Privacy Policy

This Privacy Policy describes how blackseacbd.eu (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

General Information

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at ryan@blackseacbd.eu or by mail using the details provided below:

The confidentiality of your personal data is one of the main concerns of BLACKSEA CBD S.R.L., located in Bucharest, Sector 3, Maximilian Popper Street, Nr. 23, Et. 4, Ap. 10, Jud. Bucharest, Romania, as data controller.

Unique registration code RO44633853 from 23/07.2021.

Order number in the commercial register J40/12679/2021 from 23.07.2021.

European Unique Identifier (EUID) ROONRC.J40/12679/2021.

This document is intended to inform you about the processing of your personal data in the context of the use of the www.blackseacbd.eu  ("the Site").

 Categories of personal data processed

II.1. When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

If you are a customer of the Site, BLACKSEA CBD S.R.L. will process your personal data, such as your first and last name, telephone number, e-mail address, billing address, delivery address, data relating to your use of the Site, e.g. your behaviour/preferences/habits within BLACKSEA CBD S.R.L., as well as any other categories of data that you provide directly in the context of creating your user account, in the context of placing an order through the Site or in any other way resulting from your use of the Site.

If you use your Facebook or Google account to create your user account on the Site, BLACKSEA CBD S.R.L. will process the following public profile data displayed by those applications: username, email address.

If you choose to create your user account only before completing the order of a product available on the Site, you will be asked for your e-mail address on the basis of which an account will be automatically created. If you do not complete your order, the e-mail address and other data provided will not be stored by BLACKSEA CBD S.R.L. and the account created will be automatically deleted.

II.2. If you are a visitor to the Site, BLACKSEA CBD S.R.L. will process your personal data that you provide directly in the context of your use of the Site, such as the data you provide in the contact/questions/complaints section, to the extent that you contact us in this way.

• Device information
• Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
• Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels 
• Disclosure for a business purpose: shared with our processor Shopify 
• Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site 
• Order information
• Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
• Source of collection: collected from you.
• Disclosure for a business purpose: shared with our processor Shopify and SHIPPING AND FULFILLMENT APPS.
• Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers) email address, and phone number.
• Customer support information
• Purpose of collection: To confirm sales and for support purposes. 
• Source of collection: collected from you.
• Disclosure for a business purpose: Shopify or Shipping Applications.
• Personal Information collected: Web behavior, IP, Name, Email, Address, Credit Card, Company, whatsapp, signal, telegram, and apps as they relate to a mobile telephone number.
• Purpose of collection: to provide customer support.
• Source of collection: collected from you
• Disclosure for a business purpose: Shopify
• Personal Information collected: As Above.

Minors

The Site is not intended for individuals under the age of 18 years. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.

III.1. If you are a customer of the Site, BLACKSEA CBD S.R.L. processes your personal data as follows:

• for the performance of the contractual relationship between you and BLACKSEA CBD S.R.L., respectively for taking, validating, dispatching and invoicing the order placed on the Site, informing you about the status of the order, organising the return of ordered products, etc.

Basis: The processing of your data for this purpose is based on the contract concluded between you and BLACKSEA CBD S.R.L., defined in the Terms and Conditions. The provision of your personal data is necessary for the performance of this contract. Refusal to provide data may result in the impossibility of the contractual relationship between you and BLACKSEA CBD S.R.L. to be fulfilled.

• for the fulfilment of legal obligations incumbent on BLACKSEA CBD S.R.L. in the context of the services provided through the Site, including obligations in tax matters, as well as in archiving matters.

Basis: The processing of your data for this purpose is necessary on the basis of legal obligations. Providing your data for this purpose is necessary. Refusal to provide data may result in BLACKSEA CBD S.R.L. being unable to comply with its legal obligations and therefore unable to provide you with services through the Site.

• for marketing activities, respectively for the transmission of commercial communications on products and services offered by BLACKSEA CBD S.R.L. through the Site by means of remote communication (e-mail, sms).

