(As of 18 March 2024)
We are providing the following information to inform you about how ANDREAS STIHL AG & Co. KG (hereinafter referred to as “STIHL”) processes personal data in accordance with the General Data Protection Regulation (GDPR) on the website www.markenwelt.stihl.de, as well as in sales of tickets and vouchers for visiting STIHL Brand World. If you have any questions or comments about this data protection information, you can send them to us at any time via the email address specified under Section 2.
1. Overview
The following data protection information includes details about the nature and scope of STIHL’s processing of what is referred to as personal data. Personal data are information that are or can be directly or indirectly attributed to you.
2. Name and contact details of the Controller and the Data Protection Officer
This data protection information applies to data processing by ANDREAS STIHL AG & Co. KG, Badstraße 115, 71336 Waiblingen, Germany (the “Controller”) in the context of the website www.markenwelt.stihl.de as well as sales of tickets and vouchers for visits to STIHL Brand World. The STIHL Data Protection Officer can be contacted at the above address, FAO: Data Protection Department or at datenschutz-dv@stihl.de.
3. Purposes of data processing, legal bases and legitimate interests pursued by STIHL or a third party as well as categories of recipients
3.1. Accessing our website
When you visit our website, the browser on your end device automatically sends information to the server of our website and temporarily saves it in a “log file”. The following information is also collected without your intervention and stored until it is deleted automatically:
The legal basis for processing the IP address is point f of Article 6(1) GDPR. Our legitimate interest arises from the data collection purposes listed below.
We use the IP address of your end device and the other data listed above for the following purposes:
The data are stored for a period of 7 days and then automatically erased. We also use cookies, analysis tools and targeting methods for our website, as described in more detail in section 3.4. below.
3.2. Ticket and voucher purchases for visiting STIHL Brand World
If you purchase tickets or vouchers from us for a visit to STIHL Brand World, we process the data required to conclude and execute the contract with you. This includes the following data:
We use the pretix service from our service provider rami.io GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg, Germany, to carry out the purchase. A data processing agreement has been concluded with this service provider in accordance with Article 28 GDPR. Information on data protection at pretix can be found at: https://pretix.eu/about/en/privacy
We also pass the required payment data on to a payment service provider commissioned by us, in accordance with the payment method you have selected.
The legal basis for the processing and disclosure of your personal data is point b of Article 6(1) GDPR. Processing and forwarding are absolutely necessary for the performance of the purchase contract. We are also obliged to process your email address on the basis of a requirement in the German Civil Code (Bürgerliches Gesetzbuch, BGB) to send an electronic order confirmation (point c of Article 6(1) GDPR).
3.3. Online presence and website optimisation
3.3.2. Web analysis with Google Analytics
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). The data controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, 1600. Google Analytics uses cookies that allow us to analyse your use of the website. The information generated by the cookie about your use of the website is usually transmitted to and stored on Google servers in the United States.
The STIHL website uses Google Analytics with the “anonymize IP” extension. This means that your IP address is collected by the Google Analytics cookie and truncated by Google within European Union member states or in other signatory states to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there.Google will use this information on behalf of STIHL for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet use. The IP address transmitted by your browser in connection with Google Analytics will not be associated with any other data held by Google.
The legal basis for the processing of personal data using cookies is point a of Article 6(1) GDPR. You can withdraw this consent at any time as described above by adjusting your cookie preferences.
You can also delete cookies that have already been stored at any time, in your browser settings. However if you do so, you may no longer be able to make full use of all the functions of the website.
You can find more detailed information on the Terms of Use and Privacy Policy at https://www.google.com/analytics/terms/gb.html or at https://support.google.com/analytics/answer/6004245?hl=en.
3.4. Contacting us
If you contact us with a request by telephone, email, post, or other means, or if we contact you, we will also process your personal data, e.g. name, address, telephone number and content of the communication. This information will only be processed for the purpose of handling your request correctly. We will only use your data to the extent necessary to fulfil the purpose for which it was collected. If necessary, e.g. because your request concerns the ordering of printed matter held by another STIHL Group company, or as part of our customer support service, your data will be passed on to this other STIHL Group company if and to the extent that this is necessary for processing your request. The legal basis for the processing of the data described above is point b of Article 6(1) GDPR, insofar as this is connected with the initiation or fulfilment of a contract with you, e.g. in the case of complaints, or on the basis of point f of Article 6(1) GDPR, as we have a legitimate interest in communicating with you for business purposes.
Communication data will be deleted when it is no longer required for communication with you and once any statutory retention periods have expired.
Telephone calls with our customer support team will only be recorded with your prior consent for quality assurance or training purposes, and will be deleted after a maximum of 90 days. Consent to the recording of the call is, of course, voluntary. You can withdraw consent at any time with future effect, for example by asking the employee on the phone to stop recording. Your data is processed on the basis of your consent (point a of Article 6(1) GDPR).
We use service providers for our customer support services with whom we have concluded corresponding data processing agreements pursuant to Article 28 GDPR.
3.5. Statistical evaluation
STIHL also processes the above-mentioned data to create statistical evaluations. These are used for the purpose of improving and further developing the products and services offered by STIHL, particularly with regard to product characteristics, product safety, service quality, marketing and optimisation of the dealer network. Personal data will only be used to create evaluations to the extent necessary for the above purposes. As far as possible, the data is pseudonymised or anonymised before it is used. To increase the statistical significance of the evaluations, STIHL also combines the above-specified data with information on meteorological and/or geographical characteristics from other data sources, such as weather and map services. The results of evaluations are used exclusively in aggregated form, and may also be passed on to other companies affiliated with STIHL in this form and for the aforementioned purposes. Customer-specific evaluations shall not take place unless the customer has expressly consented to this. The legal basis for processing of the data described above is point f of Article 6(1) (1) GDPR.
4. Transfer of data
Certain processing operations such as customer support are performed by companies within the STIHL Group. As such, data are regularly transferred within the corporate group for this purpose. As a rule, the transfer of the data takes place on the basis of a data processing agreement. In other cases, for example for analysing aggregated data for market research purposes, the legal basis for the transfer of data is point f of Article 6(1) GDPR, wherein our legitimate interest lies in efficient design of our processes.
If we transfer your data to recipients located outside the European Union or the European Economic Area, data transfer takes place on the basis of an adequacy decision by the EU Commission or on the basis of suitable guarantees, in particular standard contractual clauses of the EU Commission.
5. Your rights
5.1. Overview
In addition to the right to withdraw the consent you have given us, you also have the following rights if the respective legal requirements are met:
5.2. Right to object
Under the conditions set forth in Article 21(1) GDPR, a data subject may object to data processing on grounds relating to their particular situation.
The above general right to object applies to all processing purposes described in this data protection information which are based on point f of Article 6(1) GDPR. Unlike the specific right to object to data processing for advertising purposes, we are only obliged to implement such a general objection under the GDPR if you can cite reasons of overriding importance.
6. Amendments to this declaration
We will amend this data protection information in the event of changes to this website or due to other events that make amendment necessary. However, the latest version of the declaration will always be available on this website. We therefore recommend that you visit this website regularly to check the current status of the data protection information.