Legal & Privacy
Last updated: 1 September 2026
1. Company details
Herba medica, proizvodnja in trgovina d.o.o.
Preserska cesta 5, Zgornje Jarše
SI-1235 Radomlje
Slovenia
Email: info@herbamedicalabs.com
Legal form: Družba z omejeno odgovornostjo (private limited company)
Registered with: District Court of Ljubljana (Okrožno sodišče v Ljubljani)
Date of entry in the register: 18 February 2008
Company registration number: 3277291000
VAT identification number: SI24503606
Share capital: EUR 202,000, fully paid up
Managing director: Matej Čuk
This website is operated by Herba medica d.o.o. (“Herba Medica”, “we”, “us”). It is an informational website presenting our manufacturing services to business partners. We do not sell products through this website.
Herba Medica has been producing herbal products and food supplements in Slovenia since 1986. The present company, Herba medica d.o.o., was incorporated in 2008 and continues that business without interruption.
2. Using this website
The content of this site is provided for general information about our manufacturing services.
We take care to keep it accurate and current, but we give no warranty that every detail is complete or up to date at any given moment. Specifications, production capabilities, minimum order quantities, lead times and prices described here are indicative and do not constitute a binding offer. A binding commitment arises only from a written quotation or a contract signed by us.
Certifications and technical claims described on this site relate to Herba medica d.o.o. and are evidenced by documentation we provide on request.
Nothing on this website is intended as medical advice, and no statement here should be read as a claim that a product prevents, treats or cures any disease.
All content on this site, including text, images, graphics, layout, the Herba Medica name, logo and seal, is owned by Herba medica d.o.o. or used with permission. You may view and print pages for your own business use. You may not reproduce, republish, distribute or use our content commercially without our prior written permission.
Third-party names and logos shown on this site remain the property of their respective owners and are displayed with permission.
This site may link to third-party websites. We do not control those sites and are not responsible for their content, their availability or their privacy practices.
To the extent permitted by law, we exclude liability for any loss or damage arising from the use of, or reliance on, information on this website, including any interruption to its availability.
These terms, and any dispute arising from them or from the use of this website, are governed by the law of the Republic of Slovenia. The courts of the Republic of Slovenia have exclusive jurisdiction.
3. Privacy policy
Who is responsible for your data
Herba medica d.o.o., at the address given in section 1, is the controller of personal data collected through this website.
For any question about your personal data, write to info@herbamedicalabs.com or to our postal address, marked for the attention of the managing director.
We have not appointed a Data Protection Officer. We are not required to do so under Article 37 of the GDPR, as our core activities do not involve large-scale monitoring or large-scale processing of special categories of data.
What we collect, why, and on what basis
Contact form and email enquiries
When you use our contact form or write to us directly, we process the data you provide: your first and last name, email address, telephone number if you choose to give it, the enquiry type you select, and the content of your message.
We use this data only to respond to your enquiry and, where the enquiry leads to a business relationship, to manage that relationship.
Legal basis: Article 6(1)(b) of the GDPR, taking steps at your request prior to entering into a contract, and Article 6(1)(f) of the GDPR, our legitimate interest in responding to business enquiries and maintaining commercial contact with prospective and existing partners. We consider this proportionate because the data is limited to business contact details you have chosen to send us, it is used only for the purpose for which you sent it, and you can object at any time.
Retention: Enquiries that do not lead to a business relationship are deleted within 24 months of the last contact. Where a business relationship follows, correspondence is retained for the duration of that relationship, and thereafter for the periods required by Slovenian accounting, tax and commercial law.
Server logs
Like every web server, the server hosting this site automatically records technical data with each request: IP address, browser type and version, operating system, referring page, and the date and time of access. This happens whether or not you contact us.
Purpose: Delivering the website, maintaining its security and stability, and diagnosing technical faults.
Legal basis: Article 6(1)(f) of the GDPR, our legitimate interest in operating a secure and functioning website.
Retention: These logs are retained for a short period by our hosting provider, are not combined with other data, and are not used to identify individual visitors.
Website analytics
We use the analytics built into our hosting platform to understand how this site is used. It measures page views, country, device type and traffic source in aggregate. It does not use cookies and does not store persistent identifiers on your device, so it cannot identify you individually.
Legal basis: Article 6(1)(f) of the GDPR, our legitimate interest in understanding how our website performs.
Retention: Aggregated statistics only. No personal data is retained.
Who else has access to your data
We share personal data only with service providers who process it on our behalf, under a written data processing agreement, and only to the extent necessary:
Framer B.V. (Netherlands), our website hosting and form provider
Our email service provider, for receiving and storing correspondence
We do not sell personal data, we do not share it for advertising purposes, and we do not disclose it to third parties except where required by law.
Where a service provider processes data outside the European Economic Area, that transfer is covered by the European Commission’s Standard Contractual Clauses or another safeguard permitted under Chapter V of the GDPR.
Your rights
Under the GDPR you have the right to:
request access to the personal data we hold about you
have inaccurate or incomplete data corrected
have your data erased
restrict how we process your data
object to processing based on our legitimate interest
receive your data in a structured, commonly used and machine-readable format
Where processing is based on our legitimate interest, you may object at any time. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
To exercise any of these rights, write to info@herbamedicalabs.com. We respond within one month of receiving your request. If your request is complex, we may extend that period by a further two months and will tell you if we do.
Complaints
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Slovenian supervisory authority:
Informacijski pooblaščenec
Dunajska cesta 22, 1000 Ljubljana, Slovenia
gp.ip@ip-rs.si
www.ip-rs.si
Providing your data
You are under no obligation to provide us with personal data. If you choose not to complete the contact form, the only consequence is that we cannot answer your enquiry.
Automated decision-making
We do not use automated decision-making or profiling.
Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. Access to enquiry data is limited to the people within our company who need it to respond to you.
4. Cookies
This website does not use tracking, profiling or advertising cookies.
Our analytics are cookieless and do not place persistent identifiers on your device. This is why you will not see a cookie consent banner on this site.
Your browser may store technical data that is strictly necessary for the site to function and to be displayed correctly. Under Article 225 of the Slovenian Electronic Communications Act (ZEKom-2) and Article 5(3) of Directive 2002/58/EC, strictly necessary storage of this kind does not require consent.
If we introduce cookies or similar technologies that require consent, we will ask for that consent before they are set, and we will update this page accordingly.
5. Changes to this page
We may update this page as our services, our service providers or the applicable law change. The date shown at the top indicates when it was last revised. We recommend checking it from time to time.