Privacy Policy

References to the United Kingdom General Data Protection Regulation (UK GDPR) in the jurisdiction of the European Union (EU) and European Economic Area (EEA) are instead references to the EU General Data Protection Regulation (EU GDPR). The UK GDPR and the EU GDPR contain the same rules but apply to EU and the UK respectively.

The person responsible within the meaning of the data protection laws, in particular the UK GDPR, is:

Thornton and Ross Limited

Manchester Road

Huddersfield

HD7 5QH

Phone: + 44 (0)1484 842217

 

Your Data Subject Rights

You can exercise the following rights at any time using the contact details provided by our Data Protection Officer:

• Information about your data stored by us and its processing (Art. 15 UK GDPR),
• Correction of inaccurate personal data (Art. 16 UK GDPR),
• Deletion of your data stored with us (Art. 17 UK GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 UK GDPR),
• Objection to the processing of your data by us (Art. 21 UK GDPR) and
• Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 UK GDPR).

If you have given us consent, you can revoke this at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint.

For the UK:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

https://ico.org.uk/make-a-complaint/

For the EU:

https://edpb.europa.eu/about-edpb/about-edpb/members_en

 

Collection of General Information when Visiting our Website

Nature and Purpose of the Processing:

When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

• Ensuring a smooth connection with the website,
• Ensuring a smooth use of our website,
• Evaluation of system security and stability, and
• To optimise our website.

We do not use your data to draw conclusions about your person. Information of this kind is evaluated anonymously by us statistically, if necessary, in order to optimise our website and the technology behind it.

Legal Basis and Legitimate Interest:

The processing is carried out in accordance with Art. 6 (1)(f) UK GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

Storage Period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.

In the case of storage of data in log files, this is the case after 30 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymised so that it is no longer possible to assign the calling client.

Provision Prescribed or Required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

 

Contact Form and Contact via Mail and Telephone

Nature and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address as well as your name and, if applicable, telephone number. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.

Legal Basis:

The processing of data entered in the contact form for the explanation of data subject enquiries and for contact via mail and telephone is based on a legitimate interest (Art. 6 (1)(f) UK GDPR).

By providing the contact form for the declaration of data subject enquiries and the possibility to contact us via email or telephone, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.

If you contact us to request an offer, the data will be processed to carry out pre-contractual measures (Art. 6 (1)(b) UK GDPR).

Recipient:

Recipients of the data are, if applicable, data processors.

Storage Period:

Data will be deleted at the latest 6 months after processing of the request.

If a contractual relationship arises, we are subject to the statutory retention periods according to the applicable laws and delete your data after these periods have expired.

Provision Prescribed or Required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address or telephone number and the reason for the request.

 

 

Cookies

Like many other websites, we also use so-called "cookies". Cookies are small data sets that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Internet Explorer: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
• Opera: https://www.opera.com/help
• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Storage Duration and Cookies Used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Storage Duration and Cookies Used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

 

Technically Necessary Cookies

Nature and Purpose of the Processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

Legal Basis and Legitimate Interest:

The processing is carried out in accordance with Art. 6 (1)(f) UK GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Recipient:

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

Provision Prescribed or Required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.

Withdrawal of Consent

Please read the information about your right to object according to Art. 21 UK GDPR below.

 

Technically Unnecessary Cookies

Furthermore, we use cookies to better tailor the offer on our website to the interests of our visitors or to generally improve it on the basis of statistical evaluations.

To find out which providers use cookies, please see the information below on the display, tracking, remarketing and web analysis technologies used.

Legal Basis:

The legal basis for this processing is in each case your consent, Art. 6 (1)(a) UK GDPR.

Recipient:

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

For more recipients, please see the information below on the display, tracking, remarketing and web analytics technologies used.

Third Country Transfer:

For information on this, please refer to the listings of the individual display, tracking, remarketing and web analytics providers.

Provision Prescribed or Required:

Of course, you can also view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see Withdrawal of Consent).

Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Withdrawal of Consent:

You can revoke your consent at any time via our cookie consent tool.

Profiling:

To what extent we analyse the behaviour of website visitors with pseudonymised user profiles, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.

Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

For more information on terms of use and data protection, please visit Terms of Service | Google Analytics – Google and Privacy & Terms – Google.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

Your personal information is transferred to Google in the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

 

Withdrawal of consent:

You can stop tracking by Google Analytics on our website by clicking on https://tools.google.com/dlpage/gaoptout?hl=en. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that in this case you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out Browser Add-on Download Page

 

Juicer

We use "Juicer" on our websites. The provider is saas.group LLC, 304 S. Jones Blvd #1205, Las Vegas NV 89107, USA (“saas.group LLC”).

The purpose of Juicer is to aggregate all of our brands’ hashtag and social media posts into a single social media feed on our website, allowing us to easily moderate and curate our content. Juicer collects only data from users of Juicer accounts when they visit social media networks (time, date, IP address and or unique mobile identifier) and information in regard to your activities on the respective social media network. Juicer will not process personal data from users that are just simply visiting a social media network. The data processing is based on Art. 6 para. 1 lit. a GDPR.

For more information on Juicer and Juicer’s privacy policy, please see the following links: https://www.juicer.io/eu-privacy and https://www.juicer.io/.

Amazon Cloudfront

We use the Content Delivery Network (CDN) “Cloudfront”, a service of Amazon Web Services Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA (“Amazon”). The Cloudfront-CDN provides duplicates of data from a website on various globally distributed Amazon Web Services (AWS) servers. This results in faster website load times, higher reliability and increased protection against data loss.

