Legal
Privacy Policy
This policy explains what personal data is processed when you visit dorvo.art or buy a collection, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
The controller within the meaning of Art. 4(7) GDPR is Daniel Necula, trading as Dorvo, Germany. Email: neca.danii@gmail.com. Further details are in the Impressum.
2. Hosting and server logs
This website is hosted by Whop. Each time a page is requested, the host automatically processes technical data sent by your browser: IP address, date and time of the request, the page requested, the referring page, and browser and operating system type.
This processing is necessary to deliver the website and to keep it stable and secure. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Whop acts as our processor. Whop is based in the United States, so data may be transferred to a country outside the EU on the basis of the safeguards provided for in Art. 44 ff. GDPR.
3. Cookies, tracking and fonts
We do not use advertising or analytics trackers on this website and we do not set marketing cookies. The font is delivered from this website itself, so no request is sent to a third-party font provider.
4. Purchases
Payments and delivery run through Whop. When you select a buy button you are taken to the Whop checkout. Whop collects the data needed to process the payment and to provide the download, in particular your email address, your payment details and your order. We do not receive your full payment details.
Whop passes order data to us (for example your email address, the product bought, the date and the amount) so that we can perform the contract, answer support requests and meet our tax and accounting obligations. The legal bases are Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation). For the checkout and your Whop account, Whop's own privacy policy applies.
5. Contact by email
If you write to us, we process your email address and the content of your message in order to answer you. The legal basis is Art. 6(1)(b) GDPR where your message relates to an order, and otherwise our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR.
6. External links
The footer contains a plain link to our TikTok profile. No data is sent to TikTok when you load this website. Data is only transferred once you follow the link, and TikTok's own privacy policy then applies.
7. Storage period
We keep personal data only for as long as it is needed for the purposes above. Order data is kept for the statutory retention periods under German tax and commercial law, which can be up to ten years. Emails are deleted once the enquiry is closed, unless a retention obligation applies.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have your data erased (Art. 17),
- restrict its processing (Art. 18),
- receive your data in a portable format (Art. 20),
- object to processing that is based on legitimate interests (Art. 21), and
- lodge a complaint with a data protection supervisory authority (Art. 77).
To exercise any of these rights, write to neca.danii@gmail.com.
9. Changes to this policy
We may update this policy when the website or the law changes. The current version is always available on this page.