Objective

CBDflora aims to be the safest, most reliable, and user-friendly provider of all the products we offer. We ensure that legislation is adhered to when processing personal data and that security is always of the highest standard to handle threats and attacks. We protect our customers' information so you can trust us—whether it is personal data or other information.

Below, you can read about how we manage our responsibility to protect customer information, including how we handle logins and passwords, and how you, as a customer, can exercise your rights.

Background

CBDflora processes customer personal data, which is defined as any information about a physically identified or identifiable person. This information includes, for example, the customer's name, company name, address, email address, phone number, order number, IP address, and usage of our website.

Principles

CBDflora processes personal data in accordance with the principles set out in the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Purpose and Legal Basis

CBDflora has established several specific purposes for processing data within the individual IT systems and the personal data registered therein. Overall, CBDflora processes customer personal data for the following purposes:

• Serving customers to deliver a service or complete a sale.
• Personalized services, for development and marketing of products and services.
• Registering customers to comply with legislation.
• Marketing products and services to you based on consent. You can always withdraw your consent.

Consent

For certain types of personal data processing, CBDflora requests user permission before initiating the processing. Requesting permission is also known as asking for consent. You may withdraw your consent at any time, after which CBDflora will cease processing your information.

Rights

CBDflora customers have several rights under the GDPR regarding the processing of their personal data. These rights include the ability to request information about the personal data CBDflora has stored about them, and in certain circumstances, to have information deleted.

Managing Logins and Passwords

CBDflora understands the importance of protecting your login information and passwords. We implement the following security measures to protect these details:

• Password Encryption: All passwords stored on our servers are encrypted using strong encryption algorithms. We never store passwords in plain text.
• Secure Login: We use security measures such as multi-factor authentication (MFA) to protect accounts from unauthorized access. This may include SMS codes or authentication apps.
• Secure Session Management: We maintain strict control over login sessions. If you are inactive for a certain period, you will be automatically logged out to prevent unauthorized access.
• Vulnerability Assessments: Regular security checks and vulnerability assessments are conducted to identify and address potential security risks related to login and authentication.
• Password Guidelines: We encourage our users to create strong and unique passwords and offer tools to assist with this. We recommend that you do not reuse passwords across multiple websites or services.

Disclaimer and Limitation of Liability

CBDflora strives to protect your personal information and security to the best possible extent, but we cannot guarantee that our security measures are completely flawless or that no security breaches will occur. By using our services, you agree to the following:

• No Guarantee of Security: Despite our strict security measures, we cannot guarantee complete security for your personal information. You are responsible for taking your own security measures, such as using strong passwords and protecting your login information.
• Limitation of Liability: CBDflora cannot be held liable for any losses or damages resulting from unauthorized access to your account unless due to gross negligence or intentional misconduct on our part. This includes, but is not limited to, direct or indirect damages, loss of data, or loss of business opportunities.
• External Influence: We are not responsible for damages arising from external factors or third-party providers, including but not limited to cloud service providers, IT support, and other external parties that may have access to your information under our policy.

Contact

CBDflora, is the data controller for the processing of personal data. If you have any questions regarding the processing of your data (including personal data), you can send a request to cbdflora@hotmail.com.

Security

CBDflora's security policy and measures are based on the security standards ISO27001 and ISO27002. This means that all CBDflora systems and data take into account the threats that may arise. The security measures include both organizational initiatives in the form of policies and procedures and a wide range of technical initiatives.

Recipients and Transfer

CBDflora processes most personal data in its own data centers. However, CBDflora uses Office365 in Ireland. Additionally, data may, in individual cases, be transferred to external IT providers in connection with the operation and support of CBDflora’s internal systems or certain personalization and marketing initiatives. Information may also be made available to authorities based on legislation. For each individual system, the processing of personal data is described in detail, including whether transfer or assignment occurs, and if so, to which recipients.

Processing Timeframes

CBDflora has established timeframes for processing activities wherever possible. Generally, CBDflora stores personal data only as long as necessary, based on the purpose of processing the personal data.

Changes to CBDflora’s Privacy Notice

CBDflora may change this privacy policy at any time and without prior notice, with effect for the future.

Appeal Options

Customers may appeal CBDflora's decisions to cbdflora@hotmail.com. Customers can also direct a request or complaint about CBDflora’s handling of customer information to the data protection authority at any time. Customers can also take their case to court to clarify an issue related to the processing of personal data.

Last Updated: 2024-09-27