Legal

Our Privacy Policy

Dear User!

We know how important the privacy of your personal data is to you and how you value online security. We believe in the same principles and therefore strive every day to ensure the highest possible standards of privacy and security. This document is intended to provide you with the most important information about how we process your personal data collected during your use of Our Website. For your convenience, we have divided this information into a few basic points.


The terms used in this Policy, especially those capitalized, should be understood in the same way as they are used in the Terms of Use.


  1. Who is the controller of your data?

The controller of your personal data is Canopy Growth Polska Sp. z o.o. with its registered seat in Toruń (87-100) at Grudziądzka 1-3, entered in the Register of Entrepreneurs of the National Court Register by the District Court in Toruń VII Commercial Division of the National Court Register under KRS number 0000470617, using the tax identification number (NIP) 9512445224 and REGON number 146784244.


  1. What data, for what purpose and for how long will we process your personal data?

Type of processing activity

Purpose of processing

Type of data processed

Legal basis for processing

Duration of data processing

Browsing the Website

Viewing the content and materials available on the Website

Browsing history, user preferences, gender, age and interests of the user, location data, IP address, user device ID, data on the user's browser and operating system used.

Article 6(1)(f) GDPR


Article 6(1)(a) GDPR

Until the User leaves the Website pages and deletes the cookies.

Handling complaints about the operation of the Website

Responding to any irregularities in the operation of the Website

Name, e-mail address and other data which the User voluntarily provides in connection with the complaint

Article 6(1)(b) GDPR 


Article 6(1)(a) GDPR

For a period of 6 years from the date of processing the complaint and, in the case of data provided voluntarily, until the date of withdrawal of consent by the User

Contact form

Contact the Company

Email address, telephone number, first name and other data possibly provided by the User.

Article 6(1)(b) GDPR


Article 6(1)(a) GDPR

For a period of 6 months from the date of receipt of the message.


  1. Who may have access to your data?

Beside the Company, entities that provide certain IT solutions used in the operation of the Website will also process your personal data. These will be in particular:

Name of the entity

Purpose of processing

Data transfer

1.

Instra Corporation Pty Ltd (Australia)

Hosting services

Outside of the EEA

2.

Shopify Inc. (Canada)

Outside of the EEA

3.

Claudflare Inc. (USA)

Outise of the EEA


Your data will also be processed by other entities which services we use. These will include, in particular, providers of accounting, banking, postal, courier and legal services. 

  1. Is your data transferred outside the European Economic Area or to international organisations?

Yes, with the use of services supplied by the entities that have their registered offices, facilities, data centres or subcontractors in countries outside the European Economic Area, such a transfer of your data may occur. In any such case, the transfer of your data shall be based on the appropriate measures provided for in the GDPR, in particular the decisions of the European Commission finding an adequate level of protection for such data or on standard contractual clauses.

Your data however will not be transferred to international organisations.


  1. On what principles is the processing of your personal data based?

We make a special effort to protect your privacy by carefully selecting and applying appropriate technical measures, including those of an IT and organisational nature, to ensure the protection of the processed data, in particular to protect the data against unauthorised access, disclosure, loss and destruction, unauthorised modification, as well as against their processing in violation of applicable laws.


  1. What rights do you have in relation to our processing of your personal data?

In relation to our processing of your personal data, you have the following rights:

  1. access to the data - which is understood as a request to provide you with information about what your data is processed by us and how it is processed,
  2. request the rectification of inaccurate data or completion of your incomplete data,
  3. request the restriction of the processing of Your data - in certain cases, arising from Article 18 of the GDPR, You may request us to restrict the processing of your personal data,
  4. request the portability of your personal data,
  5. object to further processing of your personal data - when objecting you must indicate how your particular situation prevents us from processing your personal data.


In addition, if you feel that we are processing your personal data in an unlawful manner, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.


Any of the above-mentioned requests can be fulfilled - at your discretion - by sending them to us by post or by email.


  1. Who can you contact if you have a question about data protection?

Due to the scale of our business, we have not decided to appoint a Data Protection Officer. If you have any questions or concerns about the scope, nature, purpose or legal basis of the processing of your data, you can contact us using the contact form or the contact details provided in the Terms of Use and on the Website. 


  1. Do we process the personal data of minors?

The Website is not intended for persons under 16 years of age and their data are not collected intentionally.


  1. Is the provision of personal data voluntary?

You provide your personal data completely voluntarily. 


  1. information on cookies

By using our website, you accept our use of so-called cookies. They usually contain the domain name of the website from which they originate, the time they are stored on your device and a unique number. These files do not identify you personally and it is not possible to determine your identity from them. Instead, these cookies allow us to determine your habits and preferences.


Web browsers usually allow information to be stored in cookies by default. However, you can change this at any time from your browser. Comprehensive information is available in the settings:

Microsoft Edge https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies 

Mozilla Firefox https://support.mozilla.org/pl/kb/ciasteczka 

Chrome https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl 

Opera http://help.opera.com/Linux/9.22/pl/cookies.html 

Safari https://support.apple.com/pl-pl/guide/safari/manage-cookies-and-website-data-sfri11471/mac 


  1. Changes to the Privacy Policy

We reserve the right to amend the Privacy Policy at any time. Any changes will be published on the Website and will be effective for the future.