Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Drive & Drip Owner: Kerim Demiroski, Wredestraße 5c 97082 Würzburg
Email: info@driveanddrip.de Phone:
2. General Information on Data Processing
2.1 Scope of Processing of Personal Data
We process personal data of our users only to the extent necessary to provide a functional website and our content and services.
2.2 Legal Bases
Insofar as we obtain consent for processing operations of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis. For the processing of data required for the performance of a contract, Art. 6 para. 1 lit. b GDPR serves as the legal basis. If processing is necessary to fulfill a legal obligation, Art. 6 para. 1 lit. c GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis.
2.3 Data Deletion and Storage Period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by legal provisions, in particular commercial and tax retention periods (usually 6 or 10 years for business documents and booking vouchers).
3. Provision of the Shop and Creation of Log Files (Hosting by Shopify)
Our online shop is operated on the platform of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify automatically collects and processes data about access to our shop (so-called server log files) in this context, including:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the technically flawless presentation and optimization of our website). Further information on data protection at Shopify can be found at: https://www.shopify.com/legal/privacy
4. Cookies
Our shop uses cookies. Cookies are small text files that are stored on your end device. Technically necessary cookies (e.g., for the shopping cart or login status) are used on the basis of Art. 6 para. 1 lit. f GDPR. For all non-technically necessary cookies (e.g., analysis and marketing cookies), we obtain your prior consent via our cookie banner (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future via the cookie settings.
5. Registration, Order, and Contract Processing
When placing an order in our shop, we collect and process the following data, as far as this is necessary for the fulfillment of the purchase contract:
- Name, address
- Email address, phone number
- Order and payment data
- IP address
The legal basis is Art. 6 para. 1 lit. b GDPR (contract performance). The provision of data is necessary for the establishment, implementation, and processing of the contractual relationship. Without this data, we cannot conclude the contract with you.
6. Payment Service Providers
To process payments in our shop, we use the following payment service providers. In the context of payment processing, the data required for this (e.g., name, address, order amount, account details) are transmitted to the respective providers.
6.1 Shopify Payments
Provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. The data transfer takes place exclusively for the purpose of payment processing. Legal basis: Art. 6 para. 1 lit. b GDPR.
6.2 PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). If you select the payment method "PayPal", your payment data will be transmitted to PayPal. The legal basis is Art. 6 para. 1 lit. b GDPR and – where applicable – Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable payment processing). Further information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
6.3 Klarna
Provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna"). When selecting a Klarna payment method (e.g., invoice purchase, installment purchase, instant transfer), we transmit the data necessary for payment processing to Klarna, which may also include a credit check. The legal basis is Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR (legitimate interest in protection against payment defaults). Further information: https://www.klarna.com/de/datenschutz/
7. Web Analytics and Tracking
7.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies or similar technologies to analyze your use of the shop (e.g., pages visited, duration of stay, origin of visitors). Use only takes place if you have previously consented via our cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR. Data may be transferred to the USA; Google has submitted to the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via the cookie settings. Further information: https://policies.google.com/privacy
7.2 Meta Pixel (Facebook Pixel)
We use the so-called "Meta Pixel" from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). This allows us to track the behavior of users after they have seen or clicked on a Meta advertisement, in order to evaluate the effectiveness of the advertisements for statistical and market research purposes. Use takes place exclusively after prior consent via our cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR. Further information on Meta and data protection: https://www.facebook.com/privacy/policy/
8. Newsletter
If you subscribe to our newsletter, we use your email address and any other voluntarily provided data to send you our newsletter regularly. The registration takes place using the so-called double opt-in procedure, i.e., after registration, you will receive an email in which you must confirm the registration. The legal basis is Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time and unsubscribe from the newsletter, e.g., via the unsubscribe link in each newsletter email. The legality of the processing already carried out remains unaffected by the withdrawal.
9. Contact
If you contact us by email, phone, or via a contact form, your details will be stored by us for processing the inquiry and for the event of follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR (insofar as the inquiry is pre-contractual or contractual) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering your inquiry).
10. Rights of the Data Subject
You have the right:
- To request information about the personal data processed by us (Art. 15 GDPR)
- To have inaccurate data rectified (Art. 16 GDPR)
- To request the erasure of your data (Art. 17 GDPR)
- To request the restriction of processing (Art. 18 GDPR)
- To receive your data in a common format (data portability, Art. 20 GDPR)
- To object to the processing of your data (Art. 21 GDPR)
- To withdraw any given consent at any time with effect for the future (Art. 7 para. 3 GDPR)
11. Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The responsible authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27 91522 Ansbach
12. SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the padlock symbol in your browser's address bar.
Status: July 2026