Privacy Policy

Who we are

Cannatraff is an advertising brand operated by OFFSET, based in Prague, Czech Republic. OFFSET is the data controller for the personal data described here. "We" in this policy means Cannatraff and OFFSET.

• Operator: OFFSET
• Legal name: will be added here
• Company ID (IČO): will be added here
• Address: Prague, Czech Republic
• Email: will be added here

What we collect and why

When you visit this site

Your IP address, browser and device details, the pages you request and the time of the request. We need this to deliver the site and keep it secure. Our legal basis is our legitimate interest in running a safe website (GDPR Art. 6(1)(f)). Our hosting provider keeps these logs for a limited time.

When you contact us, book a call or ask for our playbook

Your name, contact details, store website, country and whatever you choose to tell us. With a request from our ad page, we also note the page and ad link that brought you here. We use this to reply, prepare the call and see if we can help. Our legal basis is taking steps before a contract at your request (Art. 6(1)(b)) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). We keep it for up to 24 months after our last contact, unless you become a client.

When you become a client

Contact and billing details and the information we need to do the work. Our legal basis is the contract (Art. 6(1)(b)) and our legal duties in tax and accounting (Art. 6(1)(c)). We keep it for as long as the contract runs and then for as long as the law requires.

Analytics and marketing cookies

We don't use any right now. If we add them, they stay off unless you allow them (Art. 6(1)(a)), and you can change your mind at any time. See the Cookie Policy.

Who receives your data

• Our hosting provider, Vercel Inc., based in the USA.
• Cal.com, Inc., based in the USA, which runs our booking calendar. When you book a call, it receives the name, email and notes you enter. See the Cal.com privacy policy.
• Telegram, which delivers each request from our ad page to our team chat.
• Google LLC, based in the USA, whose Google Sheets keeps our list of requests.
• The email and accounting tools we use to run the business.
• Authorities, when the law requires it.

We don't sell your personal data.

Transfers outside the EU

Some providers, including Vercel, Cal.com and Google, are based outside the EU. When your data goes there, we rely on an EU adequacy decision or standard contractual clauses.

Your rights

You can ask us to:

• show you the data we hold about you and give you a copy;
• correct or delete it;
• limit how we use it, or object to that use;
• send it to you or another company in a common format;
• stop using it where we rely on your consent. This doesn't affect what we did before.

You can also complain to the Czech Office for Personal Data Protection (ÚOOÚ) at uoou.gov.cz or to the data protection authority in your own country.

Automated decisions

We don't make decisions about you using automated means alone.

Age

This site is for businesses and adults. It is not meant for anyone under 18, and we don't knowingly collect their data.

Changes

If this policy changes, we update it here and change the date at the top.

Contact

To use any of these rights or ask a question, write to the email address under "Who we are".