Privacy policy

The controller within the meaning of data protection laws, in particular the
EU General Data Protection Regulation (GDPR), is:

CS Cannabis Service GmbH

Managing Director Marijn Roersch van der Hoogte

Dietzgenstr. 85

13156 Berlin

see also: Imprint

Your rights as a data subject

Under the contact details of our data protection officer
you can exercise the following rights at any time:

• Information about your data stored by us and its
  processing (Art. 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR),
• Erasure of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to
  not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21
  GDPR) and
• Data portability, provided that you have consented to the data processing
  have consented to data processing or have concluded a contract with us (Art.
  20 GDPR).

If you have given us your consent, you can withdraw this consent
revoke it at any time with effect for the future.

You can lodge a complaint at any time with a
supervisory authority at any time, e.g. to the competent supervisory authority in the
of your place of residence or to the authority responsible for us as the
authority responsible for us.

A list of the supervisory authorities (for the non-public sector)
with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website

Type and purpose of processing:

When you access our website, i.e. if you do not
register or otherwise transmit information, information of a general
information of a general nature is automatically collected. This information
(server log files) includes, for example, the type of web browser, the operating system
operating system used, the domain name of your
Internet service provider, your IP address and similar information.

They are processed for the following purposes in particular:

• Ensuring a smooth connection setup of the website,
• Ensuring the smooth use of our website,
• Evaluation of system security and stability and
• for other administrative purposes.

We do not use your data to draw conclusions about your person.
draw conclusions about you. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.

Legal basis:

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of
on the basis of our legitimate interest in improving the stability and
functionality of our website.

Recipients:

Recipients of the data may be technical service providers who are responsible for the
operation and maintenance of our website as processors.
become.

Storage period:

The data is deleted as soon as it is no longer required for the purpose of
are no longer required. This is the case for data used to
provision of the website, this is generally the case when the
respective session has ended.

Provision prescribed or required:

The provision of the aforementioned personal data is neither required by law
required by law or contract. However, without the IP address
the service and functionality of our website is not guaranteed.
guaranteed. In addition, individual services and services may not be
be available or restricted. For this reason, an objection is
excluded.

Cookies

Type and purpose of processing:

Like many other websites, we also use so-called “cookies”.
Cookies are small text files that are stored on your end device
device (laptop, tablet, smartphone, etc.) when you visit our website.
visit our website.

This provides us with certain data such as the IP address
browser and operating system used.

Cookies cannot be used to start programs or transfer viruses to a computer.
transfer viruses to a computer. Using the information contained in cookies
information contained in cookies, we can make navigation easier for you
and enable the correct display of our web pages.

Under no circumstances will the data collected by us be passed on to third parties
passed on to third parties or linked to personal data without your consent.
personal data without your consent.

Of course, you can also view our website without cookies.
without cookies. Internet browsers are regularly set to accept cookies.
accept cookies. In general, you can deactivate the use of
cookies at any time via your browser settings.
Please use the help functions of your Internet browser to find out how to change these settings.
learn how to change these settings. Please note
that individual functions of our website may not work if you
function if you have deactivated the use of cookies.

Storage duration and cookies used:

If you allow us to use cookies through your browser settings or consent
use of cookies, the following cookies may be used on our websites
websites may be used:

Insofar as these cookies (also) affect personal data
data, we will inform you about this in the following sections.

You can use your browser settings to delete individual cookies or the entire
delete the entire cookie inventory. You will also receive
information and instructions on how to delete these cookies or block their
storage can be blocked in advance. Depending on the provider of your
browser provider, you will find the necessary information under the
following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Newsletter

Nature and purpose of processing:

Your data will be used exclusively to send you the
subscribed newsletter by e-mail. The indication of your name
to be able to address you personally in the newsletter and, if necessary
to identify you if you wish to exercise your rights as a data subject.
rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address.
is sufficient. When you register to receive our newsletter, the data you
data you provide will be used exclusively for this purpose.
Subscribers may also be informed by e-mail about circumstances that are
relevant to the service or registration (e.g. changes to the newsletter
of the newsletter offer or technical circumstances).

For effective registration, we require a valid e-mail address.
e-mail address. In order to check that a registration has actually been made by
the owner of an e-mail address, we use the “double opt-in
“double opt-in” procedure. For this purpose, we log the order
of the newsletter, the sending of a confirmation email and the receipt of the
requested reply. No further data is collected. The
data are used exclusively for sending the newsletter and are not
not passed on to third parties.

