Privacy Policy
Effective date: April 2026
Controller: Herb-pharma AG Schweiz, Waldmannstrasse 6, 8001 Zürich, Switzerland
Welcome to www.hemorrelax.com. We take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect, how we use it, to whom we disclose it, and what rights you have in relation to its processing.
If you have any questions regarding the protection of your personal data, you may contact us through Herb-Pharma Corporation s.r.o., Veľké Ludince 404, 935 65 Veľké Ludince, Slovakia, or by email at home@herb-pharma.com.
1. Data Controller
The controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter "GDPR") is:
Herb-pharma AG Schweiz Waldmannstrasse 6, 8001 Zürich, Switzerland E-mail: home@herb-pharma.com Web: www.hemorrelax.com
Contact person for data protection matters: Herb-Pharma Corporation s.r.o., Veľké Ludince 404, 935 65 Veľké Ludince, Slovakia E-mail: home@herb-pharma.com
2. What personal data we collect and why
2.1 Website visits – technical data
Each time you visit our website, our server automatically records certain technical data, in particular the IP address of your device, the type and version of your browser, your operating system, the date and time of your visit, the subpages you visited, and the page from which you arrived at our website (referrer URL).
Legal basis: the legitimate interests of the controller (Article 6(1)(f) GDPR) – ensuring the technical functioning and security of the website.
Retention period: this data is automatically deleted within 30 days of being recorded.
2.2 Cookies and analytical tools
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device when you visit a website. We distinguish between the following categories of cookies:
Necessary cookies – these are essential for the proper functioning of the website. Their use does not require your consent.
Analytical cookies – we use Google Analytics 4 (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyse website traffic and user behaviour. This data helps us improve the content and functionality of the website. Data is anonymised and retained for a period of 14 months.
Marketing cookies – we use advertising targeting tools, specifically Google Ads (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) and TikTok Pixel (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland). These tools enable us to display relevant advertisements to users on the Google, Facebook, Instagram and TikTok platforms.
Legal basis: your consent (Article 6(1)(a) GDPR), provided via the cookie banner upon your first visit to the website.
We manage cookies through the Cookiebot tool (provider: Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark). You may withdraw or modify your consent at any time by clicking the cookie management link in the footer of the website.
2.3 Google Consent Mode
Our website uses Google Consent Mode, which ensures that Google tools (Google Analytics, Google Ads) operate in accordance with your consent. If you do not provide consent, these tools operate in a limited mode without collecting personal data.
2.4 Contact form
If the website includes a contact form in the future, we will process the personal data you provide through it – typically your name, email address and the content of your message. We will use this data solely for the purpose of responding to your enquiry.
Legal basis: the legitimate interests of the controller (Article 6(1)(f) GDPR), or performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).
Retention period: 24 months from the date of last contact.
2.5 Blog comments
If the website allows users to add comments to blog articles in the future, we will process the data provided when adding a comment – typically a name or username, email address and the content of the comment.
Legal basis: your consent (Article 6(1)(a) GDPR).
Retention period: for the duration of publication of the comment, for a maximum of 24 months, unless you request its earlier deletion.
3. Google Maps
We use the Google Maps service on our contact page (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When the map is loaded, certain data including your IP address may be transmitted to Google. We only load the map on the basis of your consent to the relevant cookie category.
For more information about how Google processes data, please visit: https://policies.google.com/privacy.
4. Social media
Our website contains or will contain links to the Hemorrelax brand profiles on social media platforms (Facebook, Instagram, YouTube, TikTok and potentially others). These links take the form of simple hyperlinks – by clicking on them you will leave our website and be redirected to the relevant platform.
Please note that the operators of these platforms may process your personal data in accordance with their own privacy policies, over which we have no control. We recommend that you read the privacy policy of the relevant platform.
Where we operate our own profiles on social media platforms, we may in certain cases act as joint controllers (within the meaning of Article 26 GDPR) together with the operators of the relevant platforms and jointly process certain statistical data about visitors to our profiles (e.g. Facebook Insights). In such cases, we will provide you with further information directly on the relevant profile.
5. Transfer of personal data to third countries
Some of the tools we use (Google Analytics, Google Ads, Meta Pixel, TikTok Pixel) may transfer personal data to the United States of America or other third countries outside the European Economic Area (EEA).
These transfers are safeguarded by standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR) or other appropriate safeguards in accordance with the GDPR.
The website www.hemorrelax.com itself is hosted on a server located in Finland, within the European Union.
6. Recipients of personal data
We may disclose your personal data to the following categories of recipients:
Technical service providers – hosting (server in Finland, EU), website administration.
Analytical and marketing tools – Google LLC (Google Analytics, Google Ads), Meta Platforms Ireland Limited (Meta Pixel), TikTok Technology Limited (TikTok Pixel), Cybot A/S (Cookiebot).
All recipients are contractually obliged to process personal data solely in accordance with our instructions and in compliance with applicable data protection legislation, unless they are themselves independent controllers.
7. Your rights
You have the following rights in relation to the processing of your personal data:
Right of access – you have the right to obtain confirmation as to whether we process your personal data and, if so, to obtain access to it.
Right to rectification – you have the right to request the correction of inaccurate or incomplete personal data.
Right to erasure – you have the right to request the erasure of your personal data where the purpose of processing has ceased or where you withdraw your consent and there is no other legal basis for processing.
Right to restriction of processing – you have the right to request that we restrict the processing of your personal data in the cases provided for under the GDPR.
Right to data portability – you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to object – you have the right to object to the processing of your personal data where such processing is based on the legitimate interests of the controller.
Right to withdraw consent – where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
Right to lodge a complaint – you have the right to lodge a complaint with the competent supervisory authority. As this website is operated across multiple markets, you may contact the supervisory authority in your country of residence. A full list of EU data protection authorities is available at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
To exercise your rights, please contact us at home@herb-pharma.com.
8. Automated decision-making and profiling
Our website does not use automated decision-making or profiling within the meaning of Article 22 GDPR that would produce legal effects or similarly significantly affect you.
Marketing tools (Google Ads, Meta Pixel, TikTok Pixel) may use certain forms of profiling for advertising targeting purposes. Such profiling takes place solely on the basis of your consent and in accordance with the policies of the relevant platforms.
9. Security of personal data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. The website is hosted on a secure server within the European Union.
Notwithstanding the above, we draw your attention to the fact that the transmission of data over the internet cannot be guaranteed to be completely secure.
10. Changes to this Privacy Policy
We may update this Privacy Policy at any time, in particular in connection with changes in legislation, the deployment of new tools or the development of the website. The current version is always available on this page together with the date of the last update. In the event of material changes, we will inform you in an appropriate manner.
11. Final provisions
This Privacy Policy is governed by applicable data protection legislation, in particular the GDPR. If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.
Contact: Herb-Pharma Corporation s.r.o., Veľké Ludince 404, 935 65 Veľké Ludince, Slovakia | home@herb-pharma.com | www.hemorrelax.com
Date of last update: April 2026