Privacy Policy
Privacy Policy
Last updated: December 22, 2025
Introduction
At CannSweet España S.l. (hereinafter, “we,” “our,” or “the company”), we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) EU 2016/679 and the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
This policy explains:
- What data we collect
- Why we collect it
- How we use it
- Your rights regarding your data
Data Controller
Identity: CannSweet España S.l.
NIF: B-98765432
Address: Calle del Comercio 45, 28013 Madrid, Spain
Email: privacidad@cannasweet.es
Phone: +34 910 123 456
Data Protection Officer: dpo@cannasweet.es
Data We Collect
1. Registration and Account Data
When you create an account, we collect:
- First and last name
- Password (encrypted)
- Date of birth (age verification)
- Phone (optional)
Legal basis: Execution of the contract
2. Order and Billing Data
When making a purchase:
- First and last name
- Shipping address
- Billing address
- Contact phone
- NIF/DNI (if you request an invoice)
- Order history
- Purchased products
- Transaction amount
Legal basis: Execution of the contract, legal obligation (billing)
3. Payment Data
- we do not store complete credit card data
- The payment gateway (Stripe/Redsys/PayPal) processes payments securely
- We only store the last 4 digits for reference
- Payment method used
Legal basis: Execution of the contract
4. Browsing Data (Cookies)
- IP Address
- Browser type
- Operating system
- Pages visited
- Time spent
- Products viewed
- Abandoned cart
Legal basis: Consent (cookies) / Legitimate interest (analytics)
Consult: Cookie Policy
5. Communications
- Emails sent to support
- Messages from the contact form
- Responses to satisfaction surveys
- Chat conversations (if applicable)
Legal basis: Consent / Legitimate interest (customer service)
6. Marketing (Optional)
If you subscribe to the newsletter:
- Name (optional)
- Communication preferences
- History of opened/clicked emails
Legal basis: Explicit consent
How We Use Your Data
Purposes of Processing
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Process orders | Execution of the contract | Name, address, email, phone |
| Shipping products | Execution of the contract | Address, phone, name |
| Billing | Legal obligation | Tax data, amount, products |
| Customer service | Legitimate interest | Email, name, order history |
| Returns management | Execution of the contract | Order data, reason for return |
| Fraud prevention | Legitimate interest | IP, payment data, history |
