Data protection

It is important to us to handle your personal data with care. We are aware of our responsibility and thank you for your trust. Your data is protected by a range of technical and organizational measures against unauthorized access.
 

Our company participates in the Alliance for Cyber Security of the Federal Office for Information Security (BSI).

 
Your data is stored on a secure server in Germany (data center in Nuremberg) as the primary storage location. This server is integrated into the Backbone Europe infrastructure and equipped with modern technologies and energy-efficient hardware.

Our email communication is handled via a German mail server (data center in Berlin), which complies with applicable consumer protection and security requirements. This includes, in particular, the implementation of the technical guideline “Secure Email Transport” (BSI TR-03108) issued by the Federal Office for Information Security (BSI). 

---

Privacy Policy

Section 1 Controller

The controller responsible for data processing on this website is:

OHB Thalheim e.K.
Owner: Guido Bernhardt
Hufelandstr. 24
09366 Stollberg
Germany

Telephone: +49 800 7467736
E-mail: [email protected]

Section 2 General Information on Data Processing

We process personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data means any information relating to an identified or identifiable natural person, such as name, address, e-mail address, or IP address.

The primary storage of the contract, customer and communication data processed within our online shop takes place on servers located in Germany.

Where we use external service providers for specific processing purposes, personal data may also be processed by those providers and, where applicable, outside Germany or the European Economic Area. Details of the respective providers, processing purposes, legal bases and safeguards can be found in the following sections of this privacy policy.

Section 3 Hosting

Our website is hosted by:

netcup GmbH
Daimlerstraße 25
76185 Karlsruhe
Germany

The hosting provider processes personal data in order to ensure the secure and stable operation of the website. In particular, the following data may be processed:

• IP address

• Date and time of access

• Accessed pages

• Browser type

• Operating system

• Referrer URL

• Technical access data

Legal basis:
Article 6(1)(f) GDPR

Legitimate interest:
Secure operation, technical stability, and protection of the website against misuse.

Server log files are generally deleted after no more than 7 days unless longer retention is required for security-related reasons.

Content Delivery Network, DNS and Security Services (Cloudflare)

To accelerate, secure and ensure the availability of our website, we use services provided by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany, as the contracting party of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare provides in particular a content delivery network, domain name resolution (DNS), protection against denial-of-service attacks and a web application firewall. Traffic between your browser and our server is therefore routed through Cloudflare's infrastructure.

The data processed includes in particular your IP address, the date and time of access, the address requested, the volume of data transferred, browser type and operating system, the referrer URL and security-relevant technical characteristics of the request.

Legal basis:

Art. 6 (1) lit. f GDPR

Legitimate interest:

Fast delivery of our content, defence against attacks and misuse, and ensuring the availability and security of our online offering.

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Processing of personal data outside the European Economic Area, in particular in the USA, cannot be ruled out. Such transfers are based on the European Commission's standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR, which are incorporated into that agreement. According to its own statements, Cloudflare is additionally certified under the EU-US Data Privacy Framework.

Further information: Cloudflare Privacy Policy

Storage period:

According to its own statements, Cloudflare stores the resulting log and security data only for a short period; they are deleted as soon as they are no longer required for delivering the content and defending against attacks. We do not assign these data to you personally on a lasting basis.

Protecting Our Forms Against Misuse (Cloudflare Turnstile)

In order to protect our forms against automated entries, bulk requests and misuse, we use the Turnstile service provided by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany, as the contracting party of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile replaces our previous image captcha, which required you to type in a code of letters and numbers.

Turnstile is used on the following forms: contact form, newsletter subscription, withdrawal form, request for a new password, and login after several failed attempts.

When you open a page containing such a form, your browser loads a script from the address challenges.cloudflare.com and establishes a connection to Cloudflare. This already happens when the page is loaded, that is, even if you do not subsequently submit the form.

The data processed includes in particular your IP address, technical characteristics of your browser and operating system, the address accessed, and information about your behaviour on the page, such as mouse and keyboard events. From these characteristics, Turnstile determines whether the input originates from a human being or from a program. In most cases no action on your part is required; an additional confirmation is only displayed in cases of doubt. According to Cloudflare's own statements, Turnstile is not used to track visitors across websites and is not used for advertising purposes.

