Privacy Policy

Weston & Clarke
On This Page
  1. Collection of Personal Data & Controller
  2. Data Collected When Visiting
  3. Cookies
  4. Contacting Us
  5. Customer Account & Contracts
  6. Direct Marketing
  7. Order Processing
  8. Review Reminders
  9. Social Media Plugins
  10. Online Marketing
  11. Web Analytics
  12. Retargeting & Remarketing
  13. Your Rights
  14. Data Retention

1. Information About the Collection of Personal Data and Contact Details of the Controller

We are pleased that you are visiting our website and thank you for your interest. This Privacy Policy explains how we handle your personal data when you use our website. Personal data refers to any information that can identify you personally.

The controller responsible for data processing on this website under the GDPR is Weston & Clarke. The controller is the natural or legal person who determines the purposes and means of processing personal data.

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser.

2. Data Collection When Visiting Our Website

When you visit our website without registering or submitting information, we only collect the data your browser transmits to our server (server log files). This includes:

  • Pages visited on our website
  • Date and time of access
  • Amount of data transferred
  • Source/referrer from which you accessed the site
  • Browser used
  • Operating system used
  • IP address (possibly anonymized)

Processing is based on our legitimate interest in improving the stability and functionality of our website (Art. 6(1)(f) GDPR). Data is not shared unless required for investigating unlawful use.

3. Cookies

We use cookies to make your visit more enjoyable and to enable certain functions. Cookies are small text files stored on your device.

  • Session cookies are deleted when you close your browser.
  • Persistent cookies remain stored and allow us or partners to recognize your browser on your next visit.

Cookies may collect browser data, location data, and IP addresses. Persistent cookies are deleted automatically after their set duration.

Some cookies simplify order processes (e.g., remembering cart contents). If cookies process personal data, processing occurs under Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in website functionality).

We may work with advertising partners who also place third-party cookies. You will be informed separately if this applies.

You can configure your browser to accept or reject cookies individually. If cookies are disabled, website functionality may be limited.

4. Contacting Us

When you contact us (e.g., via contact form or email), we collect your personal data. The specific data collected depends on the form used.

Data is processed solely to respond to your inquiry (Art. 6(1)(f) GDPR). If your inquiry relates to a contract, processing is based on Art. 6(1)(b) GDPR.

Your data is deleted once your request is fully resolved unless legal retention obligations apply.

5. Customer Account & Contract Processing

When you create a customer account or place an order, we process your personal data under Art. 6(1)(b) GDPR.

You may request deletion of your customer account at any time. After contract completion, your data is stored only for legally required retention periods and then deleted unless you consent to further use.

6. Use of Data for Direct Marketing

Newsletter Subscription

If you subscribe to our newsletter, we send regular updates about our offers. Only your email address is required.

We use a double opt-in process. By confirming the link in the verification email, you consent to receiving newsletters (Art. 6(1)(a) GDPR).

You may unsubscribe at any time via the link in the newsletter.

Newsletter to Existing Customers

If you provide your email during a purchase, we may send offers for similar products based on our legitimate interest in direct marketing (Art. 6(1)(f) GDPR). You may opt out at any time.

7. Order Processing

We share your data with shipping companies when necessary for delivery and with payment providers when necessary for payment processing (Art. 6(1)(b) GDPR).

Payment Providers

PayPal — If you pay via PayPal, your payment data is shared with PayPal. PayPal may conduct credit checks based on legitimate interest (Art. 6(1)(f) GDPR). Privacy Policy: paypal.com/privacy

SOFORT / Klarna — If you choose SOFORT, your data is shared with SOFORT GmbH for payment processing. Privacy Policy: klarna.com/sofort/datenschutz

8. Review Reminders

If you consent, we may send a one-time reminder to review your order (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

9. Social Media Plugins (Shariff Solution)

We use Facebook, Google+, and Instagram plugins in a privacy-friendly Shariff format. This prevents automatic data transfer when loading the page. Data is only transmitted when you click the plugin.

