Privacy policy
PRCONNECT is the controller of the personal data processed through clavanto.com. Contact details for privacy questions are shown on the Business details page. This notice explains what we process, why, for how long and what your rights are under the Law on Protection of Personal Data of Kosovo (Law No. 06/L-082) and, where it applies, the GDPR.
What we process: your name, email address and password (stored only as a hash); the language and currency you choose; your orders, delivered keys, wallet transactions and payment references; the outcome and reference of your identity verification; support and contact messages; reviews you write; and security records such as sign-in attempts, IP address and session data.
Why: to create your account and deliver what you buy (performance of a contract); to verify age and identity, keep accounting records and answer lawful requests (legal obligations); to prevent fraud and protect accounts (our legitimate interest); and, only if you choose it, to send you offers (consent, which you can withdraw at any time). Reviews are published under your first name and last initial.
Who receives data: payment providers Paysera (card and bank payments) and NOWPayments (cryptocurrency) receive the data needed for your payment; the identity verification provider Veriff receives your document and live capture directly and returns only the decision and a reference to us: we never see or store document images, document numbers or your date of birth. Our email service delivers order and account emails. The store is hosted on servers in Germany (European Union). We do not sell personal data and do not use advertising trackers.
How long: account data for as long as your account exists and until 30 days after you ask us to delete it; orders, payments and invoices for the period required by tax and accounting law; verification results for one year, after which verification is repeated; sign-in attempt records for 24 hours, and the security and audit log for the same period as transaction records; support messages until two years after the case is closed. Email links expire after 30 minutes.
Your rights: you can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest. Write to the privacy contact on the Business details page or use the Privacy request form in your account; we answer within 30 days. You can also complain to the Information and Privacy Agency of Kosovo or, for EU residents, to your local data protection authority.
Cookies and local storage: the store uses only what it needs to work: a session cookie when you sign in and browser storage for your cart, language, currency and display preferences. No analytics or advertising cookies are set. If optional cookies are ever added, they will be off until you accept them in the cookie banner, and you can change your choice at any time.