PRIVACY POLICY AND DATA PROTECTION OF ANDREAS STIHL LTD.

We would like to inform you about the processing of your personal data in this Privacy Notice. You will find below, among other things, information on how and why we process your personal data and what rights you have in this respect.

SCOPE OF THE PRIVACY NOTICE

This privacy notice describes how we collect and use personal information about you, including when visiting or using our website, in accordance with data protection law.

To help you get the information that is relevant to you at a glance, we have broken down this Privacy Notice into individual sections:

In this Privacy Notice we provide you with information in accordance with the requirements of the version of the General Data Protection Regulation introduced into UK law in accordance with the European Union (Withdrawal) Act 2018 and as supplemented by the Data Protection Act 2018 (together “the UK GDPR”). We also observe the requirements of other national data protection legislation that may apply to the processing of your personal data.

1 CONTROLLER AND DATA PROTECTION OFFICER

1.1 CONTROLLER

The controller under the UK GDPR is the entity or entities which determines the purposes and means of the processing of your personal data and must therefore ensure compliance with the requirements of data protection legislation. Where two or more controllers jointly determine the purposes and means of the processing, those controllers shall be jointly responsible for the processing, so-called joint controllers.

The controller responsible for the processing of your personal data in connection with this website is:

    Andreas Stihl Limited
    Contra House
    Oak Close
    Camberley
    Surrey
    GU15 3FG    
    Registration number: 01376302

(”we“, ”us").

If you would like further information, please contact us at any time using the contact details specified above.

1.2 DATA PROTECTION OFFICER

Our Data Protection Officer can be contacted by sending a letter to the controller’s address marked “for the attention of the Data Protection Officer” or by sending an email to compliance@stihl.co.uk

2 GENERAL INFORMATION ON THE PROCESSING OF YOUR PERSONAL DATA

2.1 PROCESSING OF YOUR PERSONAL DATA

Where we use the term “personal data” in this Privacy Notice we mean any information relating to you.

Examples of personal data are your name, email address and postal address. However, your personal data include any data that are linked to you or that relate to you. We refer to data that do not relate to you as “non-personal data” or “anonymous data”. Data protection rules and this Privacy Notice do not apply to these data.

Processing of your personal data includes, for example, the collection, storage, or erasure of your data.

2.2 OVERVIEW OF THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We process your personal data only where we can identify a legal basis for doing so in accordance with applicable data protection law. The most commonly applied legal bases for the processing of personal data under the UK GDPR are as follows: 

  • The processing of your personal data is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract (Article 6 (1) (b) of the UK GDPR).
  • You have given us your consent to the processing of your personal data for one or more specific purposes (Article 6 (1) (a) UK GDPR).
  • The processing of your personal data is necessary for compliance with a legal obligation to which we are subject (Article 6 (1) (c) of the UK GDPR).
  • Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Article 6 (1) (f) of the UK GDPR).

Further information on which of these legal bases apply to specific processing is set out below in this Privacy Notice.

2.3 WHAT PERSONAL DATA WE COLLECT FROM YOU

We process personal data that you provide to us, that we collect (automatically) or that we receive from third parties.

You are not obliged to provide your personal data to us. However, the disclosure of certain personal data may be necessary to enable us to offer and provide the website and all the functions of the website to you.

Personal data that you provide to us

We process information that you provide to us. For example, you may call us or contact us in some other way and provide certain information to us by these means. You may also provide information via the website, such as when using our product guidance tools. We collect and process these data to respond to your call or message or to enable you to use specific features of our website.

Personal data that are collected by us automatically

Certain information is collected and processed by us (automatically) when you use our website. This includes data such as your IP address, specific login data and data that are processed to enable us to make our website technically available. We may also collect information via the use of cookies. If you do not accept cookies or prevent the automated collection of certain information, this may exclude or impair the use or full functionality of our website. For more information on this please see section 3 below.

Personal data that we receive from third parties

Sometimes we do not receive information directly from you. This may be the case, for example, if information about you is provided to us by third parties. For example, we work with companies that provide services for us and provide us with information about you.

3 VISITING OUR WEBSITE

When you visit our website, the browser used on your device automatically sends information to the server on our website and temporarily stores it in a log file.

