Privacy policy

One of your rights under EU law is that you have the right to be informed when your personal data - also known as personal information - is processed (collected, used, stored) by any organization.

You also have the right to know the details and purpose of that processing. In this document, you will find information about the processing of personal data associated with this website and about the processing of your personal data if you are using this website. For our use of cookies and social media, please see our Cookie policy

  1. ABBREVIATIONS USED IN THIS DOCUMENT

    ICCI – ICCI - International Cannabis and Cannabinoids Institute s.r.o., BIN: 031 36 621, a Czech limited liability company, with its seat at Jáchymova 26/2, Staré Město, 110 00 Praha 1, Czech Republic

    TAP – TheAnswerPage, Inc., a company incorporated under the state of Massachusetts, with its seat at 2 Hampshire St., Suite 104, Foxboro, MA 02035, USA

    GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

  2. ABBREVIATED VERSION – KEY INFORMATION

    We care about your privacy and value your time. That is why we have prepared a short version of the most important rules related to privacy protection.

    1. If you are distributor or cooperating entity:
      • based on the performance of a contract between you and us we collect and process your identification details and other necessary information.
    2. If you are a medical professional or institution:
      • based on the performance of a contract between you and us we collect and process your identification details and other necessary information;
      • based on the performance of a contract between you and us we collect and process your identification details to award you a certificate about your education upon completion of specific courses;
      • based on your consent we process your contact details in order to include your practice as a medical professional or institution in ICCI´s public database;
      • based on your consent we may process your contact details to share it with TAP to quicken your registration at TAP website in the future.
    3. If you are a participant to one of our medical study:
      • based on your consent we may process special categories of personal data such as data concerning your health.
    4. If you are a patient visiting our website for personal education:
      • based on your consent we collect and process your identification details to create a user profile for you in order to access our education modules and database of medical professionals.
    5. If you are a visitor to the website or any of the above:
      • based on your consent we may collect and process several of your identification details to provide you with information and commercial offers about ICCI or selected third parties providing complementary products or services;
      • based on your consent we may collect several of your identification details to process your enquiry through our website contact form;
      • based on our legitimate interest we briefly collect your IP address to create an user profile for our analytics.

    You can contact our Data Protection Officer (DPO) with any query regarding your personal data in ICCI at data.protection.officer@icci.science.

    If you haven´t found what you were looking for in the information above, you will find further details below.

  3. PERSONAL DATA WE PROCESS

    The following categories of personal data is being collected and processed:
    • identification details (title, name, surname, e-mail address, phone number, street name, city and country of origin, location of medical practice and area(s) of expertise, details about your education);
    • special categories of personal data concerning health (varies on the study that the data subject in question is participant of);
    • financial information (piece of information linking successful payment to a specific user);
    • online identification details (IP address).
  4. LEGAL GROUNDS FOR PROCESSING

    We process abovementioned information on the following legal grounds:
    • Processing is necessary for the performance of a contract to which the data subject (you) is party or in order to take steps at the request of the data subject prior to entering into a contract. 

      If you are a distributor or cooperating entity

      The purpose of processing both your full identification details and financial information is to provide our services to you. We will process your data until you stay in contract with us and afterwards only for time necessary to fulfil our legal obligations (e.g. for tax purposes).

      If you are a medical professional or institution

      The purpose of processing both your full identification details and financial information is to provide our services to you. We will process your data until you stay in contract with us and afterwards only for time necessary to fulfil our legal obligations (e.g. for tax purposes).

      Your personal data will be processed to award you a certificate about your education upon completion of specific courses. We will delete your personal data after 24 months of inactivity on your account.

    • Data Subject´s consent to the processing of his or her personal data for one or more specific purposes. 

      If you are a medical professional or institution

      Based on your consent, we will include your practice as a medical professional in our public database. You can be included only after completing specific courses from ICCI and TAP, as specified in the agreed terms between you and ICCI or TAP. We will automatically exclude your practice in the database and cease to process your personal data (i) after 24 months, provided you do not respond to our request to prolong your participation in our database or (ii) if you contact us at data.protection.officer@icci.science.

      We may also process your personal data if you give us consent to share your identification details with TAP to quicken your registration at TAP website in the future. We will cease to process your personal data and inform TAP if you (i) do not register with TAP within 24 months or (ii) contact us at data.protection.officer@icci.science.

