As a visitor to our website and when using our services, you expect a high level of quality and competence not only from our services, but also in the processing of your personal data.
We are responsible for the handling of your data, which we process according to your wishes and in compliance with the UK`s Data Protection Act (DPA) and the EU`s General Data Protection Regulation (GDPR) both collectively the “GDPR”. Your personal data will only be processed by us if permitted by law.
We, that is Genius Idea Ltd trading as My Flyer Inserts ("My Flyer Inserts", "us" or "we") and you can also reach us using the following:
Genius Idea Ltd
Trading as My Flyer Inserts
Bayside Business Centre
Sovereign Business Park
48 Willis Way
Tel: 07590 673704
First of all, we would like to inform you about your rights as a data subject. These rights are standardised in Art. 15 - 22 GDPR. This includes:
To assert these rights, please contact us. The same applies if you have questions about data processing in our company. You also have the right to lodge a complaint with a data protection supervisory authority.
The Information Commissioner’s Office (ICO) in the UK is the for us relevant authority in matters of data protection. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
The processing of your personal data may be based on the following legal grounds:
Art. 6 (1) lit. a GDPR serves as our legal basis for processing operations where we obtain your consent for a specific processing purpose.
Art. 6 (1) lit. b GDPR, insofar as the processing of personal data is necessary for the performance of a contract, e.g., if you purchase a product. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in the case of enquiries about our products or services.
Art. 6 (1) lit. c GDPR, insofar as we are subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations.
Art. 6 (1) lit. d GDPR in the event that vital interests of you or another natural person require the processing of personal data.
Art. 6 (1) lit. f GDPR applies on the basis of our legitimate interests, e.g., when using service providers as part of order processing, such as shipping service providers or when carrying out statistical surveys and analyses and logging registration procedures. Our interest is directed towards the use of a user-friendly, appealing, and secure presentation as well as optimisation of our website, which serves our business interests as well as meeting your expectations.
We take appropriate technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations.
The measures taken are intended to guarantee the confidentiality and integrity of your data and to ensure the availability and resilience of the systems and services when processing your data on a permanent basis. They are also designed to quickly restore the availability of data and access to you in the event of a physical or technical incident.
Our security measures also include encryption of your data. All information you enter online is technically encrypted and only then transmitted. This means that this information cannot be viewed by unauthorised third parties at any time.
Our data processing and security measures are continuously improved in line with technological developments.
Our employees are, of course, bound to confidentiality in writing (data secrecy).
Personal data is any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). This includes your address data, telecommunication data, registration data, order data, advertisement data, subscription data, financial data and application data, but also your IP address.
If you have any questions or requests, please do not hesitate to contact us. We process your data to answer your enquiries (Art. 6 para. 1 b, f GDPR). The communication of address and telecommunication data marked as mandatory is necessary in order to process and answer your request. The voluntary provision of further data makes it easier for us to process your enquiry. Providing you with the best possible service is our legitimate interest, insofar as we process your data on this legal basis.
We usually store the information from your enquiry for 1 year after answering the enquiry in case of further enquiries if they are not commercial or business letters; we store these for at least six years in accordance with the UK`s statutory retention periods (Art. 6 Para. 1 c GDPR).
We process your required registration data (mandatory data, e.g., name, e-mail address, username and password) as well as the further data voluntarily provided in the course of your use of the functions and services of our password-protected areas (Art. 6 para. 1 b, f GDPR). Providing you with the best possible services is our legitimate interest, insofar as we process your data on this legal basis.
We store the registration details for your online accounts until you ask us to delete your online account unless there are other storage purposes. These may result, for example, from the UK`s statutory retention periods (Art. 6 Para. 1 c GDPR).
In the case of a subscription or other contract-related enquiries, we first process your personal data to process the subscription and for invoicing (Art. 6 para. 1 b, f GDPR). Providing you with the best possible service is our legitimate interest, insofar as we process your data on this legal basis.
We store your data relevant to the subscription and the associated documents (e.g., commercial letters, invoices) in accordance with the legal requirements for at least six years or ten years after the conclusion of the contract in accordance with the UK`s statutory retention periods (Art. 6 Para. 1 c GDPR).
Your payment data will be passed on to payment service providers (PayPal) commissioned by us to process the payment(s). The respective data will be transmitted solely for the respective purposes and deleted again after delivery has taken place (Art. 6 para. 1 b GDPR).
With your express consent, which can be revoked at any time, we will inform you by e-mail to the extent of the consent you have given, namely regularly for the purposes of our own market research, for advertising about our digital and printed publishing products and benefits of corresponding subscriptions (Art. 6 para. 1 a GDPR). We process your mandatory information when you give your consent in order to send you the promotional message and to be able to address you personally.
To obtain your consent, we use the so-called double opt-in procedure online to prevent our e-mail messages from being sent to e-mail addresses of persons who have not requested them. In accordance with the requirements of the data protection supervisory authorities, your IP address is also recorded and stored for documentation purposes (Art. 7 para. 1, Art. 6 para. 1 c GDPR).
If you have provided us with your e-mail address when concluding a contract (e.g., subscriptions or other exchange contracts), we will also inform you by e-mail about offers similar to those you have purchased or received. Of course, you can object to this at any time at basic rates (Art. 6 para. 1 f GDPR).
