Data privacy statement of ANDREAS STIHL AG & Co. KG

(Status: 09.05.2022)

We would hereby like to inform you about the processing of personal data carried out by ANDREAS STIHL AG & Co. KG (hereinafter "STIHL") in accordance with the EU General Data Protection Regulation (GDPR) on the website www.stihl.com. If you have any questions or comments about this data protection information, you can send them at any time to the email address given in section 2. STIHL has also taken appropriate technical and organizational security measures in accordance with the EU General Data Protection Regulation to protect your personal data against loss, destruction, manipulation and unauthorized access.

1. OVERVIEW

The following data privacy statement informs you about the type and scope of the processing of so-called personal data by STIHL. Personal data is information that can be directly or indirectly assigned to you.

2. Name and contact details of the data controller and the data protection officer

This data protection information applies to data processing by ANDREAS STIHL AG & Co. KG, Badstraße 115, 71336 Waiblingen ("responsible party") within the framework of the website www.stihl-timbersports.com. STIHL's data protection officer can be contacted at the above address, in the name of the Data Protection Department, or at datenschutz@stihl.de.

3. Purposes of data processing, legal bases and legitimate interests pursued by STIHL or a third party, as well as categories of recipients

3.1. Accessing our website

When you access our website, the browser used on your end device automatically sends information to the server of our website and temporarily stores it in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:

  • the IP address of the requesting Internet-enabled device,
  • the date and time of access,
  • the name and URL of the retrieved file,
  • the website/application from which the access was made (referrer URL),
  • the browser you use and, if applicable, the operating system of your internet-enabled computer as well as the name of your access provider.

The legal basis for the processing of the IP address is Article 6 (1) lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed below.

The IP address of your terminal device and the other data listed above are used by us for the following purposes:

  • Ensure smooth connection establishment,
  • Ensuring a comfortable use of our website/app,
  • Evaluation of system security and stability.

The data is stored for a period of 7 days and then automatically deleted. Furthermore, we use so-called cookies, analysis tools and targeting methods for our website, as explained in more detail below in section 3.2.

3.2. Online presence and website optimisation

3.2.1. Cookies - General Information

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognise your browser on your next visit (so-called long-term cookies). Cookies cannot be used to access other files on your computer or to determine your e-mail address.

The cookies listed in the cookie information are used on this website.

Insofar as we use cookies that are absolutely necessary for the provision of our websites, the legal basis for the processing of personal data using these cookies is Art. 6 (1) lit. f GDPR.

Personal data is only processed by cookies for marketing purposes or for the creation of statistics if you have given us your consent to do so. The legal basis for this is Art. 6 para. 1 lit. a GDPR.

You can withdraw your consent at any time without stating reasons by clicking on this link and adjusting the functions permitted.

Cookies are stored on your terminal device and you have full control over their use. By changing the settings of the internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, you may no longer be able to use all the functions of the websites to their full extent.

3.2.2. Web analysis with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"). The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, 1600. Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

The STIHL website uses Google Analytics with the extension "anonymize IP". This means that your IP address collected by the Google Analytics cookie is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of STIHL, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time by adjusting your cookie preferences as described above.

In addition, you can delete cookies that have already been saved at any time in the settings of your browser. If you do this, you may no longer be able to use all the functions of the websites to their full extent.

For more information on terms of use and data protection, please visit https://safety.google/privacy/privacy-controls/.

3.2.3. GOOGLE RECAPTCHA

(1) We use reCaptcha v2 on our websites. reCaptcha is an offer from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and serves to prevent abusive automated entries in web forms and thus to protect the technical systems of the hoster. We use it for this purpose and this is also our legitimate interest, Art. 6 para. 1 f GDPR.

(2) When you call up one of our web pages in which reCaptcha is integrated, a connection is established to Google's servers. A reCaptcha cookie is set. Your IP address is transmitted to Google.

(3) In addition, reCaptcha collects the following data by means of "fingerprinting":

  • browser plugins used
  • cookies set by Google in the last 6 months
  • number of mouse clicks and touches you have made on this screen
  • CSS information for the page you are viewing
  • Javascript objects
  • the date
  • the browser language

(4) You may refuse the use of cookies and fingerprinting by selecting the appropriate technical settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

(5) The privacy policy and terms of use of Google can be found here: https://safety.google/privacy/privacy-controls/.

3.2.4. ORACLE MAXYMISER

(1) We use the product Oracle Maxymiser of Oracle Deutschland B.V. & Co. KG, Riesstr. 25, 80992 Munich. For this purpose, cookies are set to enable an analysis of your use of the website. The information thus generated about your use of the web pages is transmitted to a server of Oracle Deutschland B.V. & Co. KG and stored there. Oracle Deutschland B.V. & Co. KG will use the anonymized or pseudonymized data transmitted on our behalf, in particular to evaluate user behavior on our website and to optimize the website.

(2) Oracle Maxymiser is used exclusively with your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time by changing your cookie settings under the following link.

(3) Furthermore, you can object to the collection and storage of your anonymized data by the Oracle Maxymiser technology as well as the processing of this data at any time under the following link: https://www.oracle.com/marketingcloud/opt-status.html.

