Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
SOVÈNE
Germany
E-mail: kontaktsovene@gmail.com
2. General information on data processing
We generally process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal provisions.
3. Hosting and provision of the website
This website is hosted by Shopify International Limited or Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada ("Shopify"). When you access our website, personal data (IP address, browser type, date and time of access, pages viewed, amount of data transferred) is temporarily stored in server log files. This processing is based on our legitimate interest in the technically flawless presentation and optimization of our website (Art. 6 para. 1 lit. f GDPR).
For the data transfer to Shopify in Canada, there is an adequacy decision by the EU Commission, so the data protection level in Canada is recognized as adequate according to Art. 45 GDPR. In addition, we have concluded an order processing agreement with Shopify in accordance with Art. 28 GDPR.
Further information at: https://www.shopify.com/legal/privacy
4. Collection of personal data when ordering
When you place an order, we process the following personal data for the performance of the contract (Art. 6 para. 1 lit. b GDPR):
- First and last name
- Delivery and billing address
- Email address
- Phone number (optional)
- Payment data (depending on payment method)
- Order history
This data is processed for order processing and for compliance with tax and commercial law retention obligations (usually 10 years).
5. Payment processing
We use Shopify Payments for payment processing. When certain payment methods are selected (credit card, Klarna, PayPal, Apple Pay, Google Pay), personal data is transmitted to the respective payment service providers. This is done on the basis of Art. 6 para. 1 lit. b GDPR (performance of contract).
Privacy policies of the payment service providers:
- Shopify Payments: https://www.shopify.com/legal/privacy
- PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Klarna: https://www.klarna.com/de/datenschutz/
6. Shipping service provider
For the delivery of the goods, we pass on your delivery address and, if applicable, telephone number and e-mail address to our shipping partner CJ Dropshipping (CJ Dropshipping HK Limited, Hong Kong) and to the carriers commissioned with the delivery. The data transfer is based on Art. 6 para. 1 lit. b GDPR (performance of contract).
Note: When transferring to our shipping partner CJ Dropshipping, a transfer to a third country (China or Hong Kong) takes place. For this transfer, we have concluded standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR as a guarantee for an adequate level of data protection.
7. Newsletter
If you subscribe to our newsletter, we process your e-mail address to send you our newsletter. The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via the unsubscribe link in each newsletter or by sending a message to kontaktsovene@gmail.com.
8. Contact by e-mail
If you contact us by e-mail, your details will be stored for the purpose of processing the request and in case of follow-up questions. The legal basis for the processing is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR or, in the case of initiating a contract, Art. 6 para. 1 lit. b GDPR.
9. Cookies and tracking
Our website uses cookies. Cookies are small text files that are stored on your device. We use:
- Technically necessary cookies to provide basic functions (e.g. shopping cart, login). Legal basis: Art. 6 para. 1 lit. f GDPR or § 25 para. 2 no. 2 TTDSG.
- Functional cookies for convenience functions. Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
- Analysis and marketing cookies (e.g. Shopify Analytics, possibly Google Analytics, Meta Pixel) for reach measurement and optimization. These are only used with your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR or § 25 para. 1 TTDSG.
You can adjust your cookie settings at any time via the cookie settings. Most browsers also offer the option of generally preventing the setting of cookies.
10. Shopify Analytics
We use the analytics function integrated into Shopify to create anonymized usage statistics (e.g. page views, conversion rate). The legal basis is our legitimate interest in optimizing our shop (Art. 6 para. 1 lit. f GDPR).
11. Data transfer
Your personal data will only be transferred to third parties insofar as this is necessary for the performance of the contract (e.g. to logistics partners and payment service providers), you have given your express consent, or we are legally obliged to do so.
12. Storage period
Personal data will be deleted as soon as the purpose of the processing no longer applies and no legal retention obligations prevent deletion. For accounting documents, retention periods of up to 10 years generally apply (§ 147 AO, § 257 HGB).
13. Your rights as a data subject
You have the following rights under the GDPR:
- Right of access (Art. 15 GDPR) to the data stored about you
- Right to rectification (Art. 16 GDPR) of inaccurate or incomplete data
- Right to erasure (Art. 17 GDPR) of your data
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR) to the processing of your data
- Right to withdraw consent (Art. 7 para. 3 GDPR) with effect for the future
- Right to lodge a complaint (Art. 77 GDPR) with a data protection supervisory authority
To exercise these rights, a simple message to kontaktsovene@gmail.com is sufficient.
14. Competent supervisory authority
Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin. Website: www.datenschutz-berlin.de
15. Changes to this privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements. The new privacy policy will then apply to your next visit.
Status: June 2026