Privacy Policy

1. Controller Responsible for Data Processing

The controller responsible for the processing of personal data in connection with this website is:

Cannalumo
Lucas Kleine
Jülicher Str. 126
52477 Alsdorf
Germany

Email: contact@cannalumo.de

If you have questions concerning this Privacy Policy or the processing of your personal information, you may contact us using the details above.

2. Personal Data We May Process

Depending on how you use the Cannalumo website, different categories of personal data may be processed.

• Name and contact information that you voluntarily provide.
• Email addresses and other communication details.
• Information contained in messages or enquiries you send to Cannalumo.
• Order or transaction-related information where applicable.
• Technical information necessary to operate and secure the website.
• Information relating to your interaction with website features where technically or legally applicable.

Cannalumo does not intentionally request personal information that is unnecessary for the relevant purpose.

3. Contacting Cannalumo

If you contact Cannalumo by email, WhatsApp or another available communication channel, we may process the information you provide in order to respond to your enquiry.

This may include your name, contact details, order information and the contents of your message.

4. Server Logs and Technical Information

When you visit a website, certain technical information may automatically be processed by the hosting provider or server infrastructure used to deliver the website.

Depending on the technical configuration, this information may include your IP address, browser type, operating system, requested pages, date and time of access, referring website and technical error information.

Such information may be processed for website functionality, security, stability, troubleshooting and protection against misuse.

5. Cookies and Similar Technologies

The Cannalumo website may use cookies and similar technologies where necessary to provide website functionality, maintain security, remember settings or support other permitted purposes.

Different types of cookies may have different purposes. Certain cookies may be technically necessary for the website to function, while other technologies may require consent under applicable law.

Where legally required, applicable consent mechanisms will be provided before non-essential technologies are used.

6. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, personal data is processed on an applicable legal basis under Article 6 GDPR.

• Processing may be necessary for the performance of a contract or for steps taken before entering into a contract.
• Processing may be necessary to comply with a legal obligation.
• Processing may be based on consent where consent is required.
• Processing may be necessary for legitimate interests, provided the applicable legal requirements are satisfied.

The applicable legal basis depends on the specific processing activity and circumstances.

7. Purposes of Data Processing

Personal information may be processed for purposes including:

• Operating and maintaining the Cannalumo website.
• Responding to enquiries and communications.
• Processing and managing orders where applicable.
• Providing requested customer support.
• Maintaining website security and preventing misuse.
• Complying with applicable legal and regulatory requirements.

8. Data Retention

Personal data is retained only for as long as reasonably necessary for the relevant purpose or for as long as required by applicable law.

Different categories of information may therefore be retained for different periods depending on the purpose for which the information was collected and applicable statutory retention obligations.

9. Data Sharing and Service Providers

Personal data may be processed by service providers where this is necessary to operate the website, communicate with users, process transactions or provide requested services.

Depending on the actual technical configuration of the website, service providers may include hosting providers, email providers, website maintenance providers, security providers, payment providers or other technical suppliers.

Where required by applicable law, appropriate contractual and data-protection safeguards will be used.

10. International Data Transfers

If personal data is transferred to or processed in a country outside the European Economic Area, applicable requirements for international data transfers will be taken into account.

Where required, appropriate safeguards may include an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.

11. Your Data Protection Rights

Where the GDPR applies, you may have the following rights, depending on the circumstances and applicable legal requirements:

• Right of access to personal data concerning you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure where the applicable legal conditions are satisfied.
• Right to restriction of processing in applicable circumstances.
• Right to data portability where the applicable legal requirements are satisfied.
• Right to object to certain processing activities.
• Right to withdraw consent where processing is based on consent.

Further information about data protection rights is available from the official European Commission data protection information .

12. Right to Object

Where personal data is processed on the basis of legitimate interests, you may have the right to object to such processing for reasons arising from your particular situation.

Where personal data is processed for direct marketing, you generally have the right to object to such processing.

13. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

14. Data Security

Cannalumo takes reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

15. Third-Party Websites

The Cannalumo website may contain links to external websites or services operated by third parties.

Cannalumo is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any external website before providing personal information.

16. Children’s Privacy

The Cannalumo website is not intended to knowingly collect personal information from children where doing so would violate applicable law.

If you believe that a child has provided personal information to Cannalumo in circumstances where it should not have been collected, please contact us so that the matter can be reviewed.

17. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you may have the right to lodge a complaint with a competent data protection supervisory authority.

Further information about data protection and your rights in the European Union can be found through the official Your Europe data protection information .

18. Related Cannalumo Information

You can find additional information about Cannalumo and our policies through the following pages:

19. Changes to This Privacy Policy

Cannalumo may update this Privacy Policy from time to time to reflect changes in legal requirements, website functionality, services or data-processing practices.

The latest version published on this page will apply from its stated update date.