The images and videos embedded on this website are obtained from the Cloudfront CDN when the page is opened. This retrieval transfers information about your use of our website (such as your IP address) to Amazon servers in other EU countries and stores it there. This happens as soon as you enter our website.

Amazon Web Services and the Amazon CDN Cloudfront are used in the interests of greater reliability of the website, increased protection against data loss and better loading speed of this website. This constitutes a legitimate interest according to Art. 6 subs. 1 f) GDPR. In addition, we have signed a contract with Amazon Web Services for data processing on behalf and are fully implementing and meeting the requirements of the GDPR when we use Cloudfront.

Your personal information is transferred to Amazon in the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

You can find out more about Amazon Web Services’ data protection measures at: https://aws.amazon.com/compliance/data-protection/?nc1=h_ls

The current privacy statement of Amazon Web Services can be found at: https://aws.amazon.com/privacy/?nc1=h_ls

 

Trustpilot

We use "Trustpilot" on our websites. The provider is Trustpilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark (“Trustpilot A/S”).

Trustpilot is a review service. This service collects reviews to gain feedback, analysis the feedback and allows us to provide better services and customer support. Trustpilot collects the following data: IP address, geographic location, browser information, device settings, time zone and data provided through forms on the website. The data processing is based on Art. 6 para. 1 lit. a GDPR.

For more information on Trustpilot and Trustpilot's privacy policy, please see the following links: https://uk.legal.trustpilot.com/for-businesses/business-privacy-policy and https://uk.legal.trustpilot.com/

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the Cookie Consent Tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

 

Google Ads

Our website uses Google Conversion Tracking. The operating company of the Google Ads services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

You can find more information about data processing by Google in the Google privacy policy: https://policies.google.com/privacy . There you can also change your personal privacy settings in the Privacy Center.

Your personal information is transferred to Google in the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

 

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the Cookie Consent Tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

 

Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution that allows marketers to manage website tags used for tracking and online marketing through a single interface. It allows JavaScript and HTML tags to be quickly deployed and updated on our website. Google Tag Manager, which implements the tags, is itself a cookie-free domain and does not collect any personal information. Rather, it merely serves to manage other services, such as Google Analytics. These services, in turn, may collect data.

You can find more information hereto by visiting the following website: https://www.google.com/intl/de/tagmanager/use-policy.html.

Your personal information is transferred to Google in the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

 

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the Cookie Consent Tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

 

LinkedIn Analytics

We use LinkedIn Analytics on our website. The service, provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”), stores and processes information about your user behavior on our website. For this purpose, the service places cookies in your terminal device. We use LinkedIn Analytics to analyze the use of our website and to continuously improve individual functions of our website and the overall user experience. The statistical evaluation of user behavior enables us to improve our offer and make it more interesting for our website visitors.

To learn more about LinkedIn’s processing of your data, please visit: https://www.linkedin.com/legal/privacy-policy

LinkedIn as the recipient of your data might transfer your data to the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

The data is deleted as soon as you have withdrawn your consent or it is no longer required to achieve the purposes of processing. In principle, the cookies are valid for the duration of the session, 24 hours.

 

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the Cookie Consent Tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

 

LinkedIn Ads

Furthermore, we use the retargeting tool and the conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For this purpose, the LinkedIn Insight Tag is incorporated into our webpage. LinkedIn uses it to collect statistical, pseudonymized data regarding your visit to our website and your use thereof, and to provide us with the corresponding aggregated statistics.

To learn more about LinkedIn’s processing of your data, please visit: https://www.linkedin.com/legal/privacy-policy

LinkedIn as the recipient of your data might transfer your data to the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

Depending on the type of data, the data is stored for the duration of 24 hours.

 

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the Cookie Consent Tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

 

STADA career portal on Our Website

You can access our global career website via our Careers page. We would like to point out that the corresponding privacy policy applies to this global site. For the processing of your personal data on this site, please read its privacy policy.

 

Shop Now Page on Our Website

You can access external websites via our Shop Now page. We would like to point out that the corresponding privacy policies apply to these external sites. For the processing of your personal data on these external sites, please read their privacy policies.

 

Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first.

When a YouTube video is started, the provider uses cookies that collect information about user behaviour.

For further information on the purpose and scope of data collection and processing by YouTube, please refer to the provider's privacy policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy: https://policies.google.com/privacy  

YouTube as the recipient of your data might transfer your data to the USA. Please note that the level of data protection in the USA might not correspond to that of the European Union/United Kingdom. There is currently no adequacy decision of the European Commission/ adequacy regulation of the Secretary of State of the United Kingdom in place for the USA. To protect your data after the transfer, we have put in place appropriate safeguards in terms of Art. 46 UK GDPR. Please let us know should you want to obtain a copy thereof.

Withdrawal of Consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website or only to a limited extent.

Social Media Plugins

We offer you the option of using so-called "social media buttons" on our website. To protect your data, we rely on the "Shariff" solution for implementation. This means that these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic, you are thus redirected to the services of the respective provider. Only then will your data be sent to the respective providers. Unless you click on the graphic, no exchange of any kind takes place between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the corresponding providers. You can find more information about the Shariff solution here: https://github.com/heiseonline/shariff

We have integrated the social media buttons of the following companies on our website: LinkedIn

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.