Who We Are

Our website address is: https://www.canna-maps.es. Canna-Maps (“we,” “us,” “our”) operates a directory of cannabis social clubs across Spain and the Canary Islands, and sells the Green-Key Cannabis Club Membership Pass.

Information We Collect

When You Purchase a Green-Key Pass

To verify eligibility and issue your membership pass, we collect:

Full name
Date of birth — used solely to confirm you meet the minimum age requirement (18+) for cannabis social club access
Email address and phone number
A selfie photograph — used to create your membership pass and to help partner clubs verify your identity against the pass at the point of entry. This is always a photo of your face, never a photo of a government-issued ID; any physical ID check happens in person at the club itself
Billing information processed through our payment provider (PayPal) to complete your purchase

If You Buy a Pass for Someone Else (Group Orders)

A single order can include a Green-Key Pass for more than one person — for example, buying passes for friends or family travelling with you. In that case, we collect the same information above (name, date of birth, selfie) for each additional person on the order, either provided directly by the purchaser at checkout, or by the companion themselves via a secure, single-use email link sent to their own email address, which they use to submit their own details directly to us.

Why We Collect This Data

To verify you meet the legal minimum age requirement before granting access to any partner club
To generate your personal Green-Key membership pass (including your photo, for identity verification purposes)
To process your payment and manage your annual membership
To provide customer support if you contact us about your membership

How We Store This Data

Your date of birth and photo are stored securely on our website’s database (hosted on Fasthosts) and are only accessible to authorised Canna-Maps administrators
Your photo is used to render your digital pass and is not shared with any partner club directly — the pass itself, which you present, is what’s shown at check-in
We do not sell, rent, or share your personal data with third parties for marketing purposes

Payment Information

We do not store your card details. All payments — including card payments and Google Pay — are processed securely via PayPal, so your card details never reach our own servers. Please refer to PayPal’s Privacy Policy for details on how they handle payment data.

Finding Clubs Near You (Location Data)

Our Explore page lets you optionally search for clubs “near me,” which asks your device for your approximate or precise location (via your browser’s standard location-sharing permission). This is entirely optional — you can also search by typing a place name instead. Your location is used only to power that one search and is not stored against your account or shared with any third party.

Plan Your Visit

If you’re an active Green-Key member, you can optionally let a club know roughly when to expect your first visit (the region, the specific club, and an approximate arrival date and time). This information is sent to our team, who may pass relevant details on to the specific club so they know to expect you. It’s entirely optional and only needed once per club.

Analytics

We use Google Analytics to understand overall site traffic and usage patterns (for example, which pages are visited and roughly how many people visit). This is aggregate usage data, separate from your Green-Key account data, and is governed by Google’s Privacy Policy.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded Content From Other Websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.

Who We Share Your Data With

PayPal — to process your payment
Google Analytics — aggregate site usage data only, not your Green-Key account data
If you request a password reset, your IP address will be included in the reset email
If you submit a “Plan Your Visit” request, relevant details may be passed to the specific club named in your request
We do not share your date of birth, photo, or personal details with partner clubs directly; your Green-Key Pass itself serves as the verification document

How Long We Retain Your Data

Your membership data (name, DOB, photo) is retained for the duration of your active membership and for a reasonable period afterward for record-keeping and legal compliance purposes
If you leave a comment, the comment and its metadata are retained indefinitely, so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue

What Rights You Have Over Your Data

If you have a Green-Key Pass, an account on this site, or have left comments, you can request to:

Receive an exported file of the personal data we hold about you
Request that we erase any personal data we hold about you (this does not include data we are legally obliged to retain)
Correct any inaccurate personal information we hold about you

To make a request, please contact us at [email protected].

Where Your Data Is Sent

Visitor comments may be checked through an automated spam detection service. Payment data is sent securely to PayPal for processing. Aggregate usage data is sent to Google Analytics.

Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at [email protected] or via WhatsApp at +34 604 217 291.

Privacy Policy