Privacy policy

Last updated: April 2026

Drippr (hereinafter "we", "us" or "Drippr") operates this online shop on the basis of the Shopify platform and sells drying racks for softflasks and related outdoor products. This Privacy Policy informs you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR / Datenschutz-Grundverordnung, DSGVO) about which personal data we collect, for what purposes we process it, and what rights you have.

1. Controller (Verantwortlicher)

The controller responsible for data processing within the meaning of the GDPR (Art. 4 No. 7 DSGVO) is:

Meet in the Mountains UG (haftungsbeschränkt) Trading as: drippr
Narzissenstraße 10
76307 Karlsbad

Germany
Email: info@drippr.shop

2. Personal Data We Collect (Personenbezogene Daten)

When we use the term "personal data" (personenbezogene Daten), we refer to any information relating to an identified or identifiable natural person. Depending on how you interact with our shop, we collect and process the following categories:

2.1 Contact and Order Data

Name, address, billing and shipping address
Email address and phone number
Payment data (credit card, debit card, account number, transaction details)
Order history, shopping cart and wishlist contents
Returns, exchanges and cancellations

2.2 Account Data (if a customer account is created)

Username, password, security questions
Settings and preferences

2.3 Communication Data

• Content of your enquiries to our customer service 2.4 Device and Usage Data

IP address, browser type, device type and operating system
Unique device identifiers
Navigation and click behaviour within our shop

3. Legal Bases for Processing (Rechtsgrundlagen)

We process your data on the basis of the following legal grounds under the GDPR:

Art. 6 para. 1 lit. b DSGVO – Performance of a contract (Vertragserfüllung): Processing necessary to execute your order, handle payments, organise shipping and process returns.
Art. 6 para. 1 lit. c DSGVO – Legal obligation (Rechtliche Verpflichtung): e.g. statutory retention obligations under §§ 147 Abgabenordnung (AO), 257 Handelsgesetzbuch (HGB) – 10 years for accounting records.
Art. 6 para. 1 lit. f DSGVO – Legitimate interests (Berechtigte Interessen): Fraud prevention, IT security and improvement of our shop.
Art. 6 para. 1 lit. a DSGVO – Consent (Einwilligung): e.g. for marketing emails. You may withdraw your consent at any time.

4. Purposes of Processing 4.1 Order Fulfilment

We process your data to handle your order, process payments, organise shipping and manage returns, as well as to create and maintain your customer account.

4.2 Communication

We use your contact data to respond to enquiries and to send order confirmations and shipping notifications.

4.3 Marketing (with consent only)

With your express consent (Einwilligung), we send you newsletters and promotional communications by email. You may withdraw this consent at any time via the unsubscribe link in any email or by contacting us directly.

4.4 Fraud Prevention and Security (Betrugspravention)

To ensure a secure shopping experience and to detect abusive activity, we process your data on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO).

4.5 Compliance with Legal Obligations

Where required by law, we process your data to fulfill tax and commercial law retention obligations and to comply with regulatory requirements.

5. Disclosure of Data to Third Parties

We only share your personal data where necessary for the performance of the contract or where permitted by law:

Shopify Inc. (USA): Our shop runs on the Shopify platform. Shopify processes data on our behalf under a data processing agreement (Auftragsverarbeitungsvertrag) in accordance with Art. 28 DSGVO. Further information: https://www.shopify.com/legal/ privacy
Payment service providers (Zahlungsdienstleister): Depending on your chosen payment method, your payment data will be transmitted to the relevant provider.
Shipping service providers (Versanddienstleister): Your delivery and contact details are passed on to our logistics partner for the purpose of delivery.
Authorities (Behörden): We disclose data to law enforcement or other competent authorities where legally required.
Business transactions: In the event of a merger, acquisition or insolvency, data may be transferred to the legal successor.

6. Transfers to Third Countries (Drittänder)

Shopify Inc. is based in the USA. The transfer of personal data to the USA is carried out on the basis of the Standard Contractual Clauses approved by the European Commission (Art. 46 para. 2 lit. c DSGVO) and, where applicable, on the basis of the EU–US Data Privacy Framework. Further information: https://privacy.shopify.com/en

7. Cookies and Similar Technologies

Our shop uses cookies and similar technologies. Technically necessary cookies are used on the basis of Art. 6 para. 1 lit. f DSGVO. Optional cookies (e.g. for analytics or marketing) are only set with your consent in accordance with § 25 Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TTDSG). You can manage your cookie preferences at any time via your browser settings or our cookie banner.

8. Retention Periods (Speicherdauer)

We store your data only for as long as necessary for the respective purpose:

Order data: 10 years in accordance with statutory retention obligations (§ 147 Abgabenordnung (AO), § 257 Handelsgesetzbuch (HGB)).
Customer account data: Until the account is deleted, unless other retention obligations apply.
Marketing consent records: Until withdrawal of consent.
Communication data: Generally 3 years after conclusion of the matter.

9. Your Rights as a Data Subject (Betroffenenrechte)

Under the GDPR, you have the following rights:

Right of access (Auskunftsrecht, Art. 15 DSGVO): You may request information about the personal data we process about you.
Right to rectification (Berichtigungsrecht, Art. 16 DSGVO): You may request the correction of inaccurate data.
Right to erasure (Recht auf Löschung, Art. 17 DSGVO): You may request the deletion of your data, provided no retention obligations apply.
Right to restriction of processing (Einschränkung der Verarbeitung, Art. 18 DSGVO).
Right to data portability (Recht auf Datenübertragbarkeit, Art. 20 DSGVO).
Right to object (Widerspruchsrecht, Art. 21 DSGVO): You may object at any time to processing based on legitimate interests.
Right to withdraw consent (Widerruf der Einwilligung, Art. 7 para. 3 DSGVO): You may withdraw a given consent at any time without giving reasons.

To exercise your rights, please contact us at: info@drippr.shop

10. Right to Lodge a Complaint (Beschwerderecht)

You have the right to lodge a complaint with the competent data protection supervisory authority (Datenschutzaufsichtsbehörde). The authority responsible for our registered address is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden- Württemberg

Königstraße 10a
70173 Stuttgart, Germany https://www.baden-wuerttemberg.datenschutz.de

11. Obligation to Provide Data

The provision of personal data is required to conclude a purchase contract and to process your order. Without the necessary data (e.g. delivery address, payment details), we are unable to fulfil your order.

12. Children (Kinder)

Our shop is not intended for children under the age of 18. We do not knowingly collect personal data from minors. If a parent or guardian believes their child has submitted data to us, please contact us so we can delete it.

13. Data Security (Datensicherheit)

We implement appropriate technical and organisational measures (technische und organisatorische Maßnahmen, TOM) to protect your data against unauthorised access, loss or misuse. Please note that no data transmission over the internet is completely secure.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. The current version is always available on our website. The date of the last update is indicated at the top of

this document. In the event of material changes, we will notify you in an appropriate manner.

15. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Meet in the Mountains UG (Trading as: drippr) Narzissenstraße 10, 76307 Karlsbad, Germany Email: info@drippr.shop