HERBECTUS LTD and its affiliated companies (Herbectus) welcome your visit to our website and your interest in our company and services. We take the protection of your personal data and its confidential treatment very seriously. Our goal is to ensure that you feel comfortable and safe when visiting our website or when communicating and contacting us.
We process personal data in accordance with Article 6(1)(b) of the European General Data Protection Regulation (EU-GDPR) for the purpose of fulfilling existing contractual relationships, handling business transactions, and initiating business relationships. Data processing may also occur based on voluntary consent under Article 6(1)(a) EU-GDPR or to protect our legitimate interests under Article 6(1)(f) EU-GDPR.
As the controller within the meaning of Article 4(7) EU-GDPR, we would like to inform you through this Privacy Policy about when we store which data and how we use it when you visit our website.
Changes in legislation or internal company processes may require occasional adjustments to this Privacy Policy. Please read the latest version of the Privacy Policy regularly on our homepage.
1. Information on the Processing of Personal Data
Personal data refers to information about a natural person whose identity is determined or determinable, such as name, address, email address, and telephone number. Information that does not relate to an identifiable person is not considered personal data.
Processing refers to any operation carried out on personal data, whether automated or not, such as collection, recording, organization, storage, modification, retrieval, use, disclosure, restriction, deletion, or destruction.
We only process personal data of minors who are at least 16 years old. If a minor is younger than 16, their personal data will only be processed if a parent or guardian has provided consent or authorization.
2. Processing and Disclosure of Personal Data & Purpose Limitation
When you contact us via email or an online contact form, we process the data you provide (such as your email address, name, and phone number) to respond to your inquiries. We delete these data once they are no longer required, or restrict processing if statutory retention periods apply.
When you visit our website, our web servers automatically store certain technical details, such as:
- The browser and operating system you use
- The website you came from
- The pages you visit on our site
- The date of your visit
- Your IP address (for security reasons, such as detecting attacks on our website)
We use your personal data for:
- Technical administration of the website
- Customer management
- Surveys and marketing (only where necessary)
Participation in surveys and marketing activities is voluntary. Data is only shared with governmental authorities in compliance with legal obligations. All employees handling personal data are bound by confidentiality obligations.
3. Online Applications and Employment Opportunities at HERBECTUS
When you apply for a job at HERBECTUS, we process your personal data for recruitment and potential employment purposes under Article 6(1)(a), (b), and (f) EU-GDPR.
This includes:
- Screening personal details (name, date of birth, nationality)
- Checking against sanction lists, including the EU Terrorist List, as required by anti-terror regulations
- Verifying compliance with financial regulations, as payments to individuals on such lists are prohibited
If your data is processed under Article 6(1)(f) EU-GDPR, it is done to maintain a standardized and efficient hiring process across the HERBECTUS group.
Your data is not shared with third parties, except in cases where we are legally obligated to do so (e.g., law enforcement requests).
If you consent to your application data being shared across HERBECTUS companies for potential employment, you can indicate this in the online application system. Your data will be stored and deleted in accordance with legal retention periods.
4. Newsletter Subscription
You can subscribe to our newsletter via our website. The information you provide will only be used for sending the newsletter, unless you agree to further processing.
You may unsubscribe at any time via the “Unsubscribe” link at the bottom of each newsletter.
5. Cookies
Our website uses cookies to recognize repeat visits. Cookies are small text files stored by your browser that help us improve our services.
- Session cookies are deleted after you leave the site.
- Other cookies may store preferences and settings for automatic recognition.
Cookies do not harm your computer or contain viruses.
You can disable cookies in your browser settings, but this may limit some website functions.
To review or manage stored cookies, click:
COOKIE SETTINGS
6. Use of Google Analytics
We use Google Analytics, a service provided by Google Inc., to analyze website usage. This service uses cookies to track:
- Your IP address
- Website activity
- Browser information
The IP anonymization feature ensures that only anonymized IPs are processed.
You can disable Google Analytics via your browser settings or download a browser plugin from Google.
7. Use of Hotjar
We use Hotjar to track user behavior, such as:
- Clicks
- Scroll height
- Mouse movements
Data is stored on Hotjar servers in Ireland. If you do not want your behavior to be recorded, you can opt-out via Hotjar’s website.
8. Social Plugins
We use social media buttons (Facebook, LinkedIn, Twitter) on our website.
- These buttons are inactive by default and require user activation.
- If activated, data may be sent to social networks.
- If you are logged into a social network, it can link your visit to your profile.
For privacy settings, refer to the respective platform’s privacy policy.
9. Log Files & Security
Each internet request is logged for security and troubleshooting purposes. This data includes:
- IP address
- Referrer URL
- Pages visited
- Browser and OS details
Data is stored for a short period and then deleted unless required for legal investigations.
We use SSL encryption to protect data transfers. You can recognize this by the “https://” prefix in your browser.
10. Your Rights
Under EU-GDPR, you have the right to:
- Access your personal data (Art. 15)
- Correct incorrect data (Art. 16)
- Request deletion (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
To exercise these rights, contact us at: info@herbectus.de
11. Contact
For data protection inquiries, contact:
HERBECTUS LTD
27 Old Gloucester Street, London, WC1N 3AX, UK
Email: info@herbectus.de