Security – SSL (Secure Socket Layer)
The ordering process is transmitted via SSL (Secure Socket Layer). To ensure your data does not fall into the wrong hands, we encrypt it using SSL. Through the SSL procedure, data is transformed before transmission so that it cannot be reconstructed by a third party. This encryption process also ensures that your data is transmitted exclusively to the server from which it was requested.
Privacy Policy
The protection of your personal data is of particular concern to us. We therefore process your data solely based on the legal provisions (GDPR, TKG 2003). In this privacy statement, we inform you about the most important aspects of data processing within the scope of our website.
Information and Rights
Customers generally have the rights of access, rectification, erasure, restriction, data portability, withdrawal, and objection. Please use the contact form for such requests or send your request by post.
Disclosure to Third Parties
We do not disclose personal data, including home and email addresses, to third parties without your express and revocable consent. Exceptions apply to our service partners who require data transfer to process your order (e.g., the shipping company commissioned with the delivery and the credit institution responsible for payment processing). In these cases, the scope of data transmitted is limited to the necessary minimum.
Data Storage
Please note that, for the purpose of simplifying the purchase process and for subsequent contract execution,
the webshop operator stores the connection owner's data within the framework of cookies,
as well as the buyer’s name, address, and credit card number.
Your IP address is not transmitted to our shop system during an order.
The data you provide is required for the performance of the contract or for pre-contractual measures.
Without this data, we cannot conclude the contract with you.
Data will not be transmitted to third parties, except for transferring credit card data to the processing banking institutions/payment service providers
for the purpose of debiting the purchase price, to the shipping company commissioned to deliver the goods,
and to our tax consultant to fulfill our tax obligations.
If the purchase process is cancelled, the stored data will be deleted.
In the case of a contract conclusion, all data from the contractual relationship will be stored
offline only until the expiration of the statutory tax retention period.
Data processing is carried out based on the legal provisions of § 96 para. 3 TKG and Article 6 para. 1 lit. a (consent)
and/or lit. b (necessary for contract performance) of the GDPR.
Cookies
Our website uses so-called cookies.
These are small text files stored on your device with the help of your browser.
They do not cause any damage.
We use cookies to make our offer more user-friendly.
Some cookies remain stored on your device until you delete them.
They allow us to recognize your browser during your next visit.
If you do not want this, you can configure your browser so that it informs you about the setting of cookies
and allows them only on a case-by-case basis.
However, disabling cookies may limit the functionality of our website.
Newsletter
You have the option to subscribe to our newsletter through our website. For this, we require your email address and your confirmation that you agree to receive the newsletter.
Contact
If you contact us via form on the website or by email, the data you provide will be stored for the purpose of processing your inquiry and in case of follow-up questions for a maximum of six months, usually only for about eight weeks. We do not share this data without your consent.
ChatGPT Integration and Data Protection
In addition to our webshop, we also offer CannapotGPT on the ChatGPT platform by OpenAI. This digital assistant is designed solely to provide product information from our shop and answer questions about our assortment.
We do not use any analytics or tracking tools – neither in CannapotGPT nor in our webshop. No cookies are set for analytical purposes, and no data is transmitted to services such as Google Analytics, Facebook Pixel, or similar providers.
When using CannapotGPT, no personal data is stored, processed, or shared with third parties. The GPT accesses only publicly available product information from our shop (e.g., strain name, price, category, description) to answer user inquiries.