PRIVACY POLICY OF ANDREAS STIHL NV
We would like to inform you in this Privacy Policy about the processing of your personal data. Below you will find, among other things, information on how and why we process your personal data and what rights you have in this respect.
SCOPE OF THE PRIVACY POLICY
In this Privacy Policy we provide you with information about the processing of your personal data in connection with visiting and using our website.
To assist you in quickly obtaining information that is relevant to you, we have divided this Privacy Policy into individual sections:
In this Privacy Police, we provide you with information in accordance with the requirements of the European General Data Protection Regulation (hereinafter "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of personal data.
In this Privacy Policy, we provide you with information in accordance with the requirements of the European General Data Protection Regulation (hereinafter "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of personal data.
1. CONTROLLER AND DATA PROTECTION OFFICER
he controller under data protection law will determine the purpose and means of the processing of your personal data and ensure compliance with the requirements of the data protection legislation. Where two or more controllers jointly determine the purposes and means of processing, such controllers shall be jointly responsible for the processing, being referred to as joint controllers.
The controller responsible for the processing of your personal data in connection with this website is:
STIHL NV
Veurtstraat 117, 2870 Puurs-Sint-Amands, Belgium
Email address - privacy@stihl.be
VAT number BE0427.714.768
If you would like further information, please contact us at any time using the contact details specified above.
5. MARKETING AND USER EXPERIENCE
5.1 Cookies and similar technologies
We use technologies on our website with the intention of making the website easier to use and to make it easier to use and to provide certain functionalities. Such technologies include, for example, cookies, pixels and scripts. This section provides information about your personal data in this context.
In our Cookie Notification we explain which cookies and similar technologies are used by us on our website, for what purposes and how you can control these cookies.
5.2 Providing, developing and improving our website
(a) Google Analytics Network Analytics
We use Google Analytics analysis tool on our website. Google Analytics is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google", together with other Alphabet Inc. Google companies identified as "Google").
We use Google Analytics with the "anonymize IP" extension. This means that your IP (Internet Protocol) address will be truncated before it is sent to Google in the United States, so that Google will not receive your full IP address from us.
Categories of personal data
The following information is processed in connection with the use of Google Analytics:
Purpose
We use Google Analytics to analyze your use of the website, to obtain reports on website activities, and to obtain other Google services associated with your use of our website and other Internet uses.
This will enable us to continually improve our website, its usability and offering, and its design to suit your needs and interests.
legal basis
We base the processing of your personal data on the following legal bases:
Retention Period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of Google Analytics, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy Policy
Further information on the terms of use and data protection can be found at www.google.com/analytics/terms/nl.html and on www.google.com/intl/nl/analytics/privacyoverview.html.
(b) Google Optimize
Our website uses the "Google Optimize" service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service enables us to improve the appeal, content and functionality of our website by making available new functions and content to a certain portion of our users and statistically analyzing changes in website use. Google Optimize is a sub-service of Google Analytics (see Google Analytics, section a directly above).
Cookies are set when using the service. The information on your use of our website generated by doing so is generally transferred to and stored on a server of Google in the United States (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use Google Optimize with IP anonymization activated, meaning that your IP address is truncated by Google while still in the EU/EEA. It is only in exceptional cases that the full IP address is sent to a Google server located in the US and truncated there. Google will use this information for the purpose of evaluating your use of our website in order to compile reports on the optimization test and associated website activity for us and to provide other services to us relating to the use of the website and the Internet.
The legal basis for the data processing is your consent pursuant to Articles 6(1)(a) and 49(1)(a) GDPR. You can change this consent at any time with effect for the future by changing your settings in the Consent Manager.
(c) YouTube
We embed video content via YouTube on our website. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ('Google Ltd', together with Alphabet Inc.'s Google companies identified as "Google").
Categories of personal data
The following information is processed in connection with your use of YouTube:
Purpose
We link video content via YouTube to inform you about our products and offers.
Legal basis
We base the processing of your personal data on the following legal bases:
Storage period
In principle, we will process your personal data only insofar as it is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Policy .
