Privacy Policy

1. GENERAL INFORMATION

This document, called the Privacy Policy, defines the rights and rules related to the processing of personal data using specific functionalities of the cannabisprocessing.eu website. The basic rights and obligations in the field of personal data protection are contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.4.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR). To the extent not regulated in this Privacy Policy, the GDPR shall therefore apply.

By using the cannabisprocessing.eu website, you can provide us with your personal data, where we will present the current sales offer. In this case, we will process your personal data. We explain the ways we collect, use and share the information we may collect from you when you use our website. Please read the entire privacy policy before using the services of the cannabisprocessing.eu website. We make every effort to secure access to the website to unauthorized persons in accordance with applicable law. It should be remembered that no transmission of information over the Internet is completely secure or error-free. Zakłady Farmaceutyczne COLFARM S.A. with its registered office in Mielec assures the users of its website that it respects the right to privacy and personal data protection.

From this document you will learn:

1. why we collect personal data,
2. how we use them,
3. what is the data retention period,
4. who else will have access to them,
5. how to contact us,
6. what rights you have in relation to the personal data we hold, including the right to rectification, deletion and review of your data.

The Website uses the so-called cookies, which are files of information stored locally on the computer of a person visiting the Website and using the services offered as part of it. The use of cookies enables Zakład Farmaceutyczne COLFARM S.A. with its registered office in Mielec to adapt the services provided and the presented content to the individual interests, requirements and needs of the person visiting the Website. Cookies are also used for statistical purposes to illustrate the way the Website is used by visitors to the Website. Visitors to the Website have the option to disable (block) the option of accepting cookies in their browser by changing the browser settings, which, however, limits the scope of the Website’s functionality and, as a result, may lead to its improper functioning.

2. ADMINISTRATOR

The administrator of your personal data is: Zakłady Farmaceutyczne COLFARM S.A. with its registered office in Mielec, Wojska Polskiego 3 Street, 39-300 Mielec.

3. WHY DO WE ASK FOR PERSONAL DATA?

1. When you place an order, we need your contact details so that we can process your order. You can browse our site without sharing any of the information listed above with us. When you wish to place an order on our Service, we will ask you to log in or register so that you can open your customer profile, upload and save images, and save your browsing history and preferences for access from any device;
2. We will ask for or collect information when you use the customer support services we offer, including phone calls, instant messaging, and video calls;
3. We will ask for your consent to send marketing and promotional materials, cookies. The consent given by you may be withdrawn at any time in the manner described in the terms and conditions of the website or by sending an e-mail to the address colfarm@colfarm.pl You do not need to give consent to be able to use the Website.

4. DATA PROTECTION OFFICER (DPO)

We have appointed a Data Protection Officer with whom you can contact in matters of protection of your personal data and the exercise of your rights.

The function of the DPO is performed by Mr. Rafał Andrzejewski. Contact with the Data Protection Officer: as a rule, we recommend contacting us by e-mail, at the e-mail address: iod.r.andrzejewski@szkoleniaprawnicze.com.pl

5. PURPOSES OF PERSONAL DATA PROCESSING AND LEGAL BASIS FOR PROCESSING

Below we have described the purposes for which we use your personal data.

Subject to applicable law, we must also provide you with the “legal basis for the processing”, i.e. to inform you on what basis we may use the information relating to you; Relevant information on this subject can also be found below.

The processing of your personal data will be carried out on the basis of Article 6(1)(a), (b), (c), (f) of the GDPR, among others, for the purpose of concluding a contract, performing a contract. The data may also be processed for the purpose of sending commercial information electronically or making telephone calls, provided that the Client gives a separate, appropriate consent. In the case of additional consent, on the basis of this consent (Article 6(1)(a) of the GDPR, data may also be processed for the purpose of sending marketing information regarding the services or products of other entities in electronic, telephone or paper form, depending on the consent given.

6. RETENTION PERIOD, I.E. HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

Under applicable law, we may retain your personal data for no longer than is necessary to fulfil the purposes for which we use it. The period for which we retain your personal data will be determined based on a number of criteria including the purposes for which we use the data, the amount, the potential risks associated with unauthorised use or disclosure of the data, and our obligations.

