PRIVACY POLICY
CBD Logistics is committed to protecting your privacy and ensuring the security and confidentiality of your personal and commercial data. This Privacy Policy describes how we collect, use, and protect your data when you interact with our website www.cbdlogistics.ch. This policy complies with the Swiss Federal Act on Data Protection (nFADP / nLPD, SR 235.1) and, where applicable, the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Identity of the Company
CBD Logistics is a registered commercial brand of Orgena SA, a company registered in the Canton of Grisons, based in Stradón 116, CH-6557 Cama, Switzerland (Commercial Register UID: CHE-190.569.496 MWST / TVA). For general and privacy-related inquiries, you can reach our team at info@cbdlogistics.ch (Attn: Data Protection) or by phone at +41 91 830 11 14. For further corporate details, please visit our Impressum section.
2. Collection of Personal and Commercial Data
When you use our website, register for a wholesale B2B account, or place an order, we collect information necessary to deliver our services, process transactions, and ensure statutory compliance. The data we collect includes:
Personal identification: First and last name, email address, phone number.
Delivery and billing details: Shipping address, billing address, order records.
B2B wholesale details: Legal company name, registered corporate seat, operating address, Commercial Register UID / VAT number, business representative contact details.
Technical browsing data: IP address (anonymized), timestamp of access, browser type, operating system, and pages visited.
Payment logs: Selected payment method and transaction status (complete credit card details and private cryptocurrency keys are never stored on our servers).
3. Use of Data and Legal Bases
The personal and business data collected is processed strictly in accordance with Art. 31 nFADP and Art. 6 GDPR for the following purposes:
Processing and managing wholesale B2B and retail orders, including delivery, invoicing, and customer support (performance of a contract).
Complying with Swiss fiscal, tax, and commercial accounting obligations, including agricultural traceability and anti-fraud checks (compliance with legal obligations).
Ensuring the technical stability, operational security, and cybersecurity defense of our website (legitimate interests).
Sending professional communications, industry regulatory updates, newsletters, and promotional offers where explicit consent has been granted (consent).
4. Newsletter and Commercial Communications
By subscribing to our newsletter, you consent to receive commercial communications and industry market reports via email. We utilize Moosend (Sitecore) to manage our email campaigns, with data hosted on compliant European servers. You can revoke your consent and unsubscribe at any time using the direct link provided at the footer of each newsletter. Unsubscribing will not affect administrative notifications regarding active or past orders.
5. Data Retention
We retain your personal data strictly for as long as necessary to fulfill the purposes for which it was gathered, in full alignment with Swiss statutory retention periods:
Invoices, commercial contracts, and transaction records are retained for ten (10) years following the close of the financial year, pursuant to the mandatory corporate record-keeping provisions of Article 958f of the Swiss Code of Obligations (CO).
Customer inquiries submitted via forms or email are retained for up to twelve (12) months after resolution, unless leading to an ongoing commercial contract.
Newsletter registration data is retained until you unsubscribe.
Technical server log files are automatically purged within thirty (30) days.
6. Data Security
CBD Logistics implements technical and organizational security measures to protect your data against unauthorized access, loss, alteration, or disclosure. All data transmissions on our website, including shopping cart operations and B2B registrations, are protected using modern TLS (Transport Layer Security) encryption. Our IT systems, databases, and website are securely hosted on enterprise servers provided by Infomaniak Network SA (Geneva, Switzerland), with physical data centers located within Swiss territory.
7. Cookies and Tracking Technologies
Our site uses cookies to ensure security, improve navigation, and evaluate technical performance. We manage cookie consent through an automated consent banner that prevents non-essential cookies from firing without prior consent:
Strictly Necessary Cookies: Essential for shopping cart functionality, user sessions, B2B account login, and system security.
Functional / Preference Cookies: Store interface settings, such as language or display preferences.
Statistical / Analytical Cookies (GA4): Deployed via Google Tag Manager (container GTM-KZ49MVZ) to collect anonymized website traffic statistics without tracking individuals across external platforms. We do not deploy Meta Pixel or third-party behavioral advertising remarketing trackers.
You can manage, configure, or revoke your cookie choices at any time via the on-site consent banner or through your browser settings.
8. User Rights
Under the Swiss nFADP and applicable GDPR provisions, you have the right to:
Request access and obtain confirmation and a copy of your personal data processed by us.
Request the correction of inaccurate or outdated data.
Request the deletion of your personal data, provided statutory retention duties (e.g., 10-year accounting rules under Swiss CO) do not apply.
Object to or restrict the processing of your data for direct marketing or legitimate business interests.
Request data portability to receive your personal data in a structured, commonly used format.
Lodge a complaint with the competent supervisory body: the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, CH-3003 Bern, Switzerland (www.edoeb.admin.ch).
To exercise any of these rights, please contact our team at info@cbdlogistics.ch specifying “Attn: Data Protection” in the subject line.
9. Data Transfers
Your data is hosted and processed primarily in Switzerland and the European Economic Area (EEA), jurisdictions recognized as ensuring an adequate level of data protection. Where technical service providers process data in third countries (such as Google analytics infrastructure in the United States), transfers are secured through recognized Standard Contractual Clauses (SCCs) and robust technical safeguards.
10. Third-Party Data Processing and External Service Providers
We utilize trusted external service providers bound by contractual confidentiality and data processing agreements, strictly to the extent required to execute their functions:
Payment Gateways: PostFinance AG (PostFinance Pay / E-Finance), TWINT AG, Worldline / Saferpay (credit cards), NOWPayments (cryptocurrency settlement), and Powerpay / MF Group AG (purchase on invoice, including automated credit verification).
Logistics and Freight Couriers: Swiss Post (Die Post / La Posta) and FedEx Express for parcel and freight delivery.
External Tools: Google Maps (interactive location display on Contacts page) and WhatsApp Business (direct customer support).
11. Links to External Sites
Our site may contain links to external third-party websites or official Swiss and European authorities. We assume no responsibility for the content, privacy practices, or policies of third-party platforms and encourage you to review their respective privacy statements.
12. Changes to the Privacy Policy
CBD Logistics reserves the right to amend or update this Privacy Policy at any time to reflect legal, regulatory, or technical developments. Amendments become effective immediately upon publication on this page. Significant revisions will be notified via our website or directly to registered B2B account holders.
13. Applicable Law and Jurisdiction
This Privacy Policy and all related matters shall be governed exclusively by the substantive laws of Switzerland, excluding conflict-of-law principles. In the event of any dispute arising from the interpretation or execution of this Privacy Policy, the exclusive place of jurisdiction shall be the competent courts of the Moesa District (Canton of Grisons), Switzerland, without prejudice to any mandatory statutory venues provided by federal law.
For further information or questions regarding this Privacy Policy, please contact our team at info@cbdlogistics.ch (Attn: Data Protection) or by phone at +41 91 830 11 14.
Last updated: October 15, 2026