      If you are a patient

      The purpose of processing some of your identification details (name, surname, email) is the creation of a user profile under which you will be able to access our education modules or database of medical professionals. We will delete your personal data after 24 months of inactivity on your account. Moreover, you may delete your account, which will result in us deleting your personal data anytime at ccc@icci.science, data.protection.officer@icci.science.

      If you are a participant enrolling in our medical study

      We may process special categories of personal data regarding your health. Due to sensitivity of such processing and variety of personal data that might be processed for each study individually, you shall receive a specific data protection notice no later than when enrolling to a medical study.

      If you are any of the above

      We may also process your identification details (name, surname, email) and any other personal data that you chose to include in your query through our website contact form. We store these queries for 24 months after which they are automatically deleted. We may store some queries for a longer period of time, for example when they are to become a basis for a contract between you and us. In that case, your personal data from website contract form will be deleted as soon as your contract, and with that our basis for processing, expires. You can also contact us at data.protection.officer@icci.science.

      We will provide information and commercial offers about ICCI or TAP and about our educational events or selected third parties offers based on your subscription to our newsletter. We will unsubscribe you if you (i) do not successively engage in any way with 8 of our newsletters, (ii) unsubscribe at the end of every newsletter.

      Processing is necessary for the purposes of the legitimate interests pursued by the controller.

      If you are any of the above

      We will briefly process your IP address in order to assign your browsing activity on our website to you. We will anonymize your online identification details right after creating a user profile for our analytics. Once anonymized, your IP address is deleted and this user profile cannot be traced back to any identified or identifiable natural person, thus neither to you. We do this in order to gain vital analytics about how our website is used and how can we improve user experience.

  5. Data sharing

    ICCI and TAP might share some of your personal data as independent controllers. If that happens and since TAP is based in the United States of America, your personal data will be also processed outside of the European Union. Such processing will be done only after adopting standard data protection clause that was previously endorsed by the European Commission.

    Neither ICCI nor TAP intends to process personal data further and send it to any other recipients or categories of recipients of the personal data. ICCI and TAP use a cloud service Azure B2 (Microsoft) for sharing personal data they process between them.

  6. Your rights

    Under data protection legislation, you have the following rights:

    1. Right of access 

      Right of access means that you have the right to obtain from us confirmation as to whether, if any of your personal data is being processed, and, where that is the case, to access personal data and supplementary information regarding data processing.

    2. Right to rectification

      Right to rectification means that you have the right to have your personal data corrected if they are inaccurate or incomplete.

    3. Right to erasure

      Right to erasure (also known as the "right to be forgotten") means that you have the right to request the erasure of your personal data processed by us; we have the obligation to erase such personal data when at least one of the following conditions is met:

      • your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
      • you withdraw consent on which the data processing is based and where there is no other legal ground on our part for the processing of your personal data;
      • you have objected to the processing of your personal data based on our legitimate interests or necessary to perform a task carried out in the public interest or in the exercise of official authority vested in us, and there are no overriding grounds on our part for the processing of your personal data;
      • you have objected to the processing of your personal data for direct marketing purposes;
      • your personal data have been unlawfully processed;
      • your personal data have to be erased in order to comply with our legal obligation;
      • your personal data have been collected in relation to an offer of information society services.
    4. You are not entitled to exercise the right to erasure to the extent that the processing of personal data is necessary:
      • for the establishment, exercise or defence of legal claims;
      • for exercising the right of freedom and information;
      • for compliance with a legal obligation arising from applicable law, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
      • for reasons of public interest in the area of public health;
      • for archiving purposes in the public interest, scientific or historical research or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that data processing.
    5. Right to restriction of processing

      Right to restriction of processing means that you have the right to restrict us in processing of your personal data, where and insofar as:

      • you have contested the accuracy of your personal data processed by us, for a period enabling us to verify the accuracy of your personal data;
      • the processing of your personal data is unlawful, and you oppose the erasure of your personal data and request the restriction of their use instead;
      • we no longer need the personal data for the purpose of processing, but they are required by you for the establishment, exercise or defence of your legal claims; or 
      • you have objected to the processing of your personal data that is based on our legitimate interests or that is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in us, pending the verification whether our legitimate grounds override those of you. 

      Where the data processing has been restricted under any of the grounds given above, the personal data concerned may – with the exception of storage – only be processed subject to your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State of the EU.

      We are obliged to notify you before the restriction of your personal data processing is cancelled.

