This Privacy Policy describes our privacy practices for The Hershey Company and on the following Hershey Company Brands websites (including mobile websites) and , which are owned and operated by The Hershey Company (including our mobile websites) (collectively the “Website” or “Websites”):
This includes the Hershey’s Chocolate World website as well as Hershey’s Kitchens, Celebrate with Hershey’s, and The Hershey Company Website.
This policy does not apply to the websites of and your interactions with Hershey Entertainment and Resorts Company, including The Hotel Hershey and Hersheypark. It also does not apply to the Hershey Park mobile app. This Privacy Policy should be read in conjunction with our Ad & Cookie Policy, which is available below, and our Terms of Use. Depending on how you interact with us or where you are located, different sections of this Privacy Policy may apply to you and include additional rights and information related to our data collection and use practices. Please review this Privacy Policy carefully to understand what we do in regards to your information, and where applicable, the following sections:
Your use of this platform indicates you agree to our collection, use and disclosure of your information as described in this Privacy Policy.
Download a copy of this full privacy policy
We collect Personal Data and other information as part of our general business operations, to provide you with services, to respond to requests and offer customer support, to fulfill legal and contractual obligations and to improve our products and services. When we use the term “Personal Data” we mean information that can help us directly or indirectly identify you, such as your name, address, telephone number, email address, Internet Protocol (“IP”) address, or other online identifiers.
Information You Provide to Us Directly
We collect Personal Data and other information when you directly provide it to us. For example, we collect Personal Data when you make a purchase, use or register our products and services, take part in marketing campaigns, participate in product testing, apply for employment and contact our customer support. Depending on how you interact with us, you may provide us with of Personal Data, including the following:
Information We Automatically Collect
When you visit our Website, or interact with us through online media and advertisements certain internet or other electronic network activity information about your visit and/or interaction with us is automatically logged. The information we automatically collect may include your IP address, referring URLs, browser and device characteristics, browsing behavior (e.g., date and time of visit, length of visit, clicks on product information or other content) and your response to our email campaigns (e.g., whether and when you open our email, the links you click). We may use cookies, and other similar industry standard technologies to capture this information. For additional information on the various cookies we use and the purposes for which we use them, please read our Ad & Cookie Policy below.
We collect some Personal Data directly when it is provided by you or your representative. Other information may be collected automatically when you visit our Website or indirectly from other sources such as our service providers and vendors, software applications, and at our stores or in-person events. Where required by applicable law we will not collect your Personal Data without your consent.
Depending on how you interact with us, we may collect Personal Data through sources such as:
We use the information we collect for purposes associated with the growth, maintenance, and management of our business. Depending on how you interact with us we may use your Personal Data and other information for a number of purposes, including the following:
We do not share or disclose your Personal Data except as set forth in this Privacy Policy. We may disclose certain Personal Data and other information to third parties, including the following:
Our website may contain links to third party websites. If you click on a third party link, you will be taken to a platform we do not control. This policy does not apply to the information practices of that website or platform. Read other companies’ privacy policies carefully. We are not responsible for these third parties.
Our sites are meant for adults. We do not knowingly collect Personal Data from children (including children under 13 in the United States).
This privacy policy and the CARU icon shown on our websites confirm that The Hershey Company is a valid licensee and participating member in the CARU Safe Harbor Program (“CARU Safe Harbor”). To protect your privacy, we have voluntarily undertaken this privacy initiative. CARU has reviewed and certified that our websites are General Audience sites and that we meet established online information collection and use practices on all properties where this Privacy Policy is posted. As part of the CARU Safe Harbor, we are subject to audits and frequent monitoring of our websites and other enforcement and accountability mechanisms administered independently by CARU.
If you believe that we have not responded to your inquiry or your inquiry has not been satisfactorily addressed, please contact CARU at:
CARU Safe Harbor
Attn: Director
112 Madison Avenue, 3rd Floor
New York, NY 10016
infocaru@bbbnp.org
Parents, if you think your child has provided Personal Data on one of our sites, you can request that the Personal Data be changed or deleted by contacting us at:
The Hershey Company
Consumer Relations
19 E. Chocolate Ave
Hershey, PA 17033
Phone Toll Free 1-800-468-1714, or Contact us Online
Parents, you can take steps to protect your kids too. To learn more about how to protect your child online, read the helpful information provided by the Federal Trade Commission by clicking here.
