Werther’s Original
Privacy Policy

Privacy Policy

Storck UK Limited (hereinafter referred to as Storck) takes the protection of your personal data very seriously, and collects, processes and uses your data only in accordance with the standards of the legal data protection regulations.

Storck is the data controller and, as such, is responsible for your personal data. Our contact details are:

STORCK UK LTD.
E-mail address: general@uk.storck.com
Postal address: STORCK UK LTD., Second Floor, Forest View, Chineham Business Park, Basingstoke, Hampshire, United Kingdom, RG24 8QZ
Telephone number: +44(0)1256 340300

We have appointed a data protection officer who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us at: general@uk.storck.com.

If links to other pages online are found on this website, this policy does not apply to the collection and processing of personal data on the linked pages, as Storck does not have any influence on their design and content.

2.1 Website Usage

When you visit our website, connection data is temporarily processed (including IP address, last-visited URL, time and date, pages accessed and elements like subpages or buttons, the amount of data transferred, the status, whether the request was successful, the description of the web browser used, and device type). We process this data as far as is necessary to run the website. The legal basis is our legitimate interest in accordance with Article 6(1)(f) of the European Data Protection Regulation (GDPR) in making our website available for the purposes of external representation and marketing. We also store the connection data in the log files on our web server in our legitimate interest to ensure the secure operation of the web server. With your consent, we may also process this data in pseudonymous form for the purposes listed under section 2.2.

Generally, the usage of our website is possible without providing data other than the data listed in this paragraph (see section 7).

2.2 Analysis for Marketing Purposes and for Website Optimisation (Piwik PRO)

If you give your consent either via our cookie banner or our checkbox below, Piwik PRO processes data for marketing and optimisation purposes on this Storck website. You can withdraw your consent at any time by deactivating the checkbox. In this case, a cookie is set to prevent further tracking by Piwik PRO.

For the above-mentioned purposes, pseudonymised profiles are created with the data mentioned in section 2.1. Furthermore, data about your activities on our website is tracked in particular which sub-pages and buttons you have used and when. These profiles do not contain any data with which you can be personally identified such as your name. In addition, these profiles are also not combined with such data. The legal basis for this analysis is your consent (Art. 6 para. 1 a GDPR).

The processing is carried out on behalf of Storck on servers of the Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, hosted in Germany.

2.3 Cookies

We use cookies on our website. Without your consent, we only use cookies that are absolutely necessary to provide you with this website in a flawless manner and with an engaging user experience as requested by you.

We only use cookies that analyse user behaviour for marketing and optimisation purposes, if you have given us your consent (§ 25 Abs. 1 German TDDDG). If you have given your consent, you can withdraw it at any time. To withdraw your consent please follow the instructions in section 2.2.

The following cookies are set when you visit our website (the cookies marked as optional are only used, if you give your consent):

Cookie Category Processing by Purpose Retention period
Cookie _pk_id Category Tracking (optional) Processing by Piwik (s. 2.2) Purpose Piwik Tracking - Stores a page-specific ID for the assignment of the data record Retention period 12 months
Cookie _pk_ses Category Tracking (optional) Processing by Piwik (s. 2.2) Purpose Piwik Tracking - Stores an ID for the current browser session of the user to assign the record Retention period 30 minutes
Cookie stg_last_interaction Category Tracking (optional) Processing by Piwik (s. 2.2) Purpose Piwik Tracking - Stores the moment of the last user interaction Retention period 12 months
Cookie stg_returning_visitor Category Tracking (optional) Processing by Piwik (s. 2.2) Purpose Piwik Tracking - Stores whether it is a returning user Retention period 12 months
Cookie stg_traffic_source_priority Category Tracking (optional) Purpose Piwik (s. 2.2) Processing by Piwik Tracking - Stores which source (campaign, search engine, direct input) the user came to the website from Retention period 30 minutes
Cookie stg_optout Category Tracking (optional) Purpose Piwik (s. 2.2) Processing by Piwik Tracking - Stores that no tracking is done Retention period 12 months
Cookie stg_externalReferrer Category Tracking Purpose Piwik Processing by Stores an URL of a website that referred a visitor to your website. Retention period Only during the browser session (so called session cookie)
Cookie stg_pk_campaign Category Tracking Purpose Piwik Processing by Stores a name of the campaign that directed the visitor to your website. Retention period Only during the browser session (so called session cookie)
Cookie stg_fired_[...] Category Tracking Purpose Piwik Processing by Determines if the combination of a tag and trigger was fired during the current visitor’s session. Retention period Only during the browser session (so called session cookie)
Cookie piwikCampaign (only storck.com) Category Tracking Purpose Piwik Processing by Saves the campaign through which a user entered the website. Retention period Only during the browser session (so called session cookie)
Cookie SERVERID Category Functional Purpose Storck Processing by To provide load balancing functionality. Enables faster loading of the page. Retention period Only during the browser session (so called session cookie)
Cookie TrackingAccepted Category Functional Purpose Storck Processing by Stores that tracking got accepted Retention period 24 hours
Cookie hl Category Language (necessary) Purpose Storck Processing by Locale Settings - Stores language and domain of the respective page (e.g.: "de_CH" or "en_COM ") Retention period 12 Monate
Cookie hideCookieNotification Category Cookie notification (necessary) Purpose Storck Processing by Cookie Notification - Is set so that the Cookie Notification is not displayed again with every website visit Retention period 24 hours
Cookie hideLocationNotification Category Country selection (necessary) Purpose Storck Processing by Location Notification - Is set so that the Country Selector is not displayed every time you visit storck.com Retention period Only during the browser session (so called session cookie)

2.4 Contact Form or Other Communication Channels

If you use our contact form, we process your message, your first and last name, your email address, your country and – if you provide us with this information – your telephone number, your address and your company. We process this data to answer your enquiry. Your personal data will only be transmitted to third parties if this is necessary to answer your enquiry (e.g. if you request information about another company within the Storck Group). The legal basis for the processing is Article 6(1)(b) of the GDPR, if the processing of your request concerns a contract concluded with you and is necessary for the performance of the contract, or if your request concerns the implementation of precontractual measures. Otherwise, the legal basis is our legitimate interest in providing a contact form and answering general questions (Article 6(1) (f) of the GDPR). We also process your data in accordance with this paragraph if you contact us by mail or other means with an enquiry.

