General information and mandatory information
Designation of the responsible body
The responsible body for data processing on this website is:
102 00 Praha 102
The controller decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).
Revocation of your consent to data processing
Some data processing operations are only possible with your express consent. A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of complaint to the responsible supervisory authority
In the event of a breach of data protection law, you as the party concerned have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority with regard to data protection issues is the data protection officer of the federal state in which our company has its registered office. The following link provides a list of data protection officers and their contact details: https://www.uoou.cz/en/.
Right to data transferability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The information is provided in a machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible.
Right to information, correction, blocking, deletion
You have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, the right to correction, blocking or deletion of this data at any time within the framework of the applicable statutory provisions. In this regard and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and by the lock symbol in the browser line.
We use hosting services to use the technical infrastructure we need for our online services for services such as web pages, e-mail, storage and databases, as well as security services and maintenance. Server location is Germany.
This server stores the communication, usage, metadata and inventory data of the visitors or users of our website. The basis for this is our legitimate interest in an efficient and secure provision of the online offers acc. Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR.
Server log files
In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us. These are:
- Visited page on our domain
- Date and time of the server request
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- IP address
These data are not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Data transmission at contract conclusion for purchase of goods and dispatch of goods
Personal data will only be transmitted to third parties if necessary within the framework of contract processing. For example, third parties may be payment service providers or logistics companies. A further transmission of the data does not take place or only if you have expressly agreed to it.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Registration on this website
You can register on our website to use certain functions. The transmitted data is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.
In the event of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address provided during registration.
The data entered during registration will be processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing that has already taken place remains unaffected by the revocation.
We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.
Data transmitted via the contact form will be stored including your contact data in order to be able to process your request or to be available for follow-up questions. These data will not be passed on without your consent.
The data entered in the contact form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage or until data storage is no longer necessary. Mandatory legal provisions – in particular retention periods – remain unaffected.
To send our newsletter, we need an e-mail address from you. It is necessary to verify the e-mail address provided and consent to receive the newsletter. Supplementary data is not collected or is voluntary. The use of the data takes place exclusively for the dispatch of the newsletter.
The data provided when registering for the newsletter will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. To revoke your consent, simply send an informal e-mail or use the “unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
Newsletter Reach Measurement
We use techniques to measure the success of our newsletters (opening rate, click rate) through image files downloaded from our server and coded links. These data are stored exclusively on our server and are not passed on to third parties. Without this function it is not possible to receive our newsletter, but you can unsubscribe at any time.
Our website uses plugins from YouTube to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When a page with an integrated YouTube plugin is opened, a connection to the YouTube servers is established. This will tell YouTube which of our pages you have accessed.
YouTube can assign your surfing behavior directly to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand.
YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Details on the handling of user data can be found in YouTube’s data protection declaration at: https://policies.google.com/privacy?hl=en.
Some cookies are “session cookies”. Such cookies are deleted automatically at the end of your browser session. On the other hand, other cookies remain on your terminal until you delete them yourself. Such cookies help us to recognize you when you return to our website.
The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions requested by you (e.g. shopping cart), takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these will be dealt with separately in this data protection declaration.
Jetpack (WordPress Stats)
We use the plugin Jetpack for optimization and statistical evaluation of visitor access, which is produced by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
Our website uses functions of the web analysis service Google Analytics. Provider of the web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies. These are small text files that your web browser stores on your device and allow analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, if necessary, advertising.
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transmission to the USA. There may be exceptions in which Google transfers the full IP address to a server in the United States and abbreviates it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.
The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result. You may also opt out of the collection of data about your website usage, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to our website: Disable Google Analytics.
We have entered into an order processing agreement with Google in order to fully comply with legal data protection requirements.
Demographic characteristics of Google Analytics
Our website uses the function “demographic features” of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained under “Objection to data collection”.
Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you pay with PayPal, the payment data you entered will be transmitted to PayPal. You can read their privacy statement here: https://www.paypal.com/webapps/mpp/ua/privacy-full
The transfer of your data to PayPal takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfil a contract). A revocation of your already given consent is possible at any time. Data processing operations in the past remain effective in the event of revocation.
Stripe, Visa, Mastercard, American Express
Our website allows payment via Stripe. The provider of the payment service is Stripe, 510 Townsend Street, San Francisco, CA 94103, USA, with Visa (https://usa.visa.com/legal/global-privacy-notice/jurisdictional-notice-eea.html), Mastercard (https://www.mastercard.us/en-us/about-mastercard/what-we-do/privacy.html), American Express (https://www.americanexpress.com/uk/legal/online-privacy-statement.html).
Your data will be transmitted to Stripe on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfil a contract). A revocation of your already given consent is possible at any time. Data processing operations in the past remain effective in the event of revocation.
Google Web Fonts
Our website may use web fonts from Google. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using these web fonts it will be possible for us to present you with the desired display of our website, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This is your IP address and which page you have visited on our website. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.
The company Google is certified for the us-European data protection agreement “Privacy Shield”. This data protection agreement is intended to ensure compliance with the data protection level applicable in the EU.
Hotel Booking powered by iweekender.com
To offer easy and convenient hotel booking for our visitors, we are using on our website a widget by the company iWeekender Inc. USA, address: 251 Little Falls Drive Wilmington, New Castle County, Delaware 19808-1674, USA.
The booking will be processed by iWeekender and the partners that you choose during the process, e.g. the hotel, the payment provider. We – cannabizz.pl – do not keep records of any of your personal data. We will however receive a small commission for any successful booking with this widget.
Your data will be transmitted to iWeekender and their partners on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfil a contract).
Social Media Presence
We operate online presences within social platforms and networks to reach and communicate with users who are active on these platforms.
In most cases, the data entered and transmitted are used by the provider of the respective platform for advertising and market research purposes as well as for the generation of personal interest profiles. For this purpose, cookies are stored on the user’s computer and data from various devices, on which the user is logged in, as well as data on the use of websites (such as ours) over or with functions of the respective provider.
The processing of personal data that is made available to us is due to our legitimate interest in effective communication with users for the purpose of information in accordance with. Art. 6 para. 1 lit. f. GDPR. If the users of the respective provider of the platform to an agreement for data processing, is Art. 6 para. 1 lit. a., Art. 7 GDPR The legal basis of the processing.
Source (partially): Data protection configurator of mein-datenschutzbeauftragter.de
Translated with www.DeepL.com/Translator