Privacy Policy

Last updated: 1 November 2026

This Privacy Policy explains how CLOVER AND CLOUD SRL (“Clover and Cloud”, “we”, “us”) collects, uses, stores and shares personal data when you visit cloverandcloud.com and when you contact us. It also explains your rights under the EU General Data Protection Regulation (GDPR).

1. Who we are

The data controller is CLOVER AND CLOUD SRL, registered in Romania under number J15/784/2015, tax ID (CUI) 35212600, registered office at 185 Principală Street, Piatra village, Runcu commune, Dâmbovița County, Romania.
Contact for any privacy question: hello@cloverandcloud.com, +40 733 300 805.

2. What data we collect

2.1 Data you give us directly

When you fill in the contact form, write to us, call us, ask for a quote or become a client, we may process:

  • your first and last name;
  • your email address;
  • your phone number;
  • your company details, where relevant;
  • any other information you choose to share through the form or in messages.

2.2 Data collected automatically

When you visit the website, we automatically collect:

  • your IP address;
  • your browser type and version;
  • device information;
  • the pages you visit and how long you stay;
  • other similar technical data.

We generally use this data in aggregated form, for statistics and to improve the website and our services. Apart from what is strictly necessary for the website to work, this data is collected only if you accept the relevant cookies (see section 8).

3. Purposes and legal bases

3.1 Providing our services

To deliver the services you ask for, such as online advertising strategies and campaigns. Legal basis: performance of a contract or steps taken at your request before entering into one (Art. 6(1)(b) GDPR).

3.2 Communicating with you

To answer your questions, quote requests and business enquiries. Legal basis: performance of the contract or our legitimate interest in answering enquiries.

3.3 Measuring visits and our own advertising

To understand how the website is used and to measure our own marketing, through analytics tools that run via Google Tag Manager. We also use the Meta pixel to measure the results of our ads on Facebook and Instagram and to show ads to people who have visited the website. Legal basis: your consent (Art. 6(1)(a) GDPR and Romanian Law no. 506/2004).

3.4 Security and technical operation

The technical data collected automatically is also processed for the security and administration of the website. The website loads fonts from Google Fonts, and when a page loads Google receives your IP address. Legal basis: our legitimate interest and compliance with legal obligations.

3.5 Managing our clients’ advertising accounts

As an online advertising agency, we access our clients’ advertising accounts (Google Ads, Meta Ads and others) on their behalf and under our contracts with them. These accounts mainly hold business data: campaigns, ads, budgets and results. Where they contain personal data, we act as the client’s processor. The client is the controller and sets the legal basis, and we follow the client’s instructions and our contract with them.

4. The Clover and Cloud application and Google user data

Clover and Cloud is our internal application, used only by our team to manage our clients’ Google Ads accounts. It is not offered to the public.

4.1 What data it accesses

The application uses the Google Ads API scope https://www.googleapis.com/auth/adwords and reads data from the Google Ads accounts we have access to: campaigns, ads, keywords, budgets, performance data and change history.

4.2 How it uses the data

For reporting, analysis and managing our clients’ campaigns, including changes approved by our team.

4.3 How it stores the data

The data is stored on systems controlled by Clover and Cloud, with access restricted to authorised team members.

4.4 Who it shares the data with

Only the client who owns the Google Ads account and the technical providers listed in section 5, to the extent needed for the application to work, or authorities where the law requires it. We do not sell this data.

The application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we may share your data with

Your data may be shared with:

  • technical providers that help us operate (for example website hosting, email, backups, analytics and reporting tools);
  • advertising and analytics platforms (for example Google and Meta), through the measurement tools on the website, only if you have accepted the relevant cookies;
  • competent authorities, where the law requires it;
  • contractual partners, to deliver your services, as set out in the contract.

Any third party that processes data on our behalf must comply with the GDPR and use the data only according to our instructions.

6. Transfers outside the European Economic Area

Some providers, for example Google and Meta, may process data outside the European Economic Area, including in the United States. In those cases, the transfer is based on the European Commission’s adequacy decision for the US (EU-US Data Privacy Framework) for certified providers, or on the standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).

7. How long we keep data

We keep your data:

  • for as long as there is a contractual basis or a legitimate interest, for example for the duration of the service or the consultancy;
  • for the period required by law for keeping tax and accounting records;
  • until you withdraw your consent, where the processing is based on it;
  • for website visit data, for as long as is set in the measurement tool.

8. Cookies and similar technologies

The website uses cookies and similar technologies to collect automatically the data described in section 2.2. Strictly necessary cookies are set without consent, because the website does not work without them. The other categories are set only after you accept them in the cookie window, where you can also find the full list. You can change or withdraw your consent at any time from the same window. Details are in our Cookie Policy.

9. Your rights

Under the GDPR, you have the following rights:

  • the right of access to your personal data;
  • the right to have inaccurate data rectified;
  • the right to erasure (“right to be forgotten”);
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to certain types of processing, including processing based on our legitimate interest;
  • the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it;
  • the right not to be subject to a decision based solely on automated processing, under Article 22 GDPR;
  • the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).

To exercise these rights, write to hello@cloverandcloud.com.

10. Data security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction.

11. Changes to this Privacy Policy

We may update this policy from time to time. The date of the last change is shown at the top of this document. Publication on the website constitutes notice to you of the changes.