Privacy Policy
(Privacy and Personal Data Protection Policy)
Effective Date: 29 December 2025
1. Introduction, Purpose and Context of CBD Activities
This Privacy Policy sets out the manner in which Wealth Harmony Enterprises s.r.o. (hereinafter the “Company”, the “Controller”) processes personal data of natural persons in connection with the operation of the website https://anyweed.shop (hereinafter the “Website”), the manufacture, processing, distribution and sale of CBD products, as well as all related commercial, marketing and informational activities.
The Company operates in the field of CBD products in compliance with the legal regulations of the Czech Republic and the European Union, in particular with regard to THC content limits, food and consumer protection regulations, and consumer protection rules. The processing of personal data within the scope of these activities is of an exclusively commercial, contractual and informational nature and is not related to the provision of healthcare or medical services.
This document is issued for the purpose of fulfilling the information obligation pursuant to Articles 12 to 14 of the GDPR, and its objective is to provide data subjects with clear, understandable and comprehensive information on how their personal data are handled.
2. Legal Framework for the Processing of Personal Data
The processing of personal data is carried out in particular in accordance with the following legal regulations and regulatory frameworks:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
- Act No. 110/2019 Coll., on the Processing of Personal Data (Czech Republic),
- ePrivacy Directive (2002/58/EC) and the related Czech implementing legislation,
- General principles of consumer protection and electronic commerce under EU and Czech law.
In processing personal data, the Company also observes the general principles of responsible business conduct and transparency, which are particularly important in the area of CBD products as a regulatorily sensitive market segment.
3. Identification of the Data Controller
The controller of personal data within the meaning of Article 4(7) GDPR is:
Wealth Harmony Enterprises s.r.o.
Rybná 678/9, Staré Město
110 00 Prague 1
Czech Republic
Company ID (IČO): 22637419
E-mail: shop@anyweed.com
The Controller determines the purposes and means of processing personal data and is responsible for their lawful, fair and secure processing.
4. Principles of Personal Data Processing
The Company processes personal data in accordance with the principles set out in Article 5 GDPR, in particular:
- lawfulness, fairness and transparency,
- purpose limitation (data are processed only for clearly defined purposes),
- data minimisation (only the necessary scope of data is processed),
- accuracy and data updating,
- storage limitation,
- integrity and confidentiality,
- accountability of the Controller.
These principles are particularly important in the area of CBD products, where enhanced transparency towards customers and regulatory authorities is required.
5. Categories of Processed Personal Data
5.1 Personal Data Provided by the Data Subject
The Company processes personal data voluntarily provided by the data subject, in particular when ordering CBD products, registering on the Website, communicating with customer support, or subscribing to marketing communications. Such data include in particular identification, contact and address details, as well as information necessary for the conclusion and performance of a purchase contract.
5.2 Automatically Processed Technical and Operational Data
When visiting the Website, technical data are automatically processed, such as IP address, device type, browser, operating system and information about user behaviour on the Website. These data primarily serve to ensure the security of the Website, prevent misuse and optimise the user experience.
5.3 Data Obtained from Third Parties
To the extent necessary, the Company may process data provided by contractual partners, in particular payment service providers and logistics partners, exclusively for the purpose of fulfilling CBD product orders and complying with legal obligations.
6. Legal Bases for Processing
Personal data are processed exclusively on the basis of lawful grounds pursuant to Article 6 GDPR, in particular where processing is necessary for the performance of a contract concluded with the customer, for compliance with the Controller’s legal obligations (especially accounting and tax obligations), for the protection of the Controller’s legitimate interests, or on the basis of the data subject’s consent.
7. Purposes of Processing with a Focus on CBD Production
Personal data are processed in particular for the purposes of:
- concluding and performing purchase contracts for the supply of CBD products,
- ensuring the manufacture, storage, packaging and distribution of CBD products,
- communicating with customers regarding orders and products,
- fulfilling obligations arising from accounting, tax and consumer protection regulations,
- protecting the rights and legitimate interests of the Company,
- marketing communication relating to CBD products (only in compliance with applicable legal regulations).
8. CBD Products, Health Claims and Personal Data
The Company expressly states that it:
- does not provide healthcare or medical services,
- does not process health data within the meaning of Article 9 GDPR,
- does not present CBD products as medicinal products,
- does not use personal data to assess customers’ health conditions.
This clarification is essential for the protection of privacy and legal certainty of data subjects.
9. Cookies and Electronic Communications
The Website uses cookies and similar technologies in accordance with the GDPR and the ePrivacy Directive. Essential cookies are used to ensure the proper functioning of the Website, while analytical and marketing cookies are used only on the basis of the user’s consent. Users may change their settings at any time.
10. Recipients and Processors of Personal Data
Personal data may be disclosed only to entities providing services necessary for the operation of the Website and the distribution of CBD products, in particular IT service providers, payment service providers and logistics partners. Each processor is contractually bound to protect personal data in accordance with Article 28 GDPR.
PayU payments. When PayU is selected, necessary payer/contact/address/IP and order data are shared with PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań, Poland. PayU independently controls processing for payments, status updates, complaints and legal obligations. See the PayU Privacy Statement.
11. Transfers of Personal Data Outside the EU / EEA
Where personal data are transferred outside the EU/EEA, the Company ensures an adequate level of protection in accordance with Chapter V GDPR, in particular through standard contractual clauses or adequacy decisions.
12. Data Retention Period
Personal data are retained only for the period necessary to achieve the purpose of processing or for the period required by applicable legal regulations. After expiry of this period, the data are securely deleted or anonymised.
13. Rights of Data Subjects
Data subjects have all rights pursuant to Articles 12 to 22 GDPR, in particular the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing. They also have the right to lodge a complaint with the Czech Data Protection Authority.
To request access, correction or deletion of your data, write to shop@anyweed.com, describing your request and the relevant order or account. We respond without undue delay, normally within one month. Any permitted extension will be explained within that month. Deletion may be limited by legal retention duties.
14. Security of Personal Data
The Company has implemented appropriate technical and organisational measures pursuant to Article 32 GDPR, corresponding to the risks associated with the processing of personal data in the field of ecommerce and CBD production.
15. Protection of Minors
The Website and CBD products are not intended for persons under the age of 18. The Company does not knowingly process personal data of minors.
16. Updates to the Privacy Policy
The Company reserves the right to update this Privacy Policy at any time in response to changes in legal regulations, regulatory requirements or internal processes.
17. Contact Details
Wealth Harmony Enterprises s.r.o.
E-mail: shop@anyweed.com
Address: Rybná 678/9, 110 00 Prague 1, Czech Republic