have any questions about or in connection with this Privacy Policy or would like to complain about how we handle your personal data or you would like to exercise any of your rights (see section 9 below), please contact us by using the contact details provided in section 2.

3.2. Alternatively, you may also contact our data protection officer via the following email address: [email protected]

4. What categories of personal data are processed, for what purposes and on what legal basis?

4.1. Informational use of this website

When you visit this website for informational reasons, i.e. without registering for any of our provided services and without providing us with personal data in any other form, your browser transfers certain data to our web server. This occurs for technical reasons, and it is necessary to make the requested information available to the user.

Purpose of processing:

To provide access to the contents on our website.
To ensure system stability and efficiency.
To implement proper safeguards as to the security of our website and services.

Categories of data subjects:

Website users.

Scope of personal data processed:

Access data and server log files (IP address, date and time of your access, which pages on our website you visited, including the notification if access was successful, the volume of transferred data, the referrer URL of your previously visited website and your used browser type and version). The IT systems responsible for the correct operations of the website automatically collect your data.

Legal basis for processing:

Our legitimate interest (Article 6(1)(f), GDPR): to enhance our systems, make your usage of the websites more convenient or ensure the security of our websites.

Period of processing:

Seven days from the collection

Recipients of your personal data:

Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms).

4.2. Contacting us

If you have any questions, we offer you the opportunity to contact us using the form provided on the website. You can also send Genesis a question or an inquiry via email or our social media pages, call us or visit our authorized retail partners or repairers in person.

Purpose of processing:

To receive and handle your inquiries via email.
To establish, protect, or exercise our rights (for example, in the case a legal action is taken against us based on the content of the inquiry and subsequent interactions).

Categories of data subjects:

Website users
Prospective customers
Customers

Scope of personal data processed:

Contact data (salutation, title, first name, last name, post code, city, country, e-mail address, title, phone number)
Company name (if you are a business user)
Purchase intent
Vehicle data (model of interest, VIN, plate number)
Content and metadata of the inquiry and subsequent interactions

Legal basis for processing:

Our legitimate interest (Article 6(1)(f), GDPR) to handle and to follow up on your request; necessity for establishing, exercise or defense of legal claims.
The processing of your personal data is necessary to conclude or to perform a contract with you (Article 6(1)(b), GDPR).

Period of processing:

Up to 1 year from our last interaction unless you showed an interest in our products or services and agreed to be recontacted at a later time.
In case of complaints, 6 years from the end of the year in which the complaint was received by us.

Recipients of your personal data:

Genesis Motor Europe GmbH
Authorized retail partners and repairers
Contact centers;
Data processors for support of the operations related to customer relationship management, in particular supporting our email marketing platform and contact centers
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

4.3. Newsletter and personalized advertising

Newsletter

We offer you the possibility to subscribe to a newsletter if you wish to receive advertising about Hyundai and Genesis vehicles as well as invitations and information about product launches, satisfaction surveys and information about Hyundai and Genesis existing or new services, also based on your geographic area. If you subscribe to the Newsletter, we will obtain your consent to process your data for marketing purposes. This consent is optional and you can withdraw it at any time and free of charge, effective for the future, by clicking the "Unsubscribe" link in each newsletter/advertising email or by sending an email to [email protected].

Purpose of processing:

To communicate with you through newsletters.

Categories of data subjects:

Newsletter recipients

Scope of personal data processed:

Salutation, title, first name, last name, e-mail address, post code, country.

Legal basis for processing:

Your consent (Article 6(1)(a), GDPR).
If you are already a customer or have shown a genuine interest in purchasing our products and/or services, we may send you informative communications via email about products similar to those you have already purchased based on our legitimate interest (Article 6(1)(f), GDPR) and/or based on the exception to consent provided for by Article 130, paragraph 4, Legislative Decree 196/2003 (Privacy Code). We want to ensure that you receive all communications about our services and products similar to those you have purchased or in which you have shown a genuine interest. You will also receive invitations to participate in surveys, events, and market research because we are interested in understanding your satisfaction and expectations. You can object to this use of your personal data at any time and at no cost.

