{
    "id": 1889,
    "date": "2026-05-24T11:07:32",
    "date_gmt": "2026-05-24T03:07:32",
    "guid": {
        "rendered": "https:\/\/aifusionx.vamtam.com\/?page_id=1889"
    },
    "modified": "2026-06-15T13:08:12",
    "modified_gmt": "2026-06-15T05:08:12",
    "slug": "privacy-policy",
    "status": "publish",
    "type": "page",
    "link": "https:\/\/genixenergy.com.ua\/en\/privacy-policy\/",
    "title": {
        "rendered": "Privacy policy"
    },
    "content": {
        "rendered": "<div data-elementor-type=\"wp-page\" data-elementor-id=\"1889\" class=\"elementor elementor-1889\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dc83584 e-con e-atomic-element e-flexbox-base e-6f99cab\" data-id=\"dc83584\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"dc83584\">\n    \t\t<div class=\"elementor-element elementor-element-47f6811 elementor-widget elementor-widget-html\" data-id=\"47f6811\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<style>\n.gx-legal-wrap {\n  width: 100%;\n  display: flex;\n  justify-content: center;\n  padding: 48px 24px;\n  background: transparent;\n  box-sizing: border-box;\n}\n.gx-legal {\n  --gx-fg: #0B1E3D;\n  --gx-fg-2: #4A5670;\n  --gx-fg-3: #8A95AD;\n  --gx-surface: #EEF2F8;\n  --gx-border: #D5DDEC;\n  --gx-accent: #2563EB;\n  --gx-orange: #E77A19;\n\n  width: 100% !important;\n  max-width: 800px !important;\n  margin: 0 !important;\n  padding: 32px 24px 64px;\n  background: transparent !important;\n  border: none;\n  border-radius: 0;\n  box-shadow: none;\n  font-family: 'Manrope', system-ui, -apple-system, BlinkMacSystemFont, sans-serif;\n  font-size: 16px;\n  line-height: 1.7;\n  color: var(--gx-fg);\n  box-sizing: border-box;\n  -webkit-font-smoothing: antialiased;\n  text-rendering: optimizeLegibility;\n}\n.gx-legal * { box-sizing: border-box; }\n.gx-legal > p:first-of-type { color: var(--gx-fg-2); font-size: 14px; margin: 0 0 4px; }\n.gx-legal hr { border: 0; border-top: 1px solid var(--gx-border); margin: 32px 0; }\n.gx-legal h2 { font-family: 'Onest','Manrope',sans-serif; font-size: 28px; font-weight: 700; line-height: 1.3; letter-spacing: -0.01em; margin: 64px 0 16px; color: var(--gx-fg); }\n.gx-legal h2:first-of-type { margin-top: 0; }\n.gx-legal h3 { font-family: 'Onest','Manrope',sans-serif; font-size: 20px; font-weight: 600; line-height: 1.4; margin: 36px 0 12px; color: var(--gx-fg); }\n.gx-legal h4 { font-size: 17px; font-weight: 600; margin: 24px 0 8px; color: var(--gx-fg); }\n.gx-legal p { margin: 0 0 16px; }\n.gx-legal strong { font-weight: 600; }\n.gx-legal a { color: var(--gx-accent); text-decoration: underline; text-decoration-thickness: 1px; text-underline-offset: 3px; transition: color 150ms ease; }\n.gx-legal a:hover { color: var(--gx-orange); }\n.gx-legal ul { margin: 0 0 16px; padding-left: 24px; }\n.gx-legal li { margin: 6px 0; padding-left: 4px; }\n.gx-legal li::marker { color: var(--gx-fg-3); }\n.gx-legal blockquote { background: var(--gx-surface); padding: 14px 18px; border-radius: 6px; margin: 16px 0; color: var(--gx-fg-2); font-style: normal; }\n.gx-legal table { width: 100%; border-collapse: collapse; margin: 16px 0 24px; font-size: 14px; background: #FFFFFF; border-radius: 8px; overflow: hidden; }\n.gx-legal th, .gx-legal td { padding: 10px 12px; border: 1px solid var(--gx-border); text-align: left; vertical-align: top; }\n.gx-legal th { background: var(--gx-surface); font-weight: 600; color: var(--gx-fg); }\n.gx-legal code { font-family: 'JetBrains Mono','Menlo',monospace; font-size: 0.9em; background: var(--gx-surface); padding: 2px 6px; border-radius: 4px; }\n@media (max-width: 768px) {\n  .gx-legal-wrap { padding: 32px 16px; }\n  .gx-legal { padding: 24px 16px 56px; font-size: 15px; }\n  .gx-legal h2 { font-size: 24px; margin-top: 48px; }\n  .gx-legal h3 { font-size: 18px; margin-top: 28px; }\n  .gx-legal table { font-size: 13px; }\n  .gx-legal th, .gx-legal td { padding: 8px 10px; }\n  .gx-legal blockquote { padding: 12px 14px; }\n}\n<\/style>\n\n\n\n<!-- Genixgreen Privacy Policy \u00b7 SEO-optimized for Elementor HTML widget -->\n<!