Privacy policy

Last updated: 29 October 2026

This policy describes which personal data are processed when you visit this website and when you send an enquiry, on what legal basis this happens, and what rights you have.

1. Controller

The controller for data processing on this website is:

Thonik Handels UG (haftungsbeschränkt), Hohe Bleichen 8, 20354 Hamburg, Germany, represented by its managing director Nick Lohse. Phone +49 176 55906867, email thonik.handel@gmx.de.

No data protection officer has been appointed; the statutory requirements for appointing one are not met.

2. When you visit this website

When you open a page, your browser transmits technically necessary data to our server, which are stored there in so-called server log files: the IP address of the requesting device, the date and time of access, the page requested, the browser and operating system used, and the previously visited page where your browser transmits it.

This processing is technically necessary to operate the website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in secure and stable operation and in defending against attacks.

These data are not merged with other data sources. Log files are deleted after a short period unless they are needed to investigate a specific case of misuse.

3. Hosting

This website is operated with a service provider in the European Union. The provider processes the data named above exclusively on our behalf and on our instructions. A data processing agreement under Art. 28 GDPR is in place with that provider.

4. Encrypted transmission

This website is delivered over a TLS-encrypted connection, shown by the padlock symbol in your browser's address bar. Content you transmit to us is thereby protected against being read by third parties while in transit.

5. Enquiry form

When you send us an enquiry through the form, we process the details you enter: name, company, email address, telephone number, type of goods, quantity, condition, location of the goods, price expectation and your note.

We process these data exclusively in order to handle your enquiry and to make you an offer. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures at your request) and, where you have given it, your consent under Art. 6 (1) (a) GDPR.

The details are transmitted to our email account and stored there. They are not passed on to third parties unless this is necessary to handle your enquiry — for example to a haulier once a collection is agreed.

To protect against automated submissions, the form contains an additional field that is invisible to you. If it is filled in, we discard the submission. No further data are collected in the process.

6. Uploaded photos and files

The detailed form allows photos or documents to be attached. These files are not stored permanently on the server but forwarded directly to our mailbox as an attachment.

Please do not upload files containing personal data of third parties unless this is necessary to assess the goods.

7. Contact by email, telephone and WhatsApp

If you contact us by email or telephone, we process your details in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR, or Art. 6 (1) (f) GDPR for general enquiries.

This website contains links to WhatsApp. Only when you click such a link does your device establish a connection to WhatsApp — no data are transmitted there beforehand. The operator is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, a company of the Meta group.

If you write to us via WhatsApp, WhatsApp's own privacy terms apply in addition. Data may then also be processed outside the European Union, in particular in the United States. We have no influence over this.

If you wish to avoid this, you can reach us equally well by telephone, email or through the enquiry form.

8. Browser storage, no cookies

This website does not set any cookies.

If you acknowledge the notice at the bottom of the page, your browser records that acknowledgement in your device's local storage so the notice does not reappear on every visit. Only the fact that it was acknowledged is stored. This information never leaves your device and is not read by us.

You can delete this storage at any time through your browser settings.

9. Fonts and embedded content

Fonts, images and scripts are delivered exclusively from our own server. No connection is made to third-party servers such as font services or map providers.

No audience measurement, tracking or profiling takes place.

10. Recipients of your data

Your data are received only by parties that need them to handle your enquiry. As a rule these are our hosting provider and our email provider, each acting for us as a processor under Art. 28 GDPR.

If a transaction is concluded, we pass the details required for handling it to the haulier commissioned and, where legally required, to tax advisers and tax authorities.

11. Retention period

We keep enquiries and the related correspondence for as long as is necessary to handle them, and delete them afterwards.

If a transaction is concluded, the records are subject to the commercial and tax retention periods of six and ten years respectively (§ 257 HGB, § 147 AO). For that period the data are restricted in processing and kept solely to fulfil those obligations.

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. Offers are made by people.

13. Your rights

You have the right of access to the data processed about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).

Where we process data on the basis of a legitimate interest, you have the right to object to that processing on grounds relating to your particular situation (Art. 21 GDPR).

You may withdraw consent you have given at any time with effect for the future. The lawfulness of processing carried out up to the withdrawal remains unaffected.

An informal message to thonik.handel@gmx.de is sufficient for all of these requests.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

15. Changes to this policy

We adapt this policy when the processing changes — for instance because a new tool is used or the legal situation requires it. The version published here is the one that applies.