Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Gensu Trade GmbH, Im Engelbrauck 2, 44532 Lünen, Germany, Phone: #####, Email: info@gensutrade.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 If you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (so-called server log files). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- The page visited on our website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymised form)

Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used in any other way. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (for example, orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” string and the padlock symbol in your browser bar.

3) Cookies

To make your visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted when you close your browser (so-called session cookies), while others remain on your device for longer and allow page settings to be saved (so-called persistent cookies). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

Where personal data is also processed by individual cookies used by us, processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR where consent has been given, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in designing the website visit in a customer-friendly and effective manner.

You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or so that you can exclude the acceptance of cookies in specific cases or in general.

Please note that the functionality of our website may be restricted if cookies are not accepted.

4) Contacting us

When you contact us (for example, by contact form or email), personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

5) Comment function

When the comment function on this website is used, in addition to your comment, information about the time the comment was created and the commentator name you selected is stored and published on this website. Your IP address is also logged and stored. The IP address is stored for security reasons and in case the person concerned infringes third-party rights or posts unlawful content through a comment. We require your email address so that we can contact you if a third party objects to your published content as unlawful.

The legal bases for storing your data are Article 6(1)(b) and (f) GDPR. We reserve the right to delete comments if third parties object to them as unlawful.

6) Data processing when opening a customer account

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the input form used for this purpose on our website.

You may delete your customer account at any time by sending a message to the controller at the address stated above. After deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion, and we have no legitimate interest in continued storage.

7) Use of customer data for direct advertising

Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any other data is voluntary and is used to address you personally. We use the double opt-in procedure for newsletter distribution. This ensures that you receive newsletters only after you have expressly confirmed your consent to receive them by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. We store the IP address registered by your internet service provider (ISP), together with the date and time of registration, so that possible misuse of your email address can be traced at a later date. The data collected when you register for the newsletter is used strictly for the stated purpose.

You may unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named at the beginning of this policy. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where this is permitted by law and explained in this policy.

8) Data processing for order fulfilment

8.1 Where necessary for contract fulfilment, delivery and payment, the personal data collected by us will be disclosed to the appointed transport company and the appointed credit institution in accordance with Article 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally within the scope of our statutory information obligations in accordance with Article 6(1)(c) GDPR. Your contact details are used strictly for notifications about updates owed by us and are processed only to the extent necessary for the relevant information.

8.2 Use of payment service providers

- Apple Pay

If you select the Apple Pay payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed using the Apple Pay function on your device running iOS, watchOS or macOS by charging a payment card stored in Apple Pay. Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. Authorisation of a payment therefore requires entry of a code previously set by you and verification using the Face ID or Touch ID function on your device.

For payment processing purposes, the information you provide during the order process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. Once payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

Where personal data is processed as part of the transfers described above, processing is carried out exclusively for payment processing purposes in accordance with Article 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase made through Safari on a Mac, the Mac and the authorising device communicate via an encrypted channel on Apple servers. Apple does not process or store this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to Wallet & Apple Pay and disable Allow Payments on Mac.

Further information on data protection for Apple Pay is available at: https://support.apple.com/de-de/HT203027

- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method for which you make payment in advance (for example, credit card payment), the payment data you provide during the order process, including your name, address, bank and payment card information, currency and transaction number, together with information about the content of your order, will be transferred to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data is transferred solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which the provider makes payment in advance (for example, purchase on account, instalment purchase or direct debit), you will also be asked during checkout to provide certain personal data, including first and last name, street, house number, postcode, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in determining our customers’ ability to pay, we transfer this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. Based on the personal data you provide and other data, such as shopping basket, invoice amount, order history and payment experience, the provider assesses whether the selected payment option can be granted in view of payment and/or default risks.

In addition to the provider’s internal criteria, identity and credit information from the following credit agencies may be included in the decision made as part of the application review in accordance with Article 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values, known as score values. Where score values are included in the credit report result, they are based on a scientifically recognised mathematical and statistical procedure. Address data is among the data used to calculate score values, although it is not the only data used.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.

- PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method for which you make payment in advance, the payment data you provide during the order process, including your name, address, bank and payment card information, currency and transaction number, together with information about the content of your order, will be transferred to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data is transferred solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we make payment in advance, you will also be asked during checkout to provide certain personal data, including first and last name, street, house number, postcode, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in determining your ability to pay, in such cases we transfer this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. Based on the personal data you provide and other data, such as shopping basket, invoice amount, order history and payment experience, the provider assesses whether the selected payment option can be granted in view of payment and/or default risks.

The credit report may contain probability values, known as score values. Where score values are included in the credit report result, they are based on a scientifically recognised mathematical and statistical procedure. Address data is among the data used to calculate score values, although it is not the only data used.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.

- Sofort bank transfer

One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

If you select a payment method for which you make payment in advance (for example, credit card payment), the payment data you provide during the order process, including your name, address, bank and payment card information, currency and transaction number, together with information about the content of your order, will be transferred to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data is transferred solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

9) Website functions

Google Web Fonts

This website uses web fonts from the following provider to display fonts consistently: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to Google LLC in the USA.

Personal data is processed when connecting to the font provider only if you have expressly consented to this in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service via the cookie consent tool provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google’s privacy policy is available at: https://business.safety.google/intl/de/privacy/

10) Rights of the data subject

10.1 The applicable data protection law grants you the following rights as a data subject against the controller with regard to the processing of your personal data. The legal basis cited applies to the respective conditions for exercising each right:

- Right of access under Article 15 GDPR;
- Right to rectification under Article 16 GDPR;
- Right to erasure under Article 17 GDPR;
- Right to restriction of processing under Article 18 GDPR;
- Right to notification under Article 19 GDPR;
- Right to data portability under Article 20 GDPR;
- Right to withdraw consent granted under Article 7(3) GDPR;
- Right to lodge a complaint under Article 77 GDPR.

10.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of storage of personal data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period, such as retention periods under commercial and tax law.

Where personal data is processed on the basis of express consent in accordance with Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

If statutory retention periods exist for data processed in connection with legal or similar obligations on the basis of Article 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise indicated by the other information in this policy concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 19 September 2026, 04:00:59