{"id":3357,"date":"2024-11-24T20:49:11","date_gmt":"2024-11-24T19:49:11","guid":{"rendered":"https:\/\/clements-store.at\/?page_id=3357"},"modified":"2026-05-03T17:45:18","modified_gmt":"2026-05-03T15:45:18","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/clements-store.at\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Privacy Policy<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Clement’s Store | clements-store.at | Last updated: March 2026<\/b><\/p>

1. Introduction<\/b><\/h2>

This Privacy Policy explains how Irena Klementov\u00e1 (trading as Clement’s Store, Sevastopolsk\u00e1 348\/7, 625 00, Brno – Star\u00fd L\u00edskovec \u2014 hereinafter „we“) collects, uses, and protects personal data on this website, in accordance with the EU General Data Protection Regulation (GDPR) 2016\/679 and the Austrian Data Protection Act (DSG).<\/span><\/p>

2. Data Controller<\/b><\/h2>

Irena Klementov\u00e1<\/b> Clement’s Store Sevastopolsk\u00e1 348\/7, 625 00, Brno – Star\u00fd L\u00edskovec, E-mail: info@clements-store.at, Tel.: +420 728 748 370 Imprint:<\/span> https:\/\/www.clements-store.at\/impressum<\/span><\/a><\/p>

3. What Data We Collect and Why<\/b><\/h2>

We only process personal data where a lawful basis exists under Art. 6 GDPR.<\/span><\/p>

  1. a) Order processing (Art. 6(1)(b) GDPR \u2014 contract)<\/b> Name, delivery address, e-mail address, payment data. Required to process and fulfil your order. We ship to Austria and Germany.<\/span><\/li>
  2. b) Communication (Art. 6(1)(b) and (f) GDPR)<\/b> Name, e-mail address, phone number \u2014 when you contact us by e-mail, phone, or contact form. Retained until the matter is resolved and legal retention periods expire.<\/span><\/li>
  3. c) Legal obligations (Art. 6(1)(c) GDPR)<\/b> Invoices and accounting records are retained for 7 years as required by Austrian tax law (\u00a7 132 BAO).<\/span><\/li>
  4. d) Website operation \/ server logs (Art. 6(1)(f) GDPR \u2014 legitimate interest)<\/b> IP address, browser type, OS, referring URL, date\/time of visit. Automatically recorded by our web server. Retained for approximately 14 days, then deleted. Used solely for security and technical operation.<\/span><\/li>
  5. e) Cookies and analytics (Art. 6(1)(a) GDPR \u2014 consent)<\/b> See Section 6 below.<\/span><\/li><\/ol>

    4. Special Note on Our Products<\/b><\/h2>

    Our products (Kratom \/ Mitragyna speciosa) are sold exclusively as collectibles and for research purposes. We do not process any health data (Art. 9 GDPR) in connection with orders. By ordering, customers confirm the products are not for human consumption. We do not record or process any information relating to medical use.<\/span><\/p>

    5. Data Sharing and Third-Party Processors<\/b><\/h2>

    We share data only where necessary and always under a Data Processing Agreement (Art. 28 GDPR):<\/span><\/p>

    Hosting:<\/b> Hostinger International Ltd. \u2014 servers within the EU where possible. Privacy policy:<\/span> https:\/\/www.hostinger.com\/privacy-policy<\/span><\/a><\/p>

    Website platform:<\/b> Automattic Inc. (WordPress.com) \u2014 EU-US Data Privacy Framework participant; Standard Contractual Clauses apply. Privacy policy:<\/span> https:\/\/automattic.com\/privacy\/<\/span><\/a><\/p>

    E-mail marketing:<\/b> MailPoet (Automattic Inc.) \u2014 used only with your explicit consent. Unsubscribe at any time via the link in any newsletter.<\/span><\/p>

    Google Analytics 4:<\/b> Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland \u2014 used only with your consent (cookie banner). IP anonymisation enabled. Data retained for 14 months by default. EU-US Data Privacy Framework participant. Opt-out:<\/span> https:\/\/tools.google.com\/dlpage\/gaoptout<\/span><\/a><\/p>

    Google reCAPTCHA:<\/b> Google Ireland Limited \u2014 used to protect forms from spam; legitimate interest (Art. 6(1)(f) GDPR) and consent.<\/span><\/p>

    Google Maps:<\/b> Google Ireland Limited \u2014 embedded on our contact\/location page; used only with consent.<\/span><\/p>

    Payment providers:<\/b> Payment data is processed directly by the respective payment service provider (e.g. card processor). We do not store full card details.<\/span><\/p>

    Shipping:<\/b> \u00d6sterreichische Post AG \/ DPD \u2014 name and delivery address are shared solely for shipment fulfilment.<\/span><\/p>

    We do not sell personal data to third parties.<\/span><\/p>

    6. Cookies<\/b><\/h2>

    We use cookies in the following categories:<\/span><\/p>

    Essential cookies<\/b> \u2014 required for the shopping cart and checkout to function. No consent required (Art. 6(1)(f) GDPR).<\/span><\/p>

    Analytics cookies (Google Analytics 4)<\/b> \u2014 only set with your consent. You can withdraw consent at any time via our cookie settings banner or by installing the Google Analytics opt-out browser add-on.<\/span><\/p>

    Marketing\/map cookies<\/b> \u2014 only set with your consent (Google Maps, reCAPTCHA).<\/span><\/p>

    You can manage, delete, or block cookies at any time in your browser settings. Note that disabling essential cookies may affect shop functionality.<\/span><\/p>

    7. Data Transfers to Third Countries<\/b><\/h2>

    Some processors (Automattic\/Google) may transfer data to the USA. All such transfers are covered by either the EU-US Data Privacy Framework or Standard Contractual Clauses (Art. 46(2) GDPR), ensuring an equivalent level of data protection.<\/span><\/p>

    8. Data Retention<\/b><\/h2>

    Data type<\/b><\/p><\/td>

    Retention period<\/b><\/p><\/td><\/tr>

    Order data<\/span><\/p><\/td>

    7 years (Austrian tax law)<\/span><\/p><\/td><\/tr>

    Communication\/e-mails<\/span><\/p><\/td>

    Duration of business relationship + 3 years<\/span><\/p><\/td><\/tr>

    Server logs<\/span><\/p><\/td>

    ~14 days<\/span><\/p><\/td><\/tr>

    Newsletter subscription<\/span><\/p><\/td>

    Until unsubscribed + up to 3 years for consent proof<\/span><\/p><\/td><\/tr>

    Cookie consent records<\/span><\/p><\/td>

    Up to 3 years<\/span><\/p><\/td><\/tr><\/tbody><\/table>

    9. Your Rights<\/b><\/h2>

    Under GDPR (Arts. 15\u201322), you have the right to:<\/span><\/p>