Privacy policy

Privacy Policy – SORVEA

This is a translation provided for convenience. In case of discrepancies, the German version is legally binding.

Last updated: 21 May 2026

SORVEA operates this store and website, including all related information, content, features, tools, products and services (the “Services”). This Privacy Policy describes how we collect, use and disclose personal data when you visit the website, use the Services or make a transaction. In the event of a conflict between the Terms of Service and this Policy, this Policy prevails with regard to the processing of personal data.

Overview

1. Introduction & consent

By using the Services, you confirm that you have read this Privacy Policy and agree to the collection, use and disclosure of your personal data as described here.

2. What data do we collect?

“Personal data” is information that identifies you or makes you identifiable. Depending on use and the legal situation, we process, among other things:

  • Contact data: name, postal/billing/shipping address, email.
  • Financial data: payment method, card details (via payment providers), transaction details.
  • Account information: login, passwords, settings.
  • Transaction information: items viewed, saved, purchased and returned.
  • Communication: content of your enquiries to us.
  • Device information: IP address, browser, device, identifiers.
  • Usage data: interactions with the website/Services.

3. Sources of personal data

  • Directly from you (account, order, support, communication).
  • Automatically through the Services (e.g. cookies, device/usage data).
  • Service providers (process data on our behalf).
  • Partners/third parties (e.g. marketing or logistics partners).

4. Purposes of processing

  • Providing & improving (order, payment, shipping, returns, account, notifications, recommendations).
  • Marketing & advertising (email/SMS, on-site/online ads; possibly based on your activity).
  • Security & fraud prevention (authentication, abuse detection, enforcement of rights).
  • Communication (support, answering enquiries, customer relationship).
  • Legal obligations (complying with laws, proceedings/requests, enforcing terms).

5. Disclosure to third parties

  • Service providers (e.g. IT, payment, analytics, support, cloud, fulfilment/shipping).
  • Business/marketing partners (according to their privacy policies; opt-out rights depending on your place of residence).
  • At your request/with your consent (e.g. social login, widgets).
  • Affiliates/group companies.
  • Transactions & legal (merger/acquisition, legal obligations, protection of rights).

6. Relationship with Shopify

Our Services are hosted by Shopify. Shopify processes personal data to provide and improve the Services and may transfer data to other countries.

Details: Shopify Privacy Policy | Exercise your rights via the Shopify Privacy Portal.

7. Third-party websites & links

External sites/platforms are subject to their own privacy and security rules. We accept no responsibility for their content or practices. Information shared publicly (including on social media) can be seen by others.

8. Children's data

Our Services are not directed at children; we do not knowingly collect data from minors. Parents/guardians can request deletion (see Contact).

9. Security & retention

No measure is perfect; we cannot guarantee “perfect security”. Data is retained for as long as necessary (providing the Services, obligations, dispute resolution, enforcement).

10. Your rights

  • Access to stored personal data.
  • Deletion of your personal data.
  • Correction of inaccurate data.
  • Data portability (copy/transfer to third parties, where applicable).
  • Communication preferences (unsubscribe from marketing emails; non-marketing messages may continue).

In the EEA/UK additionally: objection to/restriction of processing and withdrawal of consent (without retroactive effect). Identity verification/authorisation may be required to process your request.

11. Complaints

If you have concerns, please contact us (see Contact). You may also lodge a complaint with the competent data protection authority. EEA overview: edpb.europa.eu.

12. International transfers

Transfers outside your country of residence may take place. For the EEA/UK we rely on recognised mechanisms (e.g. EU Standard Contractual Clauses) or adequacy decisions.

13. Changes to this Policy

Updates will be published here and the “Last updated” date will be adjusted. Legally required notifications will be taken into account.

14. Contact

Email: info@sorveaclo.com

Postal address:
Colin Strauss – SORVEA
Rohrholzweg 2
4226 Breitenbach
Switzerland

Within the meaning of applicable data protection laws, we are the controller of your personal data.