GENERAL INFORMATION
Canna CBD Distribution, in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Organic Law 3/2018, on the Protection of Personal Data, informs you about how we process your personal data when you use our website.
Data controller:
• Name: Canna CBD Distribution
• Contact email: info@cannacbdistribution.com
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the purchasing process, we collect the personal information you provide to us such as your name, address and email address. This information is necessary to process your order and send you the products you have purchased.
When you browse our store, we also automatically receive your computer’s IP address to help us learn about your browser and operating system, which allows us to improve your shopping experience.
Tools we use:
• Google Analytics: To analyze how you use our website and improve your experience
• Facebook Pixel: To show you relevant ads on Facebook and Instagram
• Klaviyo: To send you personalized emails about our products
• Pixel Your Site: To optimize event tracking on our website
• WooCommerce Vendo Gateway: To securely process payments for your orders
Email marketing: With your permission, we may send you emails about our store, new products and other updates.
Legal basis: We process your data based on:
• Business relationship: To process your orders and provide you with our services
• Consent: To send you marketing communications and personalize your experience
• Legitimate interest: To improve our services and website security
SECTION 2 – CONSENT
How do we get your consent?
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to the collection and use of that information for that specific purpose only.
If we ask for your personal information for another reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How can you withdraw your consent?
If after you have given consent, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use, or disclosure of your information, at anytime, by contacting us at info@cannacbdistribution.com.
All requests related to the exercise of these rights will be processed within a maximum period of 30 calendar days from receipt, in accordance with Regulation (EU) 2016/679 (GDPR).
SECTION 3 – DISCLOSURE
We may disclose your personal information if required to do so by law or if you breach our Terms of Service.
We also share your information with:
• Courier companies: To deliver your orders
• WooCommerce Vendo Gateway: To securely process your payments
• Technology service providers: Such as Google, Facebook, and Klaviyo, who help us improve our services (all under strict data protection agreements)
SECTION 4 – STORAGE AND SECURITY
Your data is stored through Canna CBD Distribution’s storage systems, using WordPress and WooCommerce. All your data is stored on secure servers protected by firewalls.
Payment Methods:
If you use WooCommerce Vendo Gateway to complete your purchase, your payment information is encrypted using the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is stored only as long as necessary to complete your purchase. Once complete, your transaction information is deleted.
All payment gateways comply with the standards set by PCI-DSS, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover.
Security Measures:
• SSL encryption for data transmission
• AES-256 encryption for the storage of sensitive information
• PCI-DSS compliance for payment data
• Restricted access to personal information
SECTION 5 – THIRD-PARTY SERVICES
In general, the third-party providers utilized by us (such as Google Analytics, Facebook Pixel, Klaviyo, Pixel Your Site, and WooCommerce Vendo Gateway) only collect, use, and disclose your information to the extent necessary to provide their services to us.
However, some third-party service providers, such as payment gateways and other transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand how they will handle your personal information.
Please remember that some providers may be located in different jurisdictions than yours. If you proceed with a transaction involving the services of a third-party provider, your information may become subject to the laws of those jurisdictions.
International Transfers: Some of our providers (such as Google, Facebook, Klaviyo) may transfer your data outside of the European Economic Area under the appropriate GDPR safeguards.
LINKS
When you click on links on our store, you may be redirected away from our site. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies.
SECTION 6 – COOKIES
Our website uses cookies to identify the pages visited and their frequency. This information is used solely for statistical analysis and is then permanently deleted.
Types of cookies we use:
• Technical cookies: Necessary for the operation of the website
• Analysis cookies: Google Analytics for usage statistics
• Marketing cookies: Facebook Pixel, Klaviyo for advertising personalization
. You can delete cookies at any time from your computer. However, cookies help us provide you with a better web service. You can accept or reject the use of cookies, although most browsers automatically accept them. You can also change your computer settings to reject them, although this may limit the use of some of our services.
Cookie management: You can set your cookie preferences through the banner that appears on your first visit or in your browser settings.
SECTION 7 – YOUR RIGHTS UNDER THE GDPR
Under the GDPR, you have the following rights:
• Right to access: You can request information about what personal data we have about you
• Right to rectification: You can request the correction of inaccurate or incomplete data
• Right to erasure: You can request the deletion of your data when it is no longer necessary
• Right to restriction: You can request the restriction of the processing of your data
• Right to portability: You can request to receive your data in a structured format
• Right to object: You can object to the processing of your data for particular reasons
• Right to withdraw consent: You can withdraw consent at any time
All requests related to the exercise of these rights will be processed within a maximum period of 30 calendar days from receipt, in accordance with Regulation (EU) 2016/679 (GDPR).
SECTION 8 – AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
________________________________________
SECTION 9 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to offer our products to you.
SECTION 10 – CLAIMS
If you consider that the processing of your personal data violates current regulations, you can file a claim with the Spanish Data Protection Agency (AEPD):
• Website: www.aepd.es
• Telephone: 901 100 099
QUESTIONS AND CONTACT INFORMATION
If you wish to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Data Protection Officer at info@cannacbdistribution.com.
To exercise your rights, please include in your email:
• Name and surname
• Email address
• Right you wish to exercise
• Copy of your ID
This privacy policy complies with the GDPR and is adapted to Spanish from Spain and to the specific activities of Canna CBD Distribution.