2.5 Social Media Links

We deliberately do not include any social plug-ins on our websites, which transfer personal data as soon as the website is loaded. Our website only contains links to social networks (e.g. Facebook and Twitter). This means, when visiting our website, no personal data is transmitted to the linked social networks. If, however, you click on a link to one of the social networks, some information (e.g. browser name) may possibly be transmitted to the providers of the social network – as with any internet link. If you have an account with the social network in question and are logged into your account, they can directly assign the visit to our website to your social media account. You may prevent this by logging out before clicking on the link. Please be aware that we have no influence on the contents of the linked websites and the data processing occurring there. The purpose and extent of data collection, processing and usage of data by social networks, as well as the setting options for the protection of your privacy, can be found in the data protection information of the respective provider.

Our website is hosted by our German parent company (August Storck KG) at the hosting partner denkwerk GmbH, Vogelsanger Street 66, 50823 Köln, Germany, who have been obliged to process the data properly by means of a data processing agreement.

As far as not stated otherwise in this privacy policy, we do not transfer your data to third parties. A transfer will be made in exceptional cases if we are obliged to transfer data due to legal regulations and/or official or court orders.

Your data will generally not be passed onto a recipient in a third country (i.e. outside the European Economic Area) or to an international organisation. If such a transfer is necessary in exceptional cases, in particular because an enquiry you have made is to be forwarded to one of our companies in a third country (section 2.4), we will ensure that the requirements of chapter V of the GDPR are met and that an adequate level of data protection is thus guaranteed at the recipient. To this end, we use the EU standard contractual clauses for data transfers to third countries where necessary.

The information stored in the log files (section 2.1) is only stored in personal form for a maximum of seven days. After this period, personal information in the log files is anonymised.

In all other respects, we delete your personal data as soon as processing the data is no longer required for the purposes for which it was collected and if there are no legal requirements for the retention of data. Storck has in place a data retention procedure to ensure that personal data is not held longer than is necessary.

Storck has taken all necessary technical and organisational measures to protect your data against loss, damage, manipulation and unauthorised access. Our employees and all persons involved in the data processing are obliged to observe data protection laws and to handle personal data confidentially. Our employees are trained accordingly. Both internal and external examinations ensure compliance with all data protection processes at Storck.

In order to protect personal data of our users, we use a secure online transmission method, the so-called “Secure Socket Layer” (SSL) transmission. This can be seen by the “s” in http://, hence https://, and possibly a green, closed padlock symbol in the address bar. By clicking on the symbol, you obtain information about the SSL certificate being used. The display of the symbol depends on the browser version you are using. The SSL encryption grants the encrypted and complete transmission of your data.

The data protection law holds a number of rights concerning data affecting you as a person (so-called rights of the persons affected).

6.1 Right to Demand Access

You have the right to receive confirmation about whether or not we have processed personal data about you. If this is the case, you have a right of access to such data. You can find details about your right of access in Article 15 of the GDPR.

6.2 Right of Rectification and Completion

You have the right to ask us to rectify incorrect personal data concerning you and to complete incomplete personal data without delay under Article 16 of the GDPR.

6.3 Right to Erasure

You have the right to demand that we erase your personal data without delay if one of the reasons listed in Article 17 of the GDPR applies. Such a reason for immediate deletion may exist, for example, if the personal data is no longer necessary for processing your request or if you have objected to the data processing.

6.4 Right to Restriction of Processing

You have the right to ask us to restrict the processing of your personal data if one of the conditions set out in Article 18 of the GDPR is met. For example, in the event that you dispute the accuracy of the data, you have the right to limit the processing for the time necessary to enable us to verify the accuracy of the data.

6.5 Right to Withdraw Consent

You have the right to withdraw your consent to the processing of your personal data at any time in accordance with Article 7(3) of the GDPR. The withdrawal applies only to future data processing, i.e. the data processing that took place until the withdrawal remains lawful in this case.

6.6 Right to Object

If the data processing by us is based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR (see above for the legal basis regarding each data-processing activity), you have the right to object under Article 21(1) of the GDPR. You can therefore object to the processing of your personal data by us at any time if there are reasons arising from your particular situation. Your personal data will no longer be processed by us after your objection has been lodged, unless there are demonstrably compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You can object to the processing of personal data for the purpose of direct advertising at any time in accordance with Article 21(2) of the GDPR. In this case, we will no longer process your data for this purpose.

6.7 Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with the competent supervisory authority. However, if you have questions or complaints regarding data protection at Storck, we recommend that you first contact our data protection officer (see section 1).

You are not legally or contractually obligated to provide Storck with personal data when visiting the website. For the use of certain areas (in particular the contact form or promotional contests), however, the provision of your data may be necessary to process your request or to carry out the promotional contests.

Storck does not use your personal data for automated individual decisions.

New legal requirements, entrepreneurial decisions or technical developments might call for amendments to our privacy policy. This privacy policy will be adapted accordingly. You can always find the latest version on our website.