Please note Cookies are used on this site to provide the best user experience. If you continue, we assume that you agree to receive cookies from this site. OK

Privacy Statement

This Privacy Statement sets out how Canna B Industries B.V. (hereinafter: ‘CannaTrading’, ‘we’ or ‘us’/’our’) processes your personal data which you provide to us or which we obtain through our website(s). This Privacy Statement was last amended on Wednesday, 21 August 2019. We may amend this Privacy Statement from time to time.

1. About CannaTrading:

CannaTrading is the party responsible for processing your personal data (the ‘data controller’) within the meaning of the General Data Protection Regulation (‘GDPR’).
CannaTrading is located at Urb. Alhaurin Golf C/Brisas del Golf 23, Edificio 1, Portal 3-1B, 29120 Alhaurin el Grande, Malaga, Spain.
Our postal address is PO Box Box 232, 1130 AE Volendam.
Any questions you might have can be e-mailed to

2. What personal data do we process?

This Privacy Statement provides information on the processing of personal data of (potential) customers, vendors and visitors to our websites. We also use cookies after seeking your consent, if required.
Further information on this can be found in our cookie statement (click here).

We process inter alia the following personal data from (potential) customers and vendors:
  • name;
  • billing and shipment address;
  • telephone number;
  • email address;
  • date of birth;
  • bank and payment details;
  • purchase information;
  • account information and profile;
  • purchase history;
  • website use and other information on your interaction with us;
  • IP-address, information on internet browser;
  • location data and data on mobile device (if applicable);
  • information you give to us.
We process inter alia the following personal data from visitors to our website:
  • website visit and use;
  • IP address;
  • duration and time of visit to the website;
  • use of social media.

We will not require you to provide us with sensitive data, such as health data.
Please do not provide such data to us.

3. For what purposes do we process personal data?

We process personal data for the purposes of providing our service to (potential) customers, vendors and website visitors and in order to comply with statutory obligations.

Personal data supplied by (potential) customers and vendors is processed for the following purposes:
  • to allow you to place orders for our products;
  • to make sure your orders will be handled as fast and easy as possible;
  • to provide updates on your orders;
  • to provide information on new products, specials and other promotional activities;
  • to compile user statistics;
  • to promote security and improvement of our websites;
  • to improve our services.
The personal data supplied by visitors to our websites is processed for the following purposes:
  • to compile user statistics;
  • to promote security and improvement of our websites;
  • to improve our services.
4. Grounds for processing personal data:

In order to be allowed to process your personal data, there must be a legitimate basis for doing so as set out in the GDPR. In the case of CannaTrading this legitimate basis will be (depending on the type of personal data concerned) performance of an agreement, a legal obligation, a legitimate interest or your consent. If you do not provide certain personal data, you will not be able to place an order or you may not benefit from all website functionalities.


We need to process personal data for the purposes of fulfilling certain contractual obligations. For instance, in order to process and deliver your order based on the purchase agreement, we need to process your personal data.

Legal obligations.

We need to process and, in particular, save or hand over certain personal data pursuant to, inter alia, administrative and tax laws.

Legitimate interest.

We have an interest in informing you on the new products, specials and other promotional activities by sending you our newsletter. If you no longer want to receive this newsletter, you can unsubscribe using the relevant opt-out button in the newsletter or send an email to Furthermore, we have an interest in optimizing our marketing, developing and improving the functionality of our online platform and recommend products that you may be interested in. On the grounds of these interests, we will process your personal data unless your privacy interests outweigh our interests.


If none of the aforementioned bases for processing apply, we will then request your consent to process certain personal data. You are free to withdraw your consent at any time.

5. To whom does CannaTrading issue personal data?

We do not sell, rent of lease our customer data to third parties.
In order to be of service to you and to perform our duties, we engage the services of other parties to process personal data on our behalf. Third parties that we may engage include inter alia insurers, accountants and debt collection agencies. We are required to request your consent for some transfers of personal data. Sometimes we are legally obliged or a court will order us to hand over personal data to such parties as the Tax and Customs Administrations, the police or the regulatory body.
If we instruct a third party to process personal data on our behalf and we have and retain control over the processing, we will sign a written processing agreement with the third party concerned (the 'data processor'). That document will lay down agreements on such points as the purpose, the duration and scope of the processing, the retention times and the security measures for the personal data. A data processor within the meaning of the GDPR could, for example, be an IT service provider, a payment provider or an operation service partner that handles the processing and delivery of purchase orders, provides customer support, processes transactions or performs statistical analysis of our services. These parties are prohibited to use your personal data for any other purpose than instructed by us.

6. Processing personal data outside of the EU:

CannaTrading will endeavour to process your data solely within the European Union (‘EU’) by saving your data on a server located in the EU wherever possible.
When we engage the services of data processors, we stipulate that they must process personal data on servers located in the EU. To the extent that this is not possible, we take the requisite measures to provide a suitable level of protection to ensure that your personal data is secure.

7. Your rights with regard to personal data:

You are entitled, under certain circumstances, to access any personal data processed by us or to have it corrected or deleted or restrict its processing. Sometimes you can also lodge an objection or request a transfer of your personal data. To submit a request to us in this respect, please contact us by sending an email to If in doubt about your identity, we are entitled to ask you to provide proof of your identity first.

Access and correction.

If you wish to know whether we are processing your personal data or would like to amend your personal data, please get in touch with us.


Under certain circumstances, the GDPR allows you to have personal data erased. We will assess whether it is possible to implement such a request: in some cases we will have to retain your personal data, e.g. to comply with a statutory obligation, to complete your order or, as a one-off action, to see to it that you will no longer receive messages from us.


You are entitled to contact us with a request to restrict the processing of your personal data if you think that your personal data is incorrect, the processing of it is unlawful, you require it for legal action or you have objected to it being processed.


If we process your personal data on the basis of a legitimate interest, then you can object to further use of your personal data on the grounds of your specific reasons.

Objection to receive messages.

If you no longer wish to receive email messages or any other electronic messages from us, then you can deregister for these by clicking on the unsubscribe button in an email message received from us. You can also deregister by contacting us.

8. How do we secure your personal data?

We have taken appropriate technical and organisational measures to prevent loss or unlawful processing of personal data. For example, we store the personal data you provide us with on computer systems with limited access that are located in controlled facilities.

9. How long do we keep your personal data?

We will not keep your personal data for longer than is necessary for the purposes for which we use it. We are required by law to keep some data for a certain period of time. For example, it could be that after your order has completed we have to keep certain personal data for administrative purposes or due to a legal obligation. Wherever possible, we will pseudonymise or anonymise your personal data to the fullest extent possible.

10. Questions and complaints:

If you have any questions on the way in which we process your personal data of if you believe your personal data is being processed in breach of the GDPR, please let us know by sending an email to We will be happy to help.
If you disagree with the outcome of our handling of your complaint, you can submit a complaint to the Data Protection Authority directly.