PRIVACY POLICY OF ANDREAS STIHL NV

We would like to inform you in this ​Privacy Policy​​ ​about the processing of your personal data. Below you will find, among other things, information on how and why we process your personal data and what rights you have in this respect.

SCOPE OF THE PRIVACY POLICY

In this ​Privacy Policy​​ ​we provide you with information about the processing of your personal data in connection with visiting and using our website.

To assist you in quickly obtaining information that is relevant to you, we have divided this ​Privacy Policy​​ ​into individual sections:

In this Privacy Police, we provide you with information in accordance with the requirements of the European General Data Protection Regulation (hereinafter "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of personal data.

In this Privacy ​Policy​, we provide you with information in accordance with the requirements of the European General Data Protection Regulation (hereinafter "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of personal data.

1. CONTROLLER AND DATA PROTECTION OFFICER

he controller under data protection law will determine the purpose and means of the processing of your personal data and ensure compliance with the requirements of the data protection legislation. Where two or more controllers jointly determine the purposes and means of processing, such controllers shall be jointly responsible for the processing, being referred to as joint controllers.

The controller responsible for the processing of your ​personal ​data in connection with this website is:

STIHL NV 
Veurtstraat 117, 2870 Puurs-Sint-Amands, Belgium

Email address - privacy@stihl.be 
VAT number BE0427.714.768

If you would like further information, please contact us at any time using the contact details specified above.

5. MARKETING AND USER EXPERIENCE

5.1 Cookies and similar technologies

We use technologies on our website with the intention of making the website easier to use and to make it easier to use and to provide certain functionalities. Such technologies include, for example, cookies, pixels and scripts. This section provides information about your personal data in this context.

In our Cookie Notification we explain which cookies and similar technologies are used by us on our website, for what purposes and how you can control these cookies.

5.2 Providing, developing and improving our website

(a) Google Analytics Network Analytics

We use Google Analytics analysis tool on our website. Google Analytics is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google", together with other Alphabet Inc. Google companies identified as "Google").

We use Google Analytics with the "anonymize IP" extension. This means that your IP (Internet Protocol) address will be truncated before it is sent to Google in the United States, so that Google will not receive your full IP address from us.

Categories of personal data

The following information is processed in connection with the use of Google Analytics:

  • Your IP (Internet Protocol) address
  • Unique identification number assigned by the browser
  • The user's clicking behavior on the website
  • The subpages accessed by the user
  • Browser type, URL, screen resolution
  • Timestamp

Purpose

We use Google Analytics to analyze your use of the website, to obtain reports on website activities, and to obtain other Google services associated with your use of our website and other Internet uses.

This will enable us to continually improve our website, its usability and offering, and its design to suit your needs and interests.

legal basis

We base the processing of your personal data on the following legal bases:

  • Your personal data is processed on the basis of the consent you have given us in the Privacy Preference Center. It can be accessed via the Cookie Notice.

  • The use of Google Analytics requires the setting of a cookie. For this purpose, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR in the Privacy Preference Center. For more information about our cookies, please see our website

Retention Period

In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.

Transfer of your data to countries outside the EEA

In connection with the use of Google Analytics, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.

Privacy Policy

Further information on the terms of use and data protection can be found at www.google.com/analytics/terms/nl.html and on www.google.com/intl/nl/analytics/privacyoverview.html.

(b) Google Optimize

Our website uses the "Google Optimize" service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service enables us to improve the appeal, content and functionality of our website by making available new functions and content to a certain portion of our users and statistically analyzing changes in website use. Google Optimize is a sub-service of Google Analytics (see Google Analytics, section a directly above).

Cookies are set when using the service. The information on your use of our website generated by doing so is generally transferred to and stored on a server of Google in the United States (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use Google Optimize with IP anonymization activated, meaning that your IP address is truncated by Google while still in the EU/EEA. It is only in exceptional cases that the full IP address is sent to a Google server located in the US and truncated there. Google will use this information for the purpose of evaluating your use of our website in order to compile reports on the optimization test and associated website activity for us and to provide other services to us relating to the use of the website and the Internet.

The legal basis for the data processing is your consent pursuant to Articles 6(1)(a) and 49(1)(a) GDPR. You can change this consent at any time with effect for the future by changing your settings in the Consent Manager.

