Privacy notice

Last updated: 17 September 2026.

This document sets out the Privacy Notice applicable to any personal data collected through the Cannagin® website and its cookies. If at any point, given the nature of the service provided through this website, Terraplanet del Sur S.L. needs to carry out processing whose characteristics differ from the ones described here, you will be informed before your personal data is collected.

This privacy notice does not apply to information you may provide on another site operated by us, by one of our partners or by one of our subsidiaries, nor to information you may send us through other forums, offline or by email.

Neither does it apply to services provided by third parties that may be reached through links on this website. Terraplanet del Sur S.L. is not responsible for the processing carried out by those third parties and has no control over the organisational and security procedures they apply.

Any collection of data carried out by Terraplanet del Sur S.L. through this website and its cookies complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and with Spanish Organic Act 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Identification of the Controller and general terms

Terraplanet del Sur S.L., tax ID B14907109, registered office at Calle Ayala 11, 1st floor, 28001 Madrid, Spain, entered in the Commercial Registry of Córdoba, Volume 2208, Sheet CO-30543, Folio 21, 1st entry, informs the users of this website that, as owner of the Cannagin® trade mark and of this domain, it acts as the controller of the personal data collected through it.

You may contact us on data protection matters atprivacy@cannagin.com or at the registered office above.

This website has no online sales channel of its own, so any personal data provided through the links to authorised Cannagin® distributors is governed by their own privacy and data processing policies. We recommend that you review those terms before using third-party web services.

2. What information does Terraplanet del Sur S.L. collect?

We collect our users’ personal information sparingly, and only what is needed for the purposes described in the following section:

  • Data you provide in the forms: name and surname or company name, tax ID, phone number, email address, postal address, town and province, and the content of your message. In the hospitality raffle winner’s form, also the unique product code and the place of purchase.
  • Proof of your consent: alongside the form we store the exact text of the boxes you ticked, its version, the language, the page it was sent from, the date and time, your IP address and your browser identifier. That is what allows us to demonstrate that you consented, as required by art. 7.1 GDPR, and it is used for nothing else.
  • Age verification: the date of birth you enter on the entry screen is checked in your own browser and is never sent to or stored on any server. All that is stored is a cookie recording that the check was passed.
  • Browsing information: if you accept analytics cookies, we collect data about how you use the site (pages viewed, duration, traffic source, device and browser type). If you do not accept them, none of this data is collected.

3. For which purposes, and on which legal basis, do we process it?

Each purpose has its own legal basis and its own retention period:

PurposeLegal basisRetention
Answering enquiries and requests sent through the contact, distributor and hospitality forms, and where appropriate starting a commercial relationship.Your consent (art. 6.1.a GDPR), given by ticking the acceptance box.12 months from submission, after which the data is deleted automatically.
Handling prize delivery to the winners of the hospitality raffle.Performance of the raffle terms accepted by the entrant (art. 6.1.b GDPR) and their consent.12 months from submission, unless the tax handling of the prize requires a longer period.
Sending you commercial information about Cannagin® products, news and offers.Your specific, separate consent (art. 6.1.a GDPR and art. 21 of the Spanish LSSI-CE). Not ticking it does not prevent you from using the form.Until you withdraw your consent or unsubscribe.
Preventing minors from accessing the website.Compliance with a legal obligation and with the self-regulation code applicable to alcoholic beverage advertising (art. 6.1.c GDPR). The cookie is technical and necessary to provide the service requested.The cookie expires after one year. The date of birth is never stored.
Preventing automated and abusive form submissions (Google reCAPTCHA v3).Our legitimate interest in the security of our systems and our users (art. 6.1.f GDPR).Determined by Google under its own privacy policy.
Measuring use of the website and improving its content (Google Analytics and Metricool).Your consent, given in the cookie banner (art. 22.2 LSSI-CE and art. 6.1.a GDPR). Until you give it, these services are not loaded.As stated for each cookie in the Cookies Policy.
Demonstrating that we obtained your consent and handling the exercise of your rights.Compliance with a legal obligation (arts. 5.2 and 7.1 GDPR).For as long as we may be required to prove it and during the limitation periods for legal claims.

We carry out no automated decision-making or profiling producing legal effects on you, and no behavioural advertising based on tracking your browsing.

4. Automatic information: cookies

We receive and process certain information automatically when you visit our website, by means of cookies. Cookies that are not strictly necessary are not installed until you accept them in the banner, and you may change or withdraw your decision at any time using the «Cookie settings» link in the footer.