Legal basis:

On the basis of your express consent (Art. 6 para.
1 lit. a GDPR), we will regularly send you our newsletter or comparable
comparable information by e-mail to your specified e-mail address.
e-mail address.

You can revoke your consent to the storage of your personal data and its
use for sending the newsletter can be revoked at any time with effect for
the future. In each newsletter you will find a
corresponding link. You can also unsubscribe at any time directly on
unsubscribe from this website or inform us of your revocation via the contact option
contact option provided at the end of this privacy policy.

Recipients:

Recipients of the data may be processors.

Storage period:

The data will only be processed in this context for as long as the
corresponding consent is available. After that, it will be deleted.

Provision prescribed or required:
The provision of your personal data is voluntary,
solely on the basis of your consent. Without your consent, we will unfortunately
send you our newsletter.

Contact form

Type and purpose of processing:

The data you enter will be stored for the purpose of individual
communication with you. For this purpose, it is necessary
valid e-mail address and your name is required. This is used to
assignment of the request and the subsequent response to it. The
further data is optional.

Legal basis:

The processing of the data entered in the contact form
is carried out on the basis of a legitimate interest (Art. 6 para. 1
lit. f GDPR).

By providing the contact form, we would like to enable you to
make it easy for you to contact us. The information you provide
will be stored for the purpose of processing the request and for possible
stored for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed,
the data entered in the contact form will be processed
for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b
GDPR).

Recipients:

Recipients of the data may be processors.

Storage period:

Data will be deleted no later than 6 months after processing the
deleted.

If it comes to a contractual relationship, we are subject to the
statutory retention periods according to HGB and delete your data after
expiry of these periods.

Provision prescribed or required:

The provision of your personal data is voluntary.
However, we can only process your request if you provide us with your
name, your e-mail address and the reason for the request.

Use of Google Analytics

Nature and purpose of processing:

This website uses Google Analytics, a web analytics service provided by
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
(hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files
text files that are stored on your computer and that enable an
enable your use of the website to be analyzed. The information generated by the
information generated by the cookie about your use of this website
is usually transmitted to a Google server in the USA and stored there.
stored there. Due to the activation of IP anonymization on
on this website, your IP address will, however, be transmitted by Google within
Member States of the European Union or other parties to the Agreement
of the Agreement on the European Economic Area. Only
in exceptional cases will the full IP address be transmitted to a Google server
in the USA and shortened there. On behalf of the operator of this
Google will use this information for the purpose of evaluating your use of the
evaluate your use of the website, to compile reports on website activity
and to provide other services related to the use of the website and the
services associated with the use of the website and the
website operator. The IP address transmitted by Google Analytics from
transmitted by your browser will not be merged with other data from
merged with other data from Google.

The purpose of the data processing is to analyze the use of the website
of the website and to compile reports on activities on the website.
the website. Based on the use of the website and the internet
further related services are then to be provided.

Legal basis:

The data is processed on the basis of the user’s consent
of the user (Art. 6 para. 1 lit. a GDPR).

Recipient:

The recipient of the data is Google as the processor. For this purpose
we have concluded the corresponding order processing contract with Google.
concluded with Google.

Storage period:

The data is deleted as soon as it is no longer required for our
recording purposes are no longer required.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US
Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary,
solely on the basis of your consent. If you prevent access,
this may result in functional restrictions on the website.

Revocation of consent:

You can prevent the storage of cookies by selecting the appropriate
setting in your browser software; however, we would like to point out
However, we would like to point out that in this case you may not be able to use all
functions of this website to their full extent.
You can also prevent the collection of the data generated by the cookie and
data generated by the cookie and related to your use of the website (incl. your IP address)
to Google and the processing of this data by Google,
by downloading and installing the browser plugin available at the following link
and installing it: Browser Add On to
deactivation of Google Analytics.

In addition or as an alternative to the browser add-on, you can
prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on
installed on your device. This will prevent Google Analytics from collecting
for this website and for this browser in the future, as long as
the cookie remains installed in your browser.

Profiling:

With the help of the Google Analytics tracking tool, the behavior of website
visitors to the website can be evaluated and interests analyzed.
We create a pseudonymous user profile for this purpose.

Use of script libraries (Google Web Fonts)

Type and purpose of processing:

In order to display our content correctly and graphically appealing across browsers
and graphically appealing across browsers, we use “Google Web Fonts” on this website
fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA
94043, USA; hereinafter “Google”) to display fonts.