(c) YouTube

We embed video content via YouTube on our website. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ('Google Ltd', together with Alphabet Inc.'s Google companies identified as "Google").

Categories of personal data

The following information is processed in connection with your use of YouTube:

  • Your IP (Internet Protocol) address
  • Information about your device
  • Browser
  • Operating system
  • Information about the video content you have watched

Purpose

We link video content via YouTube to inform you about our products and offers.

Legal basis

We base the processing of your personal data on the following legal bases:

  • Video content is presented with a thumbnail image. Your data is processed by Google only if you have consented to the processing of your data ("two-click solution") in accordance with Article 6(1)(a) of the GDPR.
  • Using YouTube requires a cookie to be installed. To this end, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR      on the cookie banner. For more information about our cookies, see our Cookie Notification.

Storage period

In principle, we will process your personal data only insofar as it is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Policy     .

Transfer of your data to countries outside the EEA

  • In connection with the use of YouTube, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.

Privacy Policy

Google's Privacy Policy for the processing of personal data in connection with YouTube can be found here:
https://policies.google.com/privacy?hl=en

(d) Google Maps

We incorporate Google Maps into our website. Google Maps is supplied by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Ltd", together with other Alphabet Inc. Google companies identified as "Google").

Categories of personal data

The following information is processed in connection with the use of Google Maps:

  • Your IP (Internet Protocol) address
  • Information about your device
  • Browser
  • Operating system
  • Your location

Purpose

We incorporate maps via Google Maps to provide geographic information.

Legal basis

We base the processing of your personal data on the following legal bases:

  • Your data is processed by Google only if you have consented to the processing of your data ("two-click solution").
    We process your personal data on the basis of article 6 (1)(a) GDPR.

Storage period

In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Policy     .

Transfer of your data to countries outside of the EEA

If the data is processed outside the European Economic Area / the EU, where there is no level of protection in accordance with the European standard, Google declares that it uses standard contractual clause.

Privacy Policy

You can find more information about Google's terms of use and data protection at www.cloud.google.com/maps-platform/terms/ or on https://policies.google.com/privacy?hl=en.

(e) Mouseflow ApS web analysis tool

We use Mouseflow, a web analysis tool offered by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, on our website. The tool records individual visits that are selected at random and also transfers the visitor's anonymized IP address to the provider of this tool.

The tool allows us to prepare a record of mouse movements and mouse clicks. These can be played back on a random basis as what are known as session replays and can be analyzed in heat maps so that we can identify potential improvements for this website. Mouseflow can also be used to conduct surveys that are designed to measure visitor satisfaction levels. The surveys performed and participation in them are also recorded in a cookie created by the tool.

This tool is used exclusively with your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time as described above by changing your cookie settings.

You can find further information on data protection measures taken by the provider and on the use of Mouseflow in the provider's Privacy Statement: https://mouseflow.com/legal/privacy-policy/

5.3 Advertising (tracking)

(a) Google Ads

We incorporate Google Ads into our website. Google Ads is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Categories of personal data

The following information is processed in connection with the use of Google Ads:

  • Your IP (Internet Protocol) address
  • Information about your device
  • Browser
  • Operating system

Legal basis

We base the processing of your personal data on the following legal bases:

  • Your personal data is processed on the basis of your consent given to us in the Privacy Preference Center.
        
  • To use Google Ads, you need to set a cookie. For this purpose, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR in the Privacy Preference Center. For more information about our cookies, please see our Cookie Policy.

Retention Period

In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Policy     .

Transfer of your data to countries outside the EEA

In connection with the use of Google Ads, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.

Privacy Policy

Google's privacy policy for the processing of personal data in connection with Google Ads can be found here:

https://policies.google.com/privacy?hl=en

(b) Microsoft Advertising

We use Microsoft Advertising on our website. Microsoft Advertising is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").

Categories of personal data

The following information is processed in connection with Microsoft Advertising:

  • Your IP address
  • Information about your device
  • Browser
  • Operating system

Purpose

We use Microsoft Advertising to conduct search advertising campaigns if you have visited our website. These services allow us to combine our advertisements with certain keywords or, if you have visited our website in the past, to advertise services that you have viewed on our website, for example, to advertise based on expressions of interest expressed on other websites within the Microsoft Search Network.

