The protection of your personal data is very important to us. Of course, we comply with the statutory provisions of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG), DSGVO and other data protection regulations, which complies with the high data protection standards of the EU. At this point we would like to inform you about the data protection in the CBDNOL Online Shop.
1. Subject of data protection
2. Data security
3. Scope of data collection
5. Own and third party cookies
6. Social Plugins
7. Right of information, objection and cancellation
8. Rights as a user
1. Subject of data protection
The subject of data protection is personal data. According to § 3 Abs. 1 BDSG, these are details of personal or factual circumstances of a specific or identifiable natural person. This includes so-called inventory data such as your name, postal address, e-mail address and telephone number and your account information, but also usage data, such as information about the time of your visit to our pages, the browser you use, and others when you visit our Pages generated data. It also includes information about your participation in online services of the CBDNOL online store (such as sweepstakes, surveys, forums, chats), the contents of your shopping carts, your orders, and other personal information and requests.
2. Data security
You can trust us with your personal data. The data will be transmitted encrypted to us in the order process with 256 bit. We secure the CBDNOL online shop and your data through technical and organizational measures against damage, destruction, alteration or unauthorized access by unauthorized persons. Despite regular checks, complete protection against all dangers is not possible.
If you register with us as a customer, access to your customer account is only possible after entering your personal password. You should always keep your payment information confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others.
We also take corporate privacy very seriously. Our employees and the service companies commissioned by us have been obliged by us to secrecy and to comply with data protection regulations.
3. Scope of data collection, storage and use
We collect, store and use your personal data only for the purpose of carrying out your order or the service you requested, on the basis of statutory permission and as part of your possibly separately given consent.
For the mere visit of our website, it is not necessary that you provide us with personal data. We then store and use only access data without personal reference, such as Your browser type, the page from which you are visiting us, the date and time of your visit or the name of the requested file. These data are evaluated to improve our offer and do not allow conclusions about your person.
If you register as a customer, shop in our online shop, participate in a raffle or want to use other services, we require personal data from you. This applies, for example, to the processing of the purchase contract and the dispatch of the goods, the sending of requested information material, or to answering individual inquiries about our offer and our products. We collect, store and use your personal data required only to the extent necessary for the performance of the contract or the provision of the service, based on a legal permission, or on your express consent to the further use of your data.
Personal data will be blocked by us in compliance with the tax and commercial storage periods and deleted if the data for the intended use purposes are no longer required.
4. Disclosure of personal data
A transfer of your personal data to third parties is only on the basis of your express consent or if this is necessary for the provision of the service or for the performance of the contract, for example, in the transfer of the required personal data to our service providers. These are e.g. Shipping service providers, payment service providers or similar service providers. These companies may use your data only for order processing and not for further purposes. The transfer to state institutions and authorities entitled to receive information only takes place within the scope of the statutory information obligations.
5. Own and third party cookies, collection of usage data and web tracking services
For this purpose, cookies can be used to enable the recognition of an Internet browser. However, user profiles are not merged with data about the bearer of the pseudonym without the visitor's explicit consent. In particular, IP addresses are rendered unrecognizable immediately after receipt, so that an assignment of usage profiles to IP addresses is not possible. Visitors to this website may at any time object to this data collection and storage for the future.
Google Analytics, a web analytics service provided by Google Inc. ("Google"), is used to tailor the design and optimize this website. Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google. Google will never associate your IP address with other Google data. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can disable this data collection and storage for the future here by installing an add-on.
Our websites use Google Adwords Conversion Tracking, a web analytics service provided by Google Inc. 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google") for the purpose of improving website and promotional activities. The conversion tracking cookie is set when a user clicks on a Google-served ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of our website within these 30 days, Google in the US may recognize that you have clicked on the ad and have been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can not be tracked through AdWords advertisers' websites. The information obtained using the conversion cookie is used to generate conversion statistics for us. We learn the total number of users who clicked on our ad and were redirected to our site. However, we do not receive information that personally identifies you.
