1. Introduction
Cannaxtrade is operated as a B2B wholesale website where only registered businesses can make purchases. Nevertheless, we recognize that individuals (e.g., employees, agents, representatives) may provide personal information (such as name, work email, phone number) on behalf of these businesses. In processing such information, we comply with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) and relevant Danish legislation.
2. What data we collect
- Business information: Company name, business address, VAT number, and other standard business details necessary to process transactions and maintain our records.
- Personal information: Names, email addresses, phone numbers, and other work-related identifiers of individuals acting on behalf of the business.
3. How we use your data
- Order fulfillment and administration: To process, confirm, and deliver orders, and manage associated financial transactions.
- Communication: To respond to inquiries, provide customer support, and share updates or notices relevant to your ongoing business relationship with us.
- Legal and regulatory compliance: To meet Danish bookkeeping requirements (e.g., Bogføringsloven (Danish Bookkeeping law1) and other regulations that mandate retaining transaction and correspondence records.
4. Legal basis for processing
- Contractual necessity: We need certain personal data to fulfill orders or maintain a contractual relationship with your business.
- Legitimate interests: We process limited personal data (e.g., point-of-contact details) to ensure smooth business operations and communication.
- Legal obligations: We retain and may disclose data where required by law (such as mandatory record-keeping rules under Danish law or responses to lawful requests by public authorities).
5. Data retention
We store business and personal data only as long as necessary for the purposes described above, or as required by law. In Denmark, we typically keep transactional and related records for up to five years in accordance with bogføringsloven. Where possible and appropriate, we may redact or pseudonymize personal details upon request, unless legal or legitimate business interests require us to keep them in identifiable form.
6. Individual rights
Even in a B2B context, individuals whose data we process have certain rights (subject to legal limitations), including:
- Right of access: Request a copy of the personal information we hold.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure (limited): Request deletion or anonymization of personal data, to the extent it does not conflict with legal obligations or our legitimate interests in retaining necessary records.
- Right to restrict processing: Ask us to limit processing of personal data under certain circumstances.
- Right to object: Object to specific processing activities based on our legitimate interests, unless we have compelling grounds or legal obligations that override such objections.
7. Data sharing
We do not sell personal data to third parties. We may share data with service providers (e.g., shipping companies, payment processors) or authorities where necessary to:
- Fulfill orders and manage payments.
- Comply with legal obligations or respond to lawful requests.
8. Security measures
We implement reasonable technical and organizational security measures to protect data against unauthorized access, alteration, disclosure, or destruction. These measures include restricted access, secure storage systems, and oversight of third-party service providers.
9. Updates to this policy
We may update this policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any changes will be posted on our website with an updated “Last Revised” date.
10. Contact Information
For questions about this Privacy Policy or to exercise any of your rights, please contact info@cannax.trade and mark the subject “Privacy Policy”.
1https://www.retsinformation.dk/eli/lta/2022/700