Legal
Privacy policy
This policy explains what personal data this website collects, why, and what rights you have under the GDPR.
This text is an editable starting point, not legal advice. Have it reviewed and completed with your company details before the site goes live.
Who is responsible
CANNAEAST is the controller for personal data collected through this website. Company name, registered address and a contact email address need to be inserted here before publication.
What we collect
We collect only what a specific action requires:
- Contact form: your name, email address, subject, message and, if you choose, an order number.
- Newsletter: your email address and a record of your consent, including the time it was given.
- Cookies: only what you agree to in the cookie banner. Necessary cookies keep the site working.
Why we process it
Contact messages are processed to answer you. Newsletter data is processed on the basis of your consent. Optional analytics are processed only after you accept analytics cookies, and only to understand which pages are useful.
How long we keep it
Contact messages are kept while your question is open and for a reasonable period afterwards. Newsletter data is kept until you unsubscribe. Retention periods should be confirmed and stated here before publication.
Sharing
Data may be shared with service providers who operate parts of this website on our behalf, such as our email provider and hosting. Purchases are handled by the CannaBea store, which processes that data under its own policy.
Your rights
You can ask for access to your data, correction, deletion, restriction or portability, and you can withdraw consent at any time. You can also complain to your national data protection authority.