You can find the privacy policy of the library operator Google
here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Web Fonts and the associated
associated data transfer to Google is your consent (Art. 6 para. 1
lit. a GDPR).

Recipients:

Calling up script libraries or font libraries automatically triggers
automatically triggers a connection to the operator of the library. This is
theoretically possible – although it is currently unclear whether and, if so, for
purposes – that the operator collects Google data in this case.

Storage period:

We do not collect any personal data through the integration of
Google Web Fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq
and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US
Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:
The provision of personal data is neither legally
nor contractually required. However, the correct
presentation of the content may not be possible due to standard fonts.

Withdrawal of consent:

The programming language JavaScript is regularly used to display the content.
JavaScript is regularly used to display the content. You can therefore object to the data processing
data processing by deactivating the execution of JavaScript in your browser or
or by installing a JavaScript blocker. Please note
that this may result in functional restrictions on the website.
may occur.

Use of Adobe Typekit

Type and purpose of processing:

We use Adobe Typekit for the visual design of our website.
used. Typekit is a service of Adobe Systems Software Ireland Companies
(4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter referred to as
Ireland; hereinafter “Adobe”), which gives us access to a font library.
font library. To integrate the fonts we use, your
fonts we use, your browser must establish a connection to an Adobe server
server in the USA and download the font required for our website.
required for our website. Adobe receives the information that our website has been accessed from your
IP address has accessed our website. Further information about
Adobe Typekit can be found in Adobe’s privacy policy, which you can access
here: https://www.adobe.com/de/privacy/policy.html

Legal basis:

The legal basis for the integration of Adobe Typekit and the associated
associated data transfer to Adobe is your consent (Art. 6 para. 1
lit. a GDPR).

Recipients:

Calling up script libraries or font libraries automatically triggers
automatically triggers a connection to the operator of the library.
Information about the use of your data by Adobe Typekit Web Fonts
You can find it at https://typekit.com/ and in
the privacy policy of Adobe Typekit: https://www.adobe.com/de/privacy/policies/typekit.html.

Storage period:

We do not collect any personal data through the integration of
Adobe Typekit Web Fonts.

Third country transfer:

Adobe is certified under the Privacy Shield Agreement and thus offers
thereby offers a guarantee of compliance with European data protection law
(https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Provision prescribed or required:

The provision of personal data is neither legally
nor contractually required. However, without the correct
display of the contents of standard fonts is not possible.

Use of Google Maps

Nature and purpose of processing:

We use the Google Maps service on this website. Google
Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA
94043, USA (hereinafter referred to as “Google”). This enables us to
display interactive maps directly on the website and enable you to
convenient use of the map function.

Further information about data processing by Google can be found in the
the
Google data protection information. There you can in the
Privacy Center you can also change your personal data protection settings.
in the data protection center.

Detailed instructions on managing your own data in connection with
in connection with Google products can be found here.

Legal basis:

The legal basis for the integration of Google Maps and the associated
associated data transfer to Google is your consent (Art. 6 para. 1
lit. a GDPR).

Recipient:

By visiting the website, Google receives information that you have
have accessed the corresponding subpage of our website. This
takes place regardless of whether Google provides a user account through
which you are logged in, or whether no user account exists. If you are logged in to
Google, your data will be assigned directly to your account.

If you do not wish your data to be assigned to your Google profile,
you must log out of Google before activating the button. Google
stores your data as usage profiles and uses them for the purposes of
advertising, market research and/or needs-based design of its website.
website. Such an evaluation is carried out in particular (even for users who are not
users who are not logged in) to provide needs-based advertising and to inform
inform other users of the social network about your activities on our
website. You have the right to object to the
the creation of these user profiles, whereby you must contact
must contact Google.

Storage period:

We do not collect any personal data through the integration of
Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US
Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process or use data about you via our website
collect, process or use data about you via our website, you can deactivate
deactivate JavaScript in your browser settings. In this case, however
use our website or only to a limited extent.

Provision prescribed or required:

The provision of your personal data is voluntary,
solely on the basis of your consent. If you prevent access,
this may result in functional restrictions on the website.

Embedded YouTube videos

Type and purpose of processing:

We embed YouTube videos on some of our websites.
The operator of the corresponding plugins is YouTube, LLC, 901 Cherry
Ave, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). When you visit a
page with the YouTube plugin, a connection to YouTube servers is established.
established by YouTube. YouTube is informed which pages
you visit. If you are logged in to your YouTube account, YouTube can
YouTube can assign your surfing behavior to you personally. You can prevent this
by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect
collect information about user behavior.