If you do not want to participate in tracking, you can easily disable the Google Conversion Tracking cookie through its Internet browser under User Preferences. You will not be included in the conversion tracking statistics.
For more setting options, visit the disabling Google Ads page. You can disable the use of third-party cookies by visiting the opt-out page of the Network Advertising Initiative. Additional information about the privacy principles of Google can be found here.
We hire third party companies to make advertisements for our products more interesting to you on our partner websites. Retargeting techniques of the commissioned companies are used, which collect completely anonymised data about you viewed pages, categories or products with the help of cookies. In this way, we can tailor the ads to your interests in our online store or our products. At no time will personal data be transmitted to third parties. Neither the third party companies nor we can relate to you or your personal details. It also can not be related to the information you have provided during your order. The collected data is used exclusively for the optimization of the advertising measures in the form of advertising banners. On each of these banners is an "i" symbol, which you can opt out of the respective retargeting with effect for the future (opt-out) and get more information about the technology used.
6. Social Plugins
On our websites social plugins from Facebook are used to make the online shop more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from the US company Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA).
If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by him into the website.
By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there.
If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be posted on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purpose of advertising, market research and tailor-made Facebook pages. For this purpose, Facebook uses user, interest and relationship profiles, eg. For example, to evaluate your use of our website in relation to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
Our websites use the "+1" button of the social network Google Plus, which is operated by Google. The button is recognizable by the sign "+1" on a white or colored background.
When you visit a page on our website that contains such a button, your browser establishes a direct connection to Google's servers. The content of the "+1" button will be sent by Google directly to your browser and incorporated into the website by Google. We therefore have no control over the amount of data Google collects from the button. According to Google, no personal data is collected without a click on the button. Only logged in members, such data, including the IP address, collected and processed.
If you are a Google Plus member and you do not want Google to collect information about you from our website and link it to your member data stored on Google, you must log out of Google Plus before visiting our website.
If you do not want Twitter to associate your visit to our pages, please log out of your Twitter account.
7. Right of information, objection and cancellation
According to the Federal Data Protection Act, you have a right to free information about your data stored with us and, if necessary, a right to correction, blocking or deletion of this data. In addition, you may object to the anonymized or pseudonymized data collection and storage for purposes of optimizing our website. At any time, you may revoke your consent to collect, store and use your data with effect for the future.
8. Rights as a user
When processing your personal data, the DSGVO grants you certain rights as a website user:
Right to information (Article 15 GDPR):
You have the right to ask for confirmation of the processing of personal data concerning you; If this is the case, you have a right to information about these personal data and to the information listed in Article 15 GDPR.
Right to rectification and cancellation (Articles 16 and 17 GDPR):
You have the right to immediately request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
You also have the right to demand that personal data relating to you be deleted immediately, provided one of the reasons listed in Article 17 GDPR is met, eg. For example, when the data is no longer needed for the purposes pursued.
Right to restriction of processing (Art. 18 GDPR):
You have the right to demand the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, eg. For example, if you objected to processing for the duration of any examination.
Right to data portability (Article 20 GDPR):
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data concerning you in a structured, common and machine-readable format or to request the transmission of this data to a third party.
Right of objection (Article 21 GDPR):
Are data based on Art. 6 para. 1 lit. (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons that arise from your particular situation. We will then no longer process the personal data unless there are evidently compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
Right of appeal to a supervisory authority:
You have gem. Art. 77 DSGVO the right to complain to a supervisory authority if you believe that the processing of your data violates data protection regulations. In particular, the right of appeal may be invoked by a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.
We are at your disposal for further questions on data protection and the processing of your personal data. For questions, information and the correction, blocking or deletion of data, please contact email@example.com or the contact address:
Telephone: 0732 773 886
For questions, information and other concerns, please contact firstname.lastname@example.org
Last Update: DSGVO May 25, 2018.