Privacy Policy of the DREAME Forum

Version 1.0. As of December 2025.

Dreame International (Hong Kong) Limited, Room H28G, Blk EH, 10th Floor, Golden Bear Ind.Ctr., 66-82 Chai Wan Kok St., Tsuen Wa, Hong Kong ("Dreame"), operates the website at forum.dreametech.com, including a discussion forum which is available for customers and interested parties (collectively, the "Website" or "Forum", "Services"). Dreame takes the protection of personal data very seriously. Dreametreats personal data confidentially and in accordance with the statutory data protection regulations and on the basis of this privacy policy. Its legal basis in particulare can be found in the provisions of the General Data Protection Regulation (GDPR) and in national data protection laws. 

With the following privacy policy, Dreame informs you in accordance with Art. 12 ff. GDPR about the handling of your personal data. Dreame explains in particular what data Dreame collects and what it is used for. You will also be informed about how and for what purpose this is done.

1 Controller

The controller within the meaning of the GDPR is:

Dreame International (Hong Kong) Limited

Room H28G, Blk EH, 10th Floor, Golden Bear Ind. Ctr., 66-82 Chai Wan Kok St., Tsuen Wa, Hong Kong 

aftersales@dreame.tech

You can contact our data protection officer, for example to exercise your rights as a data subject, at dpo.sg@dreame.tech or at our postal address with the addition "the data protection officer."

2 General information on data processing

We process personal data to the extent necessary to provide our services and content.

Personal data is data that relates to an identified or identifiable natural person ("data subject"), whereby an identifiable data subject is one who can be identified directly or indirectly (e.g., through an online identifier). Personal data therefore includes, among other things, your name, address, email address, or user behavior.

2.1 We process your personal data in compliance with the applicable legal data protection regulations. We generally base our processing on the following legal grounds:

(a) Consent. Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis. This includes, where relevant, consent for the storage of and access to information in the terminal equipment.

(b) Due to contractual obligations. When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

(c) Due to legal requirements. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

(d)Within the framework of balancing interests. If processing is necessary to safeguard a legitimate interest of ours or of a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.

2.2 Data deletion and storage period. Personal data will be deleted or anonymized as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed, or the relevant legal basis no longer applies (e.g., in the event of withdrawal of consent), unless there is another legal obligation or an overriding legitimate interest in continued storage. For this purpose, the controller maintains an internal deletion and retention schedule with purpose-related deadlines and implements appropriate procedures for timely deletion or anonymization. 

Storage may continue beyond this point if and for as long as this is required by applicable Union law or the law of a Member State to which the controller is subject (e.g., accounting or regulatory retention obligations), or if further processing is necessary for a limited period and, where applicable, restricted for the following purposes:

Evidence and defense purposes: to assert, exercise, or defend legal claims and to secure evidence within the relevant statutory limitation and exclusion periods. The specific periods are based on applicable EU law or the law of the respective member states.

As soon as data is no longer required for the aforementioned purposes, it will be deleted or anonymized in accordance with the deletion and retention schedule; access will be restricted to the extent necessary. Technical and organizational measures will ensure timely implementation. 

3 Processing purposes, personal data collected, and legal bases 

Below, we would like to inform you about what personal data we process, for what purposes, and on what legal basis.

Provision of the website. In order to keep the website available, we use data and information from the device accessing it. This includes the following data:

(1) Information about the browser type and version used;

(2) The operating system of the accessing device;

(3) The IP address of the accessing device;

(4) Date and time of access;

(5) Websites and resources (images, files, other page content) that were accessed on our website;

(6) Websites from which the user's system accessed our website (referrer tracking);

(7) Notification of whether the retrieval was successful;

(8) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.

The log files are processed to ensure the functionality of the website. In addition, the data is used for the technical optimization of the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. 

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in ensuring that the aforementioned purpose is achieved.

The aforementioned technical data is automatically deleted as soon as it is no longer required to ensure the compatibility and functionality of the website for all visitors; regardless of this, this data is deleted on a rolling basis at the latest 30 days after the respective access to our website, unless longer storage is necessary in individual cases to fulfill mandatory legal obligations.

3.1 Opening an account / using the services. In order to provide the services, we may use user data, payment data (if applicable), and information about the language and location of users to set up and personalize the account and provide the necessary content.

This includes the following data: profile name, email address, password, country ("user data").