When you submit the form, we transmit the verification token generated by Turnstile together with your IP address to Cloudflare in order to have the result confirmed. Only then do we process your entries further.

Legal basis:
Article 6(1)(f) GDPR

Legitimate interest:
Protecting our forms and mailboxes against automated misuse, unsolicited advertising and overload, and keeping our customer service reachable for genuine enquiries.

The data processing agreement mentioned above and the basis described there for a possible transfer to the USA (standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR) also apply to Turnstile.

Further information: Cloudflare Privacy Policy

Storage period:

The verification token is valid for only a few minutes and can be redeemed only once. According to Cloudflare's own statements, the data arising in connection with Turnstile is stored only briefly and then deleted. We do not assign these data to you personally.

Section 4 AI-Assisted Development, Maintenance and Administration Tools

For the development, maintenance, technical analysis, troubleshooting, protection and optimisation of our IT systems and our online shop, we use AI-assisted development and administration tools provided by:

Anthropic PBC
548 Market Street
San Francisco, CA 94104
USA

These include in particular Claude and Claude Code.

In the course of using these tools, technical information such as program code, configuration details, error messages, command output, log data and information about how our systems operate may be processed.

Where this is necessary for a specific technical task, such information may also contain personal data. This may include in particular:

• customer and contact data
• order and shipping information
• the content of customer enquiries
• IP addresses and technical usage data
• internal case and reference numbers

We limit the information transmitted to Anthropic to what is necessary for the respective technical purpose. The processing of special categories of personal data within the meaning of Art. 9 GDPR is not intended. The targeted transmission of payment data, passwords, API keys or other authentication credentials to Anthropic is not intended. We give the tools we use binding instructions not to process such data, and we limit processing to the information required for the respective technical task.

The processing serves to ensure the secure, stable and economical operation of our IT systems, to analyse errors, to further develop our online shop and to avert technical threats.

Legal bases:

• Art. 6 (1) lit. f GDPR – our legitimate interest lies in the secure, error-free andefficient provision and further development of our online offering
• Art. 6 (1) lit. b GDPR where, in exceptional cases, the processing is directly and objectively necessary to perform a specific contract or to handle a customer enquiry relating to it

Anthropic processes personal data as a processor acting on our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with Anthropic.

Processing or storage of personal data in the USA cannot be ruled out. Such transfers are based on the European Commission's standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR, which are incorporated into that data processing agreement.

You may request a copy of the applicable standard contractual clauses or further information on the agreed safeguards from us. The Anthropic Data Processing Addendum, including the standard contractual clauses, is also available on Anthropic's website.

By default, Anthropic does not use inputs and outputs from its commercial services to train its generative AI models. This does not apply where we expressly submit content as feedback or expressly consent to further use.

We delete working sessions and any personal data they contain as soon as they are no longer required for maintenance, error analysis, security and the traceability of technical changes.

According to Anthropic, a retention period of 30 days applies by default to the inputs and outputs processed through these tools on commercial accounts. In addition, local session logs may be created on our own server. We clean these up regularly and do not retain them for longer than is necessary for the respective technical purpose.

Conversations stored within the team environment we use remain available there until we delete them. Once deleted, they are generally removed from Anthropic's backend systems within 30 days, according to Anthropic. Different retention periods may apply, in particular due to legal obligations or in order to investigate possible violations of the terms of use.

The AI systems do not make any decisions with legal effect or similarly significant effect concerning customers. They are used exclusively as supporting tools for technical and organisational activities.

Section 5 Data Processing for Contract Performance

(1) Purpose of processing

For the processing of orders, we process the data provided during the ordering process (e.g. name, address, contact details, and payment information).

When you contact us (e.g. by e-mail or contact form), we process the information you provide in order to handle your inquiry.