If you would like to learn more about the cookies we use on our website, please click here: https://corporate.stihl.co.uk/en/footer/cookie-policy

Categories of personal data

The following information is processed when the website is visited:

  • Your IP address
  • The date and time of access
  • The name and URL of the retrieved web page
  • The web page/application from which access was made (referrer URL)
  • The browser you are using and, if applicable, the operating system of the device you are using to access our website and the name of your access provider.

Purpose

Your personal data are processed for the following purposes:

  • To ensure that a smooth connection is established
  • To ensure that our website is easy to use
  • To analyse system security and stability

Legal basis

We base the processing of your personal data on the following legal basis:

  • Processing of your personal data is necessary to enable you to visit the website and to ensure the performance, long-term functionality and security of our website and systems.
    We process your personal data based on Article 6 (1) (f) of the UK GDPR.
    We have a legitimate interest in enabling you to visit our website and ensuring the performance, long-term functionality and security of our website and systems.

Storage period

We shall process your personal data only for as long as is necessary to achieve the above purposes. For more information on the storage period, see section 7 of this Privacy Notice.

4 USE OF OUR WEBSITE AND SERVICES

4.1 CONTACT AND COMMUNICATION

If you have any questions, you can contact us at any time by email, post, telephone, contact forms or any other means. If you contact us, we will usually reply to you via the means of communication chosen by you.

Categories of personal data

The following information is processed when communicating with you:

  • Your contact details, such as your phone number or email address
  • Records of our communication with you, including recordings of telephone calls with you, if applicable
  • Data relating to your request or your concern, such as the subject matter of your request or our communication with you
  • Data necessary to clarify your concern.

Purpose

Your personal data are processed for the following purposes:

  • To communicate with you if you have contacted us with questions or other concerns
  • To communicate with you in relation to matters other than requests and concerns, for example for information purposes or to comply with legal or contractual obligations
  • If we record telephone calls with you, this is done for quality assurance and training purposes
  • To assess and improve the quality of the support we offer to you and other users.

These purposes are hereinafter collectively referred to as "support".

Legal basis

We base the processing of your personal data on the following legal basis:

  • Processing your personal data in connection with our support is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract.
    We process your personal data based on Article 6 (1) (b) of the UK GDPR.
  • We provide you with certain support services outside of an existing contract.
    We process your personal data based on Article 6 (1) (f) of the UK GDPR.
    We have a legitimate interest in helping you in the event of questions about our offers and services and in ensuring the satisfaction of our (former and future) customers.
    Calls to our customer support may be recorded for quality assurance or training purposes - where you have provided us with your consent for us to do so.

Storage period

We shall process your personal data only for as long as it is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice

5 OTHER PERSONAL DATA PROCESSING

5.1 APPLICANTS

Categories of personal data

The following information is processed when you apply for a position with us:

  • Contact details such as your name, title, address, telephone number, and e-mail address.
  • Recruitment information (including personal information such as copies of your CV or cover letter which is sent to us as part of the application process).
  • Information provided to us by recruitment agencies in relation to your application for employment with us.
  • Information collected during the course of your application including psychometric and personal profiling data (i.e. tests administered by our third party test supplier).

Purpose

Your personal data are processed for the following purposes:

  • To evaluate and progress your application for employment with us.
  • To carry out driving licence checks. 

Legal basis

We base the processing of your personal data on the following legal basis:

  • To perform the contract with you or to take steps to enter into a contract with you, and in pursuit of our legitimate interests to verify your suitability for our vacancies.
  • In pursuit of our legitimate interests to verify your suitability for our driver vacancies.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

5.2 BUSINESS CONTACTS

Categories of personal data

The following information is processed if you are a business contact:

  • Information that you provide or we collect during our interactions with you or your employer, such as how long we have done business with you or how long you have worked at your company.
  • Bank details of individual sole traders.
  • Other personal information you provide to us via our website, for example, by using the “How to contact us” page.

Purpose

Your personal data are processed for the following purposes:

  • Dealing with your enquiries efficiently.
  • To provide you with information on our products and services.

