New Privacy Notice

We are updating the legal documents and this is available as a preview.

STIHL Digital Platform and STIHL Solutions

Privacy Notice

Version 3 of 03.05.2024

Effective from 26.07.2024

Market: Canada

We are pleased to inform you about the processing of your personal information in this Privacy Notice. Below, you will find information on how we collect, use, communicate, or otherwise process your personal information, the reasons why we process your personal information, and the data subject rights you have in this regard.

If you would like further information not contained in this Privacy Notice, you can contact us and our Data Protection Officer at any time via the contact details stated in section 2 of this Privacy Notice.

CONTENTS

This Privacy Notice is divided into the following topics:

STIHL Digital Platform and STIHL Solutions. 1

1 PRIVACY NOTICE SCOPE. 2

2 RESPONSIBILITY AND DATA PROTECTION OFFICER. 2

3 GENERAL INFORMATION ON THE PROCESSING OF YOUR PERSONAL INFORMATION. 3

4 SAFEGUARDING PERSONAL INFORMATION. 4

5 General processing - STIHL Digital Platform.. 5

6 Your STIHL Account on the STIHL Digital Platform.. 8

7 Processing your personal information with the STIHL connected Solution. 10

8 PROCESSING OF YOUR PERSONAL DATA IN RELATION TO THE “MY STIHL” SOLUTION. 17

9 STORAGE PERIOD. 24

10 RECIPIENTS OF YOUR PERSONAL INFORMATION. 24

11 TRANSMISSION OF YOUR PERSONAL INFORMATION OUTSIDE OF YOUR JURISDICTION OF RESIDENCE. 25

12 YOUR RIGHTS AND ASSERTING THEM.. 25

13 AMENDMENTS TO THIS PRIVACY NOTICE. 27

1 PRIVACY NOTICE SCOPE

In this Privacy Notice, we will inform you about the processing of your personal information in connection with the STIHL Digital Platform and the applications and services offered on the STIHL Digital Platform ("Solutions"). You can access our Solutions via the STIHL Digital Platform. To use the STIHL Digital Platform and Solutions, you first need to register and create a user account ("STIHL Account").

In order for you to obtain relevant information quickly and clearly, we have set this Privacy Notice out into individual chapters. We will inform you about the processing of your personal information (and in addition to the relevant processing as set out below) in connection with the STIHL Digital Platform and the Solutions as follows:

STIHL Digital Platform: For information about the processing associated with the access and usage of the STIHL Digital Platform, please refer to section 11.4 of this Privacy Notice
STIHL Account: For information about the processing associated with your STIHL account, please refer to section 5 of this Privacy Notice.
STIHL connected: For information about the processing associated with STIHL connected please refer to section 6 of this Privacy Notice.
MY STIHL: For information about the processing associated with MY STIHL please refer to section 7 of this Privacy Notice.

In this Privacy Notice, we inform you about the processing of your personal information in line with the requirements of the privacy and data protection laws and regulations applicable in your province or territory of residence (including the federal Personal Information Protection and Electronic Documents Act, (SC 2000, c. 5), the Quebec Act respecting the protection of personal information in the private sector (CQLR c. P-39.1), the Alberta Personal Information Protection Act (SA 2003, c. P-6.5), and the British Columbia Personal Information Protection Act (SBC 2003, c. 63)).

We will inform you about the processing of your personal information relating to the web addresses (Uniform Resource Locator, "URL") you access. Should you access the STIHL Digital Platform or the Solutions via a URL that is intended to serve a different jurisdiction and its legal requirements (i.e. you, as an example, instead of accessing the STIHL URL ending in “.co.ca”, access a STIHL URL ending in “.de”) may end up not being informed in accordance with applicable local legal requirements. For data protection reasons, we do not determine your place of residence ("localisation") to determine the law applicable to you.

2 RESPONSIBILITY AND DATA PROTECTION OFFICER

2.1 Entities responsible for your personal information

The following entities process your personal information in connection with the STIHL Digital Platform and the Solutions:

STIHL direct GmbH ("STIHL direct")

Postal address: Badstr. 115, 71336 Waiblingen, Germany

Email: info@stihl.de

District Court of Stuttgart, HRB 773503, VAT ID No. DE329143527

and

ANDREAS STIHL AG & Co. KG ("ANDREAS STIHL")

Postal address: Badstr. 115, 71336 Waiblingen, Germany

Email: info@stihl.de

Limited partnership: District Court of Stuttgart, HRA 260269

STIHL Aktiengesellschaft: District Court of Stuttgart, HRB 263722

VAT ID No. DE147330096

(together "we", "us").

