Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies unless otherwise specified in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.

Each time our website is accessed, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page called up, date and time of access, the IP address, the amount of data transferred, and the requesting provider.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Contact

Controller

Contact us if you wish. The controller responsible for data processing is: Thai Five GmbH, Am Senkelsgraben 16, 53842 Troisdorf, Germany, +491794731858, [email protected]

Initiating Contact by the Customer via E-Mail

If you contact us proactively via e-mail, we will collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves the purpose of handling and answering your contact request.

If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We use your e-mail address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and Processing when Using the Contact Form

When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves the purpose of contacting you.

We use your e-mail address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

WhatsApp Business

If you contact us via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If your habitual residence is outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

Data processing serves the purpose of processing and answering your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and further data to the extent provided by you. We use a mobile device for the service whose address book stores exclusively data of users who have contacted us via WhatsApp. A transfer of personal data to WhatsApp without your prior consent towards WhatsApp does not take place.

Your data will be transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is not certified under the TADPF. Data transmission takes place, among other things, on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: Standard Contractual Clauses.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in providing a fast and easy way to contact us and in answering your request. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We use your personal data only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Further information on terms of use and data protection when using WhatsApp can be found at WhatsApp Terms of Service and WhatsApp Privacy Policy.

Customer Account & Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.

Collection, Processing, and Transfer of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing the data is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.

Your data is passed on, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe statutory requirements. The scope of data transmission is restricted to a minimum.

Warehouse Management

Use of an External Warehouse Management System

We use a warehouse management system as part of order processing for contract execution. For this purpose, your personal data collected during the order is transmitted to JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany.

Payment Service Providers

Use of Amazon Payments

We use the Amazon Payments service provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.

Data processing serves the purpose of offering you payment options via the Amazon Payments service.

To integrate this payment service, it is necessary for Amazon Payments to collect, store, and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is called up. Cookies may also be used for this purpose. The cookies enable recognition of your browser.

The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

When selecting and using “Amazon Payments”, the data required for payment processing is transmitted to Amazon Payments to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Further information on data processing when using Amazon Payments can be found in the corresponding privacy policy at: Amazon Payments Help

Use of the Payment Service Provider Mollie

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; „Mollie“) for payment processing on our website. Data processing serves the purpose of offering you various payment methods through payment processing via Mollie. If you decide on one of the payment options of Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment data (such as bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, address data, and information about the product or service purchased from us. This data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using Mollie can be found in their privacy policy Mollie Privacy Policy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we point out that you may then not be able to use all functions of this website to their full extent.

You can find information on how to manage (and deactivate) cookies in the most important browsers under the following links:

Chrome: Chrome Guide
Microsoft Edge: Edge Guide
Mozilla Firefox: Firefox Guide
Safari: Safari Guide

Cookie Consent Tool

Use of a Consent Management Tool

We use a cookie consent tool to obtain and document your consent to the use of cookies and similar technologies in accordance with Art. 6 para. 1 lit. a GDPR. Certain user data (e.g. IP address, timestamp, consent status) is processed and stored in the process.

Cloudflare

Cloudflare (CDN & Security)

Our website uses services provided by Cloudflare Inc., USA, to optimize security and loading times (Content Delivery Network, DDoS protection). Your IP address is transmitted to Cloudflare in the process. The legal basis is a legitimate interest (Art. 6 para. 1 lit. f GDPR).

More information: Cloudflare Privacy Policy

Integration of DHL as Shipping Service Provider

To process the delivery of your order, we work with the shipping service provider DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. In accordance with Art. 6 para. 1 lit. b GDPR, we pass on only those personal data to DHL that are necessary for the delivery of the goods (e.g. name, address, and if applicable e-mail address for shipment tracking or notification).

If you have given your explicit consent during the ordering process, we will transmit your e-mail address in accordance with Art. 6 para. 1 lit. a GDPR to DHL so that DHL can contact you before delivery to coordinate delivery details or announce the delivery.

Revocation of consent: You can revoke your consent to the transmission of your e-mail address to DHL at any time with effect for the future, e.g. by sending a message to us or directly to DHL. In this case, delivery takes place without prior contact.

