Legal

Our Privacy Policy

We are committed to ensuring the accuracy, confidentiality and security of your personal data. This Privacy Policy specifies the personal data that Canopy Growth Polska Sp. z o. o. in Toruń and Canopy Growth Corporation with its registered office in Smiths Falls (Ontario), Canada obtain from or about you, as well as determine the purposes and methods of their processing and to whom the data may be made available. First of all, we would like to assure you that we process personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR). Please read this document carefully.

What is personal data?

Personal data is any information about an identified or identifiable natural person. In particular, such data are name, surname and e-mail address.

What personal data do we collect?

1. On our website

We collect your personal data primarily in connection with your visits to our website. This will include data such as: IP address, domain used to access our website, browser type and version, address of the website from which you came to our website, websites you entered and exited from, browsing history of our website , as well as data of the country in which you are visiting our website.

The above data is processed to monitor the effectiveness of our website according to parameters such as: number of visits, average time spent on the website, page views, but also for business purposes such as working on the continuous improvement of our website (Article 6(1)(b) f GDPR).

For the above purposes, while browsing our website, a cookie may be placed on your computer's hard drive, which will enable us to monitor your visit to our website. A cookie is a small data file that is transferred to your hard drive through your web browser and can only be read by the website that placed the file on your computer. The cookie acts as an identification card and allows our website to identify you and record your passwords and preferences. A cookie allows us to record your visits to our website and thus understand how you use our website and thus tailor it to your needs. You can disable the acceptance of cookies at any time. In your browser settings, you can choose: 1) the option for your browser to notify you before accepting cookies on your computer, so that you can decide for yourself whether you want a cookie or not, or 2) the option to automatically reject the placement of cookies on your computer. Please note that if you select the option to automatically reject cookies , you may not be able to access individual subpages of our website.

Our website allows and encourages you to contact us using the "Contact us" form. If you use this form, we will process your personal data in the form of name, surname and city where you live, as well as other data that you decide to entrust us with (including telephone number), pursuant to Art. 6 section 1 letter f GDPR and art. 6 section 1 letter a GDPR (in the case of personal data which is not obligatory to provide in the form).

Finally, our website may contain links to other websites that may be subject to different privacy standards. The administrators of these websites are solely responsible for their privacy policy. We are not responsible for the collection, use or disclosure of your personal data by these administrators.

2. In other cases

Depending on the circumstances, your personal data may also be processed by us in the following cases:

A. if you are a candidate for work at Canopy Growth Polska, we will process the personal data referred to in Art. 221 § 1 of the Labor Code, i.e. name and surname, date of birth, contact details and - depending on the type of work - education, professional qualifications and previous employment history, pursuant to Art. 6 section 1 letter c GDPR,

B. if you are a doctor or pharmacist, we will process your personal data in the form of name and surname, telephone number, e-mail address (pursuant to Article 6(1)(f) of the GDPR) and other data voluntarily provided by you, in particular data regarding completed specialization and place of practicing the profession (pursuant to Article 6(1)(a) of the GDPR),

C. if you are or want to become our contractor, we will process your personal data in the form of name and surname, address, telephone number, e-mail address, REGON number (Article 6(1)(b) of the GDPR) and other data which must be provided is mandatory (Article 6(1)(c) of the GDPR), in particular the NIP number,

D. if you are a participant or want to participate in our educational events regarding the benefits of using medical cannabis, including as a patient, doctor or pharmacist, we will process your personal data in the form of name and surname, address, telephone number, type of completed specialization, place of practice profession and other data voluntarily provided by you based on your consent (Article 6(1)(a) of the GDPR).

How do we collect your personal data?

We collect your personal data directly from you, for example when you visit our website or when you contact us using the contact form. If we receive your personal data from a third party in the course of providing services to us or otherwise, we take appropriate steps to ensure that they have lawfully collected your personal data and that they have the right to provide us with the data.

How long do we store personal data?

Your personal data will be processed by us until the purposes for which they were collected or obtained, referred to above, are achieved.

Why do we collect your personal data?

When you use our website, we collect and process your personal data to improve our activities, including, for example, to establish, maintain and develop our relationship with you. In the case of other relationships with you, we collect and process your data for the purposes justified by these relationships.

Who do we disclose your personal data to?

Your personal data may be disclosed to entities with which we cooperate as part of our business, including consultants or contractors, in particular entities providing IT and technological solutions and entities providing accounting and HR services. Your personal data may also be disclosed to other entities within the Canopy Growth group. Your data may also be made available to justice or government administration bodies to the extent required by law.

Will your personal data be transferred outside the European Economic Area or to international organizations?

One of the controllers of your personal data is Canopy Growth Corporation based in Smiths Falls, Ontario, Canada. Therefore, your data will be transferred to Canada. By decision of December 20, 2011, the European Commission recognized the Canadian personal data protection regime as equivalent to the EU system (see https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX%3A32002D0002 ) .

Moreover, due to our use of a number of IT and technological solutions that are provided, serviced or maintained by entities whose headquarters or branches are located in countries outside the European Economic Area, your personal data may be transferred to such countries, including in particular to the United States of America. These entities ensure an adequate level of protection of the data they process, confirmed in relevant decisions of the European Commission or - if there is no such decision - by implementing appropriate security mechanisms, including the use of the so-called standard contractual clauses.

However, your personal data will not be transferred to an international organization.

What rights do you have in connection with our processing of your personal data?

In connection with our processing of your personal data, you have a number of rights:

  • the right to access, rectify or supplement your data,
  • the right to request their deletion, unless there is one of the grounds for their further processing by us,
  • the right to request that we limit the processing of your data - in the cases provided for in the GDPR,
  • the right to withdraw consent at any time - in the case of data processed on the basis of your consent, provided that the withdrawal of consent does not affect the lawfulness of processing before its withdrawal,
  • the right to object to further processing of your data by us,
  • the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that we are processing your data unlawfully.

When requesting access to your data, we may ask you to provide specific data or parts of it in order to confirm your identity, as well as find and provide you with the requested data. If we are unable to comply with your request, we will immediately inform you of the reasons for refusing to comply with the request.

How do we protect your personal data?

We have implemented appropriate organizational and technical measures to protect your data. These safeguards are intended to protect your personal data against loss, damage, modification or unauthorized access to it by a third party.

How can you contact us regarding the processing of personal data?

We have appointed a Data Protection Officer, whom you can contact using the following e-mail address: eu.dataprivacyofficer@canopygrowth.com .

You can also direct any questions or requests to our data protection department: eu.dataprivacy@canopygrowth.com .

Who is the administrator of your personal data?

The administrators of your personal data are:

1. Canopy Growth Polska Sp. z o. o. with its registered office in Toruń (87-100) at ul. Grudziądzka 1-3, entered into the register of entrepreneurs of the National Court Register kept by the District Court in Toruń, 7th Commercial Division of the National Court Register under the number 0000470617, using the tax identification number NIP 9512445224 and the REGON number 146784244.

2. Canopy Growth Corporation with its registered office in Smiths Falls, 1 Hershey Drive, K7A 0A8 Ontario, Canada, business number - 853179869RC0001 - regarding personal data collected in connection with the use of our website.

Other information

We do not make any decisions based solely on automated processing of personal data, including profiling.

Our website is not intended or directed to minors or minors. These people may only use our website with the consent of their parents or legal guardians