We have an agreement in place with one another relating to our joint processing of your personal information.

We may also share, to the extent permitted by applicable law, your personal information with companies who are part of the STIHL Group, and that are not part of the STIHL Group. These companies may process your personal information either for their own purposes or on our behalf.

2.2 Data Protection Officer

STIHL direct and ANDREAS STIHL have a joint Data Protection Officer, who is responsible for the protection of personal information. You can reach the Data Protection Officer by post at the addresses specified above for the controllers, addressed to "zu Hd. Abteilung Datenschutz" or email to privacy_dpo@stihl.com, if you have questions or complaints about this Privacy Notice or our personal information practices.

3 GENERAL INFORMATION ON THE PROCESSING OF YOUR PERSONAL INFORMATION

3.1 Processing of your personal information

When we use the term “personal information” in this Privacy Notice, we mean all information that relates to you and allows you to be identified directly or indirectly.

Personal information includes, for example, your name, email address or postal address. Your personal information also includes all data that is linked or relates to you, such as data that will be processed when you use the Solutions. Data that does not relate to you we shall refer to as anonymous data. The data protection regulations and this Privacy Notice do not apply to such data.

For example, by processing your personal information, we mean its collection, use, communication, storage or erasure.

3.2 Legal basis for processing (overview)

We process your personal information only if we can base the processing on a legal basis or if such is lawful in accordance with the applicable data protection regulations, i.e. that the processing is permissible within the scope of the law. We will only process your personal information when you have given us your express or implied consent to the processing of your personal information for one or more specific purposes, unless one or more exceptions apply under applicable law that allow us to process personal information without your consent.

Further information on the processing we undertake and the relevant lawful basis on which we process your personal information, can be found below in this Privacy Notice.

3.3 Personal information we process

We process the personal information that you provide to us, that we collect with your consent, and that we receive from third parties.

You are not obligated to provide us with your personal information. However, the processing of certain personal information may be necessary to enable us to offer you the STIHL Digital Platform and the Solutions.

Personal information you provide to us

We process the personal information you provide to us. For example, when you call or contact us and provide us with certain personal information in this way. You can provide us with further personal information when you select certain settings or configure a Solution according to your needs. We collect and process this data to enable you to use the STIHL Digital Platform and Solutions. If you do not provide us with certain information, the use or functionality of the STIHL Digital Business Platform and Solutions may in part stop or be impaired.

Personal information we collect

To the extent permitted by applicable law, and, when required, with your consent, we may collect certain personal information and process it when you use the STIHL Digital Platform and the Solutions. This includes, for example, data such as your IP address, certain login data and data that will be processed so that we can technically provide you with the STIHL Digital Platform and the Solutions.

Personal information we receive from third parties

In some cases, we receive your personal information from indirect sources – i.e. not directly from you. This may be the case, for example, if personal information about you is provided to us by third parties. We work with companies that provide services to us and who in turn provide us with personal information about you. These include, for example, payment service providers or providers of “app stores” through which you can purchase our Solutions.

3.4 Limits on Collection and Processing Personal Information

We will not collect personal information indiscriminately but will limit collection of personal information to ‎‎that which is reasonable and necessary, as set out in this Privacy Notice. We will also collect personal information as required or authorized by law.‎

We will only use or disclose your personal information for the purposes set out in this Privacy Notice, and as required or authorized ‎‎by law.‎

4 SAFEGUARDING PERSONAL INFORMATION

We will take reasonable physical, ‎‎organizational and electronic security arrangements to prevent unauthorized access, collection, use, ‎‎disclosure, copying, modification, disposal or similar risks with respect to the personal information in our custody or control.‎

We will take reasonable measures, through contractual or other reasonable means, to ensure that the suppliers and agents who ‎assist ‎in providing services, as described in this Privacy Notice, implement a ‎‎comparable level of protection.‎

However, understand that confidentiality and security are not assured when information is transmitted through e-mail, the internet, or ‎‎other wireless communication.‎

5 General processing - STIHL Digital Platform

5.1 Visiting the STIHL Digital Platform website

When accessing our website, the browser used on your device automatically sends information to the server of our website and temporarily saves it in a ‘log file’.