-- H1 omitted: WordPress page title acts as H1 -->\n<div class=\"gx-legal-wrap\">\n<article class=\"gx-legal\" itemscope itemtype=\"https:\/\/schema.org\/WebPage\" lang=\"en\">\n  <meta itemprop=\"name\" content=\"Privacy Policy\">\n  <meta itemprop=\"datePublished\" content=\"2026-06-01\">\n  <meta itemprop=\"dateModified\" content=\"2026-05-29\">\n  <meta itemprop=\"inLanguage\" content=\"en\">\n\n  <p><strong>Effective Date<\/strong>: 2026-06-01<br>\n  <strong>Last Updated<\/strong>: 2026-05-29<\/p>\n\n  <hr>\n\n<h2>1. Introduction and Scope<\/h2>\n<p><strong>Plain-language summary<\/strong>: This privacy policy explains what data we collect, why, how long we keep it, and your rights under Ukrainian and GDPR law.<\/p>\n<p>When you visit genixenergy.com.ua, contact us via email, WhatsApp, Telegram, or submit an inquiry form, we collect and process personal data. This policy describes what data, why, how we use it, and your rights.<\/p>\n<p><strong>Scope<\/strong>: Applies to website visitors, customers, prospects, business contacts, and newsletter subscribers globally, though Genixgreen products are offered for Ukraine only.<\/p>\n<h2>2. Data Controller Identity<\/h2>\n<p><strong>Plain-language summary<\/strong>: Who is legally responsible for your data and how to contact us.<\/p>\n<p><strong>Data Controller<\/strong> (entity responsible for your data):<\/p>\n<ul>\n  <li><strong>Name<\/strong>: Shenzhen YancoPow New Energy Co., Ltd.<\/li>\n  <li><strong>Location<\/strong>: Shenzhen, China<\/li>\n  <li><strong>Brand<\/strong>: Genixgreen\u00ae (registered trademark of Shenzhen Genixgreen Technology Co., Ltd.)<\/li>\n  <li><strong>Authorization<\/strong>: Exclusive authorized distributor in Ukraine<\/li>\n<\/ul>\n<p><strong>Contact for privacy requests<\/strong>:<\/p>\n<ul>\n  <li><strong>General inquiries<\/strong>: info@genixenergy.com.ua<\/li>\n  <li><strong>Data protection<\/strong>: privacy@genixenergy.com.ua (data subject rights \u00b7 access \/ deletion \/ portability \/ objection)<\/li>\n  <li><strong>Legal correspondence<\/strong>: legal@genixenergy.com.ua (postal address available on request)<\/li>\n  <li><strong>Data Protection Officer<\/strong>: dpo@genixenergy.com.ua (GDPR Art. 38(5) independent public contact)<\/li>\n<\/ul>\n<h2>3. What Personal Data We Collect<\/h2>\n<p><strong>Plain-language summary<\/strong>: Every category of data we gather and how we get it.<\/p>\n<h3>3.1 Data Collected Directly from You<\/h3>\n<p><strong>Contact Forms & Inquiries<\/strong>:<\/p>\n<ul>\n  <li>Full name, company name, email, phone, country, product interest, message content.<\/li>\n<\/ul>\n<p><strong>Newsletter Subscriptions<\/strong>:<\/p>\n<ul>\n  <li>Email, first name (optional), subscription date, IP address at signup.<\/li>\n<\/ul>\n<p><strong>Direct Communication<\/strong> (Email, WhatsApp, Telegram):<\/p>\n<ul>\n  <li>Name, contact details, message content, conversation history, timestamps.<\/li>\n<\/ul>\n<p><strong>Portal \/ Quotation Accounts<\/strong> (if enabled):<\/p>\n<ul>\n  <li>Login credentials (hashed), profile info, order history, download logs (datasheets).<\/li>\n<\/ul>\n<h3>3.2 Data Collected Automatically<\/h3>\n<p><strong>Website Activity<\/strong>:<\/p>\n<ul>\n  <li>IP address, browser type, OS, pages visited, referrer, download activity, timestamps.<\/li>\n<\/ul>\n<p><strong>Cookies & Tracking<\/strong> (see Cookie Policy):<\/p>\n<ul>\n  <li>Session identifiers, language preference (TranslatePress), analytics IDs (Google Analytics 4), WordPress settings.<\/li>\n<\/ul>\n<p><strong>Analytics & Heatmaps<\/strong> (if deployed):<\/p>\n<ul>\n  <li>City-level location (via IP), device type, screen resolution, scroll depth, form interactions.<\/li>\n<\/ul>\n<h3>3.3 Third-Party Services<\/h3>\n<p><strong>Google Analytics 4<\/strong>: User ID (if logged in; anonymized otherwise), event data, audience demographics.<\/p>\n<p><strong>WhatsApp \/ Telegram APIs<\/strong> (if integrated): Message content, metadata, timestamp, delivery status.<\/p>\n<p><strong>Email Service Provider<\/strong> (if third-party): Deliverability, open\/click tracking, subscriber status.<\/p>\n<p><strong>Hostinger Hosting<\/strong>: Raw HTTP logs (IP, user agent, request URL, HTTP status).<\/p>\n<h3>3.4 Sensitive Data<\/h3>\n<p><strong>Does NOT collect<\/strong>: Payment card numbers, biometric data, political\/religious affiliations, criminal records, unrelated health data.<\/p>\n<p><strong>Collects (if relevant)<\/strong>: Business type (energy sector, etc.), general location (country\/region).<\/p>\n<h2>4. Legal Basis for Processing<\/h2>\n<p><strong>Plain-language summary<\/strong>: Why we have the legal right to process your data per GDPR Article 6 and Ukrainian law.