In addition, information about your chosen subscription, interaction data with the services (e.g., search queries, search history, navigation history, interactions with other users, account settings, use of third-party services in connection with the use of the services), conclusions that can be drawn from this, and content that you share and publish in the service itself, as well as a range of technical data, in particular information about the URL, information about the devices you use (device IDs, network connection, provider, browser, language, operating system, version of the software application you use) ("usage data").

User registration is required to provide certain content and services on our website. Otherwise, not all content can be displayed to you.

The legal basis is the fulfillment of the contract, Art. 6 (1) (b) GDPR.

Our forum is not intended for children under the age of 16. If consent is required, it is only valid for children under the age of 16 if it has been given or approved by their legal guardians.

3.2 Payments. If you decide to purchase goods or services or use additional paid services within the services, we must process your payment data. 

Depending on the payment method, we use different service providers for this purpose. 

Depending on the payment method selected, this includes: name, date of birth, payment method, account number, card type, expiration date, postal code, and mobile phone number ("payment data"). 

The legal basis for this is Art. 6 (1) (b) GDPR (contract performance).

3.3 Provision of additional third-party services. If we offer additional services within the services, you are free to use these services. 

You may connect your account to other third-party services, such as social media services. It may also be possible to connect to advertising partners, payment service providers, or merchants to improve your user experience.

The following personal data may be collected for processing: user data, payment data, or usage data. 

Depending on the service used, the legal basis is Art. 6 (1) (b) GDPR (contract performance) or your consent, Art. 6 (1) (a) GDPR. Further details can be found in the respective service in this privacy policy. 

3.4 Comments and posts. If you publish posts on our websites, we process the data you enter, such as the content of your post, your user name, or a pseudonym.

The legal basis for this is Art. 6 (1) (b) GDPR (provision of the forum) and Art. 6 (1) (f) GDPR (maintaining the integrity of discussion threads, preventing abuse). The purpose of processing is to receive and publish your posts in our forum in order to enable exchange with other users.

Your contributions will be stored and published for an indefinite period of time. We reserve the right to delete contributions without giving justification and without prior or subsequent notification. We will only store and process the personal data collected via our forum software for the operation of our forum, i.e. the provision of posts (forum posts) and the provision of stored user profiles. We will make your forum entries and replies publicly available in our forum, including to third parties.

You can delete your own forum entries at any time as long as you are logged in. If this does not work, you can request that we delete them. Upon request, we will anonymize or delete posts, provided that there are no overriding legitimate interests or legal obligations to the contrary. To assert your rights, please contact us using the contact details provided.

The publication of posts is voluntary and is not required by contract or law. If you wish to post a contribution, you must fill in the fields marked as required. Otherwise, your contribution cannot be published.

3.5 Troubleshooting and optimization. We process user and usage data in order to troubleshoot errors in the use of the services and content and to optimize our offering. The legal basis for this is the fulfillment of the contract, Art. 6 (1) lit. b and legitimate interests, Art. 6 (1) lit. f GDPR.

3.6 Legal obligations. In order to comply with the legal obligations of the country in which you are located and/or mandatory EU law and other legal requirements to which we are subject, we process user data, usage data, and payment data. The legal basis for this is Art. 6 (1) lit. c GDPR.

3.7 Authorities and courts. In the event of a request from a court, authority, or law enforcement agency, we process the requested data in order to comply with any legal obligations and in our own legitimate interest in combating crime. The legal bases for this are Art. 6 (1) lit. c and f GDPR.

3.8 Enforcement of legal claims. We process user, usage, and payment data to enforce or defend legal claims based on a legitimate interest in protecting our company and other parties and users. The legal basis for this is Art. 6 (1) (f) GDPR.

3.9 Misuse. If we suspect misuse of accounts and services, we analyze user, usage, and payment data based on our own legitimate interest in protecting our services and users from fraudulent, abusive, or other unlawful activities. Our overriding legitimate interests lie in the protection of our services and users. Data will only be stored for as long as is necessary for clarification and defense. The legal basis is Art. 6 (1) lit. f GDPR.

In the following points, we will elaborate individual processing operations in detail:

4 Contact

There is a contact form on our website. Its purpose is to enable you to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored. 

The use of the contact forms is voluntary. Itis neither contractually nor legally required. If you do not fill in the necessary information on the contact form, you will either not be able to send the request, or we will unfortunately not be able to process your request. 

Your consent will be obtained for the processing of the data as part of the sending process, Art. 6 (1) lit. a GDPR. 

