Effective from 11 October 2026
1. Data controller
Herbafarm Mezőgazdasági Termelő és Értékesítő Korlátolt Felelősségű Társaság (Herbafarm Kft.)
Registered office: 1037 Budapest, Remetehegyi út 164., Hungary
Company registration number: 01-09-925054 · Tax number: 14897564-2-41
Email: info [kukac] herbafarm [pont] hu
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
2. Contact form and email enquiries
If you contact us through the contact form or by email, we process the data you provide: your name, email address and the content of your message.
- Purpose: to answer your enquiry and keep in touch with you about it.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you give by sending the message.
- Retention: until your enquiry has been dealt with, and for no longer than one year afterwards, unless further correspondence or a business relationship requires longer retention.
Messages sent through the form are not stored in the website database; they are forwarded to our mailbox.
3. Cookies
This website uses the following cookies that are necessary for it to work:
- a cookie that remembers your cookie choices (cookie banner),
- a cookie that remembers your selected language,
- security cookies that protect the site against attacks.
These cookies do not require consent. With your consent, we also use analytics cookies (see below). You can give or withdraw your consent at any time in the cookie banner.
Visitor statistics (Google Analytics 4): If you accept analytics cookies, we use Google Analytics 4, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how visitors use the website (for example pages viewed, time spent on the site, approximate location and device type). Google Analytics 4 does not store IP addresses. Legal basis: your consent (Article 6(1)(a) GDPR). Data may be transferred to Google LLC in the United States; Google is certified under the EU–US Data Privacy Framework. User-level analytics data is deleted after two months. Until you give your consent, no analytics cookies are set.
4. Server logs and security
When you visit the website, the server automatically records technical data (IP address, date and time of the visit, browser type, the page visited). We use this data only to operate the website and to protect it against attacks. Legal basis: our legitimate interest (Article 6(1)(f) GDPR). The logs are deleted automatically within a short period.
5. Data processors
Our hosting provider stores the website and its data as a data processor: Sybell Informatika Kft. (1138 Budapest, Tomori utca 34., 2nd floor, Hungary). We do not sell personal data or transfer it to third parties for their own purposes, and we do not use automated decision-making or profiling.
6. Your rights
You have the right to request access to your personal data, its rectification or erasure, the restriction of its processing, and data portability; to object to processing based on legitimate interest; and to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Please send your request to info [kukac] herbafarm [pont] hu. We will respond within one month at the latest.
7. Remedies
If you believe that we have violated your data protection rights, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; website: www.naih.hu; email: ugyfelszolgalat [kukac] naih [pont] hu. You may also take the matter to court; the case may also be brought before the court competent for your place of residence.