1. With regard to data processed on the basis of your consent – Article 6(1)(a) of the GDPR – until its withdrawal;
2. With regard to the data processed by the Controller on the basis of Article 6(1)(c) of the GDPR – for the period necessary resulting from the provisions of law, e.g. for accounting purposes and for tax reasons, we will process them for as long as we are obliged to do so by law. Under the current regulations, this is a period of 5 years counted from the end of the calendar year in which the tax obligation arose; Structured invoices in KSeF (National e-Invoicing System) are automatically stored and archived for 10 years, counting from the end of the calendar year in which they were issued.
3. After the primary purpose for which your data was collected (e.g. performance of a contract, delivery of goods) has been achieved, your data will be processed for archiving purposes for a period consistent with the archival regulations in force in our country;
4. If personal data is processed by us for the purpose of pursuing claims (including in court proceedings), we will be able to process them for this purpose for the period appropriate for the limitation period for claims, i.e. up to a maximum of 10 years;
5. Personal data processed for the purpose of direct marketing of our own products and services, i.e. on the basis of the so-called legitimate interest (which does not require consent) will be processed until an objection to such processing is raised;
6. Personal data processed for the legitimate purposes of the administrator will be processed until such purposes exist, e.g. to provide the services of the website in the best possible quality for you and other customers.

7. RIGHTS RELATED TO THE PROTECTION OF PERSONAL DATA

You have the following rights:

1. The right to access the content of your personal data and to receive a copy thereof;
2. The right to rectify (correct) your data;
3. the right to delete data – if you do not believe that there are grounds for us to process this data, you can request that we delete it;
4. Right to restriction of data processing – you can request that we limit the processing of your personal data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data about you or we process them unjustifiably; or you do not want us to remove them because they are needed to establish, pursue or defend claims; or for the duration of the objection to the processing of the data;
5. Right to object to data processing – “Marketing” objection. You have the right to object to the processing of your data for the purpose of direct marketing. If you exercise this right – we will stop processing your data for this purpose;
6. Right to object due to a special situation. You also have the right to object to the processing of your data on the basis of a legitimate interest for purposes other than direct marketing. You should then indicate to us the specific situation that you think justifies us ceasing the processing covered by the objection. We will cease to process your data for these purposes, unless we demonstrate that the grounds for processing your data by us override your rights or that your data is necessary for us to establish, exercise or defend claims;
7. Right to data portability – you have the right to receive from us in a structured, commonly used and machine-readable format the personal data about you that we hold on the basis of a contract or your consent. You can also instruct us to send this data directly to another entity;
8. Right to withdraw consent to the processing of personal data – you may at any time have the right to withdraw your consent to the processing of personal data that we process on the basis of your consent. The withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal;

You also have the right to lodge a complaint with a supervisory authority if you are not satisfied with the way we handle your personal data. You can contact the supervisory authority at the following address: Office for Personal Data Protection, 200-193 Stawki Street, Warsaw, tel. 22 531 03 00 fax. 22 531 03 01; kancelaria@uodo.gov.pl

In order to exercise your rights, please send a request to the following email address: colfarm@colfarm.pl  

Please remember that before exercising your rights, we will have to make sure that you are the person you say you are, i.e. identify you accordingly.

8. CONSEQUENCES OF NOT PROVIDING PERSONAL DATA

Providing personal data is voluntary, but providing marked personal data is necessary to present an offer, contact the user, and consequently to conclude a contract, while the consequence of not providing them will be the inability to use them.

9. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We may disclose your personal data (entrust the processing of your personal data) to third parties, including in the following circumstances:

1. We use third parties (acting as subcontractors) who perform activities involving the processing of personal data on our behalf and on our behalf. For example, we may employ third-party service providers to fulfill orders, deliver packages, send postal mail, send SMS and email messages (communications), maintain and update our databases containing customer information (which includes deleting repetitive or inappropriate data), analyze data to help us develop, provide, and improve our services, provide marketing support services, Process card payments, conduct research, provide customer services, and handle claims. These third parties have access to personal data needed to perform their tasks, but they are not allowed to use such data for other purposes. We may use the information we receive from third parties to supplement, correct and enrich our databases containing customer information for purposes such as credit checks and fraud prevention;
2. We will be required to share your personal data with third parties, including the police and other law enforcement agencies, authorised to receive it under applicable law;
3. Provide personal data to our insurers in the event of a claim being made or potential to be made against us;
4. If we sell or acquire any business or assets, we may disclose the personal information we hold to a prospective seller or buyer interested in such business or assets. If our company, or substantially all of its assets, is acquired by a third party (or is reorganised within our corporate group), the personal data we hold will become part of the transferred assets;
5. Transfer your personal data to third parties if we are required to disclose or share such data in order to comply with any legal requirements (including in connection with a court order) or to enforce or enforce any agreements entered into with or concerning you (including agreements between you and us (or one or more of our subsidiaries) or to protect our rights; property or safety or the right of ownership or safety of our customers, employees or other third parties;
6. We may also enter into agreements with third parties that will allow you to access such third parties’ websites or applications (such as video players) directly through our own websites or applications. Each third party has its own policy on the processing of personal data and the use of cookies when using its websites or applications, so we encourage you to read the privacy and cookie policy of such third party. On the website we use such tools as: Cookiebot; Google Analytics; Microsoft Clarity – Official; Meta Pixel – PageView; YouTube. Therefore, the data is transferred to the providers of these tools – e.g. Google; Microsoft; Meta Platforms, Inc.