Transfer of your data to countries outside the EEA
Privacy Policy
Google's Privacy Policy for the processing of personal data in connection with YouTube can be found here:
https://policies.google.com/privacy?hl=en
(d) Google Maps
We incorporate Google Maps into our website. Google Maps is supplied by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Ltd", together with other Alphabet Inc. Google companies identified as "Google").
Categories of personal data
The following information is processed in connection with the use of Google Maps:
Purpose
We incorporate maps via Google Maps to provide geographic information.
Legal basis
We base the processing of your personal data on the following legal bases:
Storage period
In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Policy .
Transfer of your data to countries outside of the EEA
If the data is processed outside the European Economic Area / the EU, where there is no level of protection in accordance with the European standard, Google declares that it uses standard contractual clause.
Privacy Policy
You can find more information about Google's terms of use and data protection at www.cloud.google.com/maps-platform/terms/ or on https://policies.google.com/privacy?hl=en.
(e) Mouseflow ApS web analysis tool
We use Mouseflow, a web analysis tool offered by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, on our website. The tool records individual visits that are selected at random and also transfers the visitor's anonymized IP address to the provider of this tool.
The tool allows us to prepare a record of mouse movements and mouse clicks. These can be played back on a random basis as what are known as session replays and can be analyzed in heat maps so that we can identify potential improvements for this website. Mouseflow can also be used to conduct surveys that are designed to measure visitor satisfaction levels. The surveys performed and participation in them are also recorded in a cookie created by the tool.
This tool is used exclusively with your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time as described above by changing your cookie settings.
You can find further information on data protection measures taken by the provider and on the use of Mouseflow in the provider's Privacy Statement: https://mouseflow.com/legal/privacy-policy/
5.3 Advertising (tracking)
(a) Google Ads
We incorporate Google Ads into our website. Google Ads is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Categories of personal data
The following information is processed in connection with the use of Google Ads:
Legal basis
We base the processing of your personal data on the following legal bases:
Retention Period
In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Policy .
Transfer of your data to countries outside the EEA
In connection with the use of Google Ads, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy Policy
Google's privacy policy for the processing of personal data in connection with Google Ads can be found here:
https://policies.google.com/privacy?hl=en
(b) Microsoft Advertising
We use Microsoft Advertising on our website. Microsoft Advertising is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").
Categories of personal data
The following information is processed in connection with Microsoft Advertising:
Purpose
We use Microsoft Advertising to conduct search advertising campaigns if you have visited our website. These services allow us to combine our advertisements with certain keywords or, if you have visited our website in the past, to advertise services that you have viewed on our website, for example, to advertise based on expressions of interest expressed on other websites within the Microsoft Search Network.
Legal basis
We base the processing of your personal data on the following legal bases:
Retention period
In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Policy .
Transfer of your data to countries outside the EEA
In connection with the use of Microsoft Advertising, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy .
Privacy Policy
Microsoft's privacy policy for the processing of personal data in connection with Microsoft Advertising can be found here:
https://about.ads.microsoft.com/en-us/policies/legal-privacy-and-security
5.5 Social Media
On our website we use pixels from social networks. The pixels are activated and your data are processed by social networks only after you have consented to the processing of personal data by social networks in the Privacy Preference Centre.
If you are registered as a user on a social network whose pixels we use, your visit to our website can be linked to your user account on that social network. We point out that social networks can then link the data collected about you via the pixels used on our website to other personal data from you even if you are not a user of the social network.
Please also note that social network providers may also process the personal data processed via the pixel for their own purposes. In addition, we may be jointly responsible with social network providers for certain processing activities.
In the case of joint controllership, we shall conclude an agreement with the social network provider on the processing of personal data under joint controllership.
Please see the Privacy Policies of the social networks, which we will indicate below.
Categories of personal data
The following information is processed in connection with the use of pixels:
Purpose
We use pixels from social networks to display information and advertising on our products, offers and services to you on the respective social network. In addition to being displayed on the respective social network, information and advertising on our products, offers and services may be displayed to you on other websites that also offer the respective pixel.
By using pixels, we obtain information about our promotional activities, especially on social networks.
Legal basis
We base the processing of your personal data on the following legal basis:
Retention Period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of pixels, personal data may be transferred to countries outside the EEA . For more information, see section 8 of this Privacy Policy.
