Privacy Policy
Privacy Policy
Last Updated: 25-2-2026
1. Introduction
Welcome to Jack Herer (the “Site”), operated by Canebe (“we,” “us,” or “our”). We are committed to protecting your personal data and respecting your privacy rights.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, in compliance with the General Data Protection Regulation (GDPR) and applicable European data protection laws.
Please read this policy carefully. If you do not agree with the terms of this policy, please do not access the Site.
2. Data Controller
For the purposes of the GDPR, the Data Controller responsible for your personal data is:
- Company Name: Canebe s.r.o.
- Registered Address: Rybná 716/24,
110 00 Prague 1,
Czech Republic. - Email: info@jackherer.com
- Phone: +1 (566) 237-4687
3. What Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: [e.g., Name, username, title]
- Contact Data: [e.g., Email address, telephone number, billing address]
- Technical Data: [e.g., IP address, browser type, time zone setting, operating system]
- Usage Data: [e.g., Information about how you use the Site, products, and services]
- Marketing Data: [e.g., Your preferences in receiving marketing from us and your communication preferences]
- Financial Data: [e.g., Bank account or payment card details] (Only if applicable)
4. How We Use Your Data (Legal Basis)
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
| Purpose/Activity | Type of Data | Legal Basis for Processing |
|---|---|---|
| To register you as a new customer | Identity, Contact | Performance of a contract |
| To process and deliver your order | Identity, Contact, Financial, Transaction | Performance of a contract |
| To manage our relationship with you | Identity, Contact, Profile, Marketing | Performance of a contract / Legitimate Interest |
| To enable you to partake in a prize draw, competition or complete a survey | Identity, Contact, Profile, Usage, Marketing | Consent |
| To administer and protect our business and Site | Identity, Contact, Technical | Legitimate Interest (for running our business, provision of administration and IT services, network security) |
| To deliver relevant website content and advertisements to you | Identity, Contact, Profile, Usage, Marketing, Technical | Legitimate Interest (to study how customers use our products/services, to develop them, to grow our business) |
| To use data analytics to improve our website | Technical, Usage | Legitimate Interest (to define types of customers for our products and services, to keep our Site updated and relevant) |
| To make suggestions and recommendations to you | Identity, Contact, Technical, Usage, Profile | Legitimate Interest (to develop our products/services and grow our business) |
Where we rely on Legitimate Interest, we have assessed that your rights do not override our business interest. Where we rely on Consent, you have the right to withdraw it at any time.
5. Data Sharing and Disclosures
We may share your personal data with the parties set out below for the purposes set out in Section 4:
- Internal Third Parties: [e.g., Other companies in our group acting as joint controllers or processors].
- External Third Parties:
- Service providers acting as processors based in [COUNTRY/REGION] who provide [IT, PAYMENT, SHIPPING, ANALYTICS] services.
- Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers.
- Tax authorities, regulators, and other authorities acting as processors or joint controllers.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
6. International Data Transfers
Many of our external third parties are based outside the European Economic Area (EEA). Where we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Standard Contractual Clauses).
- Where we use providers based in the US, we may transfer data to them if they are part of the Data Privacy Framework (if applicable).
Please contact us at info@jackherer.com if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Customer Data: Retained for 5 years after the end of the contract for tax and legal purposes.
- Marketing Data: Retained until you unsubscribe or request deletion.
- Technical Logs: Retained for 6 months for security purposes.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm, and applicable legal requirements.
8. Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request copies of your personal data.
- Right to Rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure: You can request that we erase your personal data, under certain conditions (also known as the “Right to be Forgotten”).
- Right to Restrict Processing: You can request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing: You can object to our processing of your personal data, under certain conditions (specifically for direct marketing).
- Right to Data Portability: You can request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
To exercise any of these rights, please contact us at info@jackherer.com. We have one month to respond to your request.
9. Cookies
Our Site uses cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site.
- For detailed information on the cookies we use and the purposes for which we use them, see our separate.
- You can manage your cookie preferences via our Cookie Banner or your browser settings.
10. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.