Please note that third-party websites and applications are beyond our control. By clicking on links to such sites or accessing such applications, you leave the area controlled by us. We are not responsible for any moral or legal liability arising from the use of your information by third parties (including personal information).

10. TRANSFER OF DATA TO A THIRD COUNTRY/INTERNATIONAL ORGANISATION

In the case of cooperation with the Controller’s partners or suppliers who are external entities – the registered offices of such external entities may be located both in the territory of EU member countries or outside the European Economic Area (EEA).

In the event that our partners or suppliers are based outside the EEA, the Controller ensures that the transfer of data outside the EEA takes place in accordance with the applicable laws in this regard. The level of data protection in countries outside the EEA may differ from that guaranteed by European law. We may transfer data to our partners outside the EEA, in particular, on the basis of decisions issued by the European Commission or standard data protection clauses (e.g. when the transfer takes place in connection with the use of Google Analytics by the Administrator).

All external entities are obliged to comply with the Administrator’s guidelines and to implement appropriate technical and organizational measures to protect the Users’ personal data. Data recipients may act as our processors (in which case they are fully subject to our instructions regarding the processing of personal data) or as independent controllers (in which case you should additionally familiarize yourself with the principles of personal data processing by these entities).

11. COOKIES

Zakłady Farmaceutyczne COLFARM S.A. with its registered office in Mielec uses cookies to operate websites, provide services to users, display personalized content or achieve our business goals. Below you will find more information about what files we use. It is up to you, the user, to decide whether to accept all of them, reject all but the necessary ones, or make an individual choice.

You can change your mind and modify your choice at any time via the button in the bottom left corner. Consent to cookies is voluntary and can be withdrawn or modified at any time.

Cookies:

1. Necessary (enabled)

Necessary cookies are used to ensure the proper functioning of our website, the proper service of our users, by which we mean, m.in. ensuring security or the correct delivery and adaptation of the service. They do not allow you to identify a specific user. Necessary cookies also allow us to achieve the basic objectives of the administrator, which include, for example, ensuring proper and uninterrupted communication, guaranteeing the highest level of service, adapting content to the user’s suitability and protecting them from fraud. These cookies allow our users to use selected services. Because these are essential files, they cannot be disabled.

2. Directional and advertising (selectable)

These files allow us to tailor our offer to the needs of our users. Directional cookies show us how users use our websites so that we can tailor advertising and therefore a service or product that will be in line with your expectations. On the basis of advertising cookies, a profile of the user’s interests is built and ads are tailored so that he does not receive content that does not interest him. These files are not a direct carrier of personal data, but only identify the browser of the device. Advertising and targeting cookies allow us to deliver you ads that are interesting to you, in line with your interests.

3. Social Media (optional)

Social media cookies allow the content of our website to be shared on social media such as Facebook, Instagram, LinkedIn or TikTok. They are files that link our website to popular services. These files are controlled by these platforms. Thanks to these files, we have the ability to associate user accounts with the content on our website, i.e. user authentication. It is these files that provide the ability to add comments or allow you to deliver advertising in social media.

4. Analytical and performance (selectable)

The analytics and performance files are used to improve the performance of our website and serve our internal purposes only. This is anonymous and does not allow for the identification of a specific user. Their main task is to show us what is the most and least popular, what traffic on our websites looks like. Thanks to these files, we can improve our offer and improve the services provided, adjust the results to the user’s needs. These anonymous statistics may be shared for external communications. Performance cookies also allow us to verify what our users are looking for, which allows us to improve the performance of our website.

12. SERVER LOGS

Some events triggered by users of the Website and information about them are stored in the form of a server login. The data stored in this way are used only for the proper administration of the operation of the Website, ensuring its proper operation and the uninterrupted operation of its individual functionalities.

The following information can be stored as server logs:

1. the make and model of the device on which the page is opened,
2. Hardware ID
3. type and version of the operating system,
4. Date and time of login,
5. Browser name and version
6. IP address of the device.

Logins can also be used to save logs of individual user activities. In this case, the logs are available in the tools designed to handle the individual functionalities of the Website.

13. OTHER TOOLS USED BY THE ADMINISTRATOR

For some of the features on our Website, we use third-party providers. The respective services are usually optional functions that must be explicitly selected or used by you (Google Maps services).

