Privacy Policy

Effective Date: January 2026

Last Updated: January 2026

Introduction

HerboMan ("we," "our," or "us") operates the website HerboMan.info (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

HerboMan
Kärntner Straße 9
1010 Vienna, Austria
Email: [email protected]
Phone: +43 699 34 78 562

Information We Collect

Automatically Collected Information

When you visit our Website, certain information about your device and browsing behavior may be collected automatically, including:

IP address
Browser type and version
Operating system
Pages visited and time spent on pages
Referring website addresses
Date and time of visits

Information You Provide

We may collect information that you voluntarily provide when you:

Contact us through our contact form (name and email address)
Subscribe to updates or newsletters (if applicable)
Participate in surveys or provide feedback

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

How We Use Your Information

We use the information we collect for the following purposes:

To operate and maintain our Website
To improve user experience and Website functionality
To respond to your inquiries and provide customer support
To analyze Website usage and trends
To detect and prevent technical issues or security threats
To comply with legal obligations

Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

Consent: When you provide explicit consent for specific processing activities (e.g., accepting cookies)
Legitimate Interests: To operate our Website, improve services, and ensure security
Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our Website, such as:

Web hosting providers
Analytics services
Technical support services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Contact form submissions: Retained for up to 2 years
Analytics data: Aggregated and anonymized after 14 months
Cookie data: As specified in our Cookie Policy

Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights:

Right of Access: You can request a copy of the personal data we hold about you
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure: You can request deletion of your personal data
Right to Restrict Processing: You can request that we limit how we use your data
Right to Data Portability: You can request a copy of your data in a structured format
Right to Object: You can object to certain types of processing
Right to Withdraw Consent: You can withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us at [email protected].

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our Website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

HerboMan
Kärntner Straße 9
1010 Vienna, Austria
Email: [email protected]
Phone: +43 699 34 78 562

Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

For Austria, the supervisory authority is:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna, Austria
Website: www.dsb.gv.at

Last updated: January 2026