<\/p>\n<h3>4.1 Legitimate Interest (GDPR Art. 6(1)(f))<\/h3>\n<ul>\n  <li><strong>Website analytics & optimization<\/strong>: Analyze user behavior to improve performance.<\/li>\n  <li><strong>Fraud prevention & security<\/strong>: Monitor for attacks, unauthorized access.<\/li>\n  <li><strong>Direct marketing<\/strong> (B2B business contacts): Product updates, quotations, service announcements.<\/li>\n  <li><strong>Business communication<\/strong>: Respond to inquiries, manage quotes, facilitate relationships.<\/li>\n  <li><strong>Record-keeping & compliance<\/strong>: Maintain business records for tax, audit, regulatory purposes.<\/li>\n<\/ul>\n<p><strong>Balancing Test<\/strong>: Your privacy interest is outweighed because you can expect B2B communication after inquiring about a product; analytics are anonymized; security protects your data; you can opt-out (\u00a710).<\/p>\n<h3>4.2 Contract Necessity (GDPR Art. 6(1)(b))<\/h3>\n<ul>\n  <li><strong>Quotation & order processing<\/strong>: Contact, company details needed for quotes, orders, delivery, invoicing.<\/li>\n  <li><strong>Account creation<\/strong>: Login credentials, profile data for identity verification and account delivery.<\/li>\n<\/ul>\n<h3>4.3 Consent (GDPR Art. 6(1)(a))<\/h3>\n<ul>\n  <li><strong>Newsletter subscription<\/strong>: Explicit opt-in to email marketing.<\/li>\n  <li><strong>Non-essential cookies<\/strong>: Only with prior consent via cookie banner.<\/li>\n<\/ul>\n<h3>4.4 Legal Obligation (GDPR Art. 6(1)(c))<\/h3>\n<ul>\n  <li><strong>Tax & financial records<\/strong>: Retain invoices, payment records per Ukrainian tax law minimum 7 years.<\/li>\n<\/ul>\n<h3>4.5 Ukrainian Law Compliance<\/h3>\n<p>Processing complies with Law of Ukraine \"On Personal Data Protection\" No. 2297-VI: explicit purpose, lawful collection, stated-purpose processing only, reasonable retention.<\/p>\n<h2>5. Purposes of Processing<\/h2>\n<p><strong>Plain-language summary<\/strong>: What we do with your data.<\/p>\n<p><strong>Only these purposes<\/strong>:<\/p>\n<table>\n  <thead>\n    <tr>\n      <th>Purpose<\/th>\n      <th>Legal Basis<\/th>\n      <th>Retention<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>Quotation & Sales<\/td>\n      <td>Contract; Legitimate Interest<\/td>\n      <td>180 days\u20133 years<\/td>\n    <\/tr>\n    <tr>\n      <td>Order Fulfillment<\/td>\n      <td>Contract<\/td>\n      <td>30 days post-delivery<\/td>\n    <\/tr>\n    <tr>\n      <td>Customer Communication<\/td>\n      <td>Contract; Legitimate Interest<\/td>\n      <td>Duration of relationship<\/td>\n    <\/tr>\n    <tr>\n      <td>Invoicing & Payment (tax law)<\/td>\n      <td>Legal Obligation<\/td>\n      <td>7 years (min. 7 under Ukrainian law)<\/td>\n    <\/tr>\n    <tr>\n      <td>Technical Support<\/td>\n      <td>Contract; Legitimate Interest<\/td>\n      <td>30 days post-resolution<\/td>\n    <\/tr>\n    <tr>\n      <td>Newsletter & Marketing<\/td>\n      <td>Consent; Legitimate Interest<\/td>\n      <td>Until unsubscribe + 365 days archive<\/td>\n    <\/tr>\n    <tr>\n      <td>Website Analytics<\/td>\n      <td>Legitimate Interest; Consent<\/td>\n      <td>26 months<\/td>\n    <\/tr>\n    <tr>\n      <td>Security & Fraud Detection<\/td>\n      <td>Legitimate Interest; Legal Obligation<\/td>\n      <td>90 days<\/td>\n    <\/tr>\n    <tr>\n      <td>Compliance & Legal Claims<\/td>\n      <td>Legal Obligation; Legitimate Interest<\/td>\n      <td>5 years or legal hold<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n<p><strong>No secondary use<\/strong>: No re-sale to third parties, no behavioral profiling unrelated to product interest, no AI\/ML training without separate explicit consent.<\/p>\n<h2>6. Data Retention<\/h2>\n<p><strong>Plain-language summary<\/strong>: How long we keep different types of data.