Legal
Privacy policy
This policy describes how CBD.eu.com (“we”, “us”) handles personal data under the General Data Protection Regulation (GDPR) and applicable EU law.
Data controller
CBD.eu.com
Email: [email protected]
Website: https://cbd.eu.com
Data we collect
What you send us
Your name, email, and message when you contact us.
What we collect automatically
- IP address (anonymised where possible)
- Browser, device, and language preference
- Pages visited and referral source
- Cookie consent choices
Legal basis (Art. 6 GDPR)
- Consent (Art. 6(1)(a)): Analytics cookies and optional marketing
- Legitimate interest (Art. 6(1)(f)): Site security, essential cookies, replying to enquiries
- Legal obligation (Art. 6(1)(c)): Where the law requires it
Cookies
Essential cookies (language, consent) run without asking. Analytics cookies load only after you accept them in our cookie banner. Affiliate retailers may set their own cookies when you click their links; their privacy policies govern those.
How long we keep data
Contact messages: up to 12 months. Analytics: per provider settings (typically 14-26 months). Consent records: 12 months.
Your rights (Art. 15-22 GDPR)
You can request access, correction, erasure, restriction, portability, or object to processing, and withdraw consent. Email [email protected] with subject GDPR request. We respond within 30 days.
Complaints
You can complain to your national data protection authority. EU list: edpb.europa.eu.
International transfers
We use EU-based hosting where we can. If data leaves the EEA, we rely on Standard Contractual Clauses or adequacy decisions.
Children
This site isn’t aimed at anyone under 18. We don’t knowingly collect data from minors.
Changes
We update this policy when needed. The date above is the latest version.