    6. Right to data portability

      The right to data portability means that you have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format and the right to transmit those data to another controller, where:

      • the processing of your personal data is based on a consent or contract; and 
      • the processing of your personal data is carried out by automated means.

      In exercising your right to data portability you have the right to have your personal data transmitted directly to another controller where technically feasible. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

    7. Right to object

      The right to object means that you have the right to object to the processing of your personal data, including profiling. If you decide to exercise the right to object, we will no longer process your personal data, unless we demonstrate compelling legitimate grounds for the data processing which override your rights and interests or where it is necessary for the establishment, exercise or defence of legal claims. If you object to processing for direct marketing purposes, our legitimate grounds will no longer be examined.

    8. Right to withdraw consent 

      Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time.

    9. Right to lodge a complaint

      You can assert your rights using our data subject´s request form, if available. We may refuse your request. Where permitted by applicable laws, we may charge a fee to comply with your request.

      In the event that you believe that our processing of your personal data is in violation of applicable legislation, you have the right to lodge a complaint with the competent supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection.

  7. ADDITIONAL INFORMATION

    • Contact details to ICCI are data.protection.officer@icci.science, Data Protection Officer, ICCI, Jáchymova 26/2, 110 00 Praha 1, Czech Republic.
    • ICCI does not intend to send processed personal data to any recipients or categories of recipients of the personal data 
    • You have the right of access to your personal data, and to rectify them, if necessary. You might have other rights related to your privacy depending on your jurisdiction. We recommend that you use our direct contact information above, contact us or send your request by post in a sealed envelope.
    • Under certain conditions outlined in law, we may disclose your information to third parties (such as law enforcement authorities), if it is necessary and proportionate for lawful and specific purposes. 
    • In case of any discrepancies in connection to data protection you can contact us through e-mail address data.protection.officer@icci.science or you can lodge a complaint with supervisory authority. You can find contact information to all supervisory authorities within EU here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Our website use cookies – small text files that are stored in your internet browser or device by web servers when you visit some websites. Cookies are used to distinguish you from other users of our website and to store data about how our website is used (e.g. the number of site visitors, time you spent visiting the website or what content interests you).

This information is anonymous (e.g. we collect information regarding the type of browser you´re using or the name of your internet provider´s domain) and is used to improve our services and ensure the correct operation of our website. We don´t identify any individual site visitors, unless they provide their contact details using the form(s) available on the website.

  1. TYPES OF COOKIES USED

    1. Based on the purpose of the cookie:
      • strictly necessary cookies are cookies that are required to ensure the correct operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services; and 
      • analytical/performance cookies are cookies that allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users find what they are looking for easily.
    2. Based on the owner of the cookie:
      • first-party cookies are stored by the website you´re browsing; and 
      • third-party cookies are cookies placed on your device by a website other than the website you´re currently browsing.
    3. Based on their lifespan:
      • persistent cookies are stored on your device or internet browser for a previously defined time. They are activated each time you visit the website which generated the respective cookie; and 
      • session cookies allow website operators to link the actions of a user during a browser session. They are generated when you access the internet browser and are deleted when you close the internet browser.
  2. ADDITIONAL INFORMATION

    1. Third-party websites

      Our website contains links to other websites administered by third parties.

      Visitors should acquaint themselves with the privacy policy of such websites and should be aware that we have no responsibility or liability for the manner in which third parties process personal data.

    2. Cookie blocking

      When accessing our website, cookies are downloaded to your web browser and stored in your device.

      You can change your browser´s cookie settings to allow or block cookies from being stored on your device. If you decide to block cookies, you probably may not be able to fully use all functions of our website.

      The manner in which you can disable your cookies is different for each browser. Specific instructions are provided under your browser´s "Help Menu". More detailed information about cookie administration by the most commonly used web browsers is available here:

      Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

      Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored

      Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB&co=GENIE.Platform

      Opera: https://blogs.opera.com/news/2015/08/how-to-manage-cookies-in-opera/

      Safari: https://support.apple.com/kb/PH5042?locale=cs_CZ

      Safari (iPad and iPhone): https://support.apple.com/en-gb/HT201265

      More information about cookies (including the administration and deletion of cookies) is available at: www.allaboutcookies.org.


Cookies help us deliver our services and provide personalized experiences. By using this website, you agree to our use of cookies and privacy policy. More info