<\/p>\n<table>\n  <thead>\n    <tr>\n      <th>Data Type<\/th>\n      <th>Period<\/th>\n      <th>Rationale<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>Inquiry \/ Quotation (non-customer)<\/td>\n      <td>6 months<\/td>\n      <td>Business record; no ongoing relationship<\/td>\n    <\/tr>\n    <tr>\n      <td>Quotation \u2192 Order<\/td>\n      <td>5 years<\/td>\n      <td>Fulfillment, warranty, tax<\/td>\n    <\/tr>\n    <tr>\n      <td>Invoice & Payment<\/td>\n      <td>7 years (min. 7 Ukrainian law)<\/td>\n      <td>Tax compliance<\/td>\n    <\/tr>\n    <tr>\n      <td>Server Logs (raw HTTP)<\/td>\n      <td>90 days<\/td>\n      <td>Security, troubleshooting<\/td>\n    <\/tr>\n    <tr>\n      <td>Google Analytics 4<\/td>\n      <td>26 months (default 2\u201338 configurable)<\/td>\n      <td>Performance optimization<\/td>\n    <\/tr>\n    <tr>\n      <td>Newsletter Subscriber List<\/td>\n      <td>Until unsubscribe; 12 months archive<\/td>\n      <td>Consent proof, suppression list<\/td>\n    <\/tr>\n    <tr>\n      <td>Support Tickets<\/td>\n      <td>24 months post-resolution<\/td>\n      <td>Reference, dispute resolution<\/td>\n    <\/tr>\n    <tr>\n      <td>Access Logs & Security Alerts<\/td>\n      <td>90 days<\/td>\n      <td>Fraud\/abuse detection; legal hold if incident<\/td>\n    <\/tr>\n    <tr>\n      <td>Session Cookies<\/td>\n      <td>Duration of session (cleared on logout)<\/td>\n      <td>Technical necessity<\/td>\n    <\/tr>\n    <tr>\n      <td>Persistent Cookies<\/td>\n      <td>12 months or per cookie table<\/td>\n      <td>Preference storage<\/td>\n    <\/tr>\n    <tr>\n      <td>Deleted Account Data<\/td>\n      <td>30 days<\/td>\n      <td>Recovery window; then purged<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n<p><strong>Deletion on request<\/strong>: Erasure requests fulfilled within 30 days, except where legal obligation (tax law, litigation) requires retention.<\/p>\n<h2>7. Sharing and Disclosure<\/h2>\n<p><strong>Plain-language summary<\/strong>: Who else can see your data and under what circumstances.<\/p>\n<h3>7.1 Third-Party Service Providers (Data Processors)<\/h3>\n<p>We share data with processors under written Data Processing Agreements:<\/p>\n<table>\n  <thead>\n    <tr>\n      <th>Service Provider<\/th>\n      <th>Data<\/th>\n      <th>Purpose<\/th>\n      <th>Location<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>Google Analytics 4<\/td>\n      <td>IP, user ID, event data, audience interests<\/td>\n      <td>Analytics & improvement<\/td>\n      <td>USA<\/td>\n    <\/tr>\n    <tr>\n      <td>Brevo (or alternative \u00b7 pending deployment)<\/td>\n      <td>Email, name, subscription status, tracking<\/td>\n      <td>Newsletter delivery<\/td>\n      <td>EU (France \u00b7 Brevo default)<\/td>\n    <\/tr>\n    <tr>\n      <td>Hostinger<\/td>\n      <td>IP, request logs, server data<\/td>\n      <td>Web hosting<\/td>\n      <td>Lithuania (EU)<\/td>\n    <\/tr>\n    <tr>\n      <td>(not currently deployed \u00b7 B2B SWIFT only)<\/td>\n      <td>Payment details<\/td>\n      <td>Payment processing<\/td>\n      <td>N\/A<\/td>\n    <\/tr>\n    <tr>\n      <td>WhatsApp Business API<\/td>\n      <td>Phone, message content, metadata<\/td>\n      <td>Customer communication<\/td>\n      <td>USA (Meta)<\/td>\n    <\/tr>\n    <tr>\n      <td>Telegram Bot API<\/td>\n      <td>Chat ID, username, message content<\/td>\n      <td>Inquiry bot, communication<\/td>\n      <td>USA (Telegram)<\/td>\n    <\/tr>\n    <tr>\n      <td>Nova Poshta<\/td>\n      <td>Name, address, phone, order reference<\/td>\n      <td>Shipment & delivery<\/td>\n      <td>Ukraine<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n<p><strong>DPA Confirmation<\/strong>: Each processor has confirmed written DPA, adequate data protection, and sub-processor disclosure.<\/p>\n<h3>7.2 Third-Party Data Controllers<\/h3>\n<p>Your data may be shared with:<\/p>\n<ul>\n  <li><strong>Logistics\/Installer partners<\/strong> you nominate (separate controllers under their privacy policy).<\/li>\n  <li><strong>Product manufacturers<\/strong> for technical support (manufacturer's privacy policy applies).<\/li>\n<\/ul>\n<h3>7.3 Legal Disclosure<\/h3>\n<p>Disclosure without consent only when required by law: court orders, subpoenas, tax\/sanctions screening, emergency harm prevention. We notify you whenever legally permissible.<\/p>\n<h3>7.4 Business Transfer<\/h3>\n<p>If Genixgreen is acquired, merged, or enters bankruptcy, your data may transfer as business assets. We will notify you with right to opt-out if legally required.<\/p>\n<h3>7.5 Aggregated \/ Anonymized Data<\/h3>\n<p>We may share aggregated or anonymized data (e.g., \"50% of inquiries from Kyiv region\") with internal stakeholders or research partners. No consent required (GDPR Recital 26).