Legal basis

We base the processing of your personal data on the following legal basis:

  • In pursuit of our legitimate interests to ensure your enquiry is dealt with promptly and efficiently.
  • In pursuit of our legitimate interests in keeping you informed about our products, services and business updates.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

5.3 APPROVED DEALERS

Categories of personal data

The following information is processed if you are an employee of an Approved Dealer:

  • Contact details such as your name, title, address, telephone number, e-mail address, photo (if you provide one) and details of your next of kin (if required).
  • Travel documentation (if you provide these documents) including passport details.

Purpose

Your personal data are processed for the following purposes:

  • To facilitate business between you or your business and us.
  • Demonstrating that we have fulfilled our training commitment to you.
  • Accurately keep records of your training with us.
  • Next of kin contact details in the event of an emergency.
  • Facilitating Approved Dealer trips.

Legal basis

We base the processing of your personal data on the following legal basis:

  • In pursuit of our legitimate interests (to facilitate business between you or your business and us).
  • In pursuit of our legitimate interests in facilitating Approved Dealer trips.
  • In pursuit of our legitimate interests in demonstrating that we have fulfilled our training commitment to you.
  • In pursuit of our legitimate interests to accurately keep records of your training with us.
  • In pursuit of our legitimate interests (to contact in the event of an emergency).

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

5.4 CUSTOMERS

Categories of personal data

The following information is processed if you are our Customer:

  • Personal information contained on your social media accounts, for example, Facebook or Twitter.
  • Payment information such as credit/ debit card number, expiration date, security code and name as it appears on the card and the address the card is registered to.
  • Details which you provide to us or our Approved Dealers in connection with product warranty registration.
  • Other personal information provided to us via our website or social media accounts, for example, by contacting us on Facebook, Twitter or through the “STIHL Blog”.
  • Personal information provided to us by the third party service providers we work with, for example, analytics providers and third party companies providing us with marketing assistance.
  • Personal information provided as part of your membership to the ‘STIHL Owners Club’ including your marketing preferences.

Your contact details to provide you with information on our products and services including through newsletters. We will only send a newsletter once you have confirmed your email address.

Purpose

Your personal data are processed for the following purposes:

  • Providing you with information about the products you have purchased from our Approved Dealers.
  • To assess the urgency of your enquiry, we use third party software which enables us to evaluate certain keywords. Only the subject and content of your message are processed.

Legal basis

We base the processing of your personal data on the following legal basis:

Your contact details:

  • Where you have provided us with your consent for us to do so or the soft opt-in rule applies.
  • In pursuit of our legitimate interests (to analyse the types of products purchased by our customers).
  • To perform the contract with you.

Personal data processed when you subscribe to our newsletter:

  • Where you have provided us with your consent for us to do so.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

5.5 CONTRACTORS AND SUPPLIERS

Categories of personal data

The following information is processed if you are our Contractor or Supplier:

  • Contact details such as your name, address, bank account information and telephone number.
  • Biometric data such as facial or your fingerprint stored on any of our digital devices issued to you (inc. laptops and mobile phones).

Purpose

Your personal data are processed for the following purposes:

  • To facilitate business between you and us.
  • To secure our IT systems and hardware (e.g. iPhones).

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal details – in pursuit of our legitimate interests (to facilitate business between you and us).
  • Your biometric data - where you have provided us with your consent for us to do so.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

5.6 COMPETITION ENTRANTS AND ATHLETHES

Categories of personal data

The following information is processed if apply of enter any of our competitions or events:

  • For example STIHL TIMBERSPORTS® SERIES, personal information including your name, e-mail address, telephone number, bank details (if relevant), any health related information you give to us and photos and/or videos of you.
  • Where you enter into the STIHL TIMBERSPORTS® SERIES, we will publish any competition records on our STIHL TIMBERSPORTS® SERIES website.
  • Where we loan you our products to use in connection with competitions, personal information including your name, e-mail address, telephone number, photos and/or videos of you, competition records and copies of your loan agreement.

