Privacy Policy

This Privacy Policy explains how Drews eCom ("we", "us", "our") collects, uses, stores, and protects your personal data when you browse our website, place an order, or interact with our services. We process your data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Data Controller

Drews eCom Email: contact@drewsecom.de
Responsible for all data processing relating to this website and online shop.

2. Personal Data We Collect

We may collect:

  • Account & order data: name, address, email, phone number.
  • Payment information: processed securely by external providers (we do not store full card details).
  • Technical data: IP address, browser type, device info, access times.
  • Website analytics data: gathered through cookies, pixels, or analytics tools.
  • Communication data: messages or emails sent to customer support.

3. Shopify Hosting & Infrastructure

Our store is hosted by Shopify Inc. Shopify provides the website platform, infrastructure, database, and security systems used to operate this shop.

Your personal data may be transferred to Shopify servers located in:

  • Canada
  • United States
  • Other regions where Shopify maintains sub-processors

Shopify participates in EU-approved data transfer frameworks and uses Standard Contractual Clauses (SCCs) to protect international transfers.

4. How We Use Your Data

  • To process and deliver orders
  • To manage payments and refunds
  • To communicate with customers
  • To detect fraud and improve security
  • To operate analytics and marketing tools
  • To comply with legal obligations (tax, accounting, consumer protection)

5. Payment Providers

Payments are processed securely by external providers. Depending on your selection, your data may be processed by:

  • Shopify Payments
  • PayPal
  • Klarna
  • Stripe
  • Apple Pay / Google Pay

These providers act as independent controllers for your payment data. We never have access to your full card details.

6. Shipping & Logistics Providers

To deliver your order, we share necessary data (name, address, phone/email) with shipping partners such as:

  • DHL
  • DPD
  • Hermes
  • UPS
  • or other couriers depending on destination

7. Cookies, Analytics & Marketing Tracking

We may use cookies and tracking technologies to analyze website performance and show relevant marketing ads. This may include:

  • Google Analytics / GA4
  • Google Tag Manager
  • Meta Pixel (Facebook & Instagram)
  • TikTok Pixel
  • Shopify analytics tools

You can block or delete cookies at any time using your browser settings. Marketing cookies are only activated with your consent (GDPR Art. 6(1)(a)).

8. Your GDPR Rights

You have the following rights under GDPR:

  • Right of access to your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

To exercise any of these rights, contact us at: contact@drewsecom.de

9. Right to File a Complaint

You have the right to lodge a complaint with your local data protection authority. In Germany, this is typically your state's **Landesdatenschutzbehörde**.

10. Data Security Measures

We implement industry-standard technical and organizational measures to protect your personal data. However, no method of online transmission is 100% secure.

11. Children’s Privacy

Our website is not intended for children under 16. We do not knowingly collect their data.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. Updates take effect once posted on this page.

13. Contact

For questions regarding this Privacy Policy or your data rights, contact us at:

Email: contact@drewsecom.de

Last updated: June 06, 2026