<\/p>\n<h2>8. International Data Transfers<\/h2>\n<p><strong>Plain-language summary<\/strong>: When your data leaves Ukraine\/EU and how we protect it.<\/p>\n<h3>8.1 Processing Locations<\/h3>\n<p>Personal data is processed in:<\/p>\n<ul>\n  <li><strong>Ukraine<\/strong>: Local server logs, customer databases (Hostinger).<\/li>\n  <li><strong>USA<\/strong>: Google Analytics 4, WhatsApp Business, Telegram, Google Workspace (if used).<\/li>\n  <li><strong>EU<\/strong>: (not applicable \u00b7 no EU-based processing currently).<\/li>\n  <li><strong>Other<\/strong>: USA (Google \u00b7 Analytics), EU (Hostinger \u00b7 web hosting), Ukraine (local operations).<\/li>\n<\/ul>\n<h3>8.2 Transfers Outside Ukraine \/ EU (Adequate Countries)<\/h3>\n<p><strong>Mechanism<\/strong>: Transfers to USA and countries outside EU\/EEA where European Commission has not found adequate data protection use:<\/p>\n<p>1. <strong>Standard Contractual Clauses (SCCs)<\/strong> (GDPR Art. 46(2)(c)):<\/p>\n<p>- Google LLC (Analytics): SCCs in Google Ads Data Processing Amendment.<\/p>\n<p>- (not currently deployed \u00b7 B2B SWIFT only): SCCs per processor agreement (Stripe, PayPal, etc.).<\/p>\n<p>- WhatsApp \/ Telegram: SCCs in standard terms.<\/p>\n<p>2. <strong>Binding Corporate Rules (BCRs)<\/strong>: Not currently applicable (no multi-subsidiary structure).<\/p>\n<p>3. <strong>Adequacy Decision<\/strong>: USA lacks EU adequacy decision; SCCs are required mechanism.<\/p>\n<h3>8.3 Safeguards & Risk Mitigation<\/h3>\n<ul>\n  <li><strong>Encryption in transit<\/strong>: TLS 1.2+ for all data transfers.<\/li>\n  <li><strong>Limited retention<\/strong>: Processors retain only as long as necessary.<\/li>\n  <li><strong>Sub-processor approval<\/strong>: We review and approve further sub-processors.<\/li>\n  <li><strong>Your rights preserved<\/strong>: Despite transfer, you retain all rights under \u00a79 (GDPR Art. 45\u201350).<\/li>\n<\/ul>\n<h3>8.4 Supervisory Authority Coordination<\/h3>\n<p>Your national DPA (EU members) and Ukrainian Ombudsman coordinate on transfer adequacy assessments.<\/p>\n<h2>9. Your Rights as a Data Subject<\/h2>\n<p><strong>Plain-language summary<\/strong>: What you can ask us to do with your data.<\/p>\n<h3>9.1 GDPR Rights<\/h3>\n<p><strong>1. Right of Access (Art. 15)<\/strong><\/p>\n<ul>\n  <li>Request a copy of all personal data in structured, commonly-used format.<\/li>\n  <li>Response: 30 days.<\/li>\n<\/ul>\n<p><strong>2. Right to Rectification (Art. 16)<\/strong><\/p>\n<ul>\n  <li>Correct inaccurate or incomplete data (e.g., wrong email, job title, company).<\/li>\n  <li>Response: 30 days.<\/li>\n<\/ul>\n<p><strong>3. Right to Erasure (Art. 17)<\/strong> (\"Right to Be Forgotten\")<\/p>\n<ul>\n  <li>Request deletion if no longer necessary, you withdraw consent, you object (no overriding interest), or data collected unlawfully.<\/li>\n  <li><strong>Exceptions<\/strong>: Legal obligation (tax records), legitimate interest, public task.<\/li>\n  <li>Response: 30 days; some data retained if legally required.<\/li>\n<\/ul>\n<p><strong>4. Right to Restrict Processing (Art. 18)<\/strong><\/p>\n<ul>\n  <li>Ask us to limit data use (e.g., don't market while disputing accuracy).<\/li>\n  <li>Data tagged \"restricted\"; use limited to storage + compliance.<\/li>\n  <li>Response: 30 days.<\/li>\n<\/ul>\n<p><strong>5. Right to Data Portability (Art. 20)<\/strong><\/p>\n<ul>\n  <li>Request data in machine-readable format (CSV, JSON) to transfer elsewhere.<\/li>\n  <li>Response: 30 days.<\/li>\n<\/ul>\n<p><strong>6. Right to Object (Art. 21)<\/strong><\/p>\n<ul>\n  <li>Opt-out of processing based on legitimate interest or direct marketing.<\/li>\n  <li>Response: Immediate (email\/marketing) or 30 days (other).<\/li>\n<\/ul>\n<p><strong>7. Right Against Automated Decision-Making (Art. 22)<\/strong><\/p>\n<ul>\n  <li>If a decision affecting you is solely automated (e.g., algorithm denial), request human review.<\/li>\n  <li><strong>Note<\/strong>: Genixgreen does not use automated decision-making for quotation approval (all quotes reviewed by humans).<\/li>\n<\/ul>\n<h3>9.2 Ukrainian Law Rights (Law On Personal Data Protection No. 2297-VI)<\/h3>\n<p>Similar rights: access, correction, deletion, objection, data portability, complaint to supervisory authority.<\/p>\n<p><strong>Alignment<\/strong>: Where conflicts exist, the more protective standard applies.