When we send e-mail advertising, we also track whether you have received the advertising e-mails and how you deal with them (e-mail opening and clicking behaviour) in order to subsequently provide you with more appropriate information in later corresponding e-mails (so-called newsletter tracking; Art. 6 para. 1 f GDPR). If you do not wish this, you can simply withdraw your consent to e-mail advertising.
If you participate in our sales promotions, we and our respective cooperation partners will process your data for the purpose of carrying out the sales promotion (Art. 6 para. 1 b GDPR). We and, where applicable, our respective cooperation partners also process your data for their own respective customer analyses and their own respective advertising by post (see para. Postal advertising and customer analyses).
We store your data collected for advertising purposes as long as the advertising purpose exists or until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes. Unless required for the above purposes, we delete data from sales promotions after the respective sales promotion has been carried out.
Our legitimate interest in the sense of Art. 6 Para. 1 f GDPR in the case of advertising is always to promote the sales of our company.
My Flyer Inserts uses service providers to provide services (including for the delivery of ordered goods, sending letters or e-mails and the maintenance and analysis of databases) and to process your data (so-called commissioned data processing). The service providers process the data exclusively on the instructions of My Flyer Inserts and have been obliged to comply with the applicable data protection regulations. All commissioned data processors have been carefully selected and are only given access to your data to the extent and for the period of time required to provide the services.
The use of our digital offers is also measured and evaluated by means of various technical systems, mainly from third-party providers such as Google Analytics. These measurements can be both anonymous and personal. It is possible that the collected data will be passed on to third parties for processing by us or the third-party providers of such technical systems.
We use Google Analytics, a service provided by Google Inc. This means that the data collected can in principle be transmitted to a Google server in the USA, whereby the IP addresses are anonymised by means of IP anonymisation so that an allocation is not possible. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can object to the collection and processing of this data by Google Analytics by setting an opt-out cookie that prevents the future collection of your data when you visit this website: http://tools.google.com/dlpage/gaoptout?hl=en.
We use the services of the homepage provider Wix.com Ltd, Namal 40, 6350671 Tel Aviv, Israel. Hereinafter referred to as "wix.com". The registered office in Europe: Wix.com Luxembourg S.a.r.l., 5 Rue Guillaume Kroll, L - 1882 Luxembourg. Wix.com collects two types of data: personal data (which can be used to uniquely identify an individual) and non-personal data (which is not used for identification purposes). Wix.com collects such information about our users and visitors, as well as users of users and others who provide it to us. Wix.com may also collect, solely for and in the interest of our users, similar data related to visitors and users of our users' web sites or services. Wix.com collects and uses data to provide our services and make them better and safer, as well as to contact our visitors, users and job applicants, and to comply with legal requirements applicable to Wix.com.
Wix.com may store and process personal data in the United States, Europe, Israel or other jurisdictions - either itself or through our affiliated companies and service providers. The data storage providers with whom Wix.com works are contractually obligated to protect your data. Wix.com may also collect, process and store such data in other locations, including the United States.
Wix may collect and process data about our users. We do so solely on behalf of and at the direction of our users. Our users are solely responsible for their users of user’s data, including for its legality, security and integrity. Wix has no direct relationship with users of users.
We may share the data of our visitors, users and their users of users with various third parties, including certain service providers, law enforcement agencies and application developers. In doing so, the data may only be shared in accordance with this policy.
When you visit our websites, certain data (information such as cookies, device identification, IP address) is automatically processed. Information is stored on your device and retrieved.
In some cases, we and some of our partners also process the information on the basis of legitimate interest (Art. 6 para. 1 f GDPR), namely in connection with so-called "functional uses". Legitimate interests are technical or legal requirements. Technical needs include: Ensure security, prevent fraud and fix errors, provide ads or content technically, and necessary technologies.
The legal basis for this use or corresponding processing is our legitimate interest, namely the provision of the most suitable content possible and/or technical or legal requirements (Art. 6 para. 1 f GDPR).
When you visit our website, the web servers store the connection data of the requesting end device, the website you visit on our site, the date and duration of the visit, the identification data of the browser and operating system type used as well as the website from which you visit us, as standard and temporarily for the purpose of system security.
In detail, this data record consists of:
We disclose your personal data in response to your business enquiry or your request for information within our company in order to provide the best service possible and within our legitimate interest.
We may also share information with our secure payment gateway provider, and you may need to provide credit or debit card information directly to the provider in order to process payment details and authorise payment following a secure link. The information which you supply to in such cases is not within our control and is subject to the payment gateway provider’s own Privacy Notice and Terms and Conditions.
We may disclose personal information in other circumstances such as when you agree to it or if the law, a Court order, a legal obligation, or regulatory authority ask us to. If the purpose is the prevention of fraud or crime or if it is necessary to protect and defend our right, property or personal safety of our staff, the website, and its users.
My Flyer Inserts complies with the legal obligations and all our employees have been obligated in writing to comply with the relevant regulations and guidelines on data protection and data security and to protect data secrecy. In addition, the employees of My Flyer Inserts are regularly trained in these areas. Questions regarding data protection at My Flyer Inserts can be directed to us at any time.
Genius Idea Ltd
Trading as My Flyer Inserts
Bayside Business Centre
Sovereign Business Park
48 Willis Way
Tel: 07590 673704