Purpose

Your personal data are processed for the following purposes:

  • Effectively managing the competition you have entered into.
  • Images of you captured by photo and/or video distributed via all current and future media (including without limitation, digital imagery, print, audio recordings, visual and audio-visual) to promote (i) our business and products, (ii) the business and products of the group of companies to which we belong, (iii) the business and products of sponsors of the STIHL TIMBERSPORTS® SERIES and (iv) the STIHL TIMBERSPORTS® SERIES.
  • Any information you provide to us relating to your health or dietary requirements, for example, for catering and hospitality purposes, and pre-competition health checks.
  • Third party contact details to contact them in an emergency.
  • Your STIHL TIMBERSPORTS® SERIES or other competition records on our website or internally.
  • Your personal details provided to us in connection with the competition or event you have applied to enter into and any photographs, digital imagery, video, audio-visual and audio recordings taken at or related to that event.
  • Your personal information required in connection with your loan agreement.

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal details provided to us in connection with the competition or event that you have applied to enter into – in pursuit of our legitimate interests in effectively managing the competition you have entered into.
  • Images of you captured by photo and/or video – where you have provided us with your consent for us to do.
  • Images of you captured by photo and/or video distributed via all current and future media in pursuit of our legitimate interests in advertising, marketing and promotion.
  • Any information you provide to us relating to your health or dietary requirements – where you provide your consent for us to do so or where processing is necessary to protect your vital interests.
  • Third party emergency contact details – to comply with legal obligations and in pursuit of our legitimate interests regarding the safety of the STIHL TIMBERSPORTS® SERIES and its participants.
  • Your STIHL TIMBERSPORTS® SERIES or other competition records on our website or internally – in pursuit of our legitimate interest in publicising the competition records or keeping an internal record of your results.
  • Your personal details provided to us in connection with the competition or event you have applied to enter into and any photographs, digital imagery, video, audio-visual and audio recordings taken at or related to that event – in pursuit of our legitimate interests in (i)  promoting the STIHL TIMBERSPORTS® SERIES and STIHL’s products and those of its group companies, and (ii) the promotion by sponsors of the STIHL TIMBERSPORTS® SERIES and of their respective products, in each case via all current and future media (including without limitation, digital imagery, print, audio, visual and audio-visual).
  • Your personal information required in connection with your loan agreement – to perform the contract with you.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

5.7 GENERALLY

Categories of personal data

We will also process personal data in the following ways:

  • If you visit our offices, images and videos are recorded by the CCTV system in operation on our premises.
  • If you visit our offices out of normal working hours, live CCTV images and video maybe monitored by us or our security providers.
  • Information gathered when you visit our offices via our visitor sign-in process, including your name.
  • If you visit our offices and login to our guest Wi-Fi network, information may be collected about your usage.
  • Any personal information you provide to us during your interactions with us.
  • Photos and/or videos of you which may be taken at one of our events, in connection with one of our promotions or any other way.
  • Information provided to us by third party service providers we work with, for example, payment service or analytics providers.

Purpose

Your personal data are processed for the following purposes:

  • To prevent and detect crime, safeguard property, and ensure the safety of individuals within our premise.
  • To monitor activity during out-of-hours periods and respond promptly to any incidents.
  • Health and safety purposes.
  • To track your Wi-Fi usage.
  • Images of you captured by photo and/or video for example, in relation to participants at the STIHL TIMBERSPORTS® SERIES).
  • To transfer to third party service providers.
  • To contact you if we wish to use your information for a purpose not set out in this policy.

Legal basis

We base the processing of your personal data on the following legal basis:

  • In pursuit of our legitimate interests (in ensuring our premises are kept secure and to keep evidence of this).
  • Health and safety purposes – to comply with a legal obligation.
  • To track your Wi-Fi usage – in pursuit of our legitimate interests (in ensuring our network is being used for acceptable purposes).
  • Images of you captured by photo and/or video – where you have provided us with your consent for us to do so (unless covered by one of the specific uses/lawful bases set out elsewhere in this privacy notice.
  • To transfer to third party service providers – in pursuit of our legitimate interests (in outsourcing for effectiveness and efficiency).
  • To contact you if we wish to use your information for a purpose not set out in this policy – to comply with a legal obligation.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 this Privacy Notice.