<\/p>\n<h3>9.3 Special Cases<\/h3>\n<p><strong>Children (Under 16)<\/strong>: Genixgreen does not knowingly collect data from children. Parental consent required. If discovered, we delete promptly (see \u00a712).<\/p>\n<p><strong>Deceased Persons<\/strong>: Heirs or legal representatives may request deletion. Exception: Legal obligation or legitimate interest (e.g., contract disputes).<\/p>\n<h2>10. How to Exercise Your Rights<\/h2>\n<p><strong>Plain-language summary<\/strong>: How to ask for access, deletion, or other actions.<\/p>\n<h3>10.1 Making a Request<\/h3>\n<p>Send a <strong>written request<\/strong> (email preferred) to:<\/p>\n<ul>\n  <li><strong>privacy@genixenergy.com.ua<\/strong> (data subject rights \u00b7 access \/ deletion \/ portability \/ objection)<\/li>\n  <li><strong>Alternative<\/strong>: dpo@genixenergy.com.ua (DPO)<\/li>\n  <li><strong>Postal address<\/strong>: Available on request via legal@genixenergy.com.ua<\/li>\n<\/ul>\n<h3>10.2 Request Content<\/h3>\n<p>Include:<\/p>\n<ul>\n  <li>Your full name and contact information (email, phone).<\/li>\n  <li>Which right you're exercising (access, rectification, erasure, portability, objection, etc.).<\/li>\n  <li>Scope (specific data categories, date range).<\/li>\n  <li>Proof of identity (passport\/ID copy for security verification).<\/li>\n  <li>Examples to help us locate your data.<\/li>\n<\/ul>\n<h3>10.3 Response Timeline<\/h3>\n<p>Genixgreen responds within <strong>30 days<\/strong> (typically 30 under GDPR; may extend to 60 for complex requests):<\/p>\n<ul>\n  <li><strong>Acknowledgment<\/strong>: Within 5 days.<\/li>\n  <li><strong>Fulfillment<\/strong>: Provide data, confirm action, or explain why we cannot comply (with reason and appeal process).<\/li>\n  <li><strong>Extension<\/strong>: Complex requests may receive additional 60 days.<\/li>\n<\/ul>\n<h3>10.4 No Charge (Mostly)<\/h3>\n<ul>\n  <li><strong>Standard requests<\/strong> (access, rectification, objection): <strong>Free<\/strong>.<\/li>\n  <li><strong>Excessive requests<\/strong> (same data 5+ times in 12 months): Genixgreen may charge reasonable fee per GDPR Art. 12(5) or decline frivolous requests.<\/li>\n<\/ul>\n<h3>10.5 Right to Lodge Complaint<\/h3>\n<p>If rights are violated:<\/p>\n<ul>\n  <li><strong>Ukrainian authority<\/strong>: Ombudsman (Commissioner for Human Rights), Kyiv or see \u00a715.1 above.<\/li>\n  <li><strong>EU authority<\/strong> (if you are in EU): Your national DPA (e.g., Ireland DPC, German BfDI).<\/li>\n<\/ul>\n<p><strong>No fee or retaliation<\/strong>: Complain without retaliation from Genixgreen.<\/p>\n<h2>11. Cookies & Tracking<\/h2>\n<p><strong>Plain-language summary<\/strong>: We use cookies to remember preferences and track site usage. See our separate Cookie Policy for details.<\/p>\n<p><strong>Summary of cookie categories<\/strong>:<\/p>\n<ul>\n  <li><strong>Strictly Necessary<\/strong>: Session ID, CSRF tokens, language preference (TranslatePress trp_language).<\/li>\n  <li><strong>Performance & Analytics<\/strong>: Google Analytics (_ga, _ga_X, _gid): page performance, user behavior.<\/li>\n  <li><strong>Functional<\/strong>: WordPress preferences: logged-in state, UI preferences.<\/li>\n  <li><strong>Marketing & Tracking<\/strong> (if enabled): Retargeting pixels, social media tracking.<\/li>\n<\/ul>\n<p><strong>First visit<\/strong>: Cookie consent banner appears before non-essential cookies are set. You can accept all, reject all, or manage preferences. Withdraw consent anytime via banner or contact form.<\/p>\n<p><strong>Browser controls<\/strong>: Disable cookies via browser settings (Chrome Settings > Privacy & Security > Cookies; Firefox Preferences > Privacy > Cookies; Safari Preferences > Privacy > Manage Website Data). Some site features may not work without cookies (e.g., staying logged in).<\/p>\n<p>See separate <strong>Cookie Policy<\/strong> (link below) for complete names, providers, purposes, retention, and opt-out links.<\/p>\n<h2>12. Children's Privacy<\/h2>\n<p><strong>Plain-language summary<\/strong>: We do not knowingly collect data from children, and if we do, we delete it promptly.<\/p>\n<p><strong>Age requirement<\/strong>: Services are <strong>not intended for children<\/strong> under 16 years old.