The controller of the personal data collected through our Store at cannabigold.co.uk is HemPoland spółka z ograniczoną odpowiedzialnością with its registered office in Władysławowo (82-300) at Władysławowo 30A, entered into the Register of Entrepreneurs of the National Court Register in Olsztyn, 8th Commercial Division of the National Court Register under the number KRS 0000534517, National Business Registry Number REGON 360289332, Tax Identification Number NIP 5783115991, with share capital amounting to PLN 1,000,000.00 paid up in full, hereinafter referred to as “HemPoland” or “Controller”.
HemPoland is a subsidiary of The Green Organic Dutchman Holdings Ltd. incorporated under the law of Canada, with its registered office in 6205 Airport Road, Building A, Suite 200, Mississauga, Ontario, Canada, listed on The Toronto Stock Exchange.
HemPoland is a producer and distributor of hemp products containing natural phytocannabinoids and other hemp products and is the owner of CannabiGold brand.
We care about your data
As the security of your personal data is important to us, we make every effort to protect your data. In particular we ensure that the data are:
The legal grounds for processing
We process your personal data in compliance with all regulations governing the processing of personal data, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union No 119, p. 1), hereinafter referred to as “GDPR” and The Data Protection Act 2018, hereinafter referred to as “DPA 2018”..
The legal basis for processing your personal data are as follows:
The purposes of processing your personal data, the legal basis for the processing and the types of personal data processed
|The purposes of the processing||The legal basis for the processing||The types of personal data processed|
|performance of a contract and taking steps at your request prior to entering into a contract, this includes: payment, delivery, returns, warranty claims||Article 6 paragraph 1 letter b) of GDPR (performance of a contract)||first name, last name, address, delivery address, email address, telephone number, payment information, details of the order|
|creating an account and registering you as our new Customer||Article 6 paragraph 1 letter a) of GDPR (consent)||first name, last name, address, email address, telephone number, date of birth, order history, payment information and history of payment, click and browsing history (connected with cookies)|
|answering questions sent by the Customer via the contact form on our website||Article 6 paragraph 1 letter f) of GDPR (legitimate interests pursued by the Controller – growing and running a business, taking care of customer relations)||first name, email address|
|newsletter||Article 6 paragraph 1 letter a) of GDPR (consent)||first name, last name, email address|
|direct marketing we will recommend you our products via email or text messages and inform you about discounts and offers that may be of interest to you||Article 6 paragraph 1 letter f) of GDPR (legitimate interests pursued by the Controller – growing and running a business)||first name, last name, email address, telephone number, products and offers you have clicked on|
|administration, development, protection of our business and improvement of our services and products||Article 6 paragraph 1 letter f) of GDPR (legitimate interests pursued by the Controller –growing and running our business, improve of products)||e-mail address, order history, delivery information, payment details, click and browsing history (connected with cookies)|
|analysis of your activity on our website to improve our website, products and customer relationships, to display the advertisements of our Products and to adapt their content to the preferences of our Customers; all data used for these purposes are pseudonymized||Article 6 paragraph 1 letter f) of GDPR (legitimate interests pursued by the Controller – growing and running a business, improve our products and website)||details of your device, IP address, browser type and version, location, operating system, information about your activity in our Store, such as how you use it, what you were looking for|
|compliance with a legal obligations arising from regulations, such as tax and accounting issues||Article 6 paragraph 1 letter c) of GDPR (compliance with a legal obligation)||first name, last name, address, payment information, details of the order|
|pursuing claims and defense against claims||Article 6 paragraph 1 letter f) of GDPR (legitimate interests pursued by the Controller – defense of the Controller’s interests)||first name, last name, address, payment information, details of the order|
In our Store we may use profiling. Profiling is automated processing of personal data to evaluate certain things about our Customers. We may use profiling for marketing purposes. It allows us to know better your preferences concerning our products and tailor our offer to your needs. It does not produce any legal effects concerning you and does not similarly significantly affect you. We do not use any other automated individual decision-making process. Being subject to a decision based on profiling is allowed when the person has provided explicit consent (which may be withdrawn at any time), it is authorized by law, or it is necessary for the entry into or performance of a contract.