Pixels used and Privacy Policies for the pixels used
We list the pixels of social networks used by us below together with information about the social network provider and the Privacy Policy for the respective social network and pixel.
(a) Meta (Facebook) pixel
The Meta pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
Meta's Privacy Policy for the processing of personal data in connection with Meta pixels can be found here:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
6. RETENTION PERIOD
We will store your data only for as long as it is necessary to provide our offers, in particular our website, or for as long as we have a legitimate interest in continuing to store your data. The period of storage of your personal data depends in particular on the category of personal data processed and the purpose of the processing. The storage of your personal data is also considered to be based on your consent to its storage.
Finally, we take into account statutory storage periods, which may require us to keep your data for a certain period. Your data will therefore be stored if this is provided for by the European or national legislator, in European Union regulations, in laws or other provisions to which we are subject. Corresponding requirements are also found in particular in commercial or tax legislation or derive from regular limitation periods.
In the event of a legal dispute, we will retain the personal data we need for our legal defence until the final conclusion of the proceedings.
For further information on the storage period, please contact us using the contact details which can be found in section 1 of this Privacy Policy.
7. RECIPIENTS OF YOUR PERSONAL DATA
7.1 Receptors within the STIHL Group
In certain cases we share your personal data with other companies of the STIHL Group. The processing by these STIHL companies is regularly done for us. The processing of your personal data may also be carried out under the sole control of the STIHL company that receives your data or under the joint control of that company with us.
If we share your personal data with other controllers, this will in principle only be done if it is necessary for the performance of a contract with you, if we or the third party has a legitimate interest in doing so or if you have agreed to this.
The processing of your personal data by another STIHL company on our behalf is based on a data processing contract on behalf of the controller within the meaning of the GDPR.
In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. This agreement sets out, among other things, the obligations of the joint controllers with regard to compliance with the requirements of the GDPR. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.
7.2 Recipients outside the STIHL Group (Third Parties)
In addition to the recipients in the STIHL Group, we also share your personal data with third parties, in connection with individual processing operations and taking into account data protection requirements. These third parties include service providers who process your personal data for us and service providers who provide services for us who are associated with the processing of your personal data. The processing of your personal data may also be carried out under the sole control of the third parties receiving your data or under the joint control of those third parties with us.
If we share your personal data with other controllers, this will in principle only take place if it is necessary for the performance of a contract with you, if we or a third party has a legitimate interest in doing so or if you have consented to this.
In connection with the processing of your personal data we use the following categories of service providers:
Where we are required to do so under the GDPR or the laws of the EU member states, we will also transfer your data to authorities and courts.
The processing of your personal data by third parties on our behalf is based on a data processing agreement on behalf of the controller within the meaning of the GDPR.
In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.
8. TRANSFER OF YOUR PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA
Ensuring a level of protection consistent with the GDPR is our utmost priority, irrespective of where your personal data is processed.
If we transfer personal data to recipients outside the European Economic Area, we comply with the requirements set out in Chapter V of the GDPR. If we work with third parties or use service providers that may transfer your personal data to countries outside the European Economic Area, we oblige these third parties or service providers to comply with the requirements of Chapter V of the GDPR.
Please note that not all countries outside the European Economic Area have a level of data protection deemed adequate by the European Commission (so-called "adequacy decision"). A list of countries for which an adequacy decision has been adopted can be found at the following link: Adequacy decisions.
If an adequacy decision has not been adopted, we conclude standard contractual clauses adopted by the European Commission with the recipients of personal data ((EU) 2021/914 of 4 April 2021 - C (2021) 3972, OJ L 2021 (2021) 3972, OJ L 2021/914. EU No L 199/31 of 7 June 2021). In the case of transfer of data to other controllers, we apply the first module of these standard contractual clauses(Transfer controller to controller) , and in the case of transfer of data to our processors, we use the second module (Transfer controller to processor). Where necessary, in addition to entering into standard contractual clauses, we will also take additional measures to protect your personal data.
