Privacy Policy

1. Privacy at a Glance

The following information provides a simple overview of what happens to your personal data when you visit this website.

2. Responsible Party

BB Internet GmbH, Alte Steinhauserstrasse 19, 6330 Cham, Switzerland. Email: datenschutz@hempwholesales.com

3. Data Collection on This Website

Cookies

Our website uses cookies. These are small text files that your browser automatically creates and stores on your device. You can configure your browser to inform you about the setting of cookies.

Contact Form

If you send us inquiries via the contact form, your details will be stored for processing the inquiry and for possible follow-up questions. We will not share this data without your consent.

4. Your Rights

You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as the right to rectification or deletion of this data.

5. Analytics Tools

This website currently does not use any third-party analytics tools. Should this change, we will inform you here.

6. Processing of Business Data

As part of our B2B business activities, we process the following business-related data of our customers:

• VAT ID (Value Added Tax Identification Number) — Legal basis: Art. 6 (1) lit. b GDPR (contract fulfillment) and tax law obligations
• Commercial register number and responsible commercial register office — for identity verification of business partners
• Trade license data — to verify the business operator status, particularly relevant for B2B trade in CBD products

This data is processed exclusively for contract initiation, contract fulfillment and compliance with legal obligations.

7. COA and Batch Data

For quality assurance and traceability, we store the following for each order:

• Certificates of Analysis (COA) — laboratory reports from external, accredited labs with information on cannabinoid profile, heavy metals, pesticides and microbiological purity
• Batch numbers — for unique identification and traceability of each product batch
• Supplier information — to ensure supply chain transparency

Storage is based on our legal obligations (Art. 6 (1) lit. c GDPR) and our legitimate interest in quality assurance (Art. 6 (1) lit. f GDPR).

8. Data Transmission

To fulfill our contractual and legal obligations, we transmit personal and business data to the following recipients:

• Shipping providers: DHL and DPD receive delivery addresses and contact data for goods delivery.
• Payment providers: Payment information is transmitted to our payment service providers for transaction processing.
• EU VIES API: For VAT ID validation, the number is transmitted to the European Commission's VIES system. No additional personal data is transferred to VIES.

9. Retention Periods

We store your data only as long as necessary for the respective purposes or as required by legal retention obligations:

• Accounting records and vouchers: 10 years pursuant to Art. 958f of the Swiss Code of Obligations (OR)
• Tax-relevant documents: 10 years pursuant to Art. 70 Swiss VAT Act (MWSTG)
• COA and batch data: At least 10 years to ensure traceability
• Contract data: 10 years after contract end (general limitation period pursuant to Art. 127 OR)

After the retention periods expire, your data will be deleted or anonymized.

10. Data Processing Outside the EU

In the course of our business activities, data may be transferred to the following third countries:

• Switzerland: The European Commission has issued an adequacy decision for Switzerland (Art. 45 GDPR). Your data enjoys a comparable level of protection there as in the EU.
• United Kingdom (UK): An adequacy decision exists for the UK from the European Commission. Data transfer occurs on this basis without additional safeguards.

Should data transfer to additional third countries become necessary, we ensure an adequate level of data protection through appropriate safeguards (e.g., EU standard contractual clauses).