<\/p>\n<p><strong>If we discover child data<\/strong>: We delete immediately (or seek parental consent if required). We notify the parent\/guardian if feasible. No marketing use.<\/p>\n<p><strong>Parental rights<\/strong>: Parents or guardians may request access or deletion of their child's data with proof of guardianship (see \u00a710.2).<\/p>\n<p><strong>Age variations<\/strong>: Different countries set different ages (16 in GDPR; 13 in some USA states). We apply the <strong>most protective age<\/strong> applicable to you.<\/p>\n<h2>13. Data Security Measures<\/h2>\n<p><strong>Plain-language summary<\/strong>: How we protect your data from theft, loss, or misuse.<\/p>\n<h3>13.1 Technical Safeguards<\/h3>\n<ul>\n  <li><strong>Encryption in transit<\/strong>: TLS 1.2+ HTTPS for all data sent to us (padlock icon in browser).<\/li>\n  <li><strong>Encryption at rest<\/strong>: Sensitive data (passwords, payment records) stored in encrypted databases.<\/li>\n  <li><strong>Access control<\/strong>: Employee access limited on \"need-to-know\" basis; MFA for admin accounts.<\/li>\n  <li><strong>Firewalls & Intrusion Detection<\/strong>: Server firewalls, DDoS protection, regular penetration testing.<\/li>\n<\/ul>\n<h3>13.2 Organizational Safeguards<\/h3>\n<ul>\n  <li><strong>Data protection training<\/strong>: Annual employee privacy training.<\/li>\n  <li><strong>Vendor audits<\/strong>: Third-party processors (Google, Hostinger, payment providers) audited for SOC 2 \/ ISO 27001.<\/li>\n  <li><strong>Data minimization<\/strong>: Collect only data needed for stated purposes.<\/li>\n  <li><strong>Purpose limitation<\/strong>: Data used only for intended purposes; not repurposed without consent.<\/li>\n<\/ul>\n<h3>13.3 Breach Notification<\/h3>\n<p><strong>If a data breach occurs<\/strong>, Genixgreen will:<\/p>\n<p>1. <strong>Assess risk<\/strong>: Determine if breach poses risk to individuals' rights\/freedoms.<\/p>\n<p>2. <strong>Notify authorities<\/strong>: Report to Ukrainian supervisory authority within <strong>72 hours<\/strong> if high-risk.<\/p>\n<p>3. <strong>Notify you<\/strong>: If breach affects you and poses significant risk, we notify <strong>without undue delay<\/strong> via email or phone.<\/p>\n<p>4. <strong>Content<\/strong>: What happened, what data, what we're doing to fix it, your remedies (credit monitoring, etc.).<\/p>\n<p><strong>Limitation<\/strong>: We may delay notification if required by law enforcement.<\/p>\n<h3>13.4 No Guarantee<\/h3>\n<p>While we use industry-standard security, <strong>no system is 100% secure<\/strong>. We cannot guarantee against determined attackers, 0-day exploits, or insider threats. Use strong passwords and enable 2FA if available.<\/p>\n<h2>14. Changes to Privacy Policy<\/h2>\n<p><strong>Plain-language summary<\/strong>: How and when this policy is updated.<\/p>\n<ul>\n  <li><strong>Right to amend<\/strong>: Genixgreen may update this policy to reflect operational changes, legal requirements, or best practices.<\/li>\n  <li><strong>Notice<\/strong>: Material changes announced <strong>30 days<\/strong> in advance via email or website banner.<\/li>\n  <li><strong>Acceptance<\/strong>: Continued use after changes take effect constitutes acceptance.<\/li>\n  <li><strong>Archive<\/strong>: Previous versions archived at available upon request to legal@genixenergy.com.ua or available upon request.<\/li>\n  <li><strong>Dispute<\/strong>: If you disagree, you may cease use and request erasure (\u00a79).<\/li>\n<\/ul>\n<h2>15. Supervisory Authority & Complaint<\/h2>\n<p><strong>Plain-language summary<\/strong>: Where to report violations if we don't respect your rights.<\/p>\n<h3>15.1 Ukrainian Supervisory Authority<\/h3>\n<p><strong>Ombudsman (Commissioner for Human Rights)<\/strong>:<\/p>\n<ul>\n  <li><strong>Name<\/strong>: Ukrainian Parliament Commissioner for Human Rights<\/li>\n  <li><strong>Address<\/strong>: 21\/8 Instytutska Street, Kyiv 01008, Ukraine<\/li>\n  <li><strong>Email<\/strong>: hotline@ombudsman.gov.ua<\/li>\n  <li><strong>Phone<\/strong>: +380 800 501 720<\/li>\n  <li><strong>Website<\/strong>: https:\/\/www.ombudsman.gov.ua\/<\/li>\n<\/ul>\n<h3>15.2 EU Data Protection Authority<\/h3>\n<p>If you are in the EU:<\/p>\n<ul>\n  <li>Lodge a complaint with your <strong>national DPA<\/strong> (e.g., Irish DPC, German BfDI).<\/li>\n  <li><strong>Links<\/strong>: EDPB (https:\/\/edpb.ec.europa.eu\/) and national DPA list on EDPB website.