Period of processing:

If you subscribe to the Newsletter by providing us with your consent, until you withdraw it (for example, by unsubscribing from communications). In any case, no later than 24 months after the data was collected.

If we process your data based on our legitimate interest and/or pursuant to the exception to consent provided for in Article 130, paragraph 4, of Legislative Decree 196/2003, until you unsubscribe from the Newsletter using the "Unsubscribe" link provided in each communication.

Recipients of your personal data:

Authorized retailers and repairers
Genesis Motor Europe GmbH
Data processors for support of the operations related to customer relationship management, in particular supporting our email marketing platform and contact centers
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

Personalised advertising and market research
We offer you the opportunity to receive personalized advertising about Hyundai and Genesis products and events, including surveys, and to be invited to take part in our market research. If you choose to receive personalized advertising, we will obtain your consent to process your data for marketing and profiling purposes. This consent is optional and you can withdraw it at any time and free of charge, effective for the future, by clicking the "Unsubscribe" link in each personalized newsletter/email or by emailing [email protected].

Purpose of processing:

To send you personalized marketing communications, surveys and invitation to events and market research through your preferred communication channels (email, mail, phone, messenger service.

Categories of data subjects:

Website users
Prospective customers
Customers

Scope of personal data processed:

Customer account data (salutation, title, first name, last name, e-mail address, post code, city, country, Phone number, current car model, model of interest, etc.)
Service and interaction history
Vehicle data.

Legal basis for processing:

Your consent (Article 6(1)(a), GDPR).

Period of processing:

If you give us your consent, until you withdraw it (e.g. by unsubscribing from such communications). In any case, no later than 24 months after the data is collected

Recipients of your personal data:

Genesis Motor Europe GmbH
Authorized retail partners and repairers
Data processors for support of the operations related to customer relationship management, in particular supporting our email marketing platform, contact centers and market research agencies
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms).

Whenever you actively subscribe to our marketing communication, we use the so-called double opt-in procedure to confirm your email address. In this process, a confirmation request is sent to the e-mail address you entered with your subscription to confirm your consent. In connection with the double opt-in procedure, we store and document the IP address, date and time of submission of your newsletter subscription via web form as well as the IP address, date and time of your confirmation of the double opt-in email.

4.4. Find a Retail Partner

Our website includes a tool to help you find a retail partner close to your area of interest.

Purpose of processing:

To enable you to locate a retail partner closer to your area of interest.

Categories of data subjects:

Website users
Prospective customers
Customers

Scope of personal data processed:

Location data (geolocation, postcode or town)

Legal basis for processing:

Our legitimate interest (Article 6(1)(f), GDPR) to connect you with a retail partner and to improve your experience as user.

Period of processing:

For the duration of the session

Recipients of your personal data:

Genesis Motor Europe GmbH
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

4.5. Test drives

Whenever you book a test drive, we need to schedule, confirm and manage your test drive appointment.

Purpose of processing:

To process and prepare for your test drive request.
To communicate with you regarding the scheduling and the details of the test drive.
To follow up and understand your purchase intent.

Categories of data subjects:

Website users
Prospective customers

Scope of personal data processed:

Contact details (salutation, title, first name, last name, email address, phone number, post code, city, country)
Test drive model, date and time of the appointment
Purchase intent (model of interest, potential purchase period, etc.)
Company name (if you are a business customer)

Legal basis for processing:

Our legitimate interest (Article 6(1)(f), GDPR): to provide you with a hands-on experience of the vehicle and to support your decision-making process; the performance of a contract or pre-contractual measures at the request of the data subject (Article 6(1)(b) GDPR)

Period of processing:

Up to 1 year from our last interaction unless you showed an interest in our products or services and agreed on being recontacted at a later time.

Recipients of your personal data:

Authorized retail partners and repairers
Genesis Motor Europe GmbH
Data processors for support of the operations related to customer relationship management, in particular supporting our email marketing platform and contact centers
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

4.6. Configurator and inquiry form

Our website let you configure a vehicle with different options and send your chosen configuration to a retail partner for inquiry.