(2) Legal basis

Article 6(1)(b) GDPR

(3) Recipients

• Shipping service providers

• Payment service providers

• Hosting provider

(4) Storage period

• Contract data: until expiry of statutory warranty periods

• Tax and commercial records: depending on the type of document, generally six, eight or ten years. Accounting vouchers and invoices are generally retained for eight years, commercial and business letters generally for six years, and books, annual financial statements and certain organisational documents generally for ten years

• Inquiries: until final processing has been completed

Section 6 Customer Account

If you create a customer account in our online shop, we process the registration data provided by you for the purpose of providing and managing your customer account.

In particular, the following data may be processed:

• Name

• Address

• E-mail address

• Telephone number (if provided)

• Order history

Processing is carried out for the implementation of pre-contractual measures and the performance of the contractual relationship with you.

Legal basis:

Article 6(1)(b) GDPR

The customer account can be deleted at any time, provided that no statutory retention obligations prevent such deletion.

Section 7 Payment Services

Depending on the selected payment method, we transmit personal data to the respective payment service provider for payment processing.

(1) Advance Payment

If advance payment (bank transfer) is selected, payment processing is carried out directly via our bank account. No payment data is transmitted to external payment service providers.

(2) Cash on Delivery

If cash on delivery is selected, payment processing is carried out via the shipping service provider. The data required for delivery (e.g. name and address) will be transmitted.

Legal basis:

Article 6(1)(b) GDPR

(3) PayPal (including payment methods offered via PayPal)

Payment processing is carried out by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

Depending on the selected payment method, the data required for payment processing will be transmitted to PayPal.

This may include:

• PayPal

• Purchase on Account

• Installment Payments

Via the PayPal payment request we send you, payment can additionally be made by credit or debit card or with Apple Pay; in this case processing is carried out by PayPal.

PayPal may transfer personal data to credit agencies or affiliated companies for payment processing and creditworthiness checks.

For purchase on account or installment payments, processing may be carried out wholly or partly by external service providers (e.g. Ratepay GmbH, Berlin).

Further information:

PayPal Privacy Statement

Legal basis:

Article 6(1)(b) GDPR and Article 6(1)(f) GDPR

(4) WERO

If WERO is selected as the payment method, payment processing is carried out via participating banks and payment service providers within the WERO system.

The data required for payment processing is processed and transmitted to the participating payment service providers.

Legal basis:

Article 6(1)(b) GDPR

(5) Stripe (credit card, Apple Pay and Google Pay)

Payment processing is carried out by:

Stripe Payments Europe, Limited
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, D02 H210, Ireland

The following payment methods are offered via Stripe:

• Credit Card (Visa, Mastercard, American Express)

• Apple Pay

• Google Pay

If one of these payment methods is selected, the data required for payment processing is transmitted to Stripe, in particular name, billing address, e-mail address, order and invoice amount as well as the IP address.

You enter your card details in an input field provided by Stripe; they are transmitted to Stripe directly in encrypted form, are never stored in our shop and are not accessible to us in plain text. If your bank requires additional authentication, you will be redirected to its secure procedure (3-D Secure).

Stripe additionally processes the data in order to detect and prevent fraudulent payments.

Stripe may transfer data to its parent company Stripe, Inc., based in the United States. This is based on the standard contractual clauses of the European Commission; Stripe, Inc. is also certified under the EU-US Data Privacy Framework.

Further information:
Stripe Privacy Policy

Legal basis:

Article 6(1)(b) GDPR and Article 6(1)(f) GDPR (fraud prevention)

Section 8 Contact Form and Contact by E-mail

If you contact us via a contact form or by e-mail, the data transmitted by you will be processed for the purpose of handling your inquiry.

Legal basis:

Article 6(1)(b) GDPR and/or Article 6(1)(f) GDPR

The data will be deleted once your inquiry has been conclusively processed and no statutory retention obligations apply.

Section 9 Newsletter, Customer Information and Automated Email Communication

(1) Newsletter

If you subscribe to our newsletter, we will use the data you provide for sending the newsletter and – insofar as this is covered by your consent – for recipient-related performance measurement.

We use the so-called double opt-in procedure for newsletter subscriptions. After registering, you will receive an email asking you to confirm your subscription by clicking a confirmation link. Your subscription will only become effective once this confirmation has been completed.