6 MARKETING AND USER EXPERIENCE

6.1 COOKIES AND SIMILAR TECHNOLOGIES

We use technologies on our website that are intended to facilitate the use of the website and make it more user-friendly and to provide various functionalities. Such technologies include, for example, cookies, pixels and scripts. This section provides information on your personal data in this context.

In our Cookie Notice (https://corporate.stihl.co.uk/en/footer/cookie-policy) we explain what cookies and similar technologies we use on our website for what purposes and how you can manage these cookies.

6.2 PROVIDING, DEVELOPING AND IMPROVING OUR WEBSITE

(a) Google Analytics web analysis

We use the Google Analytics analysis tool on our website. Google Analytics is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google", together with other Google companies of Alphabet Inc. "Google").

We use Google Analytics with the extension "anonymize IP". This means that your IP address will be shortened before it is sent to Google in the United States, so that Google will not receive your full IP address from us.

Categories of personal data

The following information is processed in connection with the use of Google Analytics:

  • Your IP address
  • Unique user ID assigned by the browser
  • The user's click behaviour on the website
  • The subpages that the user accesses
  • Browser type, URL, screen resolution
  • Time stamp

Purpose

We use Google Analytics to analyse your use of the website, to obtain reports about web page activities, and to obtain other Google services associated with your use of our website and other Internet use.

This will enable us to continuously improve our website, its user-friendliness and our offering, and to tailor them to suit your needs and interests.

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal data are processed based on your consent given to us in the Privacy Preference Centre. You can access this via the Cookie Notice.
  • We process your personal data based on Article 6 (1) (a) of the UK GDPR.
  • The use of Google Analytics requires the setting of a cookie. To that end, we shall obtain your consent under Article 6 (1) (a) of the UK GDPR in the Privacy Preference Centre. For more information about our cookies, see our Cookie Notice (https://corporate.stihl.co.uk/en/footer/cookie-policy). 

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice.

Privacy Policy

The Privacy Policy for Google Ltd.’s Google Analytics can be found here:
https://policies.google.com/privacy

(b) YouTube

On our website we embed video content via YouTube. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google Ltd’, together with other Google companies of Alphabet Inc. “Google”).

Categories of personal data

The following information is processed in connection with the use of YouTube:

  • Your IP address
  • Information about your device
  • Browser
  • Operating system
  • Information about the video content you have viewed

Purpose

We link video content via YouTube to inform you about our products and offers.

Legal basis

We base the processing of your personal data on the following legal basis:

  • Video content is displayed with a thumbnail image. Your data are processed by Google only when you have consented to the processing of your data ("two-click solution").
  • We process your personal data based on Article 6 (1) (a) of the UK GDPR.
  • The use of YouTube requires setting a cookie. To that end, we shall obtain your consent under Article 6 (1) (a) of the UK GDPR in the cookie banner. For more information about our cookies, see our Cookie Notice.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice.

Transfer of your data to countries outside the UK

  • In connection with the use of YouTube, personal data are transferred to countries outside the UK. For more information, see section 9 of this Privacy Notice.

Privacy Policy

Google's Privacy Policy for the processing of personal data in connection with YouTube can be found here:
https://policies.google.com/privacy

6.3 ADVERTISING AND PROFILING (TRACKING)

(a) Google Ads

On our website we embed Google Ads. Google Ads is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Categories of personal data

The following information is processed in connection with the use of Google Ads:

  • Your IP address
  • Information about your device
  • Browser
  • Operating system

Purpose

We use Google Ads to run search advertisement campaigns if you have visited our website before. The services allow us to combine our ads with certain keywords or, if you have visited our website in the past, to advertise services that you have viewed on our website, for example. We may display interest-based advertising on other websites within the Google Search and Display Network (as a “Google Ad” as part of the Google Search or on other Google Partner websites).

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal data are processed based on your consent given to us in the Privacy Preference Centre.
  • We process your personal data based on Article 6 (1) (a) of the UK GDPR.
  • The use of Google Ads requires the setting of a cookie. To that end, we shall obtain your consent under Article 6 (1) (a) of the UK GDPR in the Privacy Preference Centre. For more information about our cookies, see our Cookie Notice.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice.