Purpose of processing:

To let you configure a vehicle to your liking and to help you get in touch with a retail partner for questions.

Categories of data subjects:

Website users
Prospective customers

Scope of personal data processed:

Contact details (salutation, title, first name, last name, e-mail address, phone number, street and house number, post code, city, country)
The vehicle you choose, the options you select, and the details of your inquiry
Purchase intent (model of interest, potential purchase period, etc.)
Company name (if you are a business customer)

Legal basis for processing:

Our legitimate interest (Article 6(1)(f), GDPR): to improve your experience by letting you customize your chosen vehicle and get in touch with a retail partner to answer your questions. the performance of a contract or pre-contractual measures at the request of the data subject (Article 6(1)(b) GDPR)

Period of processing:

Up to 1 year from our last interaction unless you showed an interest in our products or services and agreed on being recontacted at a later time.

Recipients of your personal data:

Authorized retail partners
Genesis Motor Europe GmbH
Data processors for support of the operations related to customer relationship management, in particular supporting our email marketing platform and contact centers
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

4.7. Data analysis to improve our business

In order to continuously improve our business processes and services, we analyse data of the individuals visiting our authorized retail partners or repairers in person, prospective customers and customers that interact with our products and services.

Purpose of processing:

To perform analysis and predictions in order to improve our business processes, products and services.

Categories of data subjects:

Website users
Prospective customers
Customers

Scope of personal data processed:

Visitor data of our website users (e.g. number of individuals visiting our authorized retail partners or repairers, unique visitor ID)
Private contact and identification data (e.g. postcode)
Customer database data (e.g. account number, order number, vehicle identification number)
Interaction data (e.g. requests to call center, requests for test drive, registration for newsletter, quotations, orders or sales)

Legal basis for processing:

Our legitimate interest (Article 6(1)(f), GDPR): to improve our business processes and operations; to improve our product or service offerings; to generate insights about user behavior and trends.

Period of processing:

5 years from data collection

Recipients of your personal data:

Genesis Motor Europe GmbH
Providers of data transformation services
Providers of data analytics services
Data processors that provide us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms)

In the course of the processing, in order to comply with the principle of data minimisation, the personal data concerned is properly pseudonymized. This includes the removal of all direct personal identifiers (e.g. name, email), which are then replaced by an Account ID. Indirectly traceable identifiers are retained. After pseudonymisation, the data is analysed in Genesis' analytics systems. At no point is the direct personal reference restored.

The results of the analysis (in particular, dashboards and key figures) are always aggregated and presented as anonymous data.

5. With whom is my data shared?

Any access to your personal data is restricted to those individuals that have a need to know in order to fulfil their job responsibilities.

We may transfer your personal data for the respective purposes to the recipients and categories of recipients listed below and as stated in section 4.

Unaffiliated private third parties – In certain cases, we may share your personal data with trusted, unaffiliated third parties who assist us in delivering our products and services to you efficiently.

These are in particular, but not limited to our network of authorized retail partners and of authorized repairers: we may share your data with our network of retail partners and repairers for the purpose of providing the agreed services, customer relationship management, customer service, customer satisfaction surveys, event management, marketing and market research activities.

Affiliated private third parties – We are part of the Hyundai Motor group. In some cases, after careful review, we may transfer your personal data to other entities in the group (e.g. our local entities in your country of residence), each of which will process your personal data as an independent data controller or as a joint controller with us (for example, for administrative support etc.). These are in particular, but not limited to:
- Hyundai Motor Company, 12 Heolleung-ro, Seocho-gu, Seoul, South Korea
- Genesis Motor Europe GmbH, Kaiserleipromenade 5, 63067 Offenbach am Main, Germany

Data processors – Certain third parties, whether affiliated or unaffiliated, may receive your personal data to process such data on behalf of us under appropriate instructions as necessary for the respective processing purposes. The data processors will be subject to contractual obligations to ensure the implementation of appropriate technical and organizational security measures to safeguard the personal data, and to process the personal data only as instructed. The current data processors are involved in particular, but not limited to in the following processes:
- We are using data processors for providing us with services relating to our IT infrastructure (e.g. hosting or operation and maintenance of our IT systems and platforms).
- We engage data processors for the operation and maintenance as well as content creation for our website.
- We are using data processors for the support of the operations related to customer relationship management.
- We transmit your personal data to certain third-party service providers (contact centers, market research companies and event management companies etc.).

Governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law. Some disclosures are required by law (for example, court orders or requests from the police). In these cases, we will process your data because we are subject to a legal obligation (Article 6(1)(c), GDPR) to do so

If you click on an external link some of your data such as your IP address will be transmitted to the link’s destination. This is technically necessary due to the TCP/IP protocol on which the Internet is based.

6. Is my data transferred abroad?

Within the scope of the activities set out above, your personal data may be transferred to other countries which may have different data protection standards than your country of residence. In this case we have applied appropriate safeguards with the involved third parties in place to ensure an adequate level of protection for personal data. Please note that personal data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavor to take reasonable measures to reach an adequate level of data protection also when sharing your personal data with such countries (for example, by concluding specific agreements the recipient of your data, or we will ask for your explicit consent to such transfer).

7. How is my data secured?

We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorized personnel have access to personal data. In order to protect your personal data transmitted via our website, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.

Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.

IP address shortening:
If IP addresses are processed by us or by the service providers and technologies used and the processing of a complete IP address is not required, the IP address is shortened (also referred to as "IP masking"). In this process, the last two digits or the last part of the IP address after a period are removed or replaced by ‘wildcard’ characters, such as asterisks. The shortening of the IP address is intended to prevent or significantly complicate the identification of a person by means of their IP address.

8. How long will my data be stored?

Your personal data is generally stored for as long as necessary in relation to the purposes and in order to provide you with our services. Besides, we generally store your data to the extent needed to meet our legal obligations and to protect our rights: for example, we will store your data in accordance with statutory retention periods.

Insofar more specific retention periods will apply; you can refer to the information on the period of processing of your personal data as indicated in section 4 above.

9. What rights do I have and how can I exercise them?

You have certain rights in relation to your personal data that you can exercise towards us. In accordance with applicable data protection laws these rights may be restricted under certain conditions.

You can always exercise your rights at any time by contacting us via the contact information as stated in section 3.

Generally, you have the following rights:

9.1. Right of access: You have the right to obtain from us confirmation as to whether or not we process your personal data and, where that is the case, to request access to your personal data. You also have the right to obtain a copy of your personal data which we process.

9.2. Right to rectification: You have the right to the rectification of any inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data updated, including by means of providing a supplementary statement.

9.3. Right to erasure (“right to be forgotten”): Under certain circumstances, you have the right to the erasure of your personal data and we may be obliged to erase your personal data.

9.4. Right to restriction of processing: Under certain circumstances, you have the right to have a restriction placed on the processing of your personal data. This means that your data will generally not be processed by us with the exception of storage.

9.5. Right to data portability: Under certain circumstances, you have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right, without hindrance from us, to transfer this data or have it transferred directly by us to another entity.

9.6. Right to object: You have the right to object to processing of personal data for the purposes of direct marketing and, under certain circumstances, when the processing of data for other purposes is based on legitimate interest.

9.7. Right to complain: You also have the right to make a complaint with the competent data protection supervisory authority in your country.

9.8. Right to withdraw consent: If you have given your consent to the processing of your personal data, you can withdraw your consent at any time with the effect for future processing. The withdrawal of the consent does not affect the processing that took place prior to the withdrawal of the consent.

10. Changes to the Privacy Policy

We may change and/or supplement this Privacy Policy from time to time in the future. Such changes and/or supplements may be necessary due to the implementation of new technologies or the introduction of new services. We will publish the changes on https://www.genesis.com/it/en/privacy-policy.html and/or inform you accordingly (for example, via email or hard copy letter).

Where we provide addresses and contact information of companies and organizations in this privacy policy, please note that both may change over time. Therefore, we recommend checking the relevant information before contacting us.

Date: January 2026