CannaVerdict does not sell personal data and does not enable optional advertising or behavioural analytics by default. Data is processed where necessary for website delivery, communication, security, editorial reporting and rights management.
1. Scope and privacy contact
This Privacy Policy applies to CannaVerdict.com, including winner profiles, category pages, editorial content and legal documents. For privacy questions, access requests, corrections, objections or deletion requests, contact info@cannaverdict.com.
CannaVerdict processes personal data only where a lawful basis exists and only to the extent reasonably necessary for website operation, security, communication, editorial administration and the establishment, exercise or defence of legal claims.
2. Categories of data
Depending on how the website is used, the following categories may be processed:
- technical access data, including IP address, timestamp, requested URL, referrer, browser, operating system, device characteristics and response status;
- communication data contained in emails, including sender address, name, company, attachments and message content;
- editorial and professional-identification data concerning publicly visible companies, brands or industry professionals;
- official website, social-media and business-contact information used to identify award recipients;
- browser preference data, such as acknowledgement of the cookie notice;
- records required to investigate security incidents, correction requests, rights claims or disputes.
3. Purposes and lawful bases
Processing may be based on Article 6(1)(b) GDPR for requested pre-contractual communication, Article 6(1)(c) GDPR for legal obligations, Article 6(1)(f) GDPR for legitimate interests, or consent under Article 6(1)(a) GDPR where consent is specifically requested.
Legitimate interests may include secure website operation, prevention of abuse, responding to inquiries, documenting award results, editorial reporting concerning professional activity, maintaining accurate links, protecting rights and resolving disputes.
4. Website delivery, hosting and server logs
When the website is accessed, the hosting infrastructure processes technical data so that the requested content can be delivered. Logs may be used to diagnose errors, maintain stability, prevent misuse, detect attacks and preserve evidence of security incidents.
The legal basis is Article 6(1)(f) GDPR. Retention should be limited to a period proportionate to security and operational purposes, subject to the actual hosting configuration and any legal preservation requirement.
5. Contact by email
When a visitor contacts CannaVerdict by email, the information in the message is processed to review, route and respond to the request. This may include general inquiries, press contact, partnerships, accessibility feedback, privacy requests, legal notices, correction requests and questions about winner profiles.
Messages are normally retained only as long as necessary to handle and document the communication, generally no longer than 180 days unless statutory retention duties, an ongoing business relationship, fraud prevention, a dispute or legal claims require longer retention.
6. Cookies, local storage and similar technologies
The current website does not enable optional analytics, behavioural advertising, remarketing or cross-site profiling by default. A local-storage entry may remember that the cookie notice has been acknowledged. It is not used to follow visitors across websites or build an advertising profile.
Further information is provided in the Cookie Policy.
7. Winner profiles and publicly available professional information
CannaVerdict publishes award results and editorial profiles concerning companies, brands, products and industry professionals. Content may include official names, publicly available logos or images, websites, social-media links, professional roles, category information and editorial descriptions.
Where information relates to an identifiable natural person, processing may be based on Article 6(1)(f) GDPR. The legitimate interests are editorial reporting, documenting award results, maintaining an industry reference and communicating information concerning professional activity. CannaVerdict seeks to use relevant, proportionate and publicly verifiable information.
Individuals may request correction of inaccurate facts or raise a substantiated objection by contacting info@cannaverdict.com. Requests should identify the page, disputed information and supporting evidence.
8. Sources of professional information
Information may be obtained from official websites, public social-media profiles, event materials, public professional appearances, press materials, direct observation and communications received from the relevant organisation or person.
9. External links
Winner pages may link to third-party websites or social-media services. Following such a link causes the external provider to process data under its own privacy rules. CannaVerdict does not embed those services by default and does not control their processing.
10. Recipients and service providers
Personal data may be accessible to authorised persons working for CannaVerdict and to providers needed for hosting, security, maintenance and email delivery. Where a provider processes data on behalf of CannaVerdict, a processing agreement should be used where required by Article 28 GDPR.
Data is not sold. Disclosure may occur where required by law, ordered by a competent authority, necessary to protect users or systems, or required for legal claims.
11. International transfers
If a provider processes data outside the European Economic Area, the transfer must rely on an adequacy decision, approved safeguards such as standard contractual clauses, or another lawful transfer mechanism. Transfer risks should be assessed where required.
12. Retention and deletion
Data is retained only for as long as needed for the relevant purpose, subject to statutory obligations and legal claims. When data is no longer required, it should be deleted or anonymised unless continued storage is legally permitted or required.
13. Automated decision-making
The public website does not use automated decision-making producing legal or similarly significant effects within Article 22 GDPR. Award selection is an editorial and expert-led process rather than an automated personal-scoring system.
14. Data-subject rights
Subject to legal conditions, individuals may request access, rectification, erasure, restriction, data portability and information about recipients. They may object to processing based on Article 6(1)(f) GDPR for reasons arising from their particular situation. Consent can be withdrawn for future processing where consent is the basis.
Requests may be sent to info@cannaverdict.com. Identity may need to be verified where necessary to protect the data concerned. Individuals also have the right to complain to a competent supervisory authority.
15. Security measures
CannaVerdict uses proportionate technical and organisational measures intended to protect data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access. Measures may include encrypted transport, restricted access, secure configuration, software updates, backups and log review.
No internet transmission or storage system can be guaranteed to be completely secure.
16. Children
The website is directed at an adult professional audience and is not designed to knowingly collect personal data from children. CannaVerdict does not sell age-restricted products through the website.
17. Policy updates
This policy may be updated when technology, service providers, legal requirements or processing activities change. The date shown above identifies the current published version.