Privacy Policy (Datenschutzerklärung)

Privacy Policy

Last updated: July 2026. This policy explains how Sorevly (operated by Donjo GbR) collects, uses, and protects your personal data when you visit sorevly.com or place an order. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR / DSGVO).

1. Controller

Donjo GbR
Wichernstraße 2, 55131 Mainz, Germany
Email: info@donjo.group
Phone: +49 151 21516121

2. What data we collect

  • Order & account data: name, billing and shipping address, email, phone number, order history.
  • Payment data: processed by our payment provider; we do not store full card details.
  • Communication data: messages you send us (e.g. support emails).
  • Usage & device data: IP address, browser type, pages visited, collected via cookies and similar technologies.

3. Purposes and legal bases

  • Processing your orders and providing customer service — Art. 6(1)(b) GDPR (performance of a contract).
  • Meeting legal obligations (e.g. tax and commercial record-keeping) — Art. 6(1)(c) GDPR.
  • Store security, fraud prevention, and improving our website — Art. 6(1)(f) GDPR (legitimate interests).
  • Email marketing, non-essential cookies, and advertising — Art. 6(1)(a) GDPR (your consent), which you can withdraw at any time.

4. Cookies and tracking technologies

We use strictly necessary cookies to operate the store, and — only with your consent — analytics and advertising cookies (including the Meta pixel, where active). You can manage your preferences via our cookie banner and withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

5. Email and SMS marketing

If you sign up for our newsletter, we send marketing emails and, where you agree, SMS messages based on your consent, using Klaviyo and Shopify's built-in email/SMS marketing tools. Every message contains an unsubscribe option, and you can opt out at any time.

6. Service providers and recipients

We share personal data only as necessary with service providers acting as processors on our behalf:

  • Shopify (Shopify International Ltd. / Shopify Inc.) — e-commerce platform, store hosting, checkout, and Shopify's built-in email/SMS marketing tools.
  • AutoDS — order fulfilment and dropshipping automation, to process and ship your order.
  • Our payment provider — to process payments securely (named at checkout).
  • Shipping and logistics partners — to deliver your order and provide tracking.
  • Klaviyo — email and SMS marketing, where you have subscribed.
  • Meta Platforms (Facebook / Instagram) — advertising and measurement, only where you have given consent.

7. International data transfers

Some of our providers (including Shopify, Klaviyo, and Meta) are based in or process data in the United States. Where personal data is transferred outside the European Economic Area, it is safeguarded by appropriate measures such as the EU Standard Contractual Clauses or an adequacy decision.

8. Data retention

We keep personal data only as long as necessary for the purposes described above or as required by law (for example, invoices and tax records must be retained for statutory periods under German law, generally up to 10 years).

9. Your rights

Under the GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any of these rights, contact us at info@donjo.group.

10. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority. The authority competent for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP), Hintere Bleiche 34, 55116 Mainz.

11. Data security

We use appropriate technical and organisational measures, including encrypted connections (SSL/TLS), to protect your data against unauthorised access, loss, or misuse.

12. Changes to this policy

We may update this policy from time to time. The current version always applies and is published on this page.

13. Contact

For any privacy questions or requests: info@donjo.group.