Privacy Policy (GDPR)

1. Data Controller

The entity responsible for data processing on this platform is Code9 OÜ, Sillaotsa, Pajupea küla, Rae vald, 75322, Estonia. For data protection inquiries or exercising data subject rights, contact: contact@hemp1000.eu.

2. Categories of Data Collected

We collect only commercial business and contact information strictly necessary for fulfilling our B2B directory service:

• Legal company name and trading names
• Official business address, country of registration, and EU VAT / Tax identification
• Official public B2B contact email addresses and business telephone numbers
• Authorized contact person name and title (optional)
• Industrial product specifications, material descriptions, and certifications
• Payment transaction identifiers provided by Stripe (no credit card details stored)

3. Legal Basis for Processing (GDPR Art. 6)

Data processing is grounded in:

• Art. 6(1)(b) GDPR: Performance of pre-contractual and contractual directory publishing obligations.
• Art. 6(1)(a) GDPR: Freely given consent for optional communications and market updates.
• Art. 6(1)(f) GDPR: Legitimate interest in maintaining security, verifying B2B listings, and preventing duplicate or fraudulent registrations.

4. Payment Processing via Stripe

All financial checkout transactions are handled securely by Stripe Payments Europe, Ltd. HEMP1000 does not receive, view, or store payment card numbers. We receive only transaction confirmations and billing references to confirm your Founding Member status.

5. Your Rights as a Data Subject

Under EU GDPR, you are entitled to:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise any of these rights, email us at contact@hemp1000.eu.