Personal Data Protection Policy: Rules on Personal Data Protection and Use of Cookies

The purpose of this Privacy Policy (hereinafter referred to as the "Policy") is to express the standards of personal data protection adhered to by us, with regard to the legislation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter referred to as the "GDPR", Act No. 110/2019 Coll., on the processing of personal data, and related legislation.

These principles will help you understand, for example, what data our company Canna b2b, s.r.o., with its registered office at Žižkova 708, Příbram II, 261 01, Czech Republic, Company ID: 02023024, Tax ID: CZ02023024, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 214621 (hereinafter referred to as the "Controller"), collects, how it uses it, with whom it may share it or how you can exercise your data protection rights against the Controller.

User registration

In the event that you register, you share your e-mail with the Controller as personal data, and you also share the username and password you have chosen with the Controller. Your e-mail is processed as your personal data only in our internal database for the purpose of managing your user account. This administration is also carried out by an external entity – the administrator of our website. The data is therefore transferred to this external entity. However, we have ensured that this third party will comply with all legal standards in relation to your personal data and that it cannot be misused.

The provision of this data is voluntary, but necessary for registration/conclusion of a contract. The legal basis for the processing is the performance of a contract within the meaning of Art. 6 para. 1 lit. b) GDPR, as registration and account management is a service that we provide to you at your request. If you register in our system only for the purpose of using our services, we do not need your explicit consent to process your personal data. This processing of your e-mail is an essential part of managing your profile.

We store the data associated with your user account for the duration of active use of the service. If you decide not to use our services in the future and delete your profile on our website, we will subsequently delete your data from all our databases without undue delay (no later than 30 days after cancelling your registration), unless other legal reasons prevent this.

Newsletter

If you subscribe to our newsletter, you share your e-mail with us as personal data. Your e-mail is further processed as your personal data for the purpose of sending our commercial communications. These commercial communications will always be related to the content of our e-shop www.canaturawholesale.com. These can be special offers from seed banks cooperating with us, cannabis fairs or commercial communications of the www.cannapedia.cz portal operated by us or other related commercial communications. Your e-mail address may be used to send you an offer of a marketing competition organized by us or a questionnaire survey organized by us. However, these will never be communications that are not related to the content of our website. Your e-mail will be processed for this purpose on the basis of your consent (Art. 6 (1) (a) GDPR), which you have given us by subscribing to the newsletter. Consent is entirely voluntary, providing an e-mail address for the newsletter is not a legal or contractual obligation.

We would like to inform you that the administration of the newsletter is carried out through an external marketing application. Your e-mail is therefore forwarded to this external party. But you don't have to worry about your personal data. As mentioned above, we have ensured that our contractual partner will comply with all legally required standards when handling your e-mail, so that it cannot be misused.

We process your e-mail on the basis of your unambiguous consent to receive such communications. In the event that you wish to withdraw this consent in the future, each e-mail containing such a communication contains a link to withdraw consent in its header. You can also withdraw your consent at any time by sending an e-mail to [email protected]. If you withdraw your consent, we will delete you from all our databases and stop sending you any commercial communications. If you change your mind in the future, you can simply subscribe to the newsletter on our website again. Providing an e-mail address for subscribing to the newsletter is voluntary, but without providing it, we cannot send you commercial communications.

We will process your e-mail for sending the newsletter for as long as you are interested in receiving it – i.e. until you withdraw your consent or terminate your subscription. We will then delete the data within 14 days of unsubscribing at the latest.

Cookies and similar technologies

When you browse our website, we use technology to make it as easy as possible for you to navigate through our website. These are mainly so-called cookies – short text files that the server places on your computer (or other device) when you load a website. Technically, it is a series of codes according to which the browser collects and then sends information about your behavior back to our server. Cookies are not directly linked to your name or email address, but often contain your login details. A detailed description of all cookies collected can be found here. The link also shows how long each cookie is stored.

On our website, we primarily use cookies only for the purpose of transmitting a message, or where it is necessary to provide services that you, as a user of our website or a customer of our e-shop, explicitly request. In this case, the relevant legislation does not require your consent to the use of cookies. We have marked these cookies as "Necessary".

For all other types of cookies, we need your consent. Consent to the collection of individual types of cookies can be withdrawn at any time by changing the settings of the relevant internet browser. Of course, the website can also be used in a mode that does not allow the collection of data about your behavior on our website.

First of all, these are cookies that allow our website to remember information that changes how the website behaves or looks. For example, your preferred language or the region where you are located. We have labeled these cookies as "Preference".

We also collect cookies that are used to measure website statistics and to identify you within the advertising network and retarget advertising. We have labeled these cookies as "Statistics".

We also collect cookies for the purpose of targeting advertising. The intention is to display preferentially advertising that is relevant and interesting for the individual user and thus more valuable for publishers and third-party advertisers. We have labeled these cookies as "Marketing".

The last category is the so-called Unclassified cookies. These are cookies that we have in the process of classifying together with the providers of individual cookies. After classification, they will be assigned to one of the above groups.

