Privacy Policy

Owner’s Privacy Policy regarding the processing and protection of personal data of users and customers that may be collected during browsing, purchasing a product, or negotiating a service through the website: https://weedness.webfactor.com

In this regard, the Owner guarantees compliance with the current provisions on personal data protection, reflected in the Basic Law 3/2018 of December 5 on the protection of personal data and the guarantee of digital rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data (GDPR).

By using the website, you accept this Privacy Policy, as well as the conditions included in the Legal Disclaimer.

I. Owner’s Identity

• Owner: “Weedness CBD Bulgaria” Ltd.
• CEO: Borislav Varbanov Valchanov
• EIK (Unified Identification Code): 207178274
• Address: Sofia, Postal Code 1324, Lyulin District, Javaharlal Nehru Blvd. No. 29, Mini Mall Lyulin, Office 14
• Email: support@weedness.webfactor.com
• Website: https://weedness.webfactor.com
• Purpose: The purpose of the website is the online sale of CBD products.

II. Data Processing Principles

In the processing of your personal data, the Owner will apply the following principles that meet the requirements of the new European Data Protection Regulation (GDPR):

• Principle of lawfulness, fairness, and transparency: The Owner will always require consent for the processing of personal data, which may be for one or more specific purposes, for which the Owner will inform the User in advance with absolute transparency.
• Principle of data minimization: The Owner will only request the data that is strictly necessary for the purpose or purposes for which it is requested.
• Principle of limitation of the storage period: The Owner will store the collected personal data for the time strictly necessary for the purpose or purposes of the treatment. The Owner will inform the User of the corresponding storage period according to the purpose. In the case of subscriptions, the Owner will periodically review the lists and remove those that have been inactive for a certain period of time.
• Principle of integrity and confidentiality: The collected personal data will be treated in such a way as to ensure their security, confidentiality, and integrity.

The Owner takes the necessary precautions to prevent unauthorized access or improper use of its users’ data by third parties.

III. Collection of Personal Data

To browse the website, it is not necessary to provide personal data. The cases in which it is necessary to provide personal data are as follows:

• When commenting on an article or page.
• When purchasing a product or negotiating a service.
• By registering for a subscription form or newsletter managed by the Owner with MailChimp.
• By registering for a subscription form or newsletter managed by the Owner with MailPoet.

IV. Rights

The Owner informs you that regarding your personal data, you have the right to:

• Request access to the stored data.
• Request correction or deletion.
• Request the limitation of your access.
• Not be subject to automated decision-making.

Exercising these rights is personal and therefore must be exercised directly by the interested party, by requesting it directly from the Owner, which means that any customer, subscriber, or employee who has provided their data at any time can contact the Owner and request information regarding the data you have stored and how you obtained it, request their correction, object to their processing, restrict their use, or request the deletion of that data from the Owner’s files.
To exercise your rights, you must send your request along with a photocopy of a national identification document or equivalent to the email address: support@weedness.webfactor.com

Exercising these rights does not include any data that the Owner is obliged to keep for administrative, legal, or security purposes.

You have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Bulgarian Commission for Personal Data Protection if you believe that the processing of your data violates the Regulation.

V. Purpose of Personal Data Processing

When you contact the website to send an email to the Owner, write a comment on an article or page, subscribe to their newsletter, or enter into a product or service contract, you provide personal information for which the Owner is responsible. This information may include personal data such as your IP address, name and surname, physical address, email address, telephone number, and other information. By providing this information, you agree that your data will be collected, used, managed, and stored online, only as indicated on the following pages:

• Legal Disclaimer
• Privacy Policy

The personal data and the purpose of processing by the Owner vary depending on the information collection system:

• Comment forms: The Owner requires personal data, including name and surname, email address, and website address, to respond to User comments.
• Product or service contract forms: The Owner requires personal data, including name and surname, identification document (tax identification number, foreigner identification number, passport, or residence permit), email address, postal address, telephone number, and payment information (payment methods or banking details) to maintain business relationships with the User, process orders, provide contracted services, and invoice and collect the agreed-upon products or services.
• Content subscription forms: The Owner requires the following personal data: name and surname, email address, telephone number, and website address to manage the subscription list, send newsletters, promotions, and special offers. The personal data provided to the Owner will be located on servers of The Rocket Science Group LLC d/b/a, established in the United States (Mailchimp).

