Privacy Policy (Datenschutzerklärung)

External Privacy Notice

Dripfy GmbH (in Gründung) (“Dripfy”) is committed to protecting the privacy and security of the personal data of our website visitors and clients. This Privacy Notice explains who we are, how we collect, share, and use your personal data, and how you can exercise your data protection rights.

1. Company Details

Dripfy GmbH (in Gründung)

Neue Mainzer Straße 66

60311 Frankfurt am Main

Germany

Managing Director (Geschäftsführer): Dr. Hikmet Hasiripi

Prokurist: Abdullah Hasiripi, MD

Data Protection Contact: [info@dripfy.com]

2. What We Do

Dripfy provides wellness, diagnostic, and lifestyle services. These may include elective IV therapies, booster shots, diagnostic testing, and DNA-based lifestyle analyses.

3. Categories of Data Subjects and Processing Purposes

We process your personal data depending on our relationship with you. Categories include:

Each group’s data is processed according to applicable legal bases (consent, contract, legitimate interest, legal obligation).

4. Types of Personal Data Collected

Depending on the interaction, we may collect:

5. Sources of Data

Data is collected:

6. Data Recipients

Data may be shared with:

We do not sell your data to third parties.

7. Storage & Processing Locations

Your data may be stored and processed in:

8. Retention Periods

9. International Data Transfers

Where we transfer your data outside the EU/UK, we ensure one of the following safeguards is applied:

10. Data Security

We have implemented technical and organizational measures to:

11. Your Rights

Under the GDPR, you have rights to:

• 
  : request a copy of your data
  
• 
  : correct inaccurate data
  
• 
  : request deletion under certain conditions
  
• 
  : limit how we process your data
  
• 
  : transfer your data to another provider
  
• 
  : to processing based on legitimate interest or direct marketing
  
• 
  at any time
  

To exercise these rights, contact us at: [info@dripfy.com]

12. Automated Decision-Making

You will not be subject to decisions based solely on automated processing, unless required by contract or you have given consent.

13. Legal Disclosure

We may disclose data if required to do so by law or legal process, or to law enforcement authorities.

14. Data Breach Notification

We have a protocol to respond to data breaches and will notify affected individuals and regulators as required.

15. Handling Requests

We aim to respond within 1 month, extendable to 3 months where necessary. Requests may require identity verification.

16. Updates to This Policy

This privacy policy may be updated at any time. The latest version will be available on our website.