Transfer of your data to countries outside the UK

In connection with the use of Google Ads, personal data are transferred to countries outside the UK. For more information, see section 9 of this Privacy Notice.

Privacy Policy

Details of Google's processing of personal data in connection with Google Ads can be found here:
https://policies.google.com/privacy
https://business.safety.google/privacy/

(b) Microsoft Advertising

On our website we use Microsoft Advertising. Microsoft Advertising is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").

Categories of personal data

The following information is processed in connection with the use of Microsoft Advertising:

  • Your IP address
  • Information about your device
  • Browser
  • Operating system

Purpose

We use Microsoft Advertising to run search advertisement campaigns for you if you have visited our website before. The services allow us to combine our ads with certain keywords or, if you have visited our web site in the past, to advertise services that you have viewed on our website, for example. This enables us to display interest-based advertising on other websites within the Microsoft Search Network.

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal data are processed based on your consent given to us in the Privacy Preference Centre.
  • We process your personal data based on Article 6 (1) (a) of the UK GDPR.
  • The use of Microsoft Advertising requires the setting of a cookie. To that end, we shall obtain your consent under Article 6 (1) (a) of the UK GDPR in the Privacy Preference Centre. For more information about our cookies, see our Cookie Notice.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice.

Transfer of your data to countries outside the UK

In connection with the use of Microsoft Advertising, personal data are transferred to countries outside the UK. For more information, see section 9 of this Privacy Notice.

Privacy Policy

Microsoft's Privacy Policy for the processing of personal data in connection with Microsoft Advertising can be found here:
https://privacy.microsoft.com/en-us/privacystatement

6.4 SOCIAL MEDIA 

On our website we use pixels from social networks. The pixels are activated and your data are processed by social networks only after you have consented to the processing of personal data by social networks in the Privacy Preference Centre.

If you are registered as a user on a social network whose pixels we use, your visit to our website can be linked to your user account on that social network. We point out that social networks can then link the data collected about you via the pixels used on our website to other personal data from you even if you are not a user of the social network.

Please also note that social network providers may also process the personal data processed via the pixel for their own purposes. In addition, we may be jointly responsible with social network providers for certain processing activities.

In the case of joint controllership, we shall conclude an agreement with the social network provider on the processing of personal data under joint controllership.

Please see the Privacy Policies of the social networks, which we will indicate below.

Categories of personal data

The following information is processed in connection with the use of pixels:

  • Your IP address
  • Information about your device
  • Browser
  • Operating system

Purpose

We use pixels from social networks to display information and advertising on our products, offers and services to you on the respective social network. In addition to being displayed on the respective social network, information and advertising on our products, offers and services may be displayed to you on other websites that also offer the respective pixel.

By using pixels, we obtain information about our promotional activities, especially on social networks.

Legal basis

We base the processing of your personal data on the following legal basis:

  • Your personal data are processed based on your consent given to us in the Privacy Preference Centre.
    We process your personal data based on Article 6 (1) (a) of the UK GDPR.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice.

Transfer of your data to countries outside the UK

In connection with the use of pixels, personal data may be transferred to countries outside the UK. For more information, see section 9 of this Privacy Notice.

Pixels used and Privacy Policies for the pixels used 

We list the pixels of social networks used by us below together with information about the social network provider and the Privacy Policy for the respective social network and pixel.

(a) Twitter pixel

The Twitter pixel is provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103 (“X Corp.”).

X Corp.’s Privacy Policy for the processing of personal data in connection with Twitter pixels can be found here:
https://twitter.com/privacy

(b) Meta (Facebook) pixel

The Meta pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

Meta's Privacy Policy for the processing of personal data in connection with Meta pixels can be found here:
https://www.facebook.com/about/privacy/

(a) Pinterest pixel

The Pinterest pixel is provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).

Pinterest's Privacy Policy for the processing of personal data in connection with Pinterest pixels can be found here:
https://policy.pinterest.com/privacy-policy

7 STORAGE PERIOD

We shall store your data only for as long as is necessary to provide our offerings, in particular our website, or for as long as we have a legitimate interest in continuing to store your data. The storage period for your personal data depends in particular on the category of personal data processed and the purpose of the processing. Storage of your data is also considered based on your consent to its storage.