If you use another of our contact options, such as email, the legal basis for processing the transmitted data is Art. 6 (1) lit. f GDPR (legitimate interests). If the email contact is aimed at concluding or performing a contract, the legal basis for processing is Art. 6 (1) lit. b GDPR.

5 Transfer of personal data

As a matter of principle, we will not sell your data at any time. We have individual processes and services carried out by carefully selected service providers who are commissioned in accordance with data protection regulations. Service providers' access to your data is limited to the extent necessary. These external service providers are bound by our instructions and are regularly monitored. These companies are either processors or joint controllers, or third parties such as payment service providers. Such disclosure only takes place on the basis of legal permission or obligation, consent by the user, or on the basis of our legitimate interests, which exist, for example, in the use of agents or web hosts. Such a legitimate interest also exists in particular in the processing of data for administrative purposes.

6 Cookies

6.1 Basic information. In addition to the aforementioned data, technical tools are used for various functions when you use our website and services, in particular so-called cookies, which can be stored on your device. Cookies are text files or information in a database that are stored in the device memory of your device and assigned to the application you are using. Cookies allow certain information to be sent to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your mobile device, but primarily serve to make our offering faster and more user-friendly. We use the following types of cookies, the functionality and legal basis of which we explain below.

6.2 Technically necessary cookies. The technical structure of the services requires us to use technologies, in particular cookies. Without these technologies, our application cannot be used (completely correctly) or the support functions cannot be enabled. These are generally so-called transient cookies. which in particular are session cookies that are automatically deleted when the application is closed or when you log out (after 30 days at the latest). They store a so-called session ID. This allows various requests from your browser to be assigned to a common session and your computer can recognize when you return to our application. You cannot deselect these cookies if you want to use our services. The legal basis is Art. 6 (1) lit. f GDPR.

6.3 Optional cookies. We only set optional cookies with your consent, which you can select when you visit our services. The functions are then only activated if you give your consent. Theycan help us to analyze and improve the use of our application, making it easier for you to use different browsers or end devices, recognizing you when you visit, or placing advertisements (if necessary, also to tailor advertisements to your interests, measure the effectiveness of advertisements, or show you interest-based advertisements). The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing until withdrawal.

6.4 We use the following cookies: 

7 Analysis and evaluation

When you visit this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was accessed, file name, date and time of access, amount of data transferred, and notification of successful access (known as a web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

7.1 Google

We use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ on our website.

Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which you have given on our website.

We use Google to be able to load additional Google services on our website, for example, for the necessary data processing when providing streams and fonts as well as relevant content from Google Search. Technically, it is required to exchange the information of the site visitor already available at Google between Google services and to provide the user with content tailored to their Google account.

For processing itself, the service or we collect the following data: background data stored in the Google user account or other Google services about the site visitor, background data for the provision of Google services such as streaming or advertising data, data about the site user's interaction with Google Search, information about the device used, the user's IP address and browser, and other data from Google services for the provision of Google services related to our website.

If the service is active on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. In the context of order processing, personal data may be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. This may also include data transmission to the Google services Google Apis, Google Cloud, and Google Ads in accordance with Google's privacy policy. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.

You can revoke your consent at any time. For more information on revoking your consent, please refer to the consent form itself or the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

7.2 Google Analytics

We use the Google Analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email:support-deutschland@google.com , website: https://www.google.com/ on our website. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en).. The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) (a) GDPR, which you have given on our website.

Google Analytics is a web tracking service that analyzes the behavior of site visitors and their interactions with our website and provides us with evaluations of the content and products on our website and their popularity (known as tracking). We have integrated Google Analytics so that the service can analyze the surfing behavior of site users. To do this, Google collects visitors' interactions with our website and, if applicable, existing information from cookies or other storage technologies and compiles this into statistics for us. Google Analytics uses technologies that enable the tracking of individual site visitors and their interaction with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to close data gaps and generate comprehensive statistics on the content of our website using machine learning technologies, modeled statistics, and forecasting functions. If Google Analytics is active on our website, the data collected is transferred to servers belonging to Google Ireland Limited. As part of order processing, personal data may also be transferred to servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. We carry out the analysis using Google Analytics in order to continuously optimize our website and make it more accessible (so-called reach measurement).

For processing purposes, this service and respectively we collect the following data: Data on the interactions of site visitors with the content of the website, data on the use of the services presented on our website, data from external Google services, insofar as they interact with our website, such as advertising data or data on behavior in relation to advertising, data on approximate geographical origin, the browser used, operating system, and other information about the device used.

