Privacy Policy

This Privacy Policy describes how Adcraft Company s.r.o. processes personal data when visitors use this website, submit a B2B inquiry, request a wholesale pricelist, request documentation, contact the company, or otherwise interact with website features.

1. Privacy Policy

This website is operated as a B2B cannabinoid wholesale catalog and lead-generation platform. It does not provide checkout, online consumer purchasing, or payment processing functions.

2. Controller

Adcraft Company s.r.o.
ADRESA: Kaprova 42/14, Staré Město, 110 00 Praha
VAT: CZ09933239
Website: cannoryx.com
Contact: jsme@adcraft.cz

3. What personal data we may process

Business inquiry data:

  • name
  • company name
  • business email
  • country
  • inquiry type
  • interested product category
  • estimated volume or project scope
  • message content
  • source page of inquiry where applicable

Technical website data:

  • IP address
  • device and browser information
  • approximate location derived from technical data where applicable
  • pages visited
  • timestamps
  • referrer
  • cookie identifiers where applicable

Communication data:

  • email correspondence
  • follow-up communication related to B2B inquiries

4. Purposes of processing

  • responding to B2B inquiries
  • providing requested wholesale or category information
  • handling documentation or COA-related requests where applicable
  • discussing category-specific commercial inquiries
  • verifying whether an inquiry is a business inquiry
  • maintaining website security and functionality
  • improving website performance and usability
  • complying with legal obligations where applicable
  • protecting legal and business interests

5. Legal bases

  • Legitimate interests: responding to B2B inquiries, maintaining business communications, website security, fraud/spam prevention, improving the website, and protecting business interests.
  • Steps prior to entering into a contract or contract performance: where an inquiry may lead to a commercial B2B relationship.
  • Legal obligation: where processing is necessary to comply with applicable legal, accounting, tax, or regulatory obligations.
  • Consent: where required, for example for non-essential cookies, analytics tools, or optional marketing communications, if enabled.

6. Cookies and analytics

This website may use essential cookies or similar technologies required for website operation. If analytics tools are enabled, they may include Google Analytics 4, Microsoft Clarity, Vercel Analytics, or other tools that are actually configured.

Non-essential cookies and analytics technologies should be used only where appropriate consent has been obtained, unless a different legal basis is validly applicable under law.

7. Recipients and processors

Personal data may be processed by the following categories of recipients where necessary:

  • hosting and infrastructure providers used for website operation
  • website deployment platform
  • form backend and communication provider (for B2B inquiry handling)
  • email delivery provider (for inquiry notifications)
  • analytics provider, if enabled and lawfully configured
  • CRM or lead storage tool, if used for business follow-up
  • professional advisers where necessary
  • public authorities where legally required

8. International transfers

Some providers may process data outside the European Economic Area depending on selected tools and provider configuration. Where this occurs, appropriate safeguards should be used, such as an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.

9. Data retention

  • B2B inquiry data: retained for as long as necessary to respond to the inquiry and manage potential or existing business relationship.
  • Unsuccessful or inactive inquiries: typically up to 24 months unless a longer retention period is justified.
  • Contract/accounting/legal records: retained as required by applicable law.
  • Analytics data: according to the configured retention period of the analytics tool.
  • Technical logs: retained for a limited period necessary for security and website operation.

10. Data subject rights

You may have the right to:

  • access personal data
  • rectify inaccurate personal data
  • erase personal data where legally applicable
  • restrict processing where legally applicable
  • object to processing where legally applicable
  • data portability where applicable
  • withdraw consent where processing is based on consent
  • not be subject to decisions based solely on automated processing where applicable

Requests may be sent to: jsme@adcraft.cz

11. Supervisory authority

Data subjects may lodge a complaint with the Czech supervisory authority:
Urad pro ochranu osobnich udaju
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
Website: https://uoou.gov.cz

12. Automated decision-making

This website does not use automated decision-making producing legal or similarly significant effects.

13. Security

Adcraft Company s.r.o. uses appropriate technical and organizational measures to protect personal data. However, no website or electronic communication can be guaranteed to be completely secure.

14. B2B and regulated product context

This website is intended for business inquiries only. Product category information is provided for lawful B2B commercial evaluation and does not constitute consumer advice, medical advice, legal advice, or a guarantee of product availability in any jurisdiction.

15. Updates to this Privacy Policy

This Privacy Policy may be updated from time to time. The latest version will be published on this page.