We retain your information for business purposes and as long as reasonably necessary to provide you with our products and services. We will also retain your information as reasonably necessary to comply with our legal obligations, resolve disputes and enforce our agreements. We may also retain cached or archived copies of your information for a reasonable period of time.
We use commercially reasonable security measures, including physical, technical, and administrative safeguards to protect your information from unauthorized access, use, modification, or deletion. The Internet is not 100% secure, though. We thus cannot promise that your use of our sites will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords. We keep Personal Data as long as it is necessary or relevant for the practices described in this Policy.
We are a global organizations and as such, information we maintain may be stored both within and outside of the United States. If you live outside of the United States, you understand and agree that we may transfer your information to the United States. This site is subject to U.S. laws, which may not afford the same level of protection as those in your country. While your Personal Data is in the U.S., it is subject to U.S. laws, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies in the U.S., pursuant to applicable laws. If you are located in the EEA or UK, please refer to further details on international transfers in “Additional Information Related to the GDPR” below.
If you are an EEA or UK data subject and the collection, use, storage, disclosure, or transfer (“processing”) of your Personal Data is subject to the GDPR, please review this section in addition to the entire Privacy Policy. This Section of the Privacy Policy specifically summarizes our lawful basis for processing your Personal Data, how we may transfer your Personal Data, your rights related to your Personal Data, and how you can contact us in Europe. For purposes of the GPDR, The Hershey Company is a “Controller.”
Lawful Basis for Processing Your Personal Data
As described above in, “Information We Collect From and About You,” we process Personal Data. Our lawful bases for processing that Personal Data are:
International Transfer of Your Personal Data
Our activities and the jurisdictions in which are established are such that it may be necessary for Personal Data to be transferred and/or processed outside the EEA or UK, which may not offer the same level of protection with regard to Personal Data as required in the EEA or the UK and where there is no adequacy decision by the European Commission. In that case we will seek to ensure an adequate level of data protection by appropriate safeguards, e.g. EU Model Clauses or Binding Corporate Rules. We may also rely on only one of the conditions allowed under the GDPR in the absence of (i) a decision by the European Commission or the equivalent entity in the UK that has deemed a country to provide an adequate level of protection for personal data (i.e. an adequacy decision) or (ii) appropriate safeguards such as a contract that is compliant with the model contracts for the transfer of personal data to third countries approved by the European Commission or the equivalent entity in the UK. If you would like further information on specific mechanisms we utilize for transferring personal data outside the EEA or the UK and the countries to which such transfer may be made, please contact us online.
Your Rights with Regard to Your Personal Data
The GDPR provides you with certain rights related to the collection, processing, and transfer of your Personal Data, including:
How to Exercise Your Rights Under the GDPR
You can exercise these rights by contacting us using the information below in the below section, “How to Contact Us.” You may be asked to provide some proof of identification so that we can verify that it is you making the request.
How to Contact Our EU Representative
If you are located in the EU, please contact our EU representative if you have questions about the Privacy Policy or our practices:
Hershey Netherlands B.V.
Attn. GDPR Services Team
Basisweg 10
1043 AP Amsterdam
The Netherlands
Email: GDPR-hershey@intertrustgroup.com
If you, or the collection, use, storage, disclosure, or transfer (“processing”) of your Personal Data is subject to the LGPD, please review this Section 12 in addition to the entire Privacy Policy. This Section of the Privacy Policy specifically summarizes our lawful basis for processing your Personal Data, your rights related to your Personal Data, how we may transfer your Personal Data, and how you can contact us in Brazil.