Further information on the purpose and scope of data collection and its
processing by YouTube can be found in the provider’s privacy policy.
of the provider, where you will also find further information about your
rights in this regard and setting options to protect your privacy ().
privacy (https://policies.google.com/privacy).
Google processes your data in the USA and has submitted to the EU-US Privacy Shield
Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:

The legal basis for the integration of YouTube and the associated
associated data transfer to Google is your consent (Art. 6 para. 1
lit. a GDPR).

Recipient:

Accessing YouTube automatically triggers a connection to Google.
is triggered.

Storage period and withdrawal of consent:

Anyone who has deactivated the storage of cookies for the Google Ad program
program will not have to expect any such cookies when watching YouTube videos.
cookies when watching YouTube videos. However, YouTube also stores other cookies
non-personal usage information. If you want to prevent this
prevent this, you must block the storage of cookies in the browser.
in your browser.

Further information on data protection at “YouTube” can be found in the
privacy policy of the provider at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US
Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary,
solely on the basis of your consent. If you prevent access,
this may result in functional restrictions on the website.

Social plugins

Type and purpose of processing:

On our website, we offer you the option of using so-called
so-called “social media buttons”. To protect your data, we rely on the
the implementation on the “Shariff” solution. This means that these
buttons are only integrated on the website as a graphic that links to the corresponding
link to the corresponding website of the button provider.
By clicking on the graphic, you will be redirected to the services of the
respective provider. Only then will your data be sent to the
respective provider. If you do not click on the graphic
no exchange takes place between you and the providers of the
social media buttons takes place. Information about the collection and
use of your data in the social networks can be found in the respective
terms of use of the respective providers. More
You can find information on the Shariff solution here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website
companies on our website:

Google AdWords

Type and purpose of processing:

Our website uses Google Conversion Tracking.
The operating company of the Google AdWords services is Google LLC,
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are via
reached our website via an advertisement placed by Google, Google Adwords will
a cookie is placed on your computer by Google AdWords. The cookie for
conversion tracking cookie is set when a user clicks on an ad placed by Google.
clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie
has not yet expired, we and Google can recognize that the user has
user has clicked on the ad and has been redirected to this page.
was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies
therefore cannot be tracked via the websites of AdWords customers.
be tracked. The information obtained with the help of the conversion cookie
used to generate conversion statistics for AdWords customers who have opted
have opted for conversion tracking. The customers learn the
total number of users who have clicked on their ad and were redirected to
redirected to a page with a conversion tracking tag.
page with a conversion tracking tag. However, they do not receive any information that can be used to
personally identifiable.

Legal basis:

The legal basis for the integration of Google AdWords and the associated
associated data transfer to Google is your consent (Art. 6 para. 1
lit. a GDPR).

Recipient:

Every time you visit our website, personal data
including your IP address to Google in the USA. This
personal data is stored by Google. Google discloses
this personal data collected via the technical process to third parties
to third parties under certain circumstances.

Our company does not contain any information from Google
which the data subject could be identified.

Storage period:

These cookies lose their validity after 30 days and are not used to
not used for personal identification.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US
Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not wish to participate in tracking, you can refuse the
the required setting of a cookie – for example via a
browser setting that generally deactivates the automatic setting of cookies
or set your browser in such a way that cookies from the domain
domain “googleleadservices.com” are blocked.

Please note that you may not delete the opt-out cookies as long as
as long as you do not wish measurement data to be recorded. If you have
deleted all your cookies in the browser, you must set the respective opt-out
cookie again.

Provision prescribed or required:

The provision of your personal data is voluntary,
solely on the basis of your consent. If you prevent access,
this may result in functional restrictions on the website.

SSL encryption

To protect the security of your data during transmission,
we use state-of-the-art encryption methods (e.g. SSL
encryption methods (e.g. SSL) via HTTPS.

Processors used

The following organizations, companies or persons have been commissioned by the
commissioned by the operator of this website to process data:

Changes to our privacy policy

We reserve the right to amend this privacy policy so that
it always complies with the current legal requirements or to
implement changes to our services in the privacy policy,
e.g. when introducing new services. Your next visit will then be
the new privacy policy will then apply.

Questions for the data protection officer

If you have any questions about data protection, please send us an
e-mail or contact the person responsible for data protection in our
responsible for data protection in our organization:

kontakt@cannabis-service.de

The privacy policy was created with the help of activeMind AG
the experts for external data protection officers
(version #2019-04-10).