For documentation purposes, we store the date and time of registration, the date and time of confirmation, and the IP address used during the registration process.

As part of our newsletter service, our own newsletter system analyzes whether newsletters have been opened and which links within the newsletters have been clicked. This analysis is carried out on an individual recipient basis and serves to improve our services and optimize our customer communication. These analysis data are not passed on to third parties. For our other advertising emails to existing customers, no such recipient-related analysis of opens or clicks takes place.

Storage period for the analysis data:

We delete the open and click data collected for a newsletter as soon as the analysis of that dispatch has been completed and the data are no longer needed to improve future newsletters. If you withdraw your consent or unsubscribe, we delete the analysis data collected about you.

Legal basis:
Art. 6 (1) lit. a GDPR

You may withdraw your consent at any time with future effect, for example by using the unsubscribe link included in every newsletter or by contacting us directly.

(2) Customer Information and Automated Service Emails

For the performance of existing contractual relationships and for customer support purposes, we send automated emails where this is necessary for contract fulfillment or based on our legitimate interest in providing customer-friendly communication.

Such emails may include, in particular:

• Payment reminders for advance payment orders
• Confirmations of payments received
• Dispatch notifications including shipment tracking
• Notifications regarding delivery delays
• Payment reminders and notifications regarding outstanding balances

For these purposes, we may process your name, email address, order information, and, where applicable, information relating to previous orders.

Legal bases:

• Art. 6 (1) lit. b GDPR (performance of a contract)
• Art. 6 (1) lit. f GDPR (legitimate interest in customer service, a reliable handling of and support for your order)
• Art. 6 (1) lit. a GDPR where consent is required

(3) Advertising for Our Own Similar Goods to Existing Customers

If you have purchased goods from us, we use the email address you provided in connection with that purchase to occasionally send you recommendations for our own goods that are similar to the items you have already bought. To select these recommendations, we draw on your previous orders, in particular the items, product groups and sizes purchased.

These messages include in particular:

• recommendations for items, series and sizes related to your previous purchases – also combined with a voucher
• reminders about a voucher already granted to you that is about to expire
• requests to review the items you purchased and invitations to review your shopping experience
• reward vouchers for a review you have submitted

Legal bases:

• Section 7 (3) of the German Act Against Unfair Competition (UWG)
• Art. 6 (1) lit. f GDPR (legitimate interest in direct marketing to existing customers)

You may object to the use of your email address for these purposes at any time and free of charge – via the unsubscribe link in every email or informally to [email protected]. We inform you of this right to object both when your email address is collected and in every single email. An objection does not affect your orders.

(4) Reminder About an Order Process That Was Not Completed

If you placed items in your basket but did not complete the order, we send you an email reminder. Because an abandoned order process is not a purchase, we send this reminder exclusively to recipients who have subscribed to our newsletter and confirmed that subscription via the double opt-in procedure.

The data processed for this purpose are your email address, your name and the items in your basket.

Legal basis:

Art. 6 (1) lit. a GDPR (consent)

You may withdraw your consent at any time with effect for the future – via the unsubscribe link in every email or informally to [email protected].

(5) Mailing System and Dispatch Service Providers

Newsletters and automated emails are created and controlled by a newsletter and notification system developed by us, which is operated on our own servers located in Germany. The selection of recipients, the compilation of content and the management of consents, objections and unsubscriptions all take place within that system.

For the technical delivery of some of our newsletters and advertising emails we use Amazon Simple Email Service (Amazon SES), a service provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.

The data processed for this purpose includes in particular the email address required for delivery, sender details, the subject and content of the respective email, and technical delivery information. Technical delivery information may include the time of dispatch, delivery status, bounce messages and complaint notifications.

We use Amazon SES in the AWS region Frankfurt am Main (eu-central-1). A data processing agreement pursuant to Art. 28 GDPR is in place with Amazon Web Services. Where personal data is transferred to a third country, the standard contractual clauses of the European Commission incorporated into that agreement apply.

Individual performance measurement by Amazon SES, such as recording opens or clicks of individual recipients, is not enabled. Open tracking is also disabled in our own system for advertising emails to existing customers; recipient-related analysis takes place exclusively for the consent-based newsletter.