Basis for Processing Your Personal Data
As described above in, “Information We Collect From and About You,” we process Personal Data. Our basis for processing that Personal Data are:
International Transfer of Your Personal Data
The information that we collect may be transferred to, stored in, processed in or accessed from countries outside of Brazil. Some of the recipients of your Personal Data listed above may be located in countries outside Brazil that do not offer the same level of protection with regard to Personal Data as required in Brazil. In the event we transfer your Personal Data to countries, we will seek to ensure an adequate level of data protection data protection by appropriate safeguards or other methods permitted under applicable law. If you would like to obtain a copy of the safeguard that we use, please contact us online.
Your Rights with Regard to Your Personal Data
How to Exercise Your Rights Under the LGPD
You can exercise these rights by contacting us using the information the below section, “How to Contact Us.” You may be asked to provide some proof of identification so that we can verify that it is you making the request.
How to Contact Us in Brazil
The CCPA imposes certain obligations on us and grants certain rights to California residents (“California Resident,” “you” or “your”) with regard to “Personal Information” (as defined under the CCPA). If you are a California Resident, please review the following information about our collection, use, disclosure, and sale of your Personal Information and your potential rights with regard to your Personal Information under the CCPA. The rights described herein are subject to exemptions and other limitations under applicable law.
Terms used in this section have the meaning ascribed to them in the CCPA. Hershey is a “business.” For purposes of this Section 13 only and with regard to California residents only, Personal Information includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a California resident or a household. It does not include de-identified information, aggregate consumer information, or publicly available information, as those terms are defined in the CCPA.
A. Notice at Collection and Use of Personal Information
Information We Collect
Depending on how you interact with us, we may collect the categories of Personal Information listed above in the section
“Information We Collect”
above.
How We Use Collected Information
We may use your Personal information for the business or commercial purpose listed above in the section “How We Use Information” above.
Our Sale of Personal Information
We may “sell” your Personal Information as that term is defined under the CCPA. You have the right to opt-out of this sale through this link: “Do Not Sell My Personal Information.”
For more information about our privacy practices, please review our Privacy Policy.
B. Our Collection, Use, Disclosure and Sharing of Personal Information
What Information We Have Collected and the Sources from Which We Collected It
In the preceding 12 months, and depending on how you interact with us, we may have collected all or some of the Personal Information listed above in “Information We Collect” above. We may have collected Personal Information from all or some of the categories of sources listed in the above section, “How We Collect Information.”
Purposes for Collecting Personal Information
We may collect or sell the Personal Information we collect for one or more of the following business or commercial purposes described above in the above section, “How We Use Information.”
Our Disclosure, Sharing, and Sale of Personal Information
We may sell your Personal Information, as that term is defined under the CCPA. We do not knowingly sell the Personal Information of California residents under 16 years old. We may also disclose your Personal Information to certain third parties for a business purpose.
In the preceding 12 months, we may have sold or disclosed for a business purpose the following categories of Personal Information to the following categories of third parties:
Category of Personal Information | Category of Third Party Information Sold To | Category of Third Party Information Disclosed to for a Business Purpose |
---|---|---|
Identifiers and Similar Information (such as name, email or IP address) |
|
|
Additional Information Protected by Certain Federal or State Laws (for example, financial information) |
N/A |
|
Characteristics Information (such as age or gender) |
N/A |
|
Commercial Information (for example, products purchased) |
N/A |
|
Internet and Electronic Network Activity Information (such as browsing history and your interactions with our Website) |
|
|
Geolocation Information (such as device location) |
|
|
Audio, electronic, or visual information (for example, call recordings) |
N/A |
|
In addition, in the preceding 12 months, we may have disclosed for a business purpose all of the categories of Personal Information identified above in “Information We Collect” to the following categories of third parties: (i) judicial courts, regulators, or other government agents purporting to have jurisdiction over us, our subsidiaries or our affiliates, or opposing counsel and parties to litigation; and (ii) other third parties as may otherwise be permitted by law.
We may also share your Personal Information with our service providers such as our IT providers other entities that have agreed to limitations on the use of your Personal Information, or entities that fit within other exemptions or exceptions in. or as otherwise permitted by, the CCPA.