Google Analytics stores the data relevant for the provision of web tracking for as long as is necessary to fulfill the booked web services. Data collection and storage is anonymous. If individual interactions by site visitors make it possible to subsequently establish a personal reference to specific actions, we will delete the collected data as soon as the purpose has been achieved. The data will be deleted at the latest when it is no longer subject to any legal retention obligations. As a rule, we will delete this data after 12 months at the latest. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.

You can revoke your consent at any time. You can find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.

7.3 YouTube

We use the YouTube service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email:support-deutschland@google.com , website: https://www.google.com/, on our website. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the GDPR applies to the transfer. The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website. The service integrates videos from the YouTube platform on our site so that we can display them directly on our website. For the processing itself, the service or we collect the following data: data for displaying the stream, data on clicked videos, created playlists, ratings and comments, information on the device used, the IP address and the user's browser, as well as other data from Google services for providing the video in accordance with Google's privacy policy. If YouTube is active on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transmits the data required to display the stream. In the context of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When videos are displayed on our website, YouTube may transmit and process information from other Google services (e.g., Google Fonts, Google APIs, Google Video, DoubleClick) in order to provide background services for the video. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list. You can revoke your consent at any time. For more information on revoking your consent, please refer to the consent form itself or the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy. The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

8 External web services

On our website, we use active content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. In this case, data may be processed outside the EU.

We use the following external web services:

8.1 Shopify

We use the Shopify service provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, D04 XN32 Dublin, Ireland, email:hilfe@shopify.de , website: https://www.shopify.de/ on our website. The legal basis for the processing of personal data is the contract concluded or to be concluded between you and us in accordance with Art. 6 (1) lit. b GDPR. The Shopify service enables us to operate our shop and make it available to you. Data is also transferred to a third country outside the EEA for which the Commission has issued an adequacy decision (e.g. Canada). As a rule, according to the provider's own information, processing takes place on EU servers . A current list of all adequacy decisions can be found on the website of the EU Commission. You can find out what rights you have with regard to processing at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.shopify.de/legal/datenschutz.

9 Rights of data subjects

Under the legal requirements, you have the following rights as a data subject:

9.1 Right of access. You are entitled at any time to request confirmation from us under Article 15 of the GDPR as to whether we are processing personal data concerning you; if this is the case, you are also entitled under Article 15 of the GDPR to obtain access to this personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, origin of the data, use of automated decision-making and, in the case of third-country transfers, the appropriate safeguards) and a copy of your data. The restrictions of §34 BDSG apply.

9.2 Right to rectification. Pursuant to Art. 16 GDPR, you are entitled to request that we rectify the personal data stored about you if it is inaccurate or incorrect.

9.3 Right to erasure. You are entitled to request that we erase personal data concerning you without undue delay under the conditions of Art. 17 GDPR. The right to erasure does not apply, among other things, if the processing of personal data is necessary, e.g., to fulfill a legal obligation (e.g., statutory retention obligations) or to assert, exercise, or defend legal claims. In addition, the restrictions of § 35 BDSG apply.

9.4 Right to restriction of processing. You are entitled, under the conditions of Art. 18 GDPR, to request that we restrict the processing of your personal data.

9.5 Right to data portability. You are entitled, under the conditions of Art. 20 GDPR, to request that we provide you with the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.

9.6 Right of withdrawal. You can withdraw your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. To declare your revocation, simply send us an informal message, e.g., by email.

9.7 Right to object. You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we must stop processing your personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. In addition, our interests may prevent us from terminating the processing, so that we are entitled to process your personal data despite your objection. We will take any objection to direct marketing measures into account immediately and without further consideration of the existing interests.

9.8 Right to lodge a complaint with a supervisory authority. Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority. A list of data protection supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. 

9.9 Other concerns. Our data protection officer is available to answer any further questions or concerns you may have regarding data protection. Where possible, please send any such inquiries or requests to exercise your rights above in writing to our address above or by email to aftersales@dreame.tech.

10 Automated decision-making/profiling

We do not use automated decision-making or profiling (automated analysis of your personal circumstances) as a matter of principle. If we use this procedure in individual cases, we will inform you separately if this is required by law.

Changes to this policy

This privacy policy is currently valid and was last updated in December 2025.

We may occasionally make changes to this policy. If we make significant changes to this policy, we will notify you accordingly. If a change requires your participation or other individual notification, we will inform you in an appropriate manner.