The administrator of Customer’s personal data is Canna Hemp Lab sp. z o.o. with headquarters in Radom, 14/8 Focha St., 26-610 Radom, e-mail address: [email protected], contact phone: +48 22 164 78 91.
II. Purposes and duration of personal data processing
The Data Administrator will only process the Customer’s personal data for specific, explicit and legitimate purposes and will not further process it in a manner incompatible with those purposes. The Customer’s personal data will be processed for the following purposes:
set up an Account on the website in accordance with the Terms and Conditions pursuant to Article 6(1)(b) of the GDPR for the duration of the Sales Agreement, should an Account not be set up on the website or should an Account be deleted, the data will be archived and not used except for the purpose of investigation, defense or establishment of mutual claims.
conclude and perform the Sales Agreement in accordance with the Terms and Conditions on the basis of Article 6(1)(b) of the GDPR for the duration of the agreement and until the expiry of the time limits for claiming damages,
processing of complaints under Article 6(1)(c) of the GDPR for 1 year after the warranty expires or the complaint is settled,
vindication of claims related to the concluded agreement on the basis of Article 6(1)(f) GDPR, where the legally justified purpose is to vindicate receivables, until the legal conclusion of proceedings including enforcement proceedings,
the performance of public law obligations (e.g. taxes) in connection with the conclusion of a contract for the provision of services in accordance with the Regulations, including the archiving of settlement documents on the basis of Article 6(1)(c) of the GDPR until the expiry of the limitation period for tax liabilities,
for marketing purposes and for geolocation purposes for the purpose of presenting personalized advertising – for this purpose, the Customer will be asked to provide additional consent pursuant to Article 6(1)(a) GDPR, until the withdrawal of consent, and after the withdrawal only for the purpose of defending against claims (for the period of the statute of limitations for claims for infringement of personal rights).
III. Recipients of the Customer’s personal data
The Data Controller may transfer the Customer’s data to the following recipients:
entities that support the Data Controller in the course of its activities on behalf of the Data Controller, in particular suppliers of external systems that support the Data Controller’s operations.
entities operating a postal or courier service,
entities enabling the Data Controller to perform remote payment operations,
banks, in the event that they need to conduct settlements,
to state authorities or other entities authorized by law.
IV. Customer’s rights with respect to the processed data
The Client has the right to access their data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal (provided that the processing is based on consent). The withdrawal takes place by submitting a declaration to the Administrator by sending a letter to the Administrator’s registered office address or by sending a declaration by e-mail to [email protected] The withdrawal of consent does not affect the lawfulness of processing carried out until the withdrawal of consent. In the case of withdrawal of consent, the Data Controller will assess whether it still has grounds for processing the data. Further processing in this case will be possible to defend against claims (e.g. by demonstrating that the right to withdraw consent has been exercised) and only to the extent necessary for this purpose.
The Customer has the right to lodge a complaint regarding the Store’s infringements related to the processing of personal data to the supervisory authority, i.e. the President of the Office for Personal Data Protection.
Providing personal data by the Customer is necessary to conclude agreements, account for business activity, respond to requests, handle complaints and claims. In other respects, providing data is voluntary.
Providing personal data is voluntary, although failure to provide the personal data specified in the Rules and Regulations which are necessary to conclude a Sales Agreement results in inability to conclude such an agreement. The process of creating an account and concluding a Sales Agreement can be used by any adult person with full legal capacity
The Vendor does not collect or process personal information from minors. If information about a child has been collected without the consent of the person with parental responsibility over the child, please send us the appropriate information so that we can delete the data.
V. Cookie files information
Cookies are small text information sent by a web server and stored on the Client’s side. Default parameters of cookies allow to read the information contained therein only the server that created them.
Cookies may only be used for the duration of a Customer’s visit to the Store, or may be used to measure a Customer’s interaction with services and content over a period of time.
Cookie files may be used for:
remembering passwords and logins to the Customer’s Account,,
remembering data in the form being filled out (automatic form filling),
remembering information and compile statistical data about how the Store is used,
analysis of time spent in the Store,
remembering the Customer’s selected settings and preferences in the Store.
You can manage (accept or reject new cookies and delete existing ones) cookies through various options in your browser settings that allow you to enable or block cookies at any time, either overall or for specific actions. Each browser handles cookies differently, details of which can be found in the menu of the relevant browser.
The Store uses mechanisms of external entities, partners, advertisers, in particular these are Facebook and Google social functions, which directly involves recording cookies of these entities in the Customers’ end device.
The Store uses social networking plug-ins from the following providers:
Facebook, Instagram (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States) – https://www.facebook.com/policy.php
YouTube (YouTube LLC 901 Cherry Avenue, San Bruno, CA 94066, United States) – https://support.google.com/youtube/topic/2803240?hl=en&ref_topic=6151248
Twitter (operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, United States) – https://twitter.com/en/privacy
The Shop uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide other services to the website operator related to the website and Internet use. Legal basis for the use of Google Analytics: Article 6(1)(f) of the RODO. For more information on the terms and conditions of this service and data protection, please visit https://www.google.com/analytics/terms/pl.html and https://policies.google.com/?hl=pl.
The Store uses the Google Ads display system and applies Google’s conversion tracking feature for the purpose of personalizing online advertisements based on interests and location. Ads are displayed based on search requests on sites that are part of Google’s advertising network. You can choose the type of Google Ads that are shown to you, or you can turn off interest-based Google Ads completely. For more information about Google Ads, please visit https://safety.google/privacy/ads-and-data/.
VI. Final Provisions