Privacy

1.1 Controller

Lumen Studios GmbH Oberes Feld 13 33106 Paderborn Germany Phone: +49 5251 5462996 Email: shop@herbworld.com

1.2 Legal bases

Where we ask for consent, the legal basis is Art. 6(1)(a) GDPR. Where processing is necessary for a contract or pre-contractual steps, Art. 6(1)(b) GDPR applies. For legal obligations, Art. 6(1)(c) GDPR applies.

Where processing is necessary for our legitimate interests and your interests do not override them, Art. 6(1)(f) GDPR applies. Our legitimate interest is the secure operation of this website and the handling of enquiries.

1.3 Your rights

You have the right to access the data we hold about you, and to rectification, erasure, restriction of processing and data portability. Send us an email with the subject “Data protection”.

You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

1.4 Retention

Unless stated otherwise below, we keep personal data only as long as necessary for the respective purpose or as required by statutory retention periods. It is deleted afterwards.

2.1 Hosting and server logs

This website runs on a server rented from the hosting provider Hostinger. The provider processes data on our behalf.

When you visit the website, the server processes technically necessary data transmitted by your browser:

• IP address
• date and time of the request
• page or file requested
• status code and amount of data transferred
• browser and operating system
• previously visited page (referrer)

We use this data to deliver the website, keep it secure and fix faults (Art. 6(1)(f) GDPR). We do not combine it with other data and delete it as soon as it is no longer needed for these purposes.

2.2 Contact form

The contact form on this website stores nothing. It composes a finished message in your own email client. Only when you send that message from there does it reach us.

We process the details in your email in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries about a possible business relationship and Art. 6(1)(f) GDPR otherwise.

We do not pass your details on to third parties unless we are legally obliged to do so. We delete them once your enquiry has been fully handled and no statutory retention obligations apply.

2.3 Cookies and analytics

This website sets no cookies and uses no analytics or advertising services. Fonts and images are loaded from our own server; no third-party content is embedded.

There is no protected area and no sign-in.