Privacy policy

This is a translation for your convenience. In case of any discrepancy, the German version applies.

Unless stated otherwise below, providing your personal data is neither required by law or contract nor necessary for concluding a contract. You are not obliged to provide your data. Not providing it has no consequences.

“Personal data” means any information relating to an identified or identifiable natural person.

Controller

The controller responsible for data processing is: Thai Five GmbH, Am Senkelsgraben 16, 53842 Troisdorf, Germany, phone +49 179 473 1858, email [email protected].

Server log files

You can visit this website without providing any personal information. With every visit, your browser transmits usage data to us or our web host, which is stored in log files (server log files). These include, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred and the requesting provider.

The log files are evaluated solely to ensure technical operation and to defend against attacks and are automatically deleted after 7 days at the latest, unless further retention is required as evidence in an individual case.

Processing is based on Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the trouble-free operation of the website and improving our services.

The web host of this website is: netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The servers are located in Nuremberg (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

Content delivery network and protection against attacks (Cloudflare)

To protect this website against attacks (e.g. DDoS) and to deliver it quickly, we use Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your requests to this website are routed through Cloudflare’s servers; this involves processing in particular your IP address, the requested URL, date and time, and browser and system information. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the security and availability of this website. We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR) including the EU standard contractual clauses. Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. More information: cloudflare.com/privacypolicy.

Cookies and tracking

This website does not use any analytics, tracking or marketing services and does not set cookies for such purposes. Only if Cloudflare displays a security check in an individual case (e.g. if automated access is suspected) may a technically necessary security cookie be stored. This is permitted without consent under Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). A cookie banner is therefore not required.

Links to Amazon

This website contains links to our product pages on Amazon (Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg). Merely visiting our website does not transfer any data to Amazon. Only when you click a link are you redirected to the Amazon website; from then on, Amazon’s privacy policy applies. Orders are processed exclusively via Amazon.

Contact by email or phone

If you contact us by email or phone, we process your personal data (e.g. name, email address, phone number, content of your message) only to the extent you provide it, in order to handle your enquiry.

If the contact serves to take pre-contractual measures or relates to an existing contract, processing is based on Art. 6(1)(b) GDPR. Otherwise it is based on Art. 6(1)(f) GDPR, on the basis of our legitimate interest in handling and answering your enquiry. Your data will be deleted once your enquiry has been fully processed, subject to statutory retention periods.

Your rights

Subject to the statutory provisions, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

Recipients and transfers to third countries

Your data is only passed on to our processors: our web host netcup GmbH (Germany) and Cloudflare, Inc. (USA). In the case of Cloudflare, data may be transferred to the USA; this is based on the adequacy decision for the EU-US Data Privacy Framework and, in addition, on the EU standard contractual clauses.

Last updated: November 2026