Privacy statement

Last updated 2026-10-25

Who is responsible

The controller for this website is:

AVS Media
Federico Fellinistraat 102
6515 LV Nijmegen
Netherlands

What this website collects

Nothing you do not hand over deliberately. There is no analytics, no tracking pixel, no advertising script and no social media plug-in. Fonts, animations and images are served from this website itself, not from a font or video service.

The request-access form

When you request access, the form sends the email address you type to Geenius OS (our own service) so that we can invite you. We use it only for that request and for the invitation, never for advertising, and we do not share it. You can ask us at any time to delete it, using the contact address in the imprint.

Hosting and server logs

This website is delivered by Cloudflare, Inc. as our processor under a data processing agreement. To deliver a page, Cloudflare necessarily processes your IP address and technical request data (time, page, browser) and may keep them briefly in security logs. Legal basis: our legitimate interest in delivering a secure website (Art. 6(1)(f) GDPR). Cloudflare may process data outside the EU; transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses.

Animations

The short animations on this website are video files we made ourselves and host on this website. Nothing is loaded from a video platform, and an animation only starts loading when you scroll to it or point at a menu item. If your device asks for reduced motion, they do not play and you see a still picture.

Email to us

If you email us, we use what you send to answer you (Art. 6(1)(b) and (f) GDPR). Correspondence that leads nowhere is deleted within two years; records we must keep for tax purposes are kept for seven years.

The assistant and feature requests

The chat button in the corner loads a small script from our assistant service (a Cloudflare Worker run by AVS Media, address: geenius-assistant-dev.avs-media.workers.dev while the service is in beta). It loads when a page opens; it does not set cookies. It sends your question and the last few messages of the conversation to that service so it can answer from the product catalogue, together with a random identifier that your browser keeps for this tab only (session storage). Your IP address is used to limit abuse and is stored only as a one-way hash. Please do not type personal details: obvious personal data (email addresses, phone numbers) is masked before anything is stored. Questions and answers are kept for up to 90 days to improve the assistant, and only if you agreed where the assistant asks for it. The service does not know who you are.

A feature request (the form on the request page, or the form inside the assistant) sends the text you wrote to the same service. If you add an email address and tick the box, we keep it to answer you; without the box it is never sent or stored. A hidden field in the form catches automated spam and stays empty for people.

Cookies and local storage

This website sets one small functional cookie, geenius_accent, and mirrors it in your browser’s local storage. It only remembers which accent colour (red, blue, yellow, purple, pink or green) we picked for you today, so every page looks the same during that day. It contains no personal data, is not used for tracking, is never sent anywhere except back to this website with your page requests, and expires at the next midnight in your time zone. There is no consent banner because we set no other cookie.

Legal bases and retention at a glance

Delivering the website (server logs at our host): legitimate interest, Art. 6(1)(f) GDPR; logs are kept briefly by the host for security.
Answering your email: Art. 6(1)(b) and (f) GDPR; deleted within two years, tax records seven years.
The assistant: Art. 6(1)(f) GDPR for answering and abuse limiting; stored questions only with your agreement, up to 90 days.
The accent cookie: strictly functional, no personal data, expires at midnight.

Who receives data

Cloudflare, Inc. (hosting and delivery, processor). Nobody else receives data from this website: there are no advertising, analytics or social media services. We do not sell personal data.

Children

This website is meant for businesses and adults. We do not knowingly collect data from children.

Your rights

Under the GDPR you may ask what personal data we hold about you, have it corrected or deleted, restrict or object to its processing, and receive a copy in a portable format. Email us and you will get an answer within a month. You may also complain to a data protection authority, for example the Dutch Autoriteit Persoonsgegevens or the authority where you live.

Changes to this statement

If what this website collects changes, we update this statement before the change goes live and change the date above.

The product service itself

Using the service after sign-up is covered by its own terms and privacy statement, shown when you are invited.