Privacy Policy

We take the protection of your personal data seriously. Below we inform you about the nature, scope and purpose of the processing of personal data when using cannapais.com.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Lembke & Tegtmeier GbR
Ingo Lembke
Roelckestraße 32
13086 Berlin
Germany
E-mail: hola@cannapais.com

Cannapais is an online offering of Lembke & Tegtmeier GbR.

2. General information on data processing and legal bases

We generally process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The processing of personal data takes place regularly only with the user's consent or where a legal basis permits the processing.

The legal bases for processing are in particular:

  • Art. 6 (1) (a) GDPR — consent of the data subject;
  • Art. 6 (1) (b) GDPR — processing for the performance of a contract or to carry out pre-contractual measures, e.g. when handling an enquiry;
  • Art. 6 (1) (f) GDPR — protection of legitimate interests, provided that the interests or fundamental rights of the data subject do not prevail.

Personal data is deleted or blocked as soon as the purpose of storage no longer applies or a legally prescribed retention period expires.

3. Hosting and server log files

This website is operated by an external service provider as part of standard web hosting. The host processes data on our behalf that is technically necessary to operate the website.

Each time the website is accessed, the server automatically collects information in so-called server log files that your browser transmits. This is generally:

  • IP address of the requesting device (regularly shortened or anonymised),
  • date and time of access,
  • page or file accessed,
  • browser type and operating system used,
  • the previously visited page (referrer).

This data is processed on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, stability and security of the website. The log files are not merged with other data sources and are deleted after a short period.

4. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content — such as enquiries you send to us — this website uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

5. Cookies

Cannapais is a largely static website. We do not use any tracking, analytics or marketing cookies. Insofar as technically necessary cookies are used, these serve exclusively the basic functionality of the website and do not require separate consent. Profiling of your browsing behaviour does not take place on cannapais.com.

6. Contact form and processing via FormSubmit

If you send us an enquiry via the contact form, your details from the form (in particular name, e-mail address, where applicable company and website, as well as your message) are processed for the purpose of handling the enquiry and in case of follow-up questions.

The technical delivery of the form messages takes place via the service FormSubmit (formsubmit.co). FormSubmit receives the form data and forwards it by e-mail to the recipient address hola@cannapais.com. In doing so, the data entered in the form as well as technical connection data is transmitted to FormSubmit. It cannot be ruled out that a data transfer to a third country (e.g. the USA) takes place in this process.

The legal basis for processing is Art. 6 (1) (b) GDPR, insofar as your enquiry is aimed at the conclusion or performance of a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in the effective handling of enquiries) as well as Art. 6 (1) (a) GDPR, insofar as you have consented to the processing via the consent checkbox. You can revoke your consent at any time with effect for the future.

The transmitted data remains with us until you request its deletion, revoke your consent or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

7. Google Fonts

To display fonts uniformly, this website embeds so-called Google Fonts provided by Google (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

When a page is called up, your browser loads the required fonts in order to display text and fonts correctly. For this purpose, your browser establishes a connection to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. This may also result in a transfer of data to the USA.

The use of Google Fonts is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in a uniform and appealing presentation of our online offering. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

8. Affiliate links / Foxpay

Cannapais contains affiliate links to the payment service provider Foxpay. When you click on such a link, you are redirected to an external Foxpay page (foxpay.it or app.foxpay.it). A partner identifier is transmitted via the link so that a registration referred through us can be attributed.

When you leave our website by clicking an affiliate link, only the privacy policy of the respective provider applies. We have no influence over the data processing that takes place there. Please inform yourself on the destination page about how your data is handled.

9. External links

Our website contains links to external third-party websites. As soon as you access such a linked page, the privacy provisions there apply. We are not responsible for data processing on third-party websites.

10. Your rights as a data subject

Within the framework of the applicable statutory provisions, you have the following rights:

  • Right of access (Art. 15 GDPR) to the data stored about you;
  • Right to rectification (Art. 16 GDPR) of inaccurate or incomplete data;
  • Right to erasure (Art. 17 GDPR) of your stored data, provided no retention obligations apply;
  • Right to restriction of processing (Art. 18 GDPR);
  • Right to object to processing (Art. 21 GDPR);
  • Right to data portability (Art. 20 GDPR);
  • Right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR).

An informal message to the contact details above is sufficient to exercise these rights.

In addition, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us (right to lodge a complaint with a supervisory authority, Art. 77 GDPR).

11. Currency and amendment of this privacy policy

This privacy policy is currently valid. Due to the further development of our website or as a result of changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed at any time on this page.