Last updated: August 1, 2026
This privacy policy describes how CannabisJobs collects, uses, stores, and protects personal data through the website www.cannabisjobs.eu, its subdomains, and the CannabisJobs Academy platform.
Data processing is carried out in compliance with Regulation (EU) 2016/679 (“GDPR”), Organic Law 3/2018 (“LOPDGDD”), Law 34/2002 (“LSSI-CE”), and applicable Spanish legislation.
1. Data Controller
CANNABISJOBS®
Y2024367J
Calle Aribau 168 1-1, 08036 Barcelona – Spain
info@cannabisjobs.eu
2. Scope of Application
This privacy notice applies to personal data processed in connection with:
- regarding navigation and use of the site;
- account registration and management;
- applications and recruitment services;
- purchasing and participating in courses;
- regarding the use of CannabisJobs Academy;
- contact and support requests;
- subscription to the newsletter;
- relationships with customers, suppliers, partners, faculty, and staff.
Information regarding cookies and analytics and tracking tools is available in the Cookie Policy.
3. Data Processed, Purposes, and Legal Bases
3.1 Applications and Recruitment
CannabisJobs processes the resume, contact information, and professional details provided through your profile or during the application process, such as work experience, education, skills, and qualifications.
The data is used for:
- manage your profile and applications;
- assess whether candidates are a good fit for the available positions;
- contact the candidate;
- manage the recruitment process;
- Submit the candidate’s profile to interested companies, after informing the candidate.
The processing is necessary to conduct, at the candidate’s request, a selection process aimed at the possible conclusion of an employment contract, pursuant to Article 6.1.b of the GDPR.
With the candidate’s consent, their resume and related professional information may be retained in the CannabisJobs talent pool for future opportunities.
Applications submitted through the website are stored in CannabisJobs’ systems and may be transferred to an ATS platform used to organize and manage the recruitment process.
Decisions regarding the evaluation and selection of candidates are always made by human review and not through fully automated processes.
Users are asked not to include sensitive information in their resumes that is not relevant to the application, such as information regarding health, ethnic origin, religious or political beliefs, or sexual orientation, nor information regarding criminal convictions or offenses. Any irrelevant sensitive information received inadvertently will be deleted.
3.2 Courses, Purchases, and CannabisJobs Academy
CannabisJobs processes identification, contact, and billing data, as well as information regarding participation in and completion of training activities on CannabisJobs Academy.
The data is used for:
- manage orders and payments;
- issue invoices;
- to allow participation in the courses;
- manage accounts and training activities;
- record progress, results, and certificates;
- manage communications on the forum;
- provide assistance to students.
Data processing is necessary to manage course purchases and participation, as well as to comply with tax, accounting, and legal obligations. Electronic payments are processed through Viva Payments; CannabisJobs receives only the information necessary to confirm payment and does not receive or store full card details. In the case of a bank transfer, the data necessary to identify and record the payment and invoice are processed. This processing is necessary to provide the purchased service and to comply with tax, accounting, and legal obligations.
3.3 Contact and Support Requests
CannabisJobs processes contact information and data provided through the website’s forms, email, phone, or support requests in order to respond to users and provide the requested service. Support may also be provided via WhatsApp or Telegram.
3.4 Newsletter
The email address is used to send job offers, information about courses, news, promotions, and service updates exclusively with the user’s consent. Consent may be revoked at any time by clicking the unsubscribe link in the emails or by writing to info@cannabisjobs.eu. Failure to subscribe or the revocation of consent does not affect the use of other services.
3.5 Communications and Requests
CannabisJobs processes contact information and data provided by users or companies through contact forms, emails, or support requests in order to respond to and follow up on the requests received. This processing is based on CannabisJobs’ legitimate interest in managing communications or, when the request concerns a service, on the need to carry out activities necessary for the conclusion of a contract.
3.6 Navigation, Operation, and Safety
While using the website, your IP address, the date and time of access, browser and device information, and other technical data may be collected. This processing is based on CannabisJobs’ legitimate interest in ensuring the website’s functionality and security, preventing misuse, and resolving technical issues.
4. Data Provision
The information marked as required is necessary to process your registration, application, purchase, request, or the service you have selected. Failure to provide this information may prevent CannabisJobs from providing the requested service. Information not marked as required is optional. Consent to receive the newsletter and to be included in the talent pool is always optional.
5. Recipients of the Data
Personal data may be processed by authorized CannabisJobs staff and contractors and disclosed, to the extent necessary, to:
- client companies interested in candidates’ profiles, provided the candidates have been informed;
- IT service providers, hosting, email, application management, training, newsletters, support, and payments;
- legal, tax, and accounting consultants;
- competent authorities, in the cases provided for by law.
The recipients process the data, as applicable, either as data processors or as independent data controllers.
6. International Transfers
Some suppliers or client companies may be located outside the European Economic Area. Any international transfers are carried out in compliance with the GDPR, based on an adequacy decision, the standard contractual clauses approved by the European Commission, or other safeguards provided for by applicable law.
7. Retention Periods
Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and in accordance with the time limits established by law.
Data related to applications will be retained for the duration of the selection process. Your resume and related professional information may be retained in the CannabisJobs talent pool for up to 24 months from the last contact or update. Before the expiration date, CannabisJobs may ask the candidate to confirm their interest in remaining in the database. If no confirmation is received, the data will be deleted.
Data related to accounts and training activities on CannabisJobs Academy will be retained for 5 years following the completion or expiration of the course. Data necessary for verifying the certificates issued may be retained for up to 10 years.
Data relating to orders, payments, invoicing, and contractual relationships will be retained for the periods required by applicable tax, accounting, and civil laws and, where necessary, for up to 10 years.
Newsletter data will be retained until consent is withdrawn.
Technical and security data will be retained for as long as necessary to ensure the proper functioning and protection of the systems.
Data may be retained for a longer period only when necessary to comply with a legal obligation, resolve a dispute, or protect a right.
8. Safety
CannabisJobs takes appropriate technical and organizational measures to protect personal data from loss, unauthorized access, alteration, disclosure, or unlawful use.
9. Rights of Data Subjects
In the cases provided for by the GDPR, the data subject may exercise the following rights:
- access to one’s personal data;
- correction of inaccurate or incomplete data;
- data deletion;
- restriction of processing;
- objection to processing;
- data portability;
- Withdrawal of consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal. Requests may be sent to the contact email address.
The data subject also has the right to lodge a complaint with the supervisory authority of the Member State in which he or she resides or works, or of the place where the alleged violation occurred.
In Spain, the relevant authority is the Agencia Española de Protección de Datos (AEPD): www.aepd.es.
10. Updates to the Privacy Policy
CannabisJobs may update this privacy policy to reflect regulatory, organizational, or technical changes.
The current version and the date of the last update will always be posted on this page.
