Privacy
Privacy Notice
Privacy information for the website 420-plus.com, public search functions and the 420+ portal. This English version is provided for convenience; the German version remains authoritative.
1. Introduction and Scope
This Privacy Notice explains how NESS Online GmbH processes personal data in connection with the website 420-plus.com, public search functions, public profiles and the technical provision of the 420+ portal, including white-label instances or partner-related portal environments.
2. Controller for 420+’s Own Processing Activities
The controller for 420+’s own processing activities is NESS Online GmbH, Ober-Laudenbacher Str. 56c, 64646 Heppenheim, Germany, represented by Hannes Schubert. Contact: sales@420-plus.com, phone +49 160 985 345 11. No data protection officer is currently appointed.
3. Distinction Between 420+’s Own Processing and Processing on Behalf of Customer Organizations
For the public website, contact inquiries, demo requests, contractual communication and similar own business processes, NESS Online GmbH acts as controller. For data processed inside customer portal environments, 420+ generally acts as processor on behalf of the respective customer organization, unless expressly stated otherwise.
4. Role of Customer Organizations
Customer organizations remain responsible for the personal data they enter, manage or make available within the portal and for the lawful configuration and use of the portal in their respective operational context.
5. White-Label Instances, Cooperation Partners and Referral Partners
Portal instances may be provided under partner names or white-label structures. Unless otherwise agreed, partners do not receive administrative access to customer data merely because a portal instance carries a partner-related name.
6. Visiting the Website 420-plus.com
When the website is accessed, technically necessary data such as IP address, browser information, date and time, requested pages and server log data may be processed to provide the website securely and reliably.
7. Cookies, Consent and Analytics Tools
Cookies and comparable technologies may be used where technically necessary or where a valid consent has been obtained. Details depend on the respective implementation and cookie configuration of the website.
8. Contact, Demo and Contract Requests
When you contact us or request a demo, we process the information you provide, such as name, email address, organization, role, message content and communication metadata, to respond to your request and prepare possible contractual communication.
9. Contract and Billing Data of Customer Organizations
For customer organizations, we process contract, communication, billing and administrative data to conclude, perform, manage and document contractual relationships.
10. Public Search and Public Profiles
Public search functions and public profiles may display information that has been released for public visibility by the respective organization. 420+ provides the technical infrastructure for this function.
11. Inquiries, Prospect Requests and Inquiry Pipelines
Inquiries submitted through public functions may be processed and forwarded or made available to the relevant organization where this is necessary to handle the request.
12. Data Processing Within the 420+ Portal and White-Label Instances
Within the portal, data may be processed for member management, operational workflows, cultivation or production processes, compliance documentation, inventory, reservations, handover, reports, audit logs and related support functions, depending on the customer configuration.
13. Support, Maintenance and Administration Access by 420+
Support, maintenance and administration access is limited to what is necessary for operation, troubleshooting, security, maintenance, backup, monitoring and further development, and is subject to confidentiality and instruction-bound handling where applicable.
14. Logging, Audit Logs and System Security
The portal may create technical logs and audit logs to preserve traceability, security, integrity, accountability and evidence of relevant system events.
15. Hosting, Infrastructure, Technical Assistants and Subprocessors
420+ uses hosting, infrastructure, maintenance, security, backup, monitoring and support services where required for operation. Access is limited to what is necessary and is subject to appropriate technical and organizational measures.
16. Demo and Test Environments
Demo and test environments are intended for demonstration and testing. Real personal data should only be used where this is necessary and legally permissible.
17. Data Analysis, Reporting and Product Improvement
Data may be analyzed for reporting, system stability, security, product improvement and operational insights, subject to the applicable legal basis and the respective customer relationship.
18. Retention, Export, Deletion and Contract End
Data is retained only as long as necessary for the respective purposes, statutory obligations, evidence requirements, contractual performance or system integrity. Export and deletion processes depend on the relevant role and contractual configuration.
19. Recipients of Personal Data
Recipients may include hosting providers, technical service providers, support personnel, customer organizations, cooperation partners where legally permissible, authorities where legally required, and other recipients necessary for the respective processing purpose.
20. Rights of Data Subjects
Data subjects may have rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent, subject to the requirements of the GDPR.
21. Right to Lodge a Complaint with a Supervisory Authority
Data subjects have the right to lodge a complaint with a competent data protection supervisory authority.
22. No Automated Decision-Making / No Profiling by 420+
420+ does not use personal data for automated decision-making or profiling within the meaning of Article 22 GDPR for its own purposes.
23. Changes to this Privacy Notice
This Privacy Notice may be updated to reflect changes in law, technology, services or processing activities.