Finally, we take into account statutory storage periods, which may require us to keep your data for a certain period of time. Your data will therefore be stored for such periods as are provided for by applicable laws and regulations or other provisions to which we are subject. Corresponding requirements are also found in particular in commercial and tax legislation or derive from the regular statutory limitation periods.

In the event of a legal dispute, we will keep the personal data that we need for our legal defence until the final conclusion of the proceedings.

For further information on the storage period, please contact us using the contact details that can be found in section 1 of this Privacy Notice.

8 RECIPIENTS OF YOUR PERSONAL DATA

8.1 RECIPIENTS WITHIN THE STIHL GROUP

In certain cases, we share your personal data with other companies in the STIHL Group. Processing by these STIHL companies is done regularly on our behalf. The processing of your personal data may also be carried out under the sole controllership of the STIHL company receiving your data or under the joint controllership of that company with us.

If we share your personal data with other controllers, this will in principle be done only if this is necessary for the performance of a contract with you, if we or the third party have a legitimate interest in this or if you have agreed to this.

Processing of your personal data by another STIHL company on our behalf is carried out on the basis of a contract for processing data on behalf of a controller within the meaning of the UK GDPR.

In the case of joint controllership, we shall conclude an agreement on processing under joint controllership. This agreement shall lay down, inter alia, the obligations of the joint controllers in relation to compliance with the requirements of the UK GDPR. We shall be happy to provide you with the essential elements of this agreement on request. To this end, please contact us using the contact details that can be found in section 1 of this Privacy Notice.

8.2 RECIPIENTS OUTSIDE THE STIHL GROUP (THIRD PARTIES)

In addition to recipients within the STIHL Group, we also share your personal data with third parties, in respect of individual processing operations and taking into account the data protection requirements. These third parties include service providers that process your personal data on our behalf and service providers that provide services for us that are associated with the processing of your personal data. The processing of your personal data may also be carried out under the sole controllership of the third parties receiving your data or under the joint controllership of those third parties with us.

We will only share your personal data with other controllers where this is necessary for the performance of a contract with you if we or the third party have a legitimate interest in this or if you have provided your consent. 

In connection with the processing of your personal data we use the following categories of service providers:

  • IT service providers (data hosting providers)
  • Support (customer support)
  • Lawyers, accountants and tax advisers
  • Marketing application providers or applications to improve the user experience

Where we are obliged to do so under the UK GDPR or other law, we will also pass on your data to authorities and courts.

Processing of your personal data by third parties on our behalf is carried out on the basis of a contract for processing data on behalf of a controller within the meaning of the UK GDPR.

Where we jointly determine the purpose and means of processing with another controller, we shall conclude an agreement on processing under joint controllership. We shall be happy to provide you with the essential elements of this agreement on request. To this end, please contact us using the contact details that can be found in section 1 of this Privacy Notice.

9 TRANSFER OF YOUR PERSONAL DATA TO COUNTRIES OUTSIDE OF THE UK 

Regardless of where your personal data are processed, our highest priority is to always ensure the level of protection guaranteed by the UK GDPR.

If we transfer personal data to recipients outside the UK, we comply with the requirements of Chapter V of the UK GDPR. If we work with third parties or use service providers that may transfer your personal data to countries outside the UK we shall oblige those third parties or service providers to comply with the requirements of Chapter V of the UK GDPR.

We point out that not all countries outside the UK have a level of data protection that is recognised as adequate by the Secretary of State (so-called "adequacy decision"). A list of the countries for which an adequacy decision has been adopted can be found at the following link: List of countries - UK Adequacy 

Where an adequacy decision has not been adopted, we conclude the standard contractual clauses with the recipients of your personal data as issued by the Secretary of State under Section 119A of the Data Protection Act 2018 which came into force on 21 March 2022. For transfer to other controllers we use Module One of these standard contractual clauses and for transfer to our processors we use Module Two. If necessary, in addition to concluding the standard contractual clauses we shall also take additional measures to protect your personal data.