The storage period of personal data
Your personal data will be stored only for a limited period of time; only as long as is necessary for the purposes such data was provided.
Personal data processed for the purposes of the entry into and performance of a contract will be stored as long as this contract is in effect and after its expiry for the period necessary to secure or pursue any claims and to fulfill any legal obligations (e.g. resulting from tax law provisions).
Personal data processed to fulfill our legal obligations or to implement our legitimate interests will be stored as long as the law obligates us to process the data.
When processing of your personal data is based on your consent, it may be stored until you withdraw your consent or you object to the processing or until it is no longer necessary for the purpose the consent was given. After this period your data will be kept until the expiry of the limitation period for any claims.
The categories of recipients of your personal data
Your trust is essential to us. We do not sell any of your personal data to any third party. However, in order to provide you with our products and services and to run our business, we may disclose and share your data with the following categories of recipients:
Please be aware that many of these recipient companies have an independent right or obligation to process your personal data.
Transfer of personal data to recipients in third countries
The personal data we collect may be transferred to and stored in countries of the European Economic Area (“EEA”), in particular in Poland, which is our main place of business. It may also be transferred to and stored in countries outside the EEA. This usually happens when an entity cooperating with us performs its services outside EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws. You are entitled to obtain a copy of your personal data transferred to a third party outside of the EEA. We will provide for an adequate level of protection of your personal data. This may also include the use of standard contractual clauses for the transfer of personal data, approved by the European Commission, that provide personal data protection similar to that in Europe.
We cooperate with Klaviyo, 225 Franklin St floor 10, Boston, MA 02110 United States and use their tools that assist us in e-mail and SMS marketing of our products. These tools allow us to create personalized messages and send them to our Customers. Your consent is required to use this service. You can also object to using it at any time. Klaviyo automatically collects information about your use of our website. This information is transmitted to, and stored at, Klaviyo’s server in the United States.
As mentioned above, we are a part of a global capital group with parent company The Green Organic Dutchman Holdings Ltd., with its registered office in Canada. Accordingly, your data may be transferred to Canada. The European Commission has stated that Canada is considered as providing an adequate level of protection for personal data transferred from the EU (Commission Decision of 20 December 2001, No. 2002/2/EC).
In accordance with the provisions on the protection of personal data and with the restrictions indicated therein you have the following rights:
We will respond to your request without undue delay and at the latest within one month of receipt of the request. This period may be extended by two further months if necessary, taking into account the complexity and number of the requests. We will notify you of any such extension within one month of receipt of your request, together with the reasons for the delay.
Failure to provide your personal data
Providing personal data in our Store is voluntary, but it is necessary to use most functionalities of our Store, in particular to place an order and perform a contract, subscribe to a newsletter. Failure to provide your personal data may result in the inability to perform most of the activities on our website.
Cookies and other technologies
Thanks to cookies, the use of websites is much easier, more pleasant and their content is tailored to the expectations and preferences of their users.
We use two basic kinds of cookies on our website: session cookies and persistent cookies.
Session cookies are temporary files that are stored on your device until logging out or ending the session.
Persistent cookies are stored on your device for the period specified in the file parameters or until they are deleted. This means that its information will be transmitted to the server every time the user visits the Store.
As we mentioned above we use Google Analytics to analyse the use of our website. Google collects information as your location (based on your IP address) and your behaviour when you access our website (based on cookies) through our use of abovementioned tool on our website. Google Analytics generates statistical and other information about our website use by means of analytical cookies. Thanks to this solution we are able to better understand the needs of our Clients and to adopt our offer to this needs. You can opt out of Google Analytics by installing the browser add-on under the link https://tools.google.com/dlpage/gaoptout?hl=en-GB.
Social media plugins
Our Store uses plugins of Facebook and Instagram. These plugins will directly connect you to our social media profiles. For more detailed information, we recommend that you familiarise yourself with the privacy policies of individual social media networks. Please note that we do not accept any responsibility for these policies.
This version of the Policy has been effective since 16 of July 2021.
Our Customers may also contact our Data Protection Officer at the following e-mail address: firstname.lastname@example.org.
You may also contact us in the following way:
You may also contact us in the following way: