Privacy Policy

1. Introduction

This Privacy Policy explains the nature, scope and purpose of the processing of personal data when using our website, online shop (WooCommerce), and related services, as well as your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

2. Data Controller

Clover TK GmbH

Maierhof 116

AT-4971 Aurolzmünster, Austria

Phone: +43 660 409 23 80

Email: info@cloverapparelshop.com

3. Scope

This Privacy Policy applies to:

• visits to our website,

• use of our online shop (WooCommerce),

• customer accounts and orders,

• contact via forms, email or phone,

• marketing and tracking (only with consent),

• newsletter subscriptions (only with consent).

4. Legal Bases for Processing

We process personal data on the following legal bases:

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures,

• Art. 6(1)(c) GDPR – compliance with legal obligations,

• Art. 6(1)(f) GDPR – legitimate interests (e.g. IT security),

• Art. 6(1)(a) GDPR – consent (e.g. marketing, tracking, newsletter).

You may withdraw your consent at any time with effect for the future.

A) Website Access & Server Log Files

5. Data Processed When Visiting Our Website

When you visit our website, the following data may be processed:

• IP address,

• date and time of access,

• accessed pages,

• HTTP status codes,

• referrer URL,

• browser type/version,

• operating system,

• language settings.

6. Purpose and Legal Basis

Purposes:

• ensuring the correct display of the website,

• maintaining system security and stability,

• detecting and preventing misuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Log files are generally stored for up to 7 days, unless a longer retention is required for security reasons.

B) Cookies & Consent Management

7. Cookies and Identifiers

Cookie IDs, device identifiers and IP addresses may constitute personal data.

We use:

• Necessary cookies – required for website functionality (Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR),

• Analytics and marketing cookies – only with your consent (Art. 6(1)(a) GDPR).

8. Managing or Withdrawing Consent

You can change or withdraw your cookie consent at any time via the cookie settings on our website.

C) Online Shop (WooCommerce)

9. Data Processed for Orders and Customer Accounts

When you place an order or create an account, we may process:

• name, contact details,

• billing and shipping address,

• order details (products, prices, dates),

• payment status,

• communication related to your order,

• technical data for fraud prevention.

10. Purpose and Legal Basis

• Order processing, delivery, returns: Art. 6(1)(b) GDPR

• Legal obligations (e.g. tax law): Art. 6(1)(c) GDPR

• Security and fraud prevention: Art. 6(1)(f) GDPR

11. Storage Period

We store order-related data according to statutory retention obligations and as long as necessary for legal claims.

D) Payment Processing

12. Payment Service Providers

We use third-party payment providers, including:

• Mollie

• Klarna

• PayPal

• Apple Pay / Google Pay (where supported)

For payment processing, required data (e.g. name, address, order details, payment status) is transferred to the respective provider.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal obligations).

We do not store complete payment card or bank details.

E) Shipping and Delivery

13. Shipping Providers

To deliver your order, we may share necessary data (e.g. name, address, contact details) with shipping providers.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

F) Contact

14. Contact via Form, Email or Phone

When you contact us, we process:

• contact details,

• content of your message,

• communication metadata.

Purpose: responding to inquiries, customer service, pre-contractual communication.

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Data is generally stored for up to 6 months after communication ends.

G) Newsletter & Marketing Emails

15. Newsletter Subscription

If you subscribe to our newsletter, we process:

• email address,

• name (if provided),

• subscription time,

• proof of consent.

Legal basis: Art. 6(1)(a) GDPR (consent).

You can unsubscribe at any time via the unsubscribe link or by contacting info@cloverapparelshop.com

H) Web Analytics & Marketing (Only with Consent)

16. Google Analytics 4 (GA4)

We use Google Analytics 4 to analyze website usage.

Legal basis: Art. 6(1)(a) GDPR.

17. Google Ads

We use Google Ads for conversion tracking and remarketing.

Legal basis: Art. 6(1)(a) GDPR.

18. Meta Pixel (Facebook/Instagram)

We use Meta Pixel to measure campaign performance and for remarketing.

Legal basis: Art. 6(1)(a) GDPR.

19. Pinterest Tag

We use Pinterest Tag to measure ad performance and for remarketing.

Legal basis: Art. 6(1)(a) GDPR.

I) Recipients of Data

20. Categories of Recipients

Depending on the purpose, data may be shared with:

• IT and hosting providers,

• payment service providers,

• shipping companies,

• tax consultants, auditors, legal advisors,

• authorities (if legally required).

J) International Data Transfers

21. Transfers to Third Countries

Some services (e.g. Google, Meta, Pinterest) may process data outside the EU/EEA (e.g. in the USA).

Where required, transfers are safeguarded by appropriate measures such as Standard Contractual Clauses (Art. 44–49 GDPR).

This international transparency also applies to users from outside the EU, including Israel.

K) Data Retention

22. General Retention Rules

We store personal data only as long as necessary for the respective purpose and in accordance with legal retention obligations.

L) Your Rights

23. Data Subject Rights

You have the right to:

• access (Art. 15 GDPR),

• rectification (Art. 16 GDPR),

• erasure (Art. 17 GDPR),

• restriction of processing (Art. 18 GDPR),

• data portability (Art. 20 GDPR),

• objection (Art. 21 GDPR),

• withdraw consent (Art. 7(3) GDPR).

Requests: info@cloverapparelshop.com

24. Right to Lodge a Complaint

You may lodge a complaint with a supervisory authority. In Austria:

Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna.