Website information

Privacy & Cookie Notice

Effective date: 21 September 2026. This notice explains how personal data is handled when you visit cannasia.eu or submit a professional or business inquiry to CannAsia.

Data controller

The data controller is THE HEMPERS SINGLE MEMBER PC, trading through the CannAsia brand, Athens, Greece. Privacy enquiries may be sent to info@cannasia.eu.

Information we receive

When you contact CannAsia, you may provide your name, company, business email address, telephone or WhatsApp number, destination market and information about a sourcing requirement, supplier, product or remote screening request. Basic technical information may also be processed when the website is delivered securely to your device.

Please do not submit sensitive medical information, passwords, payment-card details or personal information that is not necessary for the business inquiry.

Purposes and legal bases

• Responding to inquiries and preparing a scope or quotation: steps requested before entering into a contract and, where applicable, performance of a contract.
• Business administration, security and follow-up: CannAsia’s legitimate interests in operating, protecting and developing its B2B services.
• Website analytics: your consent. Analytics is optional and is not loaded unless you select “Accept analytics”.
• Legal and regulatory obligations: compliance with applicable law where processing is required.

Form delivery and service providers

Website inquiries are transmitted through FormSubmit and delivered to CannAsia through Microsoft 365 email. CannAsia also uses website hosting and security infrastructure and, only after consent, Google Analytics 4. These providers process data only for the relevant service or under their own applicable privacy terms.

Recipients and international transfers

CannAsia does not sell personal data. Data may be disclosed to service providers, professional advisers, competent authorities or selected business counterparties where this is necessary for the inquiry, a requested introduction, legal compliance or the protection of legitimate interests.

Some service providers may process data outside the European Economic Area. Where required, transfers are protected through an applicable adequacy decision, the EU–US Data Privacy Framework or Standard Contractual Clauses and supplementary safeguards.

Retention

• Inquiries that do not lead to an engagement are normally retained for up to 24 months after the last meaningful contact.
• Information connected with an active or completed engagement may be retained for the duration of the relationship and any additional period required for contractual, tax, accounting or legal purposes.
• Google Analytics user-level and event-level data is retained according to the property settings and will not exceed the retention periods available for the service.

Cookies and local storage

The website stores your cookie preference locally in your browser under cannasia_cookie_consent. This is necessary to remember whether you accepted or rejected analytics and remains until you change the preference or clear browser storage.

If you accept analytics, Google Analytics may use identifiers such as _ga and _ga_* to distinguish visits and produce aggregated usage statistics. Advertising storage, ad personalisation and user-provided advertising data remain disabled. The Google tag is blocked until consent is given.

You may withdraw or change your choice at any time by selecting “Cookie settings” in the footer. Withdrawal does not affect processing that occurred lawfully before it. See Google’s Privacy Policy for more information.

Your rights

Subject to the conditions of applicable law, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time.

To exercise a right, contact info@cannasia.eu. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.

Required information and automated decisions

Fields marked as required are needed so CannAsia can assess and respond to your inquiry. If you do not provide them, the inquiry may not be submitted or answered. CannAsia does not use the website inquiry data for automated decision-making or profiling that produces legal or similarly significant effects.

Security and updates

CannAsia applies reasonable technical and organisational measures intended to protect personal data. This notice may be updated when the website, service providers or processing activities change. The current version and effective date will remain available on this page.