You can ask us for an overview of recipients in countries outside the UK and for information on the measures we have taken to ensure the level of protection of the UK GDPR at any time using the contact details specified in section 1 of this Privacy Notice.

10 YOUR RIGHTS AND EXERCISING YOUR RIGHTS

If you wish to exercise your rights set out below, you can contact us informally at any time using the means of communication specified in this Privacy Notice. You can contact us and our Data Protection Officer by email and the other means of communication using the contact details set out in section 1 of this Privacy Notice.

10.1 RIGHT OF ACCESS

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed. If we are processing personal data concerning you, you have the right of access to the personal data and certain information prescribed by law. For more information on your right of access, see Article 15 of the UK GDPR.

10.2 RIGHT TO RECTIFICATION

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed. For more information on your right to rectification, see Article 16 of the UK GDPR.

We always strive to ensure the accuracy of your personal data. Therefore, please notify us of any changes to your data (such as address changes) without undue delay, so that we can ensure your personal data are up-to-date.

10.3 RIGHT TO ERASURE

If the legal requirements are met, you may obtain the erasure of your personal data without undue delay. In particular, this is the case where:

  • your personal data are no longer needed for the purposes for which they were collected or otherwise processed;
  • the processing of your personal data is based on your consent, you withdraw that consent and we cannot base the processing on another legal basis;
  • you have objected to the processing of your personal data on grounds relating to your particular situation and there are no overriding grounds for the processing of your personal data;
  • if your personal data have been passed on to third parties and we are obliged to erase your personal data, we shall inform those third parties of the erasure obligation, where required by law.

Please note that your right to erasure is subject to restrictions. For example, we are not allowed to erase personal data that we are legally required to continue to keep. Data that we need for the establishment, exercise or defence of legal claims are also excluded from your right to erasure. For more information on your right to erasure, see Article 17 of the UK GDPR.

10.4 RIGHT TO RESTRICTION OF PROCESSING

If the legal requirements are met, you may obtain restriction of processing of your personal data. In particular, this is the case where:

  • you contest the accuracy of your personal data. The processing of your data will be restricted for a period enabling us to verify the accuracy of your personal data;
  • the processing of your personal data is unlawful and you request the restriction of the use of your personal data instead of the erasure of your personal data;
  • we no longer need your personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims;
  • you have objected to the processing of your personal data on grounds relating to your particular situation pending the verification whether our legitimate grounds for the processing override your grounds.

For more information on your right to restriction of processing, see Article 18 of the UK GDPR.

10.5 RIGHT TO DATA PORTABILITY

Where you have provided personal data to us, and we have processed that personal data by automated means either for the performance of a contract with you or based on your consent, you have a right to receive such data in a structured, commonly used and machine-readable format. You also have the right, if the above-mentioned conditions are met, to have us transmit these data directly to a third party, where technically feasible. For more information on your right to data portability, see Article 20 of the UK GDPR.

10.6 WITHDRAWAL OF CONSENT

If you have given your consent to the processing of your personal data, you may withdraw it at any time with future effect. This shall be without prejudice to the lawfulness of the processing of your data until it has been withdrawn.

10.7 RIGHT TO LODGE COMPLAINTS WITH DATA PROTECTION SUPERVISORY AUTHORITIES

If you consider that the processing of your personal data infringes applicable data protection legislation, you may lodge a complaint with a data protection supervisory authority, in particular the UK Information Commissioner (https://ico.org.uk/make-a-complaint/) or other applicable data protection supervisory authority. 

10.8 RIGHT TO OBJECT TO PROCESSING

Right to object to the processing of your personal data in the case of processing based on our legitimate interests

Where we process data based on a legitimate interest, you may object to the processing, on grounds relating to your particular situation, at any time. We shall then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims. We assume that, when processing is carried out based on a legitimate interest, we shall generally be able to demonstrate such compelling legitimate grounds, but we shall examine and assess each objection individually.

For more information on your right to object, see Article 21 of the UK GDPR.

11 CHANGES TO THIS PRIVACY NOTICE

We regularly update this Privacy Notice to provide you with up-to-date and complete information about the processing of your personal data in connection with our website. We therefore advise you to consult this Privacy Notice on a regular basis.