This Data Protection Agreement (“Agreement”) is made and entered into as of 05/27/2024 by and between Cannabidiol Shop (“Website Owner”), and [User’s Name or Company] (“User”).
1. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
- Controller: The entity that determines the purposes and means of Processing Personal Data.
- Processor: The entity that Processes Personal Data on behalf of the Controller.
2. Scope and Purpose
This Agreement applies to all Personal Data collected, processed, and stored by the Website Owner in connection with the operation of cannabidiol.shop. The purpose of this Agreement is to ensure the protection of Personal Data in compliance with applicable data protection laws.
3. Types of Personal Data Collected
The Website Owner may collect the following types of Personal Data from Users:
- Name
- Contact information (email address, phone number, mailing address)
- Payment information
- IP address
- Browsing behavior and preferences
- Any other information provided by the User through the website
4. Data Processing
The Website Owner agrees to Process Personal Data only for the following purposes:
- To provide and manage access to the website
- To personalize the User’s experience on the website
- To process transactions and deliver products or services
- To communicate with Users, including sending promotional and marketing materials
- To comply with legal obligations
5. User Rights
Users have the following rights regarding their Personal Data:
- Access: Users have the right to request access to their Personal Data.
- Rectification: Users have the right to request correction of inaccurate Personal Data.
- Erasure: Users have the right to request the deletion of their Personal Data.
- Restriction of Processing: Users have the right to request the restriction of Processing of their Personal Data.
- Data Portability: Users have the right to receive their Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another Controller.
- Objection: Users have the right to object to the Processing of their Personal Data for specific purposes.
6. Data Security
The Website Owner agrees to implement appropriate technical and organizational measures to ensure the security of Personal Data, including protection against unauthorized or unlawful Processing and against accidental loss, destruction, or damage.
7. Data Breach Notification
In the event of a data breach, the Website Owner agrees to notify affected Users without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
8. Third-Party Processors
The Website Owner may engage third-party Processors to Process Personal Data on its behalf. The Website Owner will ensure that any such Processor complies with the terms of this Agreement and applicable data protection laws.
9. International Data Transfers
If Personal Data is transferred outside the European Economic Area (EEA), the Website Owner will ensure that appropriate safeguards are in place to protect the data in accordance with applicable data protection laws.
10. Amendments
This Agreement may be amended from time to time by the Website Owner. Users will be notified of any significant changes to this Agreement.
11. Governing Law
This Agreement shall be governed by and construed in accordance with the laws of [Country/State], without regard to its conflict of law principles.
12. Contact Information
If you have any questions or concerns about this Agreement or the Processing of your Personal Data, please contact us at:
info@cannabidiol.shop
13. Acceptance
By using cannabidiol.shop, you acknowledge that you have read, understood, and agree to be bound by the terms of this Data Protection Agreement.