For details of each cookie, its owner, purpose and duration, see ourCookies Policy.

5. Does Terraplanet del Sur S.L. share personal information?

We do not sell or disclose your personal information to third parties for commercial purposes. However, the following recipients are involved in providing the service:

  • Cannagin’s hosting and email providers, acting as processors on our behalf under a contract meeting the requirements of art. 28 GDPR.
  • Google Ireland Limited / Google LLC, which provides the reCAPTCHA v3 anti-spam service on the pages with forms and, only if you accept analytics cookies, the Google Analytics 4 measurement service.
  • Metricool Analytics S.L. (Spain), which provides the audience measurement service, again only if you accept analytics cookies.
  • Courts, tribunals and public authorities, where there is a legal obligation to provide the information.

6. International data transfers

Using reCAPTCHA and Google Analytics means that Google LLC, based in the United States, may process data such as your IP address and your activity on the page. That transfer relies on the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, under which Google LLC is certified, and additionally on the Standard Contractual Clauses approved by the Commission.

You can read how Google handles this information in itsPrivacy Policy. All other providers process the data within the European Economic Area.

7. Is my personal information safe?

We apply the technical and organisational measures required by art. 32 GDPR, among them:

  • The whole site is served encrypted over TLS (HTTPS), with strict transport security (HSTS).
  • Server responses carry security headers (content security policy, MIME type control, referrer policy and browser permissions restrictions).
  • Form data is stored in a database with restricted access and is deleted automatically once the retention period expires.
  • If we ever asked you for credit card details (promotions, events or otherwise), they would be handled in accordance with the Payment Card Industry Data Security Standards (PCI DSS). This website has no online shop and no payment gateway.
  • Before disclosing confidential information or handling a rights request we may ask you for proof of identity.

We nevertheless recommend that you protect yourself at all times against unauthorised access to your devices,especially if they are shared with minors.

8. What are your rights when you give us personal data?

As the owner of your personal data, current legislation grants you the following rights:

  • The right to request access to your personal data.
  • The right to rectification of data you consider inaccurate and to erasurewhere it is no longer necessary for the purpose it was collected for.
  • The right to object to the processing and not to be subject to a decision based solely on automated processing, including profiling.
  • The right to request restriction of the processing where you contest the accuracy of the data, where the processing is unlawful but you do not want it erased, or where we no longer need it but you do in order to bring or defend legal claims. If you exercise it, we will keep the data blocked.
  • The right to data portability, receiving your data in a structured, commonly used format.
  • The right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal. For cookies, the «Cookie settings» link in the footer is enough; for commercial communications, write to us or use the unsubscribe link in the email itself.

You may exercise these rights by writing to privacy@cannagin.com or to the registered office given in section 1, proving your identity. We will answer within one month at the most.

If you believe your data is not being handled properly you may complain toprivacy@cannagin.com and, in any event, lodge a complaint with theSpanish Data Protection Agency(www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, Spain.

9. How long do we keep your personal information?

The specific period for each purpose is given in the table in section 3. In short:

  • Enquiries sent through the forms are kept for 12 months from submission and are then deleted automatically.
  • Consent to receive commercial communications is kept until you withdraw it. On withdrawal we record the date and stop sending you communications.
  • The proof of consent is kept for as long as we may be required to prove it and during the limitation periods for any legal claims that may arise.
  • Cookies last for the period stated in the Cookies Policy.

10. May minors use Cannagin web services?

No. Minors are not allowed to receive advertising or to buy our products, not even under the supervision of an adult or legal guardian. That is why access to the site requires passing an age check, of which only the result — not the date of birth — is kept.

11. Changes to this privacy notice

This Privacy Notice may be amended where current legislation so requires, or where the company considers it necessary in order to provide better information about its processing of data.

Should that happen, we will clearly indicate the changes introduced, together with the date of the new version, so that you always know how we process your personal data.

12. Memorandum

Users of the Cannagin® portal may at any time withdraw their consent to the processing of their data, as well as exercise their rights of access, rectification, erasure, objection, portability and restriction of processing, by writing to Cannagin®, Calle Ayala 11, 1st Floor, 28001 Madrid, Spain, or to the email addressprivacy@cannagin.com.

Should there be any doubt as to the identity of the sender of such a request, the company will require verification by means of a copy of a national ID card or other valid identification document, so as to prevent third parties from altering your consent or your data. Users are also entitled to lodge a complaint with theSpanish Data Protection Agency.

© Cannagin
Suppliers FormBuyers Form