Privacy Policy

The operator of the e-shop CannaCare, s.r.o. on the website, with its registered office at: Revoluční 1202/20, 110 00 Praha, ID number 09154078, entered in the Commercial Register kept by at the Municipal Court in Prague under file number C 331766 (referred to as the "Administrator") processes personal data provided by natural persons - consumers (referred to as the "Buyer") for the purpose of fulfilling and additional confirmation of Business Conditions, for processing electronic orders, delivery, settlement of payments and the necessary communication between the contracting parties for the period required by special legislation.


1. Basic provisions

1.1. The administrator of personal data according to paragraph 5 letter o) of Act No. 18/2018 on Personal Data Protection, as amended (hereinafter referred to as the “Act”) is CannaCare, s.r.o., ID No. 09154078 with its registered office at Revoluční 1202/20, 110 00 Prague (hereinafter referred to as the “Administrator”);

1.2. Contact details of the Administrator are: 


telephone .: +420725315484.

1.3. Personal data means any information that identifies an individual or legal person.


2. Sources of processed personal data


2.1. The Administrator processes personal data provided to him by the Buyer with the consent and which the Administrator obtained on the basis of the fulfillment of the Purchase Agreement and the processing of the electronic order

in the online store;

2.2. The Administrator processes only the identification and contact details of the Buyer necessary for the performance of the Purchase Agreement;

2.3. The controller processes personal data for the purpose of delivery, settlement of payments and for the necessary communication between the contracting parties for the period required by special legal regulations. Personal data will not be published and will not be transferred to other countries.


3. Purpose of personal data processing

The Administrator processes the Buyer's personal data for the following reasons:

3.1. For the purpose of registration on the website pursuant to paragraph 13, paragraph 1, letter a) of Act No. 18/2018 on the protection of personal data;

3.2. In order to process the Buyer's electronic order (name, address, e-mail, telephone number);

3.3. In order to fulfill the rights and obligations arising from the contractual relationship between the Buyer and the Administrator;

3.4. The provision of personal data is a necessary requirement for the performance of the Purchase Agreement. The contract cannot be concluded without the provision of personal data.


4. Retention period of personal data

4.1. The Administrator retains personal data for the time necessary to exercise the rights and obligations arising from the contractual relationship between the Buyer and the Administrator and for a period of 3 years from the termination of the contractual relationship;

4.2. After the expiration of the personal data retention period, the Administrator is obliged to delete the data. 


5. Recipients and processors of personal data

The third party that receives the Buyer's personal data are the subcontractors of the Administrator. The services of these subcontractors are unconditionally related to the successful performance of the Purchase Agreement and the electronic order between the Administrator and the Buyer.

The subcontractors of the Administrator are:

Shoptet (e-shop system),

Česká pošta, s.p., PPL, Zásilkovna (delivery services), 

Google Analytics (analytics of websites). 


6. Buyer's Rights

According to the conditions stipulated in the Act, the Buyer has the right to:

6.1. to access your personal data,

6.2. to correct personal data,

6.3. to delete personal data,

6.4. object to processing,

6.5. on data portability,

6.6. revoke consent to the processing of personal data in writing or electronically

at the e-mail address:,

6.7. file a complaint with the Office for Personal Data Protection if it considers that its right to personal data protection has been violated.


7. Security of personal data

7.1. The Administrator declares that it has taken all appropriate technical and organizational measures necessary to secure the Buyer's personal data.

7.2. The administrator has taken technical measures to secure personal data repositories, in particular securing access to the computer with a password, using an antivirus program and regularly maintaining the computers.


8. Final provisions

8.1. By sending an electronic order on the website, the Buyer confirms that he has been acquainted with the conditions of personal data protection and that he accepts them in full.

8.2. The Buyer agrees to these rules by checking the box in the order.

8.3. The Administrator is entitled to change these Rules at any time. He is obliged to publish a new version of the Rules on his website.


These rules took effect on 12 May 2020.