NorseCBD is strongly committed to protecting your privacy and complying with your choices. You will be in full control of all data relating to yourself. Both personal and non-personal data and information collected is safeguarded according to the highest privacy and data protection standards adopted worldwide. Specifically, we are in compliance with the EU General Data Protection Regulation (GDPR). We strive to make you feel safe when we collect or share your data and therefore, we want to be transparent on how we collect, use, share and store the information about you and the choices available to you as data subject.
2. Usage of personal data
To offer you the functionalities of the Website and for the technical and functional management thereof
We strive to make our Website easily accessible and to offer you the best possible experience and functionalities. We process technical data of everyone who visits and uses our Website in order to manage it and improve its performance. We may also need to process your personal data so that you can save your data (or preferences) to configure your device to give you a personalized experience. The functionalities of the Website are largely made available through the use of functional cookies.
We process all personal data that you have entered on our website or that is generated by the use of our cookies, including your IP address and which internet browser you use.
(iv) How long?
Storage for this purpose differs per cookie. However, data gathered for this purpose shall never be stored for longer than 2 years.
For answering your questions and handling complaints
If you contact us at our office or through a contact form on our Website, we will use your personal information to answer your question or to handle a complaint.
We process your personal data based on consent and legitimate interest. Where possible, we will ask for you consent before you contact us, such as through the contact form. In any other case, our legitimate interest is formed by our intention to handle your complaints and questions carefully in order to properly run and improve our business.
We process your name, contact details, your correspondence with NorseCBD about your question or complaint and all other personal information that is required to answer your question or handle your specific query and/or complaint. If you include any further personal data in any message or correspondence with us, we may process this as well.
(iv) How long?
We keep your personal data for as long as necessary to complete your request or handle the complaint, plus an additional month, after which the data will be removed from our systems.
The processing of this personal data is based on our legal obligation to provide a way for our data subjects to exercise their rights.
We process contact information such as your e-mail address and personal information such as your name.
(iv) How long?
Due to the nature of this purpose, we must keep this information for an unlimited period.
For relationship management and marketing
NorseCBD uses the information in the contractual relationships database to send you newsletters and to otherwise update you on developments within NorseCBD or affiliated entities. We also use your personal data for the development, execution and analysis of market research and marketing strategies.
We process your personal data for this purpose based on your consent. You can withdraw your consent at any time.
For this purpose, we process your contact details such as your address and e-mail address and personal details such as your name and date of birth, contact preferences, and correspondence with us.
(iv) How long?
Personal data is stored for a maximum of 10 years after the termination of our relationship. After this period your personal data will be deleted from our systems.
To create an account on the Website and to process your order
Upon placing an order through the Website, you have to create an account. Given the nature of our business, we establish contractual relationships with our customers, and we need to be able to perform our legal obligations under the applicable terms and conditions. We process your personal data to execute your order, as well as for administrative purposes, such as sending invoices.
Data will be processed on the basis of your consent. You shall be asked to give consent upon registering for your account on the Website. We also process data for this purpose on the basis of our contract with you, which is established once you accept the applicable Terms and Conditions. In order to meet our obligations thereunder, we will need to process your data.
For this purpose, we process your contact details such as your (delivery) address, telephone number and e-mail address, personal data such as name and date of birth, payment and credit information, order history and other data stored in our database with all relations of NorseCBD.
(iv) How long?
Your personal information will be stored for up to 7 years after the end of our relationship with you. After this period your personal data will be deleted from our systems.
3.1 Functional Cookies
NorseCBD uses a cookie to see whether a visitor to our website accepts the cookies on our website or not. This functional cookie registers your consent.
3.2 Analytics Cookies
Analytics cookies are used by NorseCBD to collect information about how our visitors use the Website. For example, we can track how long visitors stay on certain webpages, and what parts of the Website they visit. We use the information gathered by analytics cookies in aggregated form, which means that the information cannot be traced to a single individual.
You can set your browser to inform you as soon as you receive a cookie or to deactivate cookies. This might mean that our Website may not function optimally.
Here we offer some specific information about cookies for the most commonly used browsers, and more specifically, how to disable these:
Cookies and Internet Explorer, see: https://privacy.microsoft.com/en-us/privacy#maincookiessimilartechnologiesmodule
Cookies and Firefox, see: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Cookies and Google Chrome, see: https://policies.google.com/technologies/managing?hl=en
Cookies and Safari, see: https://www.apple.com/legal/privacy/en-ww/cookies/
Cookies and Opera, see: https://help.opera.com/en/latest/web-preferences/
We insist on not processing any personal data of children under the age of 16, unless this is explicitly consented to by a parent or legal guardian. However, as it is hard to detect whether we are doing so, we strongly encourage you to inform us if you have reason to believe we process the personal data of a minor. We will delete this personal data instantly.
5. Which parties have access to your personal data?
Within NorseCBD, our employees, contractors, agents and directors have access to personal data, but only to the extent necessary to properly perform their individual tasks.
NorseCBD only shares personal information with third parties if it is necessary to serve the applicable purpose as set out above. When a third party processes your personal data, this is only possible according to the instructions of NorseCBD. They therefore act as our data processor. In all cases, we will ensure that third parties with access to your personal information have implemented appropriate technical and organizational measures to maintain our intended level of privacy and security. We will conclude the necessary agreement with the data processor(s), whereby we include obligations to ensure that your personal data is only processed so that the data processor can fulfil his duty to provide services to us.
Under these conditions, the following third parties will have access to your personal data:
• Our internal marketing team may get access to any data relating or useful for marketing.
• Third-party payment service providers get access to your payment information when you place an order through our Website.
In all other cases, your personal information will not be provided to third parties, unless required by law. NorseCBD will never sell your personal data.
Your personal information is stored securely at all times. We value the protection of your privacy. We have taken strong security measures to protect your data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. We further ensure that personal data is only accessible to those specific persons who are authorized based on their function.
In addition, we have implemented measures to guarantee your safe visit to and use of our Website. This way we prevent misuse of your data. These measures include computer security and protected files and facilities. Your connection to our Website is safe through activation of Secure Socket Layer (SSL) as well as the use of firewalls. Any data stored outside the Website is secured with encryption.
NorseCBD has taken the necessary technical and organizational measures to prevent, identify, report and deal with data protection breaches. However, in the event that a data breach occurs, NorseCBD will, without undue delay and where possible, not later than 72 hours after being notified, report the breach of personal data to the Spanish Data Protection Authority.
7. Your rights
You have the right to view, correct, restrict or delete your personal data that we have stored, you also have the right to the portability of your data. You can ask us to not send marketing communications and not to use your personal data for direct marketing purposes. You can opt out of receiving email newsletters and other marketing communications by following the opt-out instructions provided to you in those emails.
You may withdraw your previously granted permission to process your personal data or to object to the processing of your personal data at any time.
Finally, you have the right to have a file sent to you with details of which of your personal data we have stored. You can send us a request to receive such a file in writing. Every request is subject to applicable law, which means that we may have to store the personal information.
We also want to inform you and remind you that you can file a formal complaint with the Spanish Data Protection Authority if you believe your privacy rights have been violated.
If you object to the use of your personal data by NorseCBD, you want your personal data to be forgotten, to withdraw your previously given permission to process your personal data, or if you have another request regarding your personal data information, you can request it here at any time:
• Carrer de Trafalgar 4, 08010 Barcelona
• Phone number
Our Website may display links to other websites. Unless these other websites are affiliated with NorseCBD, we are not responsible for the privacy policies that these other websites use, nor for its content and security. We advise you to inform yourself by reading the privacy policies on these websites.
Questions or comments?