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of your data for this purpose by ticking the appropriate box at the time of account creation, or subsequent to account creation, under My Account Information. To unsubscribe from receiving such commercial communications you can use the option at the end of each email/sms containing commercial communications. In addition, you can unsubscribe by going to the My Account Information section.

Providing your data for this purpose is voluntary. Refusing to provide consent to the processing of your data for this purpose will not have negative consequences for you.

Basis: The processing of your data for this purpose is based on BLACKSEA CBD S.R.L. legitimate interest in continuously improving the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.

III.2. If you are a visitor to the Site, BLACKSEA CBD S.R.L. processes your personal data as follows:

• for marketing activities, respectively for the transmission, by means of remote communication (e-mail, sms), of commercial communications regarding the products and services offered by BLACKSEA CBD S.R.L. through the Site.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of your data for this purpose by completing and ticking the appropriate box in the newsletter subscription form available on the Site. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/sms containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent to the processing of your data for this purpose will not have negative consequences for you.

• to resolve complaints, grievances and to monitor traffic and improve your experience on the Site.

Basis: The processing of your data for this purpose is based on the legitimate interest of BLACKSEA CBD S.R.L. to ensure the proper functioning of the Site, as well as to continuously improve the experience of visitors to the Site, including by resolving various comments, questions or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will have no negative consequences for you.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
• We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We may utilize third party softwares such as ClickFunnels.com. We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

• BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads]

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

• Your consent;
• The performance of the contract between you and the Site;
• Compliance with our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
• Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

 Duration for which we process your data

As a matter of principle, BLACKSEA CBD S.R.L. will process your personal data only to the extent necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and thereafter in accordance with the legal obligations incumbent on BLACKSEA CBD S.R.L. (e.g. in the case of financial-accounting supporting documents for which the retention period prescribed by law is 10 years from the end of the financial year in which they were drawn up).

If you are a customer and you exercise the option to delete your user account by clicking on the Delete Account button in the My Account Information section, BLACKSEA CBD S.R.L. will interpret this action as your option to unsubscribe from receiving commercial communications by which we keep you informed about the products and services offered through the site. In this regard, if you choose to delete your user account, we will no longer send you e-mails and/or sms of this kind. However, we would like to inform you that deleting your account will not automatically result in the deletion of your personal data. If you do not want your personal data to be processed or if you want your data to be deleted, you can exercise your rights as detailed in point VII below. If you request the deletion of your account, but there is at least one active order on that account, the request for deletion of the account can only be registered after the delivery of the products and the completion of the last active order.

If you withdraw your consent to the processing of your data for marketing purposes, BLACKSEA CBD S.R.L. will cease processing your personal data for this purpose, without however affecting the processing carried out by BLACKSEA CBD S.R.L. on the basis of the consent expressed by you prior to your withdrawal of consent.

Disclosure of personal data

In order to fulfil the processing purposes, BLACKSEA CBD S.R.L. may disclose your data to partners, third parties or entities that support BLACKSEA CBD S.R.L. in carrying out the activity through the Site (e.g. courier companies, IT service providers), or to central/local public authorities, in the following cases listed by way of example:

• for the administration of the Site;

• in cases where such communication would be necessary for the awarding of prizes or other facilities to data subjects obtained as a result of their participation in various promotional campaigns organised by BLACKSEA CBD S.R.L. through the Site;
• to maintain, customize and improve the Site and the services provided through it;

• for performing data analysis, testing and research, monitoring usage trends and activity, developing security features and user authentication;

• for sending commercial marketing communications, under the conditions and within the limits provided by law;

• where disclosure of personal data is required by law, etc.

 Transfer of personal data

Personal data provided to BLACKSEA CBD S.R.L. may be transferred outside Romania, but only to countries in the European Union.

