English
Currency:
   Reset your password   |   Create an account

Kloelle Privacy Policy

1. Identification of the Data Controller

Your personal data is collected and processed by Oxan, Lda, a Portuguese company with registered office at Rua das Pereiras Lt 93, 2910-263 Setúbal, Portugal, owner of the online store Kloelle® (hereinafter referred to as Kloelle® or “we”).

Email contact:

This Privacy Policy applies to the processing of personal data carried out through the website https://kloelle.eu in the context of selling our products to customers located in the European Union.

2. Legal Framework and Applicable Principles

Kloelle® processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter “GDPR”), as well as with the remaining applicable legislation on data protection and electronic communications.

Personal data is processed lawfully, fairly and transparently, exclusively for specified, explicit and legitimate purposes, while ensuring data minimisation, accuracy, storage limitation and the adoption of appropriate security measures.

3. Categories of Personal Data Collected

In the context of using our website and placing orders, we may collect and process, as applicable, the following categories of personal data:

  • Identification and contact data, such as first name, last name, email address, billing address, delivery address and, when voluntarily provided by the user, telephone number;
  • Data necessary for managing the purchase and the order, including purchased products, order history, returns, complaints and communications exchanged with us;
  • Tax and invoicing data, such as tax identification number or any equivalent tax number, when requested by the customer or required by law;
  • Payment-related data, to the extent necessary to process the transaction, and payments may be handled by external payment service providers;
  • Technical and browsing data, such as IP address, device identifiers, browser type, language, visited pages, browsing preferences and data collected through cookies or similar technologies, according to the choices made by the user;
  • Any other data that the user voluntarily provides to us when contacting us or filling in forms available on the website.

Data marked as mandatory in the forms is required to process the order, provide the requested service or comply with legal obligations. Failure to provide such data may prevent the conclusion or performance of the contract. Optional data may be provided voluntarily by the user and may contribute to a better provision of the service, particularly regarding order tracking and delivery.

4. Purposes of Processing and Legal Bases

Kloelle® only processes personal data where there is a valid legal basis for doing so. In particular, we may process your data for the following purposes:

  • Management of the customer account and website registration — based on the performance of pre-contractual steps or the contract, where applicable;
  • Processing, payment, preparation, dispatch and delivery of orders — based on the performance of the contract concluded with you;
  • Issuing invoices and complying with accounting, tax and legal obligations — based on compliance with legal obligations to which we are subject;
  • Customer support, response to information requests, handling complaints, exchanges and returns — based on the performance of the contract and, in certain cases, on our legitimate interest in ensuring an appropriate service;
  • Prevention and detection of fraud, abusive use of the website and protection of our systems — based on our legitimate interest in ensuring the security of the website, transactions and users;
  • Improvement of the website’s operation, statistical analysis, technical diagnosis and maintenance — based on our legitimate interest and, where legally required, on your consent;
  • Handling requests related to the exercise of data protection rights — based on compliance with legal obligations;
  • Compliance with legal, regulatory obligations or legitimate orders from competent authorities — based on compliance with legal obligations.

Whenever processing is based on your consent, such consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out up to that date.

5. Source of the Data

In most cases, personal data is collected directly from the data subject. In certain situations, we may also receive information from third parties strictly necessary for the provision of the service, namely payment providers, carriers, technology partners or other service providers involved in the execution of the order.

6. Sharing of Data with Third Parties

Kloelle® does not sell personal data. However, we may disclose your data to third parties where this is necessary to pursue the purposes indicated above, namely to the following categories of recipients:

  • Payment service providers;
  • Carriers, logistics operators and shipping and delivery partners;
  • Hosting, technological infrastructure, technical maintenance, customer support and IT security service providers;
  • Invoicing, accounting, audit, legal or tax consultancy service providers, where necessary;
  • Statistical analysis and technical diagnosis service providers, where applicable and in accordance with the appropriate legal basis;
  • Public authorities, supervisory authorities, courts or other third parties, where required by law or necessary for the defence of rights in judicial or extrajudicial proceedings.

Whenever we use processors, we contractually require them to process personal data only according to our instructions, under a strict duty of confidentiality and through the adoption of appropriate security measures.

7. International Data Transfers

As a rule, Kloelle® seeks to use service providers located within the European Economic Area. Nevertheless, the use of certain third-party analytical or technological tools, namely Google Analytics 4 and Microsoft Clarity, may involve the processing or transfer of personal data to third countries, including countries located outside the European Economic Area.

In such cases, Kloelle® will seek to ensure that such transfers are carried out in accordance with the GDPR and on the basis of legally appropriate mechanisms, namely adequacy decisions of the European Commission, standard contractual clauses or other legally admissible safeguards.

8. Data Retention

Personal data is retained only for the period necessary for the purposes for which it was collected and processed, without prejudice to legally required retention periods.

  • Data relating to orders, invoicing and transactions may be retained for the period required by tax, accounting and other applicable legislation;
  • Data associated with the customer account may be retained while the account remains active and, thereafter, for a reasonable period necessary to comply with legal obligations or defend rights;
  • Data collected through cookies will be retained according to their purpose, the type of cookie concerned and the applicable consent settings.

When the data is no longer necessary, it will be securely deleted or anonymised, unless its retention is required by law.

9. Data Security

Kloelle® adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or any other form of unlawful or improper processing.

These measures include, in particular, the use of secure communications, access controls, limiting access to data to employees and service providers whose intervention is necessary, system protection mechanisms and internal security procedures proportionate to the nature of the data processed and the risks involved.

Although appropriate protection measures are applied, no data transmission over the Internet or storage system is absolutely infallible. Nevertheless, we seek to adopt security practices appropriate to the level of risk involved in the processing.

10. Cookies and Similar Technologies

We use cookies and similar technologies to ensure the functioning of the website, store preferences chosen by the user, such as language and currency, and collect statistical data on the use of the website, whenever consent has been given for that purpose.

The cookies used on the website may fall, as applicable, into the following categories:

  • Strictly necessary cookies — essential for the functioning of the website, including navigation, security, session management and use of the shopping cart;
  • Functional or preference cookies — allow the storage of user preferences, such as language and currency;
  • Analytical cookies — used only with the user’s consent to collect statistical and analytical information about the use of the website, namely through Google Analytics 4 and Microsoft Clarity.

Analytical cookies will only be used if the user provides the relevant consent. Such consent may be refused or withdrawn at any time through the consent management tools made available on the website, without prejudice to browser settings.

Disabling certain cookies may affect the functioning of some website features.

11. Automated Decisions

As a rule, we do not take decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect them. Without prejudice to the foregoing, we may use automatic fraud detection, security or website abuse prevention mechanisms, always in a proportionate manner and within the limits permitted by law.

12. Children’s Privacy

The website and the products sold by Kloelle® are intended to be purchased by adults. We do not knowingly collect personal data from minors in the context of contracting through the website. If you become aware that personal data relating to a minor has been unduly collected in breach of applicable law, please contact us so that we may take appropriate measures.

13. Links to Third-Party Websites

Our website may contain links to third-party websites, platforms or services. Such websites are independent from Kloelle® and their use is subject to the policies and conditions of those third parties. We recommend that you read their privacy policies before providing any personal data.

14. Rights of Data Subjects

Under the GDPR and applicable legislation, the data subject may exercise, at any time and within the legal limits, the following rights:

  • Right of access to their personal data;
  • Right to rectification of inaccurate or incomplete data;
  • Right to erasure of data, in cases provided for by law;
  • Right to restriction of processing, in cases provided for by law;
  • Right to object to processing, where applicable;
  • Right to data portability, where applicable;
  • Right to withdraw consent, where processing is based on that legal basis, without affecting the lawfulness of prior processing;
  • Right not to be subject to a decision based solely on automated processing, under the legally applicable conditions.

To exercise any of these rights, you may contact us through the following means:

Email:

Mail: Rua das Pereiras Lt 93, 2910-263 Setúbal, Portugal

We may request proof of the requester’s identity whenever necessary to ensure that personal data is disclosed only to its data subject or to a duly authorised representative.

15. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with a competent supervisory authority, in particular in the Member State of their habitual residence, place of work or of the place of the alleged infringement, if they consider that the processing of their personal data infringes the GDPR.

As Kloelle® is established in Portugal, its national supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD), without prejudice to the data subject’s right to contact the competent authority in another Member State, in accordance with the GDPR.

16. Changes to the Privacy Policy

Kloelle® reserves the right to amend this Privacy Policy at any time, namely in order to adapt it to legislative, regulatory, technological or operational changes. The most recent version will always be available on this website.

This document was last updated on March 9, 2026.