All other emails, in particular contract-related messages and some of our advertising emails, are sent and received via our email provider mailbox.org, Heinlein Support GmbH, Schwedter Strasse 8/9b, 10119 Berlin, Germany. This provider processes the content of our email correspondence, including your enquiries, on servers located in Germany.

The legal bases are Art. 6 (1) lit. a GDPR for consent-based newsletters, Art. 6 (1) lit. b GDPR for contract-related communication, and Art. 6 (1) lit. f GDPR in conjunction with Section 7 (3) of the German Act Against Unfair Competition (UWG) where advertising is sent to existing customers under the statutory conditions.

Section 10 Comments and Reviews

Comments

If you write a review for an item, we process your details in order to publish them in our shop. What is published is the name you provide in abbreviated form, the date, the rating and your review text – not your email address.

Legal basis:

Article 6(1)(f) GDPR

You may request deletion at any time.

Shop Reviews (SHOPVOTE)

For shop reviews we cooperate with the following service provider. Two separate processing operations must be distinguished here: the display of reviews already submitted within our shop, and the collection of new reviews by email invitation.

SHOPVOTE – Blickreif GmbH
Alter Messeplatz 2
80339 Munich
Germany

Display of existing reviews

To display reviews, content may be loaded from SHOPVOTE. This may result in the transmission of technical data – in particular your IP address, the browser used and the time of access – to SHOPVOTE.

Legal basis:

Art. 6 (1) lit. f GDPR – legitimate interest in presenting customer reviews and thereby supporting an informed purchase decision.

Collection of new reviews

We send the invitation to review your purchase ourselves, using our own email system. For this purpose we process your email address, your name, the order number and the order date. These data are not transmitted to SHOPVOTE in the process. The invitation merely contains a link to SHOPVOTE's review form.

Only if you follow that link and submit a review there does SHOPVOTE process the data you enter as a controller in its own right. SHOPVOTE's privacy policy applies to that processing.

Legal bases for sending the invitation:

Section 7 (3) of the German Act Against Unfair Competition (UWG) and Art. 6 (1) lit. f GDPR. You may object to receiving such invitations at any time – via the unsubscribe link in every email or informally to [email protected].

We delete the data processed for the invitation as soon as they are no longer required for that purpose and no statutory retention obligations apply.

Section 11 Cookies and Consent Management

Our website uses cookies and comparable technologies.

We distinguish in particular between:

• Technically necessary cookies

• Statistics and analytics cookies

• Marketing cookies

Non-essential cookies and comparable technologies are only used with your explicit consent.

To manage your consent preferences we use a function integrated into our own shop. No external service provider is used for this; your consent decision does not leave our servers.

Storage period:

We retain your consent decision for as long as it applies and, beyond that, for as long as we are required to demonstrate that consent. If you change or withdraw your decision, the previous state is replaced by the new one.

The system stores which consents have been granted or withdrawn in order to ensure legally compliant management of cookies and external services.

You may change or withdraw your consent at any time via the "Cookie Settings" on our website.

Legal basis:

• Article 6(1)(a) GDPR

• Section 25(1) TDDDG

Technically necessary cookies are processed on the basis of:

• Article 6(1)(f) GDPR

• Section 25(2) TDDDG

You may disable cookies in your browser at any time. This may limit the functionality of the website.

Section 12 Google Analytics 4

Subject to your consent, we use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Storage period:

The usage and event data collected in Google Analytics are deleted automatically after the retention period configured in our account; thereafter only aggregated reports without reference to individual usage events remain available. If you withdraw your consent, no further data are collected for your visit.

Google Analytics uses cookies and similar technologies to analyze the use of our website.

The following data may in particular be processed:

• Shortened IP address

• Device information

• Browser information

• Usage behavior

• Visited pages

• Traffic source

• Website interactions

We use Google Analytics exclusively with activated IP anonymization.

Processing is carried out solely on the basis of your consent.

A data processing agreement has been concluded with Google.

