What would you like to know about your data?
Start with a specific question: which data relate to me, and what happens to them? Note whether you opened an account, subscribed to a newsletter, sent an enquiry or actually bought something. These are separate activities. Registration alone establishes neither an order nor a particular collection of data.
An individual response rather than general categories
A privacy page may describe possible categories and purposes. Your request concerns the actual processing of your own data. Do not simply ask for another link to the same notice. A description of possible order data does not establish that you have an order history, for example.
Find the responsible controller
Open the website you already know yourself. Compare its legal notice and privacy notice: which organisation is identified, and which contact is given for privacy enquiries? A brand is not automatically a separate legal entity. Address the request to the named controller instead of sending the same documents to several brands just in case.
Use a verified contact route
An unexpected chat, forwarded QR code or unfamiliar upload link does not establish the correct recipient. Begin through the known website and clarify an unexplained request for evidence there. Do not give passwords or one-time codes to a person in chat. For CannabisClub.ch, the linked privacy notice is the starting point; this article does not replace its current details.
Write a clear request
Use an identifier through which you previously had contact, such as your account email. Add only details needed to match the request. Do not include a medical history or details of cannabis use as a precaution. If you want to clarify a particular activity, you can name it without inadvertently excluding a broader request.
A message template
Subject: Access to my personal data. Hello. Please tell me whether you process personal data relating to me and provide access to those data. My previously used identifier is [account email or other suitable identifier]. Please explain purposes, sources, recipients or recipient categories, and retention periods or the criteria used to determine them. Please also explain any relevant disclosures abroad and automated individual decisions. Let me know how any necessary identity check and secure delivery of the response can take place. This is initially an access request, not a cancellation or erasure instruction. Kind regards, [name].
Confirm identity and receive the response securely
The FDPIC explains that electronic requests are possible where identification and protected disclosure are ensured. An identity document copy is therefore not a universal attachment for every email. Clarify the evidence needed and the secure channel. Where a copy is necessary, details not needed can generally be made unreadable; which details are required depends on identifying the person.
Review the response systematically
Read the response alongside your original question. The matrix helps you identify specific gaps. Distinguish “not held”, “not answered” and “restricted with reasons”. They are different. An unclear response proves neither that no data are held nor that a privacy violation occurred.
If the response is missing or incomplete
The FDPIC states that access is generally provided free of charge within 30 days; exceptions are possible. Keep your request, its date and the responses. Ask about missing points and, where relevant, the reasons for a restriction or delay. Individual privacy advice may help with an unresolved case. This guide promises neither a particular outcome nor automatic disclosure of every record.
Checklist for the access response
| Topic | Look for in the response | Ask if unclear |
|---|---|---|
| Your data | Which specific data relating to you are processed? | Does the response concern your data or only general categories? |
| Purposes | What are the respective data used for? | Which activity does the purpose relate to? |
| Sources | Where did data you did not provide come from? | Is the available source information understandable? |
| Recipients | Which recipients or categories are identified? | Are any disclosures abroad explained? |
| Retention | Which periods or criteria are stated? | What does that mean for the particular activity? |
| Open points | Are any automated individual decisions or restrictions explained? | Which specific question remains unanswered? |
Separate access, correction, erasure and cancellation
State the result you want explicitly. Do you first want information, correction of an inaccurate entry, consideration of erasure or an end to a contract? Unsubscribing from a newsletter is another activity. Do not assume that one click performs all of these steps. Any requirement to retain particular records and existing contracts need separate consideration. Requesting access alone does not require cancellation.
What this means for CannabisAbo.ch
CannabisAbo.ch is in preparation. Registration takes place with CannabisClub.ch, our main brand. An account is not a cannabis order and activates no CannabisAbo subscription. For an enquiry about your Club account, begin with the controller identified there. This guide establishes no confirmed storage locations, deletion periods, service providers or future data flows for our subscription model.
What CannabisClub.ch registration means
Small, Medium and Large are planned; quantities, prices, intervals, terms and a launch date remain unconfirmed. At least 50% below comparable shop or pharmacy prices is a target, not a verified saving. Launch requires a lawful distribution route, necessary authorisations and operational readiness. Club members will be informed when the model is ready. Registration guarantees neither delivery, THC access, a prescription nor a study place.
Questions about access to personal data
Must I cancel my account to request my data?
No. Asking about your data is a different request from cancelling membership or a contract. Make clear which step you want.
Is a privacy notice already my individual access response?
No. It describes processing in general. An individual response concerns the data actually processed about you.
What can I do if the response remains incomplete?
Keep the response and ask about the specific missing points. Distinguish missing details from a restriction supported by reasons. You can seek individual advice on an unresolved case.
Registration activates no subscription and guarantees no access to cannabis.