Privacy Policy
Controller
The controller responsible for data processing on this website is CanniFex GmbH, Hauptstrasse 19a, 8467 Truttikon, Switzerland. Please direct any data protection enquiries to the email address given below.
What data we process
When you open a customer account, we process your contact and address details, your orders, and technical login data. For contact enquiries, we process the information you provide.
Purpose of processing
We process your data solely to fulfil orders, provide customer support, and meet legal obligations. Data is passed on to third parties only where necessary for shipping and accounting.
Cookies
We use only technically necessary cookies: a session cookie for sign-in and a cookie for your language preference. No tracking takes place.
Storage location
The website and database are hosted with a cloud provider. Passwords are stored exclusively in encrypted (hashed) form.
Processors and retention
We use the following service providers: the website and database are hosted with Railway Corp. (USA), so data may be processed outside Switzerland and the EU. Emails are sent via Google Workspace (Google Ireland Ltd. / Google LLC). Orders are handled in our own fulfilment system (Versand Hub), which receives the name, delivery address, email address, phone number and the ordered items. We keep account and order data for the duration of the business relationship and thereafter for the statutory retention periods (ten years for accounting records in Switzerland); contact enquiries are kept for up to twelve months. You can request access to, correction or deletion of your data at any time by email to info@cannifex.ch.
Your rights
Under the Swiss Federal Act on Data Protection (FADP) you have the right to access, correct and delete your data. Please contact us by email.
Email: info@cannifex.ch