PRIVACY POLICY
This Privacy Policy explains how CL Experience SRLS collects, uses, and protects personal data of users on our website and online services.
1. Types of Data Collected
We may collect the following information:
- Identification data: first name, last name, email address
- Browsing data: IP address, cookies, and site usage information
- Payment data: transaction details, such as card number and banking information
- Contact data: phone number and messages sent through forms or chat
2. Purpose of Processing
Collected data is used for:
- Sending newsletters and informative, promotional, or commercial communications
- Managing contacts and responding to requests via forms or email
- Marketing and profiling to provide relevant content
- Website traffic analysis and improvement using analytics and tag management tools
- Managing orders and shipments through couriers
3. Legal Basis for Processing
The processing of personal data is based on:
- User consent for newsletters, marketing, and profiling
- Execution of a contract or legal obligation for managing orders, invoicing, and contact requests
4. Data Retention Period
Personal data will be retained for:
- Contact and payment data until the service is fully completed or until legal and accounting obligations expire
- Marketing and newsletter data until the consent is withdrawn
- Browsing and analytics data for a maximum of 24 months
5. User Rights
Users have the following rights under GDPR:
- Access their data and request a copy
- Request deletion of personal data
- Correct inaccurate or incomplete data
- Object to processing for marketing or profiling purposes
- Receive data in a structured, machine-readable format (data portability)
- Withdraw consent at any time without affecting the lawfulness of prior processing
Requests can be sent to: privacy@clexperience.eu
6. International Data Transfers
Personal data may be transferred to external service providers outside the European Union, including:
- Odoo Online in Ireland for CRM, order management, and invoicing
- Google Tag Manager and Google Analytics in the United States for traffic analysis and profiling
- Meta – Facebook and Instagram in the United States for advertising, pixel tracking, and site analytics
- LinkedIn in the United States for advertising campaigns and analytics
- YouTube and Spotify in the United States for advertising and multimedia content management
- TikTok in the United States and Singapore for advertising and pixel tracking
- X (formerly Twitter) in the United States for advertising and content management
- International couriers DHL, UPS, and FedEx for shipments, processing only the necessary data, including recipient’s name, delivery address, phone number, email, and package information
These transfers are made under GDPR-compliant safeguards, including standard contractual clauses and appropriate security measures.
7. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be published on the website with an updated revision date.
Last updated: February 19, 2026