Further information on data protection at DHL can be found at: DHL Privacy Policy

PayPal Payment Service Provider

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from the provider where you make an advance payment, your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. Your data is passed on in this case exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and if applicable data on an alternative payment method).

In order to safeguard our legitimate interest in establishing your creditworthiness in such cases, these data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks on the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment method selected by you can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). To the extent that score values flow into the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things, flows into the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data if this is necessary for contractual payment processing.

The PayPal privacy policy applies to all PayPal transactions. You can find this at PayPal Privacy Policy, as well as at PayPal PDF Policy

Login with Amazon

You can log in to our website using your Amazon account. The provider is Amazon Europe Core S.à r.l. Use is based on your consent (Art. 6 para. 1 lit. a GDPR).

Details on data protection: Amazon Login Privacy

Apple Pay Payment Service

We offer Apple Pay as a payment method. Provider: Apple Inc. or Apple Distribution International Ltd. Apple's privacy policies apply: Apple Privacy Policy

Klarna Payment Service

When selecting the payment method "Klarna", personal data is transmitted to Klarna AB, Sweden. This includes, among other things, name, address, and payment data. The legal basis is Art. 6 para. 1 lit. b GDPR.

Privacy information: Klarna Privacy Policy

Technically Necessary Cookies

Unless otherwise stated below in the privacy policy, we only use technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These require that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on Section 25 para. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.

Analysis

Use of Google Analytics 4

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irland; „Google“). Google Analytics helps us understand how visitors use our website, which pages are relevant, and where we can improve our offer. In particular, information on page views, browser and device used, approximate region, referrer URL, and interactions and purchase activities can be processed.

Google Analytics uses cookies and comparable technologies only if you have consented to this. Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG. You can revoke your consent at any time via the cookie settings with effect for the future. According to Google, the IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.

Data may be transmitted to Google LLC in the USA. Google bases such data transmissions inter alia on Standard Contractual Clauses. Further information can be found at Google Privacy Policy and Google Cookies.

Plug-ins and Miscellaneous

Use of Google reCAPTCHA

We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. These data are processed by Google within the European Union and possibly also transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is not certified under the TADPF. Data transmission takes place inter alia on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: Google Frameworks.

The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protecting our website from automated espionage, abuse, and spam. You have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: reCAPTCHA Info and Google Privacy.

Use of Google Invisible reCAPTCHA

We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This serves the purpose of distinguishing whether input is made by a human or by automated, machine processing. In the background, Google collects and analyzes usage data used by invisible reCAPTCHA to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the invisible reCAPTCHA service are transmitted to Google.

These data are processed by Google within the European Union and possibly also transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is not certified under the TADPF. Data transmission takes place inter alia on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: Google Frameworks.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: reCAPTCHA Info and Google Privacy

Use of YouTube

We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „YouTube“) on our website. YouTube is an affiliate company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is activated. This means that YouTube does not store any information about website visitors until they watch a video. Only when you watch a video, information about this is transmitted to YouTube and stored there. Your data may be transmitted to the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is not certified under the TADPF. Data transmission takes place inter alia on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: Google Frameworks.

The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to these processings of personal data concerning you at any time for reasons arising from your particular situation.

Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy notices at YouTube Privacy Policy.

Data Subject Rights and Storage Period

Duration of Storage

After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account statutory retention periods, in particular under tax and commercial law, and then deleted after the expiry of the period, unless you have agreed to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights pursuant to Art. 15 to 20 GDPR: Right to information, right to rectification, right to erasure, right to restriction of processing, right to data portability.

Furthermore, pursuant to Art. 21 para. 1 GDPR, you have a right to object to processing based on Art. 6 para. 1 lit. f GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You can lodge a complaint inter alia with the supervisory authority responsible for us, which you can reach at the following contact details:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Postfach 20 04 44
40102 Düsseldorf, Germany
Phone: +49 211 384240
Fax: +49 211 38424999
E-Mail: [email protected]

Right to Object

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.

After a successful objection, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

Last update: May 25, 2026