Legal basis

We base the processing of your personal data on the following legal bases:

  • Your personal data is processed on the basis of your consent given to us in the Privacy Preference Center.
  • Microsoft's use of advertising requires the setting of a cookie. For this purpose, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR in the Privacy Preference Center. For more information about cookies, please refer to Cookie Policy.

Retention period

In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Policy     .

Transfer of your data to countries outside the EEA

In connection with the use of Microsoft Advertising, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy     .

Privacy Policy

Microsoft's privacy policy for the processing of personal data in connection with Microsoft Advertising can be found here:
https://about.ads.microsoft.com/en-us/policies/legal-privacy-and-security

5.5 Social Media

On our website we use pixels from social networks. The pixels are activated and your data are processed by social networks only after you have consented to the processing of personal data by social networks in the Privacy Preference Centre.

If you are registered as a user on a social network whose pixels we use, your visit to our website can be linked to your user account on that social network. We point out that social networks can then link the data collected about you via the pixels used on our website to other personal data from you even if you are not a user of the social network.

Please also note that social network providers may also process the personal data processed via the pixel for their own purposes. In addition, we may be jointly responsible with social network providers for certain processing activities.

In the case of joint controllership, we shall conclude an agreement with the social network provider on the processing of personal data under joint controllership.

Please see the Privacy Policies of the social networks, which we will indicate below.

Categories of personal data

The following information is processed in connection with the use of pixels:

  • Your IP address
  • Information about your device
  • Browser
  • Operating system

Purpose

We use pixels from social networks to display information and advertising on our products, offers and services to you on the respective social network. In addition to being displayed on the respective social network, information and advertising on our products, offers and services may be displayed to you on other websites that also offer the respective pixel.

By using pixels, we obtain information about our promotional activities, especially on social networks.

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal data is processed on the basis of your consent given to us in the Privacy Preference Center.

Retention Period

In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Policy.

Transfer of your data to countries outside the EEA

In connection with the use of pixels, personal data may be transferred to countries outside the EEA     . For more information, see section 8 of this Privacy Policy.

Pixels used and Privacy Policies for the pixels used   

We list the pixels of social networks used by us below together with information about the social network provider and the Privacy Policy for the respective social network and pixel.

(a)    Meta (Facebook) pixel

The Meta pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

Meta's Privacy Policy for the processing of personal data in connection with Meta pixels can be found here:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 

6. RETENTION PERIOD

We will store your data only for as long as it is necessary to provide our offers, in particular our website, or for as long as we have a legitimate interest in continuing to store your data. The period of storage of your personal data depends in particular on the category of personal data processed and the purpose of the processing. The storage of your personal data is also considered to be based on your consent to its storage.

Finally, we take into account statutory storage periods, which may require us to keep your data for a certain period. Your data will therefore be stored if this is provided for by the European or national legislator, in European Union regulations, in laws or other provisions to which we are subject. Corresponding requirements are also found in particular in commercial or tax legislation or derive from regular limitation periods.

In the event of a legal dispute, we will retain the personal data we need for our legal defence until the final conclusion of the proceedings.

For further information on the storage period, please contact us using the contact details which can be found in section 1 of this Privacy Policy.

7. RECIPIENTS OF YOUR PERSONAL DATA

7.1 Receptors within the STIHL Group

In certain cases we share your personal data with other companies of the STIHL Group. The processing by these STIHL companies is regularly done for us. The processing of your personal data may also be carried out under the sole control of the STIHL company that receives your data or under the joint control of that company with us.

If we share your personal data with other controllers, this will in principle only be done if it is necessary for the performance of a contract with you, if we or the third party has a legitimate interest in doing so or if you have agreed to this.

The processing of your personal data by another STIHL company on our behalf is based on a data processing contract on behalf of the controller within the meaning of the GDPR.

In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. This agreement sets out, among other things, the obligations of the joint controllers with regard to compliance with the requirements of the GDPR. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.