C. California Residents’ Rights Under the CCPA
If your Personal Information is subject to the CCPA, you may have certain rights with regard to such Personal Information, including the right to:
The CCPA does not restrict our ability to do certain things like comply with other laws or comply with regulatory investigations. We also reserve the right to retain, and not to delete, certain Personal Information after receipt of a request to delete where permitted by the CCPA or where another law or regulation is applicable.
How to Submit a CCPA Rights Request
When you submit a Request to Know, Request to Delete, or Request to Opt-Out we may ask that you provide clarifying or identifying information to verify your request. Such information may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, your name and email address. Any information gathered as part of the verification for a Request to Know, Request to Delete, or Request to Opt-Out will be used for verification or opt-out purposes only.
If you would like to use an authorized agent to submit a request, we may request proof that that they are authorized to act on your behalf, or have a power of attorney. We may also require that you directly verify your own identity with us and directly confirm with us that you provided the authorized agent permission to submit the request.
D. Notice of Financial Incentives
We offer various financial incentives. For example, we may provide discounts, coupons and other benefits for customers who sign up to receive our marketing emails. When you participate in a financial incentive, we collect Personal Information from you, such as identifiers (like your name and email address) and commercial information (like your purchase history). You can opt into a financial incentive by following the sign-up or participation instructions provided, and you have the ability to opt-out of the financial incentive, or our subsequent use of your Personal Information in connection with a financial incentive, at any time by contacting us using the information in “How to Contact Us” below. In some cases, we may provide additional terms and conditions for a financial incentive, which we will present to you when you sign up. The value of your Personal Information is reasonably related to the value of the offer or discount presented to you.
E. Contact for More Information Regarding California Issues
If you have any questions or concerns about this California privacy section, please call or contact us using the information in the below section “How to Contact Us.”
F. Additional California Privacy Rights
If you reside in California, you have the right to ask us one time each year if we have shared Personal Information with third parties for their direct marketing purposes. To make a request, please click here to contact us. Follow the onscreen prompts to send us an email, select “Privacy Policy/Ad and Cookie Policy” as the subject of your message, and indicate in your message that you are a California resident making a “Shine the Light” inquiry. Please note, however, that we do not currently disclose any of your Personal Information to third parties for their direct marketing purposes.
Some web browsers have a “Do Not Track” feature. This feature lets you tell websites you visit that you do not want to have your online activity tracked. These features are not yet uniform across browsers. Our sites are not currently set up to respond to those signals.
Please feel free to contact us if you have more questions about this Privacy Policy or our practices.
You can contact us online or write to us at:
Consumer Relations Department
The Hershey Company
19 E. Chocolate Ave.
Hershey, PA 17033
Or call 1-800-468-1714
If you have any questions about this Policy or want to review, access, delete, correct or update your information, please contact us online.
From time to time we may change our privacy policies. We will provide notice of any material changes to our Policy as required by law. We will also post an updated copy on our Website. Please check our site periodically for updates.
Last Updated 1/22/21
In this Ad and Cookie Policy you will find information on cookies, what we do with cookies, what cookies may be set when you visit our website and how to control those cookies.
This Ad and Cookie Policy (“Cookie Policy”) explains our use of cookies and similar tracking technologies (collectively “cookies”) on the following Hershey Company Brands websites, which are owned and operated by The Hershey Company (including our mobile websites) (collectively the “Website” or “Websites”):
This Cookie Policy does not apply to the websites of and your interactions with Hershey Entertainment and Resorts Company, including The Hotel Hershey and Hersheypark. It also does not apply to the Hershey Park mobile app. We also have third parties that collect Personal Data this way. To do this, we and our vendors use several common tracking tools. In this Cookie Policy “we”, “our” and “us” refers to The Hershey Company, 19 East Chocolate Avenue, Hershey, PA 17033, USA.
This Cookie Policy should be read in conjunction with our Privacy Policy and our Terms of Use.
