Privacy policy

Privacy Policy

Last updated: 7 August 2026

The controller responsible for personal data processed in connection with this online store is:

Andrej Morozov, trading as Dremis
Oberstrasse 14c
20144 Hamburg
Germany
Email: contact@dremis.store

1. General

We process personal data only to the extent necessary to provide the store, process orders and enquiries, comply with legal obligations, protect the security of our services, or—where required—on the basis of your consent. In particular, the EU General Data Protection Regulation (GDPR) and applicable German data-protection laws apply.

2. Website access and technical data

When you visit our store, technically necessary data may be processed, including IP address, date and time of access, pages viewed, browser and device information, referrer information, and technical log and security data. Where required, this processing is based on Article 6(1)(f) GDPR for the secure and stable operation of the store and prevention of misuse.

3. Store platform and hosting

Our online store is technically provided through Shopify. Shopify and its subprocessors may process personal data where necessary for hosting, store functionality, security, order processing, and the services we use. Where data are processed outside the European Economic Area, the applicable legal transfer mechanisms are used, including adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.

4. Orders, customer accounts and contract performance

When you place an order or use a customer account, we process the data required to perform the contract. This may include your name, billing and delivery address, email address, products ordered, order history, payment status and communications. The legal basis is Article 6(1)(b) GDPR. Data that must be retained under commercial, tax or other legal rules are additionally processed under Article 6(1)(c) GDPR.

5. Payments

Payments are processed using the payment providers offered at checkout. The data required for the selected payment method are transmitted to, or collected directly by, the payment provider you choose. We generally receive only the information needed to identify and process the payment. The provider's own privacy terms may also apply.

6. Shipping and fulfilment

To deliver your order, we provide the necessary data—such as name, delivery address and, where needed, contact details—to shipping, logistics and fulfilment providers. Depending on the selected product, fulfilment may take place from Germany, another EU country, or through an international fulfilment partner. The legal basis is Article 6(1)(b) GDPR.

7. Contact

If you contact us by email or through a contact form, we process the information you provide to handle your enquiry. Where the enquiry relates to a contract or pre-contractual measures, Article 6(1)(b) GDPR applies; otherwise Article 6(1)(f) GDPR applies for the efficient handling and documentation of business communications.

8. Cookies, consent and similar technologies

Strictly necessary cookies and similar technologies may be used where required to provide functions you expressly request. Non-essential analytics, personalisation or marketing technologies are used only where valid consent has been obtained. The legal basis is then Article 6(1)(a) GDPR together with Section 25(1) TDDDG. You can withdraw or change consent at any time for the future through the store's cookie/privacy settings.

The current non-essential services, providers, purposes and—where available—retention periods are shown in the consent/cookie banner or related privacy settings.

9. Marketing communications

We send marketing emails or similar electronic messages only where consent has been given or where the communication is otherwise permitted by law. Consent can be withdrawn at any time for the future, for example through an unsubscribe link or by emailing contact@dremis.store.

10. Recipients

Where necessary for the relevant purpose, personal data may be shared with categories of recipients including store and hosting providers, payment providers, shipping and fulfilment partners, IT and security providers, communications and customer-service providers, and—only where legally permitted and, where required, with your consent—analytics and advertising providers. Data may also be disclosed to authorities or other parties where required by law or necessary to establish, exercise or defend legal claims.

11. International transfers

Some providers used by us or our service providers may process data outside the European Economic Area. Where no European Commission adequacy decision applies, appropriate safeguards such as Standard Contractual Clauses or another lawful GDPR transfer mechanism are used where required.

12. Retention

We keep personal data only for as long as required for the relevant purpose. Contract, accounting and transaction data may be retained for applicable statutory commercial and tax retention periods. Data processed on the basis of consent are generally processed until consent is withdrawn unless another legal basis or statutory retention obligation applies. Data may also be retained where necessary to establish, exercise or defend legal claims.

13. Your rights

Subject to the statutory requirements, you have rights including access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), and objection to certain processing (Article 21). You may withdraw consent at any time for the future.

To exercise your rights, email contact@dremis.store. We may request reasonable information to verify your identity where necessary to protect your data against unauthorised access.

14. Right to complain

You may lodge a complaint with a data-protection supervisory authority. For a controller established in Hamburg, the Hamburg Commissioner for Data Protection and Freedom of Information is particularly relevant. Further information is available at datenschutz-hamburg.de.

15. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful alteration. Absolute security of data transmitted over the internet cannot, however, be guaranteed.

16. Changes to this policy

We may update this Privacy Policy when our processing activities, service providers or applicable law change. The version published on this page is the current version.

17. Contact

For privacy questions, contact contact@dremis.store.