Legal basis:

• Article 6(1)(a) GDPR

• Section 25(1) TDDDG

The transfer of personal data to the United States cannot be excluded.

Google relies on the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Further information:

Google Privacy Policy

You may withdraw your consent at any time via the cookie settings.

Section 13 Google Ads Conversion Tracking and Google Tags

Subject to your consent, we use Google Ads Conversion Tracking and Google Tags to measure interactions and conversions.

Storage period:

The cookies used for this purpose expire automatically after a limited period; an advertising contact can only be linked to an order within that window. Afterwards only aggregated reports without reference to you remain. You can delete the cookies in your browser at any time.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Cookies and similar technologies may be used to determine whether users have reached our website via Google advertisements and whether certain actions have subsequently been performed, such as completing a purchase or submitting a contact form.

The collected data is used to measure the effectiveness of our advertising campaigns and to optimize our online services.

Google may use this information to create pseudonymous usage profiles.

Processing is carried out solely on the basis of your consent.

Legal basis:

• Article 6(1)(a) GDPR

• Section 25(1) TDDDG

The transfer of personal data to the United States cannot be excluded. Google relies on the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Further information:

Google Privacy Policy

Section 14 Disclosure of Data

Personal data is transmitted to third parties only where there is a legal basis for doing so. This may be the case in particular where the transfer is necessary for the performance of a contract, where a legal obligation exists, where you have consented, or where the processing is necessary to protect our legitimate interests and your interests or fundamental rights do not override them.

Personal data may additionally be transmitted to processors engaged by us where this is necessary for the provision, maintenance, protection or further development of our technical systems. These may include in particular hosting providers, email service providers, security service providers and IT and AI service providers. Where required, data processing agreements pursuant to Art. 28 GDPR are in place with the processors engaged.

For the delivery of your order, we transmit the necessary personal data (in particular name, delivery address and, where applicable, e-mail address or telephone number) to the shipping service providers commissioned by us.

These include in particular:

• DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

• Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

• Hermes Germany GmbH, Essener Straße 89, 22419 Hamburg, Germany

The transfer is carried out exclusively for the purpose of contract fulfillment and delivery of your order.

Legal basis:

Article 6(1)(b) GDPR

Section 15 Storage Period

Personal data is stored only for as long as necessary for the respective processing purpose or as required by statutory retention obligations.

Section 16 Your Rights

You have the following rights:

• Right of access (Article 15 GDPR)

• Right to rectification (Article 16 GDPR)

• Right to erasure (Article 17 GDPR)

• Right to restriction of processing (Article 18 GDPR)

• Right to data portability (Article 20 GDPR)

• Right to withdraw consent (Article 7(3) GDPR)

• Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Section 17 Right to Object (Article 21 GDPR)

Where we process personal data on the basis of Art. 6 (1) lit. e or lit. f GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where your personal data are processed for direct marketing purposes, you may object to that processing at any time without giving reasons. Following your objection, your personal data will no longer be used for direct marketing.

Section 18 Supervisory Authority

Saxon Data Protection and Transparency Commissioner
Devrientstraße 5
01067 Dresden
Germany

Website:
https://www.datenschutz.sachsen.de

Section 19 Share Function for Product Pages

On our product pages, we offer a share function. Using this feature, you can share the link to the respective product page via selected services such as WhatsApp, Telegram, Facebook or X, send it by e-mail, or copy it to your clipboard.

The share buttons are implemented as simple links. Merely visiting our product pages does not result in any personal data being transmitted to the social networks or messenger services listed. A connection to the respective provider is only established once you actively click one of the buttons.

After clicking one of the buttons for WhatsApp, Telegram, Facebook, X or e-mail, you will be redirected to the respective provider, or the corresponding application will open with a pre-filled message draft containing the product name and the link to the product page. In doing so, personal data – in particular your IP address, technical browser and device data, and the URL accessed – may be transmitted to and processed by the respective provider. We have no influence on the type and extent of this data processing. The privacy policy of the respective provider applies.

The “Copy link” function merely copies the product link locally to your device’s clipboard; no data is transmitted to third parties in this process.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest in providing a user-friendly share function)

Last updated: August 2026