Privacy policies: Facebook · Google · Instagram

10. Online Marketing

DoubleClick by Google

We use DoubleClick to display relevant ads and measure campaign performance. Cookies may track ad interactions. Privacy Policy: google.de/policies/privacy

Google Ads Conversion Tracking

We use Google Ads to measure conversions. Cookies expire after 30 days and do not identify users personally. Privacy Policy: google.de/policies/privacy

11. Web Analytics

Google Analytics (Universal Analytics)

We use Google Analytics with IP anonymization. Data may be transferred to the USA. Opt-out plugin: tools.google.com/dlpage/gaoptout — More info: support.google.com

12. Retargeting / Remarketing / Referral Advertising

Facebook Custom Audience via Pixel

This website uses the Facebook Pixel from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, user behavior can be tracked after viewing or clicking a Facebook advertisement. This helps evaluate the effectiveness of Facebook ads for statistical and market research purposes and can improve future advertising strategies.

The data collected is anonymous to us and does not allow us to identify users personally. However, Facebook may store and process this data, linking it to your Facebook profile and using it for its own advertising purposes in accordance with Facebook's Data Policy: facebook.com/about/privacy.

Facebook and its partners may display ads on and outside of Facebook. A cookie may also be stored on your device for these purposes. These processing activities occur only with your explicit consent under Art. 6(1)(a) GDPR.

Consent for the Facebook Pixel may only be given by users over 13 years old. If you are younger, please ask your legal guardian for permission.

Facebook Inc. is certified under the EU–US Privacy Shield, ensuring compliance with EU data protection standards.

You may disable cookies in your browser settings. However, disabling all cookies may limit website functionality. You can also disable third-party cookies (e.g., Facebook) via the Digital Advertising Alliance: aboutads.info/choices

Google AdWords Remarketing

Our website uses Google AdWords Remarketing to advertise this website in Google search results and on third-party websites. Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google places a cookie in your browser that enables interest-based advertising using a pseudonymous cookie ID based on the pages you visited. Processing is based on our legitimate interest in optimal marketing of our website (Art. 6(1)(f) GDPR).

Additional data processing occurs only if you have agreed with Google that your browsing history may be linked to your Google account and used for personalized ads. If you are logged into Google while visiting our website, Google may combine your data with Google Analytics data to create cross-device remarketing audiences.

You can permanently disable ad-related cookies via this browser plugin, or manage cookie settings via the Digital Advertising Alliance.

Google LLC is certified under the EU–US Privacy Shield. More information: google.com/policies/technologies/ads

13. Rights of the Data Subject

Your Rights Under GDPR

Under applicable data protection law, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR) — request information about the personal data we process, purposes, categories, recipients, storage duration, your rights, and the source of your data.
  • Right to rectification (Art. 16 GDPR) — request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR) — request deletion of your personal data under the conditions of Art. 17(1) GDPR.
  • Right to restriction of processing (Art. 18 GDPR) — request restriction if accuracy is contested, processing is unlawful, or you have objected under Art. 21 GDPR.
  • Right to notification (Art. 19 GDPR) — we must notify recipients of any rectification, deletion, or restriction, unless impossible or disproportionate.
  • Right to data portability (Art. 20 GDPR) — receive your data in a structured, machine-readable format, or request transfer to another controller.
  • Right to withdraw consent (Art. 7(3) GDPR) — withdraw consent at any time with future effect.
  • Right to lodge a complaint (Art. 77 GDPR) — file a complaint with a supervisory authority.

Right to Object

If we process your personal data based on our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time for reasons relating to your particular situation. If you object, we will stop processing your data unless we demonstrate compelling legitimate grounds that override your interests or the processing is required for legal claims.

If your data is processed for direct marketing, you may object at any time, and we will stop processing it for that purpose.

14. Duration of Storage of Personal Data

The storage duration of personal data depends on legal retention periods (e.g., commercial or tax laws). After these periods expire, the data is routinely deleted unless it is still required for contract performance, contract initiation, or if we have a legitimate interest in continued storage.