Your rights

• Under the conditions laid down in the legislation on the processing of personal data, as data subjects, you have the following rights:
• the right to information, respectively the right to receive details of the processing activities carried out by BLACKSEA CBD S.R.L., as described in this document;
• the right of access to data, respectively the right to obtain confirmation from BLACKSEA CBD S.R.L. regarding the processing of personal data, as well as details of processing activities such as the way in which the data are processed, the purpose for which the processing is carried out, the recipients or categories of recipients of the data, etc;
• the right to rectification, respectively the right to obtain the correction, without justified delay, by BLACKSEA CBD S.R.L. of inaccurate/unjustified personal data, as well as the completion of incomplete data; the rectification/completion will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate efforts.

• the right to erasure of data, without undue delay, ("right to be forgotten"), if one of the following grounds applies:

• they are no longer necessary for the purposes for which they were collected or processed;
• where consent is withdrawn and there is no other legal basis for the processing;
• where the data subject objects to the processing and there are no legitimate grounds for objecting to the processing;
• if the personal data have been unlawfully processed;
• if the personal data must be erased to comply with a legal obligation;
• personal data have been collected in connection with the provision of information society services in accordance with Union or national law governing the controller.

• It is possible that, following the request for deletion of the data BLACKSEA CBD S.R.L.  may anonymize these data (thus depriving them of their personal nature) and continue processing for statistical purposes under these conditions;
• the right to restrict processing to the extent that:

• the person disputes the accuracy of the data for a period that allows us to verify the accuracy of the data;
• the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that its use be restricted;
• the controller no longer needs the personal data for the purpose of the processing, but the data subject requests it for the establishment, exercise or defence of legal claims; or
• the data subject has objected to the processing (other than for direct marketing purposes), for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.

• the right to data portability, respectively (i) the right to receive personal data in a structured, commonly used and readable format, and (ii) the right to have such data transferred by BLACKSEA CBD S.R.L. to another data controller, provided that the conditions laid down by law are met;
• the right to object - in relation to processing activities may be exercised by submitting a request as indicated below;

• at any time, for reasons relating to the data subject's particular situation, that data relating to him or her are processed on the basis of the legitimate interest of BLACKSEA CBD S.R.L. or on the basis of the public interest, except where BLACKSEA CBD S.R.L. can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of data subjects, or for the establishment, exercise or defence of legal claims;
• at any time, free of charge and without justification, that data relating to him or her be processed for direct marketing purposes.

• the right not to be subject to an automated individual decision, respectively the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects concerning the data subject or otherwise significantly affects him or her;
• the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, to the extent you consider it necessary.

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above. 

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR

For any further questions on how personal data are processed and to exercise your rights mentioned above, please contact us at ryan@blackseacbd.eu 

This website uses cookies. For more information on how these files are used, please read the Cookies Policy below:

Cookies policy

This site uses cookies. We use cookies to personalize content and ads, provide social networking features and analyze traffic.

Cookie Policy

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

This site uses cookies. We use cookies to personalize content and ads, provide social networking features and analyze traffic. We also provide social networking, advertising and analytics partners with information about how you use our site. They may combine it with other information you provide or gather from your use of their services.

Cookies are small text files that can be used by websites to make their use more efficient.

The law states that we may store cookies on your device if they are strictly necessary for the operation of this website. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

Your consent applies to the following areas:

Required (1)

Necessary cookies make the site functional, providing basic functionality such as navigating the site pages and accessing secure areas of the site. The website cannot function properly without these cookies.

Statistics (2)

By collecting and reporting information anonymously, statistical cookies help website owners understand how visitors interact with the website.

Marketing (3)

Marketing cookies are used to track visitors as they navigate websites. The objective is to provide ads that are relevant and attractive to each individual visitor, and thus more valuable to publishers and third-party advertisers.

Unclassified (4)

Unclassified cookies are cookies that are in the process of being classified, along with individual cookie providers.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority.

You can contact your local data protection authority, or our supervisory authority here: [Add contact information or website for the data protection authority in your jurisdiction. For example: https://ico.org.uk/make-a-complaint/]