Add Appointment Reminder
Apple Calendar Google Calendar

Opens your calendar app with appointment details

Privacy Policy

Effective Date: 14/07/2030
Last Updated: 14/07/2025

1. INTRODUCTION

CannHub (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our platform to discover cannabis spots such as cannabis clubs, CBD stores, and headshops.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the European Union.

2. DATA CONTROLLER

CannHub
Torreta de miramar 1
Valencia, Spain
info@cannahub.cc
+34 621138213

3. WHAT PERSONAL DATA WE COLLECT

We collect the following categories of personal data:

3.1 Identity Verification Data

  • Document numbers only (ID card numbers, passport numbers, driver’s license numbers)
  • Full name
  • Date of birth (to verify you are of legal age)
  • Document type (ID card, passport, driver’s license)

3.2 Contact Information

  • Email address
  • Phone number
  • Mailing address (if applicable)

3.3 FastTrack Service Data

  • QR codes generated for club access
  • Check-in timestamps and location data
  • Club visit history

3.4 Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Usage analytics and cookies

4. HOW WE COLLECT YOUR DATA

We collect personal data through:

  • Direct input when you register on our platform and manually enter your document number
  • FastTrack QR code scanning at partner establishments
  • Automatic collection through website usage and cookies
  • Partner clubs when you visit using our FastTrack service

5. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds under GDPR:

5.1 Legitimate Interests (Article 6(1)(f))

  • Identity verification to prevent identity fraud and ensure club security
  • Age verification to comply with legal requirements for age-restricted venues
  • Platform security and fraud prevention

5.2 Contract Performance (Article 6(1)(b))

  • Service delivery for FastTrack access and club finder services
  • Account management and customer support

5.3 Legal Compliance (Article 6(1)(c))

  • Age verification as required by local cannabis club regulations
  • Record keeping as mandated by applicable laws

5.4 Consent (Article 6(1)(a))

  • Marketing communications (only with explicit consent)
  • Optional data sharing with partner establishments

6. HOW WE USE YOUR PERSONAL DATA

6.1 Identity Verification

  • Verify your identity using document numbers to prevent impersonation and fraud
  • Ensure only authorized individuals access partner clubs
  • Maintain secure access records for partner establishments

6.2 Age Verification

  • Confirm you meet minimum age requirements (18+ or as required by local law)
  • Comply with legal obligations regarding age-restricted venues

6.3 Service Provision

  • Generate and manage FastTrack QR codes
  • Enable seamless access to partner cannabis clubs
  • Provide customer support and account management

6.4 Communication

  • Send service-related notifications
  • Provide customer support
  • Send marketing communications (only with consent)

6.5 Platform Security

  • Detect and prevent fraudulent activities
  • Maintain platform integrity and user safety
  • Comply with legal and regulatory requirements

7. DATA SHARING AND DISCLOSURE

7.1 Partner Cannabis Clubs

We share limited verification data only with the specific club you request FastTrack access to:

  • Verify your identity when you visit using FastTrack
  • Confirm your eligibility to access age-restricted venues
  • Maintain security and prevent unauthorized access

Data shared includes: Name, age verification status, document number, document type, FastTrack QR code

Important: Only CannHub and the specific club you choose to visit can access your personal information. Your data is never shared with clubs you haven’t requested access to.

7.2 Service Providers

We may share data with trusted third-party service providers for:

  • Identity verification services
  • Cloud hosting and data storage
  • Payment processing
  • Customer support tools

7.3 Legal Requirements

We may disclose personal data when required by:

  • Legal obligations under applicable laws
  • Court orders or regulatory requests
  • Protection of rights and prevention of fraud

7.4 Business Transfers

In case of merger, acquisition, or sale of assets, personal data may be transferred as part of the business transaction.

8. DATA RETENTION

We retain personal data for the following periods:

  • Document numbers and identity data: 3 years after account closure or last club visit
  • Contact information: Until account deletion or 2 years of inactivity
  • FastTrack access logs: 1 year from the date of club visit
  • Marketing consent records: Until consent is withdrawn
  • Legal compliance data: As required by applicable regulations

9. INTERNATIONAL TRANSFERS

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable

10. YOUR RIGHTS UNDER GDPR

You have the following rights regarding your personal data:

10.1 Right of Access (Article 15)

Request copies of your personal data and information about how we process it.

10.2 Right to Rectification (Article 16)

Request correction of inaccurate or incomplete personal data.

10.3 Right to Erasure (Article 17)

Request deletion of your personal data in certain circumstances.

10.4 Right to Restrict Processing (Article 18)

Request limitation of processing in specific situations.

10.5 Right to Data Portability (Article 20)

Request transfer of your data to another service provider.

10.6 Right to Object (Article 21)

Object to processing based on legitimate interests or for marketing purposes.

10.7 Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling.

To exercise these rights, contact us at [privacy@cannahub.com] with proper identification.

11. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data:

11.1 Technical Safeguards

  • End-to-end encryption for data transmission
  • Secure data storage with encrypted databases
  • Access controls and authentication systems
  • Regular security audits and vulnerability assessments

11.2 Organizational Measures

  • Staff training on data protection
  • Data processing agreements with service providers
  • Incident response procedures
  • Regular policy reviews and updates

11.3 QR Code Security

  • Time-limited QR codes that expire after use
  • Encrypted QR data with unique identifiers
  • Audit trails for all FastTrack accesses

12. COOKIES AND TRACKING

We use cookies and similar technologies to enhance your experience:

12.1 Essential Cookies

Required for basic platform functionality and security.

12.2 Analytics Cookies

Help us understand how you use our platform (with consent).

12.3 Marketing Cookies

Used for advertising and personalization (with consent).

You can manage cookie preferences through your browser settings or our cookie consent tool.

13. MINORS’ PRIVACY

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from minors under the legal age. If we discover that we have collected data from a minor, we will delete it immediately.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

  • Post updates on our website
  • Notify users via email for significant changes
  • Maintain previous versions for reference

15. CONTACT INFORMATION

15.1 General Privacy Inquiries

Email: info@cannahub.com
Phone: +34 621138213
Address: Torreta de Miramar 1, Valencia, Spain

15.2 Data Protection Officer

If we have appointed a Data Protection Officer, contact details will be provided here.

15.3 Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your data protection rights.

Example EU Supervisory Authorities:

  • Spain: Agencia Española de Protección de Datos (AEPD)
  • Germany: Federal Commissioner for Data Protection and Freedom of Information
  • Netherlands: Autoriteit Persoonsgegevens (AP)

16. CONSENT WITHDRAWAL

You can withdraw your consent for data processing at any time by:

  • Updating your account settings
  • Contacting our privacy team
  • Using unsubscribe links in marketing emails

Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

Last Updated: 14/07/2025
Version: 1.2

For questions about this Privacy Policy, please contact us at privacy@cannahub.com