When processing cookies, we adhere to the general principles arising from the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

We may share information about how you use our websites with our advertising and analytics partners. Partners may combine this data with other information that you have provided to them or that they have obtained as a result of your use of their services (provided that you consent to this through your cookie settings).

The cookie settings are part of the browser you use. Cookies can be completely rejected or restricted through your browser. However, this may also limit the functioning of our website and may not allow you to use the functions offered by us to their full extent.

Order in the e-shop

If you make a purchase in our e-shop Canatura Velkoobchod, we process the following data you enter: name, surname, e-mail, telephone number, your billing information (including any ID and VAT number) and your correspondence information, if not identical to the billing information. We also process your personal data in our internal database for the purpose of fulfilling our contractual obligations – in particular sending the goods you ordered. The processing of data at the time of purchase is necessary for the fulfilment of a contract (Art. 6 (1) (b) GDPR), so the provision of said personal data is a contractual requirement.

In connection with your purchase in our e-shop, there are several cases of transfer of your personal data to another entity:

Our website is managed by an external company. The latter also has access to this content as part of the administration of our website.
Your personal data is transferred to an external accounting firm for the purpose of fulfilling our legal obligations.
Transfer of your personal data to the carrier (an alternative is the possibility of picking up the order directly at the Controller's registered office).
Transfer of your personal data to the payment service provider of your choice (an alternative is the option of cash payment upon collection directly at the Controller's registered office or cash on delivery upon delivery to another location).
We determine your satisfaction with your purchase through e-mail questionnaires as part of the Verified by Customers program, in which our e-shop is involved. We send you these every time you make a purchase from us, if, in accordance with § 7 para. 3 of Act No. 480/2004 Coll., on Certain Information Society Services, you do not refuse to receive our commercial communications or withdraw your previously granted consent (for more information, see point 2 of this Newsletter Policy). To send questionnaires, evaluate your feedback and analyze our market position, we use a processor, which is the operator of the Heureka.cz portal; For these purposes, we may pass on information about the purchased goods and your e-mail address.

However, you don't have to worry about anything. We have ensured that all of these third parties comply with all legal standards in relation to your personal data so that your personal data cannot be misused.

If you have placed an order in our e-shop, we may subsequently send you another offer of our goods or services without your express consent. In the event that you do not wish to receive this offer, any email containing such a communication will contain a link to unsubscribe from our offer in its header.

We process your order data for the period necessary to process the purchase and for the duration of statutory periods (e.g. to exercise rights arising from defective performance). Subsequently, we store billing data to a limited extent for the period for which we are obliged to keep accounting and tax documents according to legal regulations. After these periods, the data is securely deleted or anonymised. For the purposes of the Verified by Customers program, the e-mail address is used once to send the questionnaire and is not stored by Heureka – we record information that the questionnaire has been sent for a maximum of 6 months.

How we protect personal data

When collecting and storing your personal data, we enforce physical, electronic and procedural safeguards. To keep your personal information secure:

We use computer security such as file passwords and firewalls.
We enforce physical access controls to our buildings and files.
We only grant access to your personal data to employees who need it to perform their job duties.
During the transmission of your data when shopping on our Canatura Wholesale e-shop, we protect the security of your information by encrypting it with a Secure Sockets Layer (SSL).
In cases where your personal data is transferred to another processor (e.g. the administrator of our website), we have ensured that each other processor adheres to all legal standards in relation to your personal data and thus prevents misuse of your personal data.

How long do we use personal data

We process your personal data in particular for the duration of our contractual relationship. We are obliged to process the personal data that are necessary for the performance of our obligations (obligations arising from a concluded contract or from generally binding legal regulations) for the period stipulated by the given legal regulations or in accordance with them. We store your personal data only for the necessary period of time. The purpose for which the data was collected must always be taken into account.

If the legal reason for their storage no longer exists, we are obliged to delete your personal data from all our databases. Please note that sometimes the deletion of your personal data from one of our databases may prevent you from fulfilling legal obligations - e.g. recording the billing data of e-shop customers.

Other rights of data subjects

Your rights include:

Right of access to personal data (Art. 15 GDPR),
Right to rectification of inaccurate data (Art. 16 GDPR),
Right to erasure of data (Art. 17 GDPR),
Right to restriction of processing (Art. 18 GDPR),
Right to data portability (Art. 20 GDPR),
Right to object to processing (Art. 21 GDPR).

If you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations, you also have the right to file a complaint with the Office for Personal Data Protection, ID No.: 70837627, with its registered office at Pplk. Sochora 27, 170 00 Prague 7.

If you are interested in learning more about your rights to personal data protection, we recommend that you visit the https://www.gdpr.cz website established for this purpose, or contact the Office for Personal Data Protection directly.

How to contact us

If you would like access to your personal data or have other requests, questions or comments about how we collect, store and use your personal data, please contact us by e-mail: [email protected] or write to us at the address of our registered office. Your request will be processed without undue delay, but within a maximum of one month. In exceptional cases, especially with regard to the complexity of your request, we are entitled to extend this period by another two months. We will inform you of such a possible extension, including the justification.

This Privacy and Cookie Policy is valid and effective from 01/09/2025.

Subcategories (1)