There are other purposes for which the Owner processes personal data to ensure compliance with the conditions contained on the Legal Disclaimer page and applicable legislation. This may include the development of tools and algorithms that help the website ensure the confidentiality of the personal data it collects.

• For analysis of user navigation. The Owner collects other non-identifying data obtained through the use of cookies, which are downloaded to the User’s computer when browsing the website. The characteristics and purposes of these cookies are described in detail on the Cookies Policy page.
• For social media management. The Owner has a presence on social networks. If you become a follower on the Owner’s social networks, the processing of personal data will be governed by this section, as well as by the terms of use, privacy policies, and access regulations belonging to the social network that is appropriate in each particular case and that you have accepted previously.

You can consult the privacy policies of the main social networks at the following links:

• Facebook
• Twitter
• Linkedin
• Youtube
• Instagram

The Owner will process your personal data to properly manage your presence on the social network, inform you about your activities, products, or services, and for any other purpose that the regulations of the social networks allow.
Under no circumstances will the Owner use the profiles of followers on social networks to send individual advertising.

VI. Security of Personal Data

To protect your personal data, the Owner takes all reasonable precautions and follows the best practices in the industry to prevent its loss, misuse, improper access, disclosure, alteration, or destruction.
The website is hosted Online. Data security is guaranteed as all necessary security measures have been taken. You can consult their privacy policy for more information.

The Owner informs the User that their personal data will not be transferred to third-party organizations unless such data transfer is covered by a legal obligation or when the provision of a service requires a contractual relationship with a data processor. In the latter case, the transfer of data to a third party will only be carried out when the Owner has the express consent of the User.

However, in some cases, collaboration may be carried out with other professionals. In these cases, the consent of the User will be required, informing them of the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest security standards.

VII. Content from Other Websites

The pages of this website may include embedded content (such as videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if you have visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction with that embedded content.

VIII. Cookie Policy

In order for this website to function properly, it requires the use of cookies, which are pieces of information stored in your web browser.
You can consult all the information related to the rules for the collection and processing of cookies on the Cookies Policy page.

IX. Legal Basis for Data Processing

The legal basis for the processing of your data is:

• Consent of the data subject.
• Performance of a contract or application of pre-contractual measures with the data subject, for the purpose of providing goods or services purchased from the Owner.
• Compliance with legal obligations.

X. Categories of Personal Data

The categories of personal data processed by the Owner are Identification Data. Special categories of personal data are not processed.

XI. Retention of Personal Data

The personal data provided to the Owner will be stored until you request their deletion.

XII. Cookies

Google Analytics uses “cookies,” which are text files placed on your computer, to help the Owner analyze how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
For more information, visit: https://analytics.google.com

You can consult how Google manages privacy regarding the use of cookies and other information on the Google Privacy Policy page: https://policies.google.com/privacy?hl=en

XIII. Web Navigation

When browsing the website, non-identifying data may be collected, including IP address, geolocation, records of how services and websites are used, browsing habits, and other data that cannot be used to identify you.
The website uses the following third-party analytics services:

• Google Analytics.

The Owner uses the obtained information to obtain statistical data, analyze trends, administer the website, study browsing patterns, and gather demographic information.
The Owner is not responsible for the processing of personal data carried out by the web pages that may be accessed through the various links contained on the website.

XIV. Accuracy and Truthfulness of Personal Data

You agree that the data provided to the Owner is accurate, complete, truthful, and up-to-date, and you undertake to keep it duly updated.
As a user of the website, you are responsible for the accuracy and correctness of the data sent to the website, releasing the Owner from any responsibility in this regard.

XV. Acceptance and Consent

As a User of the website, you declare that you have been informed about the conditions of personal data protection, accept, and consent to their processing by the Owner in the manner and for the purposes indicated in this Privacy Policy.
To contact the Owner, subscribe to the newsletter, or make comments on this website, you must accept this Privacy Policy.

XVI. Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to new legislation or legal practices, as well as industry practices.
These policies will be in effect until they are modified by others duly published on this page.