We have entered into contractual agreements with the respective suppliers for the provision or integration of their services and endeavour to ensure that external providers also provide transparent information on the scope of the processing of personal data and comply with data protection law.

SERVICES:

• Google Maps

As part of our Website, we use the Google Maps service made available in connection with some functionalities of the Website (redirection to the location of the Administrator’s investment). This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR, which is also the legal basis for the use of Google Maps. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA (“Google”).

In order to use Google Maps, it may be necessary to store your IP address. This information will generally be transmitted to Google’s servers in the USA and stored there. The Website Administrator has no influence on this transfer of data.

• Google Analytics

Google Analytics uses its own cookies primarily to report on how users interact with the Website. Cookies are used in the case of this service for analytical and statistical purposes of the Administrator (information about the activity of Users and the manner of using the Website).

Importantly, Google Analytics also supports an optional browser add-on that, when installed and activated, disables Google Analytics measurements on all pages viewed by the user: https://tools.google.com/dlpage/gaoptout/.

In some cases, the data collected with the use of the above-mentioned tool may constitute personal data, i.e. information such as: pseudonymous cookie IDs, pseudonymous advertising IDs, IP addresses, other pseudonymous user identifiers. Google Analytics collects IP addresses to ensure a secure use of the service and to inform website owners which countries, regions and cities users are from (“IP geolocation”).

Through the Google Analytics 4 tool, we will monitor our website.

The legal basis for the use of the indicated service against you is consent in accordance with Article 6(1)(a) of the GDPR in connection with the legitimate interest of the administrator, i.e. Article 6(1)(f) of the GDPR.

More information about the service is available at: https://support.google.com/analytics/answer/6004245#zippy=%2Cpliki-cookie-i-identyfikatory-google-analytics

• Google API

Enhanced conversions are a feature that increases the accuracy of conversion measurement and allows you to bid more precisely. It complements your existing conversion tags by sending your own conversion data from your website to Google in encrypted form in a privacy-preserving manner. This feature uses a secure encryption algorithm before sending your own customer data to Google

• FACEBOOK PIXEL

The Facebook Pixel is a snippet of code that we post on our website. Once implemented, we gain access to advanced and effective tools that monitor specific behaviors and collect and analyze data. The Facebook pixel not only optimizes campaign costs, but also improves management and allows you to get the values from your ads that we assumed during the strategy development phase.

The indicated tool is high conversion, i.e. the achievement of the planned goal, which has not been achieved satisfactorily so far. It is a streamlining of processes and a better understanding of our target group. Thanks to the pixel, we find out which of the subpages on our website are selling on Facebook – a conversion or an event specified in such a campaign can be a purchase, a subscription to a newsletter or a transition to a trial period.

14. PROTECTION OF YOUR PERSONAL DATA

Zakład Farmaceutyczny COLFARM S.A., based in Mielec, treats the protection of privacy, including the protection of your personal data, as a priority and makes every effort to ensure that this privacy is protected. We take every precaution to ensure that the personal data provided by the users of the Website is protected against loss, destruction, disclosure, access by unauthorized persons or improper use of data. By taking appropriate actions, users can contribute to increasing the security of their personal data on the Internet (m.in. by frequently changing the access password, using a combination of letters and numbers). Personal data provided during registration on the website and login data are secured during transmission electronically by means of cryptographic personal data protection measures (the security of data transmission is ensured by the use of the SSL (Secure Socket Layer v3) transmission protocol). SSL consists of encrypting data before it is sent from your browser and decoding it when it securely reaches the server that hosts the Website.

Transmitting information over the Internet is not entirely secure; The associated risks are common throughout the network and do not specifically apply to our services. We cannot guarantee the security of your data (including personal data) transmitted to our services; All transmission activities are at your own risk.

You should protect yourself against unauthorized access to your password and computer device. Please remember to log out and close your browser after the session ends. This will help you protect yourself from other people accessing your personal information if you share your computer device or use your computer device in a public place, such as a public network, such as an internet café.

15. UPDATES

Any changes to the provisions of the Privacy Policy, caused in particular by the modernization of the Website, changes in the legal system in the field of privacy protection, enrichment of the catalogue of services offered as part of the Website, will be communicated to users by placing information on the Website website and by sending appropriate information to the e-mail address provided during registration.

16. FINAL PROVISIONS

To the extent not regulated by this Policy, the relevant generally applicable regulations apply, in particular the GDPR and the Act of 12 July 2024. Electronic Communications Law. The User will be informed about any changes introduced to this Policy by publishing a new text of the Policy on the Website and displaying a message at the entrance to the Website. This Policy is effective from 10.04.2026.