1. What are Cookies?
Cookies are pieces of code that allow for personalization of our Website experience by saving your information such as user ID and other preferences. A cookie is a small data file that we transfer to your device’s hard disk (such as your computer or smartphone) for record-keeping purposes. Cookies can then be used to make site navigation more efficient, help remember your preferences and generally improve your browsing experience. They can also ensure that advertisements that you see online are more relevant to you and your interests. They may be served by the entity that operates the website you are visiting (“first-party cookies”) or by other companies (“third-party cookies”).
2. What Types of Cookies We Use and How We Use Them
Cookie Type | Purpose and Use |
---|---|
Strictly Necessary Cookies |
These cookies are necessary for the Website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, remembering the goods you ordered when you get to the checkout page or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. |
Functional Cookies |
These cookies enable the Website to provide services or to remember settings to improve your visit. They may be set by us or by third party providers whose services we have added to our pages, including social media sites. For example, these cookies help us remember your choice of language or region, show you have logged into our website, or help you share information on a social media website like Facebook. If you do not allow these cookies then some or all of these services may not function properly. |
Performance Cookies |
These cookies help us understand how visitors interact with our Website by allowing us to count visits and traffic sources so we can measure and improve the performance of our site. These cookie are used to provide statistics on how our websites is used, how you move around our website and the pages you visit, how effective our advertisements are, and measuring any errors that occur. All information these cookies collect is aggregated and therefore anonymous. We use Google Analytics for these purposes. Google Analytics uses its own cookies. You can find out more information about Google Analytics cookies here and how to prevent the use of Google Analytics relating to the use or our Website by downloading and installing the browser plug-in available here. |
Targeting Cookies |
These cookies may be set through our site by our advertising partners including social media sites. They may be used by those companies, including social media, to build a profile of your interests and show you relevant adverts on other sites, also known as “interest based advertising.” These cookies uniquely identify your browser and internet device and observe your behaviors and browsing activities over time across multiple websites or other platforms. For more information on our interest-based advertising see Section 4 below. |
Some of these cookies are temporary (“Session Cookies”) while other may stay on your browser until you delete them manually or until your browser deletes them based on the duration period set within the cookie (“Persistent Cookies”).
3. Our Use of Social Media Widgets
Our Website includes social media features such as links to Facebook, Instagram, and Twitter (that might include widgets, such as, the share this button or other interactive mini-programs). These features may collect your IP address, which page you are visiting on the Site and may set a cookie to enable the feature to function properly. These social media features are either hosted by a third party or hosted directly on the Website. Your interactions with these features are governed by the privacy policy of the company providing it.
4. Interest-Based Advertising
We and our partners work with third parties to display relevant advertising on our Website and to manage our advertising on other websites. In order to display relevant ads to you, these third parties may use cookies to collect browsing and activity information on our Website, on other websites, and across different devices, which may be linked with certain offline data they may also collect IP address, device ID, cookie and advertising IDs, and other identifiers, general location information, and, where applicable, with your consent, your device’s geolocation information. These third parties may use this information to provide you more relevant ads and content and to evaluate the success of such ads and content. As a result, our ads may be displayed to you on a search results page or on other sites.
How You can Opt-Out of Interest-Based Advertising
You have the ability to opt-out of interest-based advertising on web browsers in the following ways:
You can opt-out of interest-based advertising on your devices in the following ways:
Please note that opting-out of receiving interest-based advertising through the NAI’s and DAA’s or Your Online Choices online resources will only opt-out a user from receiving interest-based ads on that specific browser or device, but the user may still receive interest-based ads on his or her other devices. You must perform the opt-out on each browser or device you use. Choices you make are both browser and device-specific. Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.
5. How to Control Cookies
You can control our uses of cookies through our cookie management tool, your internet browser, or through other third party tools:
6. How to Contact Us
You can contact us online or write to us at:
Consumer Relations Department
The Hershey Company
19 East Chocolate Avenue
Hershey, PA 17033
Or call 1-800-468-1714
If you have any questions about this Cookie Policy, please contact us online.
7. How to Contact our EU Representative
Hershey Netherlands B.V.
Attn. GDPR Services Team
Basisweg 10
1043 AP Amsterdam
The Netherlands
Email: GDPR-hershey@intertrustgroup.com