Privacy Policy

This Policy applies to personal data processed through gentaur.com and in connection with product inquiries, quotations, customer accounts, purchases, deliveries, technical support, withdrawal or cancellation requests, and other communications with Gentaur.

The controller is generally Gentaur at Voortstraat 49, 1910 Kampenhout, Belgium. Where a local Gentaur company directly handles and invoices a transaction, that entity may also act as the controller for information required to administer that transaction and comply with local law.

The information we collect depends on how you interact with Gentaur. It may include information you provide directly and information generated automatically when you use the Website.

We may also receive information from your organization, authorized representatives, suppliers, logistics providers, payment providers, public registers, fraud-prevention or compliance providers, and other sources where permitted by law.

Online or remote payments may be processed by third-party payment providers such as Stripe and PayPal. These providers may collect payment-card, billing, identity, device, and fraud-prevention information directly from you under their own privacy policies and contractual terms.

Gentaur may receive information needed to confirm and manage the transaction, such as the payer or customer name, contact and billing information, payment status, amount, currency, payment method category, transaction identifier, and risk or dispute information. When a hosted payment service is used, Gentaur does not ordinarily receive your complete card number or card security code.

We process personal information only where we have an appropriate purpose and legal basis. Depending on the circumstances, processing may be based on performance of a contract, steps requested before entering a contract, compliance with a legal obligation, our legitimate interests, protection of vital interests, or your consent.

We may use information to:

• Respond to inquiries and identify suitable products.
• Create and manage accounts, quotations, orders, invoices, and deliveries.
• Process payments, refunds, disputes, and accounting records.
• Provide customer service, technical assistance, and product notifications.
• Comply with tax, customs, export-control, product-safety, and other legal obligations.
• Verify identity, prevent fraud, secure systems, and investigate misuse.
• Improve product search, website functionality, reliability, and user experience.
• Maintain business records, enforce agreements, and establish or defend legal claims.
• Send marketing communications where permitted, subject to applicable opt-out and consent requirements.

Where we rely on legitimate interests, we consider whether those interests are necessary and proportionate and balance them against your rights and reasonable expectations.

We do not sell personal information. We may disclose it only where reasonably necessary for the purposes described in this Policy or where disclosure is required or permitted by law.

Recipients may include:

• Gentaur companies, offices, and authorized personnel involved in your request or transaction.
• Suppliers and manufacturers needed to source products, confirm availability, or provide technical support.
• Payment processors, banks, accountants, insurers, and fraud-prevention providers.
• Carriers, customs brokers, warehouses, and logistics providers.
• Hosting, cloud, email, analytics, security, customer-support, and IT service providers.
• Professional advisers, auditors, regulators, courts, public authorities, and law-enforcement bodies.
• A purchaser, investor, successor, or adviser involved in a proposed or completed corporate transaction.

Service providers acting on our instructions are expected to process personal data only for authorized purposes and to apply appropriate confidentiality and security measures.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including account administration, order fulfilment, customer support, warranty and quality matters, accounting, tax, customs, regulatory compliance, fraud prevention, security, dispute resolution, and legal claims.

Retention periods vary according to the type of information, the nature of the transaction, legal limitation periods, and statutory record-keeping obligations. When information is no longer required, it is deleted, anonymized, or securely retained with restricted access where deletion is not immediately possible.

Closing an account or requesting deletion does not require us to erase information that must be retained by law or that remains necessary to establish, exercise, or defend legal claims.

Gentaur operates through an international network. Personal information may therefore be accessed, transferred, or stored outside your country, including in countries whose data-protection laws may differ from those in your jurisdiction.

Where European data-protection law applies and personal data is transferred outside the European Economic Area, we use an available lawful transfer mechanism where required, such as an adequacy decision, approved standard contractual clauses, or another legally recognized safeguard. Additional technical, contractual, or organizational measures may also be applied based on the circumstances of the transfer.

You may contact us for additional information about safeguards relevant to your personal data, subject to confidentiality and legal restrictions.

Depending on your location and the applicable law, you may have rights concerning your personal information. These rights are not absolute and may be limited where an exemption or overriding legal obligation applies.

• Request confirmation of whether we process your personal data and obtain access to it.
• Request correction of inaccurate or incomplete personal data.
• Request erasure where the legal conditions are satisfied.
• Request restriction of processing in specified circumstances.
• Object to processing based on legitimate interests and object at any time to qualifying direct marketing.
• Receive eligible data in a structured, commonly used, machine-readable format and request portability where applicable.
• Withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing.
• Lodge a complaint with a competent data-protection supervisory authority.

To protect your information, we may ask for reasonable evidence of identity or authority before acting on a request. We normally respond within the period required by applicable law and will explain any lawful extension, refusal, or restriction.

The Website may use cookies, local storage, pixels, and similar technologies to operate essential functions, maintain sessions, remember preferences, secure the Website, understand usage, and improve performance.

Strictly necessary technologies may be used without optional consent where permitted by law. Analytics, advertising, or other non-essential technologies are used only in accordance with applicable consent and transparency requirements.

You can manage available choices through the Website's cookie preference tool, where provided, and through your browser or device settings. Blocking certain cookies may prevent parts of the Website from functioning correctly. Third-party technologies are also governed by the relevant provider's privacy information.

We use administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, misuse, or access. Measures may include access controls, authentication, encryption in transit where appropriate, logging, backups, monitoring, staff confidentiality obligations, and supplier controls.

Security measures are reviewed according to the nature of the data, available technology, implementation costs, and the likelihood and severity of risks. No website, transmission, or storage system can be guaranteed to be completely secure, and users should also protect their credentials and devices.

If a personal data breach occurs, Gentaur will assess the nature, scope, likely consequences, and risks involved. We will take appropriate containment, investigation, recovery, and remediation measures and maintain records where required.

We will notify the relevant supervisory authority and affected individuals when notification is required by applicable law. The content and timing of any notification will depend on the legal requirements and the information available during the investigation.

We may preserve, use, or disclose personal information where we reasonably believe it is necessary to comply with applicable law, a court order, regulatory request, customs or export-control requirement, or another valid legal process.

Information may also be processed or disclosed to investigate suspected fraud or security incidents, protect the rights, property, safety, and systems of Gentaur, our customers, users, personnel, or others, enforce agreements, or establish, exercise, and defend legal claims.

Where legally permitted, we assess requests for information and seek to disclose only the information reasonably necessary for the relevant purpose.

When you submit a withdrawal or cancellation request, we may collect your email address, request type, and order, quotation, invoice, or other reference number. We may also process optional information you provide, including your name, country, product details, and message.

We use this information to verify the relevant transaction, assess eligibility, communicate with you, process the request, maintain customer-service and compliance records, prevent fraud, and establish or defend contractual and legal rights.

Request information may be shared with authorized Gentaur personnel and service providers involved in customer support, order management, logistics, accounting, legal compliance, or technical operations. Records are retained for a period appropriate to contractual, accounting, regulatory, fraud-prevention, customer-service, and legal requirements.

We may update this Policy to reflect changes to our services, technology, business operations, legal requirements, or privacy practices. The revised version will be published on this page with an updated revision date.

Where required by law, we will provide additional notice or request renewed consent before a material change applies to processing based on consent. Continued use of the Website does not override rights or consent requirements established by applicable data-protection law.

Questions about this Policy or requests concerning personal information may be sent to:

Please describe your request clearly and identify your relationship with Gentaur, such as customer, account holder, website visitor, supplier contact, or authorized representative. Do not include unnecessary sensitive information in ordinary email.