7.2 Recipients outside the STIHL Group (Third Parties)

In addition to the recipients in the STIHL Group, we also share your personal data with third parties, in connection with individual processing operations and taking into account data protection requirements. These third parties include service providers who process your personal data for us and service providers who provide services for us who are associated with the processing of your personal data. The processing of your personal data may also be carried out under the sole control of the third parties receiving your data or under the joint control of those third parties with us.

If we share your personal data with other controllers, this will in principle only take place if it is necessary for the performance of a contract with you, if we or a third party has a legitimate interest in doing so or if you have consented to this.

In connection with the processing of your personal data we use the following categories of service providers:

  • IT (information technology) service providers (data hosting providers)
  • Support (customer support)
  • Lawyers, accountants and tax advisors
  • Vendors of marketing applications or applications to improve the user experience
  • Human Resource Management Systems (in case of some STIHL subsidaries, who manage their job application process through a third party system)

Where we are required to do so under the GDPR or the laws of the EU member states, we will also transfer your data to authorities and courts.

The processing of your personal data by third parties on our behalf is based on a data processing agreement on behalf of the controller within the meaning of the GDPR.

In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.

8. TRANSFER OF YOUR PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA

Ensuring a level of protection consistent with the GDPR is our utmost priority, irrespective of where your personal data is processed.       

If we transfer personal data to recipients outside the European Economic Area, we comply with the requirements set out in Chapter V of the GDPR. If we work with third parties or use service providers that may transfer your personal data to countries outside the European Economic Area, we oblige these third parties or service providers to comply with the requirements of Chapter V of the GDPR.

Please note that not all countries outside the European Economic Area have a level of data protection deemed adequate by the European Commission (so-called "adequacy decision"). A list of countries for which an adequacy decision has been adopted can be found at the following link: Adequacy decisions.

If an adequacy decision has not been adopted, we conclude standard contractual clauses adopted by the European Commission with the recipients of personal data ((EU) 2021/914 of 4 April 2021 - C (2021) 3972, OJ L 2021 (2021) 3972, OJ L 2021/914. EU No L 199/31 of 7 June 2021). In the case of transfer of data to other controllers, we apply the first module of these standard contractual clauses(Transfer controller to controller) , and in the case of transfer of data to our processors, we use the second module (Transfer controller to processor). Where necessary, in addition to entering into standard contractual clauses, we will also take additional measures to protect your personal data.

You can ask us at any time for an overview of recipients in countries outside the European Economic Area and information about the measures we have taken to ensure the level of protection of the GDPR using the contact details set out in Section 1 of this Privacy Policy.

9. YOUR RIGHTS AND THE EXERCISE OF YOUR RIGHTS

If you would like to assert your rights set out below, you can contact us at any time and without the required form through the communication channels set out in this Privacy Policy. By email and other communication channels, you can contact us and our Data Protection Officer using the contact details provided in Section 1 of this Privacy Policy.

9.1 Right of access

You have the right to request confirmation as to whether or not your personal data will be processed. When we process your personal data, you have the right to access information about that personal data and to certain information required by law.

9.2 Right to rectification

You have the right to request the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.

We always strive to ensure the accuracy of our users' personal information. Therefore, please notify us immediately of any changes to your personal information (such as changes of address) so that we can keep it up to date.

9.3 Right to erasure

If the legal requirements are met, you can request that we delete your personal data immediately. This applies in particular if:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the processing of personal data is based on your consent, you withdraw this consent and we cannot base the processing on another legal basis;
  • you have objected to the processing of your personal data on grounds relating to your particular situation and there are no overriding grounds for the processing of your personal data.
  • if your personal data has been transferred to third parties and we are obliged to delete your personal data, we will inform these third parties of the deletion of the data, insofar as this is required by law.

We would like to point out that your right to erasure is subject to limitations. For example, we cannot delete personal data that we need to keep because of legal requirements. Data that we need to assert, exercise or defend legal entitlements is also excluded from the right to erasure.

9.4 Right to restrict processing

If the legal requirements are satisfied, you can obtain restrictions on the processing of your personal data. In particular, this is the case when:

  • the accuracy of your personal data is disputed by you. The processing of your data will be restricted for a period enabling us to verify the accuracy of your personal data;
  • the processing of your personal data is not lawful and you request the restriction of their use instead of the erasure of your personal data;
  • we no longer need your personal data for the purposes of the processing, but you need the data for the establishment, exercise or defence of legal claims;
  • you have objected to the processing of your personal data on grounds relating to your particular situation pending verification that our legitimate grounds for the processing override your grounds.