3.2.5. Youtube

We use services from YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, a subsidiary of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. For users who are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is the data controller for your data.

Here, to protect your personal data, we use the enhanced data protection option provided by YouTube as well as a 2-click solution implemented by us. When you call up a page in which a YouTube video is embedded, only an inactive preview of the video is displayed. Only when you click on this preview, your data is transmitted to YouTube.

If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your member account with YouTube. You can prevent this by logging out of your member account before visiting our website. Insofar as data is processed outside the European Economic Area / the EU, where there is no level of data protection corresponding to the European standard, Google uses standard contractual clauses according to its own information.

The data transfer to Google only takes place after you have actively clicked on the YouTube video. Consequently, it only takes place after your express consent pursuant to Art. 6 (1) p. 1 lit. a) GDPR.

Further information on YouTube data protection is provided by Google under the following link: https://www.google.de/intl/de/policies/privacy/

3.3. Contacting

If you contact us by telephone, e-mail, post or in any other way with a request or if we contact you, we also process your personal data, e.g. name, address, telephone number as well as the contents of the message. These details are processed for the purpose of being able to deal with your enquiry correctly. In addition, your data may also be processed for statistical purposes. More details on this in the following. Your data will only be used to the extent necessary in each case. If necessary, e.g. because your enquiry concerns the ordering of printed materials held by another company of the STIHL Group, or within the framework of the customer support service, your data will be passed on to this other company of the STIHL Group if and insofar as this is necessary to process your request. The legal basis for the processing of the data described above is Art. 6 Para. 1 lit. b GDPR, insofar as this is connected with the initiation or fulfilment of a contract with you, e.g. in the case of complaints, or on the basis of Art. 6 Para. 1 lit. f GDPR, as we have a legitimate interest in corresponding with you on business.

Communication data is deleted insofar as it is no longer required for exchanges with you and any statutory retention periods have expired.

Telephone conversations with our customer support will only be recorded with your prior consent for quality assurance or training purposes and deleted after a maximum of 90 days. Consent to the recording of calls is, of course, voluntary. You can revoke your consent at any time with future effect, for example by asking the employee on the phone to stop the recording. The processing of your data is based on your consent (Article 6 para. 1 lit. a GDPR).

We use service providers for our customer support services with whom corresponding order processing contracts have been concluded in accordance with Art. 28 GDPR.

If necessary to process your inquiry, your data will be passed on to other companies of the STIHL Group or to the responsible STIHL dealer. In order to be able to evaluate the urgency of your inquiry, we use a tool from the provider Microsoft Ireland Operations Limited, which allows us to evaluate certain keywords for this purpose. Only the subject and content of your message are transmitted. We do not transmit any personal data to the provider unless you provide this yourself as part of your request.

3.4. Statistical evaluation

STIHL also processes the above data to create statistical evaluations. These serve the purpose of improving and further developing the products and services offered by STIHL, in particular with regard to product characteristics, product safety, service quality, marketing and with regard to optimising the dealer network. For the preparation of the evaluations, personal data will only be used to the extent necessary for the above purposes. As far as possible, the data is pseudonymised or anonymised before it is used. In order to increase the statistical significance of the evaluations, STIHL also combines the aforementioned data with information on meteorological and/or geographical characteristics from other data sources such as weather and map services. The results of the evaluations are used exclusively in aggregated form and are also passed on in this form and for the aforementioned purposes to other companies affiliated with STIHL if necessary. Customer-related evaluations are not carried out unless the customer has expressly consented to this. The legal basis for the processing of the data described above is Article 6 (1) sentence 1 lit. f GDPR.

4. Transmission of data

Certain processing, such as customer support, is carried out by companies within the STIHL Group. Therefore, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of a contract processing agreement. In other cases, for example for the analysis of aggregated data for the purpose of market research, Art. 6 (1) lit. f GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes.

We do not usually pass on your data to recipients based outside the European Union or the European Economic Area. Insofar as this is necessary from a technical point of view, the data transfer is encrypted and based on so-called standard contractual clauses of the EU Commission.

5. Your Rights

5.1. Overview

In addition to the right to revoke the consent you have given to us, you have the following further rights if the respective legal requirements are met:

  • Right to information about your personal data stored by us according to Art. 15 GDPR;
  • Right to have inaccurate data corrected or correct data completed in accordance with Art. 16 of the GDPR,
  • Right to have your data stored by us deleted in accordance with Art. 17 GDPR insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be complied with,
  • Right to restrict the processing of your data according to Art. 18 GDPR,
  • Right to data portability according to Art. 20 GDPR,
  • Right to complain to a supervisory authority.

5.2. Right of objection

Under the conditions of Art. 21 (1) GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in this privacy notice that are processed on the basis of Article 6 (1) (f) of the GDPR. Unlike the specific right to object to data processing for marketing purposes, we are only obliged to implement such a general right of objection under the GDPR if you provide us with reasons of overriding importance.

6. Amendments to this declaration

We revise this data protection information when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website. You should therefore visit this website regularly to find out about the current status of the data protection information.