<\/li>\n  <li><strong>No fee required<\/strong>.<\/li>\n<\/ul>\n<h3>15.3 Legal Action<\/h3>\n<p>You retain the right to pursue civil action against Genixgreen in court for data protection violations (damages, injunctive relief).<\/p>\n<h2>16. Contact Information<\/h2>\n<p>For privacy inquiries, complaints, or data subject rights requests:<\/p>\n<p><strong>Data Protection Contact<\/strong>:<\/p>\n<ul>\n  <li><strong>Data subject rights<\/strong>: privacy@genixenergy.com.ua<\/li>\n  <li><strong>Data Protection Officer<\/strong>: dpo@genixenergy.com.ua<\/li>\n  <li><strong>Legal correspondence<\/strong>: legal@genixenergy.com.ua<\/li>\n  <li><strong>General support<\/strong>: info@genixenergy.com.ua<\/li>\n  <li><strong>Response time<\/strong>: 30 days<\/li>\n<\/ul>\n<p><strong>Other channels<\/strong>:<\/p>\n<ul>\n  <li><strong>WhatsApp<\/strong>: +380 50 678 9909<\/li>\n  <li><strong>Telegram<\/strong>: @genixgreen_ua<\/li>\n  <li><strong>Contact form<\/strong>: genixenergy.com.ua\/contact<\/li>\n<\/ul>\n\n<\/article>\n<\/div>\n\n<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@type\": \"WebPage\",\n  \"name\": \"Privacy Policy\",\n  \"description\": \"Privacy Policy for genixenergy.com.ua. How Genixgreen collects, uses, and protects personal data under Ukrainian Personal Data Protection Law and GDPR.\",\n  \"url\": \"https:\/\/genixenergy.com.ua\/privacy-policy\/\",\n  \"datePublished\": \"2026-06-01\",\n  \"dateModified\": \"2026-05-29\",\n  \"inLanguage\": \"en\",\n  \"isPartOf\": {\n    \"@type\": \"WebSite\",\n    \"name\": \"Genixgreen\",\n    \"url\": \"https:\/\/genixenergy.com.ua\/\"\n  },\n  \"publisher\": {\n    \"@type\": \"Organization\",\n    \"name\": \"Genixgreen\",\n    \"url\": \"https:\/\/genixenergy.com.ua\/\",\n    \"parentOrganization\": {\n      \"@type\": \"Organization\",\n      \"name\": \"Shenzhen YancoPow New Energy Co., Ltd.\"\n    }\n  }\n}\n<\/script>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t<\/div>",
        "protected": false
    },
    "excerpt": {
        "rendered": "<p>Effective Date: 2026-06-01 Last Updated: 2026-05-29 1. Introduction and Scope Plain-language summary: This privacy policy explains what data we collect, why, how long we keep it, and your rights under Ukrainian and GDPR law. When you visit genixenergy.com.ua, contact us via email, WhatsApp, Telegram, or submit an inquiry form, we collect and process personal data&#8230;.<\/p>",
        "protected": false
    },
    "author": 1,
    "featured_media": 0,
    "parent": 0,
    "menu_order": 0,
    "comment_status": "closed",
    "ping_status": "closed",
    "template": "",
    "meta": {
        "footnotes": ""
    },
    "class_list": [
        "post-1889",
        "page",
        "type-page",
        "status-publish",
        "hentry"
    ],
    "_links": {
        "self": [
            {
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/pages\/1889",
                "targetHints": {
                    "allow": [
                        "GET"
                    ]
                }
            }
        ],
        "collection": [
            {
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/pages"
            }
        ],
        "about": [
            {
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/types\/page"
            }
        ],
        "author": [
            {
                "embeddable": true,
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/users\/1"
            }
        ],
        "replies": [
            {
                "embeddable": true,
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/comments?post=1889"
            }
        ],
        "version-history": [
            {
                "count": 1,
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/pages\/1889\/revisions"
            }
        ],
        "predecessor-version": [
            {
                "id": 990455,
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/pages\/1889\/revisions\/990455"
            }
        ],
        "wp:attachment": [
            {
                "href": "https:\/\/genixenergy.com.ua\/en\/wp-json\/wp\/v2\/media?parent=1889"
            }
        ],
        "curies": [
            {
                "name": "wp",
                "href": "https:\/\/api.w.org\/{rel}",
                "templated": true
            }
        ]
    }
}