9.5 Right to data portability

You have the right to receive the personal data that you have provided to us and that we process for the performance of a contract, either on the basis of your consent or by automated procedures, in a structured, customary and machine-readable format. You also have the right, if the above-mentioned conditions are met, to have this data passed on directly to a third party, insofar as this is technically feasible.

9.6 Right to lodge complaints with supervisory authorities on data protection matters

If you believe that the processing of your personal data infringes applicable data protection law, you may lodge a complaint with a data protection supervisory authority, in particular the data protection supervisory authority of the place of your habitual residence, place of work or of the alleged infringement.

10. CHANGES TO PRIVACY POLICY

This Privacy Policy provides the most current, comprehensive, and definitive information about how we process your personal data in connection with our website. To ensure this information remains accurate, we update this policy regularly. Therefore, we encourage you to review it periodically.

4. USE OF OUR WEBSITE AND SERVICES

4.1 Contact and communication

If you have any questions, you may contact us at any time by email, mail, telephone, contact forms or any other means. If you contact us, we will usually respond by the same means of communication that you have chosen.

Categories of personal data

The following information is processed when we communicate with you.

  • Your contact details, such as phone number or email address
  • Communication with you, including recordings of telephone conversations with you, if applicable.
  • Data relating to your order or concern, such as the subject of your order or our communication with you.
  • Data necessary to clarify your concern.

Purpose

Your personal data is processed for the following purposes:

  • To contact you if you have contacted us with questions or other concerns
  • To communicate with you regarding the subject of your orders and concerns, for example for information purposes or to comply with legal or contractual obligations
  • If we record telephone conversations with you, it is for quality control and training purposes.
  • To improve our support

These purposes are referred to later, collectively, as "support".

Legal basis

We base the processing of your personal data on the following legal basis:

  • The processing of your personal data in connection with our support is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract. We base the processing of personal data on the legal basis of Article 6(1)(b) of the GDPR.
  • We provide you with certain support services outside of the existing contractual relationship.
    We base the processing of personal data on the legal basis of a legitimate interest in supporting you with questions about our offers and services and in ensuring the satisfaction of our (former and future) customers.
  • In the case of certain processing of your personal data, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR to the extent that this is necessary.

This applies in particular to the recording of telephone calls.

Retention Period

In principle, we will process your personal data only insofar as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Policy.

2. GENERAL INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA

2.1 Processing your personal Data

​​​In this Privacy Policy, "personal data" means any information that can identify you, either directly or indirectly.​​

​​​Direct examples include your name, email address, and postal address. However, personal data also encompasses other details that, when combined with other information, could lead to your identification. Information that cannot identify you, even when combined with other data, is considered "non-personal data" and is not covered by this notice.​​

​​​When we refer to "processing" your personal data, we mean any action we take with it, such as consulting, collecting it, keeping it safe (storage), or removing it (deletion).

2.2 Summary of the legal basis for processing your personal data

​​We only process your personal data when we have a legal basis to do so under data protection law. The GDPR provides several legal reasons for processing data, and we mostly rely on these​​:

  • The processing of your personal data is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR).

  • Your explicit consent has been given for the processing of personal data for one or more specific purposes (Article 6(1)(a) GDPR).

  • The processing of your personal data is necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c) of the GDPR).

  • The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms requiring the protection of personal data (Article 6(1)(f) of the GDPR).

​​​Additional information regarding which processing operations are specifically based on certain legal bases or under which data protection legislation the processing is permitted is set out below in this ​​​Privacy Policy​​​​.

2.3 What personal data we collect from you

We process personal data that you provide to us, that we collect (automatically) or that we receive from third parties.

While you are not obligated to share your personal information, certain details are required for our website to function properly and for you to access all its features.

Personal data you provide to us

We process information that you provide to us. For example, you may call or contact us in some way and provide us with certain information by these means. We collect and process this data to enable you to use our website. If you do not provide us with certain information, it may exclude or affect the use or full functionality of our website.