You can ask us at any time for an overview of recipients in countries outside the European Economic Area and information about the measures we have taken to ensure the level of protection of the GDPR using the contact details set out in Section 1 of this Privacy Policy.
9. YOUR RIGHTS AND THE EXERCISE OF YOUR RIGHTS
If you would like to assert your rights set out below, you can contact us at any time and without the required form through the communication channels set out in this Privacy Policy. By email and other communication channels, you can contact us and our Data Protection Officer using the contact details provided in Section 1 of this Privacy Policy.
9.1 Right of access
You have the right to request confirmation as to whether or not your personal data will be processed. When we process your personal data, you have the right to access information about that personal data and to certain information required by law.
9.2 Right to rectification
You have the right to request the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
We always strive to ensure the accuracy of our users' personal information. Therefore, please notify us immediately of any changes to your personal information (such as changes of address) so that we can keep it up to date.
9.3 Right to erasure
If the legal requirements are met, you can request that we delete your personal data immediately. This applies in particular if:
We would like to point out that your right to erasure is subject to limitations. For example, we cannot delete personal data that we need to keep because of legal requirements. Data that we need to assert, exercise or defend legal entitlements is also excluded from the right to erasure.
9.4 Right to restrict processing
If the legal requirements are satisfied, you can obtain restrictions on the processing of your personal data. In particular, this is the case when:
9.5 Right to data portability
You have the right to receive the personal data that you have provided to us and that we process for the performance of a contract, either on the basis of your consent or by automated procedures, in a structured, customary and machine-readable format. You also have the right, if the above-mentioned conditions are met, to have this data passed on directly to a third party, insofar as this is technically feasible.
9.6 Right to lodge complaints with supervisory authorities on data protection matters
If you believe that the processing of your personal data infringes applicable data protection law, you may lodge a complaint with a data protection supervisory authority, in particular the data protection supervisory authority of the place of your habitual residence, place of work or of the alleged infringement.
10. CHANGES TO PRIVACY POLICY
This Privacy Policy provides the most current, comprehensive, and definitive information about how we process your personal data in connection with our website. To ensure this information remains accurate, we update this policy regularly. Therefore, we encourage you to review it periodically.
4. USE OF OUR WEBSITE AND SERVICES
4.1 Contact and communication
If you have any questions, you may contact us at any time by email, mail, telephone, contact forms or any other means. If you contact us, we will usually respond by the same means of communication that you have chosen.
Categories of personal data
The following information is processed when we communicate with you.
Purpose
Your personal data is processed for the following purposes:
These purposes are referred to later, collectively, as "support".
Legal basis
We base the processing of your personal data on the following legal basis:
This applies in particular to the recording of telephone calls.
Retention Period
In principle, we will process your personal data only insofar as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Policy.
2. GENERAL INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA
2.1 Processing your personal Data
In this Privacy Policy, "personal data" means any information that can identify you, either directly or indirectly.
Direct examples include your name, email address, and postal address. However, personal data also encompasses other details that, when combined with other information, could lead to your identification. Information that cannot identify you, even when combined with other data, is considered "non-personal data" and is not covered by this notice.
When we refer to "processing" your personal data, we mean any action we take with it, such as consulting, collecting it, keeping it safe (storage), or removing it (deletion).
2.2 Summary of the legal basis for processing your personal data
We only process your personal data when we have a legal basis to do so under data protection law. The GDPR provides several legal reasons for processing data, and we mostly rely on these:
The processing of your personal data is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR).
Your explicit consent has been given for the processing of personal data for one or more specific purposes (Article 6(1)(a) GDPR).
The processing of your personal data is necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c) of the GDPR).
Additional information regarding which processing operations are specifically based on certain legal bases or under which data protection legislation the processing is permitted is set out below in this Privacy Policy.
2.3 What personal data we collect from you
We process personal data that you provide to us, that we collect (automatically) or that we receive from third parties.
While you are not obligated to share your personal information, certain details are required for our website to function properly and for you to access all its features.
Personal data you provide to us
We process information that you provide to us. For example, you may call or contact us in some way and provide us with certain information by these means. We collect and process this data to enable you to use our website. If you do not provide us with certain information, it may exclude or affect the use or full functionality of our website.