Privacy Policy (GDPR)

Privacy Policy (GDPR)

Version: 1.1 | Last updated: 06.03.2026

§ 1 Data Controller and DPO

The controller of your personal data is Weedo Lifestyle & Media GmbH, Machtlfinger Str. 21, 81379 Munich.
For matters concerning data protection (Data Protection Officer — DPO), please contact: info@house-of-seeds.de or write to the company’s registered address.

§ 2 Purposes and Legal Bases of Processing (Art. 6 GDPR)

Purpose of processing Legal basis (GDPR) Retention period
Execution of sales contract / account management Art. 6 para. 1 lit. b (performance of contract) Until the expiration of claims under the contract
Fulfillment of tax and accounting obligations Art. 6 para. 1 lit. c (legal obligation) 5 years from the end of the fiscal year
Age verification Art. 6 para. 1 lit. c (legal obligation) Deleted after verification
Handling inquiries / contact form Art. 6 para. 1 lit. f (legitimate interest) For the period necessary to clarify the matter
Newsletter / marketing Art. 6 para. 1 lit. a (consent) Until consent is withdrawn
Analytics and service improvement Art. 6 para. 1 lit. a (consent) 13 months

§ 3 Data Recipients and International Transfers

Your data may be shared with the following categories of recipients:

  • Hosting: Shopify Inc. (Canada/USA) — Standard Contractual Clauses (SCCs) approved by the European Commission
  • Payments: Prepayment, Credit Card
  • Logistics: DHL
  • Analytics: Google Analytics (if consented via Cookies)

§ 4 Your Rights (Art. 15-22 GDPR)

You have the right to:

  • Access your data (Art. 15)
  • Rectify your data (Art. 16)
  • Delete your data — “right to be forgotten” (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)

To exercise your rights, send a request to info@house-of-seeds.de. We will respond within 30 days.

§ 5 Profiling and Automated Decisions

We do not make decisions based solely on automated processing that would have legal effects. Profiling is limited to personalizing marketing offers (if marketing cookies consent was given). You have the right to object to profiling.

§ 6 Right to Complain to the Supervisory Authority (UODO)

You have the right to lodge a complaint with the competent supervisory authority — in Poland, this is the President of the Personal Data Protection Office (UODO):
ul. Stawki 2, 00-193 Warsaw
uodo.gov.pl