Privacy Policy
Information on the processing of personal data pursuant to Art. 13, 14 GDPR
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:
HERB Ventures GmbH, Oberes Feld 13, 33106 Paderborn, Germany
Managing Director: Hedda Ohlmeyer
Phone: +49 5251 546 0 · E-mail: tellus@herbventures.com
2. General information
The following notes provide a simple overview of what happens to your personal data when you visit our website or contact us. Personal data is any data by which you can be personally identified.
3. Collection and storage of personal data
3.1 When visiting the website: When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, website from which access was made (referrer URL), browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
We process this data for the following purposes: ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability, and for further administrative purposes. The legal basis for the data processing is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest follows from the purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you as a person.
3.2 When using our contact form / by e-mail: For questions of any kind, we offer you the possibility of contacting us via a form provided on the website or by e-mail. A valid e-mail address is required so that we know who the enquiry comes from and can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us takes place in accordance with Art. 6 (1) sentence 1 (a) GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form is automatically deleted once your enquiry has been dealt with.
4. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if: you have given your express consent in accordance with Art. 6 (1) sentence 1 (a) GDPR; the disclosure is necessary in accordance with Art. 6 (1) sentence 1 (f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data; there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 (c) GDPR; and this is legally permissible and necessary in accordance with Art. 6 (1) sentence 1 (b) GDPR for the processing of contractual relationships with you.
5. Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malware. Information is stored in the cookie that arises in connection with the specific device used. However, this does not mean that we thereby obtain direct knowledge of your identity.
The use of cookies serves, on the one hand, to make the use of our services more pleasant for you. The legal basis for the processing of technically necessary cookies is Art. 6 (1) (f) GDPR and § 25 (2) TDDDG. For all non-essential cookies (e.g. analytics, marketing), we obtain your consent via a consent banner in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time with effect for the future.
6. Analytics tools and advertising
If analytics or tracking tools are used on our website (e.g. Google Analytics, Meta Pixel, Matomo, LinkedIn Insight Tag), they are only activated after your express consent via our consent management (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Details on the individual services, storage periods and recipients are shown to you transparently in the consent banner.
7. Hosting
Our website is operated by a professional hosting service provider within the European Union. Personal data collected on our website is stored on the host's servers. The processing is based on Art. 6 (1) (f) GDPR (legitimate interest in a reliable provision of our website). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the host.
8. Storage period
Personal data is only stored for as long as is necessary to fulfil the respective purposes or as required by statutory retention periods (in particular under the German Commercial Code (HGB) and Fiscal Code (AO), generally 6 or 10 years). Once the purpose no longer applies or these periods expire, the corresponding data is routinely deleted.
9. Data subject rights
You have the right: to request information about your personal data processed by us in accordance with Art. 15 GDPR; to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us in accordance with Art. 16 GDPR; to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR; to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR; to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller in accordance with Art. 20 GDPR; to revoke your once-given consent at any time in accordance with Art. 7 (3) GDPR; and to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
10. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are grounds for doing so arising from your particular situation. If you wish to exercise your right to object, an e-mail to tellus@herbventures.com is sufficient.
11. Competent supervisory authority
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Phone: +49 211 38424-0 · E-mail: poststelle@ldi.nrw.de · Internet: www.ldi.nrw.de
12. Data security
During your visit to our website, we use the widespread SSL/TLS procedure in conjunction with the highest level of encryption supported by your browser. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
13. Validity and amendment of this privacy policy
This privacy policy is currently valid as of August 2026. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website under "Privacy Policy".
Status: 06 August 2026 · HERB Ventures GmbH