inside a business Privacy Policy EUROPEAN CANNABIS ASSOCIATION

The European Cannabis Association (ECA) is the responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR).

You can exercise the following rights at any time using the contact details provided by our data protection officer:

  • Information about your data stored by us and their processing (Art. 15 GDPR)
  • Correction of incorrect personal data (Art. 16 GDPR)
  • Deletion of your data stored by us (Art. 17 GDPR)
  • Restriction of data processing, insofar as we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with future effect.

You can contact the supervisory authority responsible for you at any time with a complaint (Art. 77 GDPR in conjunction with Section 19 BDSG). The competent supervisory authority depends on the state of your place of residence, your work or the alleged violation. A list of the supervisory authorities (for the non-public area) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The data you enter will be stored for the purpose of individual communication with you. To do this, you must provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.

The data entered in the contact form is processed on the basis of a legitimate interest (Art 6 Para. 1 lit f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed in order to carry out pre-contractual measures (Art 6 (1) b GDPR).

The recipient of the data is only the responsible body and, if applicable, the processor.

Data will be deleted no later than 6 months after processing the request.

If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these periods.

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your email address and the reason for the request.

The nature and purpose of the processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the internet, further associated services are then to be provided.

Legal basis:

The processing of data is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Recipients of the data are the responsible body and Google as processor. We have concluded the corresponding contract with Google for this purpose.

Storage period:

The data will be deleted as soon as they are no longer required for our recording purposes.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. We have also concluded standard data protection clauses with Google for the use of Google Analytics.

Provision required or necessary:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

In addition or as an alternative to the Browser Add-On you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This prevents Google Analytics from tracking this website and this browser in the future as long as the cookie remains installed in your browser.

Profiling:

The tracking tool Google Analytics can be used to evaluate the behaviour of website visitors and analyse their interests. For this purpose we create a pseudonymous user profile.

Type and purpose of processing:

In order to present our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google web fonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

Calling script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently unclear whether and if so for what purposes – that the operator collects Google data in this case.

Storage period:

We do not collect personal data by integrating Google web fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or required:

The provision of personal data is neither legally nor contractually required. However, without the correct presentation of the contents of standard fonts, it cannot be possible.

Withdrawal of consent:

The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing an integration JavaScript blocker. Please note that this may result in functional restrictions on the website.

Type and purpose of processing:

We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.

You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center.

You can find detailed instructions on how to manage your own data in connection with Google products here.

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account.

If you do not want your Google profile to be assigned, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and / or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must contact Google to exercise them.

Storage period:

We do not collect personal data by integrating Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use our website or only use it to a limited extent.

Provision required or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration then applies to your next visit.

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:

info@j-k-consulting.de

Verantwortliche Stelle im Sinne der Datenschutzgesetze, insbesondere der EU-Datenschutzgrundverordnung (DSGVO), ist Rainer Krüger.