If you would like to be informed about the cookies used by us on our website, you can find more information https://app.stihl.com/en-ca/legal/cookie-notice.

Categories of personal information

The following information will be processed when the website is accessed:

The IP address of the requesting Internet-enabled device;
The date and time, and time of access;
The name and URL of the retrieved file;
The website/application from which access was made (referrer URL); and
The browser you are using and, if applicable, the operating system of your Internet-enabled computer and the name of your access provider.

Purpose

The processing of your personal information serves the following purpose(s):

ensuring a smooth connection;
ensuring a comfortable use of our website/application; and
evaluating system security and stability.

Legal basis

The processing of your personal information is necessary to enable you to access the website, initiate or execute contracts with us, and to ensure the performance, consistent functionality and security of our website and systems. If you do not consent to the processing of your personal information, we will not be able to provide you with these services.

5.2 Support and Communication

If you have any questions or if you cannot use STIHL Digital Platform and the Solutions as we have described, you may contact us at any time by email, post, telephone, via contact forms or by other means. We shall usually respond to you through the medium through which you initiated contact.

In certain cases, we shall contact you independently, in particular to provide you with important information about the STIHL Digital Platform and the Solutions. This is usually done by email.

Should you subscribe to the STIHL Group's newsletter, then we shall provide you with further information regarding the processing of your personal information in relation to this subscription.

Categories of personal information

The following personal information will be processed when communicating with you:

your contact details such as telephone number or email address;
any personal information as part of communicating with you, including, where applicable, telephone conversations with you;
data relating to your request or concerns, such as the subject of your request or our communication with you; and
the data necessary to clarify your request.

Purpose

The processing of your personal information serves the following purpose(s):

communicating with you when you have raised questions with us about the STIHL Digital Platform or the Solutions, with a request for support or with other concerns;
handling and responding to your enquiries and concerns;
communicating with you outside of enquiries and concerns, for example, for information purposes or for the fulfilment of legal or contractual obligations;
should we record telephone calls, this is done for quality assurance and training purposes; and
improving our support.

Legal basis

The communication with you and our support and performances within the scope of the support are required to fulfil the contract for STIHL Digital Platform or the Solutions or to conclude a contract for the use of STIHL Digital Platform or Solutions.

Communication with you is necessary to ensure the security and functionality of the STIHL Digital Platform or Solutions. This also means that we will further develop the STIHL Digital Platform or Solutions based on your feedback and experience. If necessary, we will ask for your opinion and assessment of our offers and services.

We provide you with certain support services outside of an existing contractual relationship.

We base the processing in connection with our support, which we provide to you outside of an existing contractual relationship.

For certain processing of your personal information, we will obtain your consent in accordance with applicable law, to the extent this is necessary.

This applies in particular to the recording of telephone calls.

5.3 Product development and statistical analysis

We process certain personal information in order to improve and further develop the STIHL Digital Platform, the Solutions and other offers and services (or our support). In particular, this relates to data on your use of the STIHL Digital Platform and the Solutions as well as data related to, among other things, the properties, security and quality of our offerings and services.

As far as possible, the data will be pseudonymised or anonymised prior to processing for product development and statistical evaluation. If the data is anonymised (meaning that such data irreversibly no longer allows the person to be identified, directly or indirectly), it is no longer personal information.

Categories of personal information

The following information is processed in the context of product development and statistical analysis:

data on the use of STIHL Digital Business and Solutions;
data on the properties, security and quality of the STIHL Digital Platform and Solutions; and
other information we have, for example, from support requests received from you.

Purpose

The processing of your personal information serves the following purpose or purposes:

improvement and further development of the STIHL Digital Platform and Solutions;
product development, including artificial intelligence (machine learning);
market research; and
ensuring the security and quality of the STIHL Digital Platform and Solutions.

Legal basis

We will only process your information as described in this section with your consent, unless your data has been anonymised as set out above.

(a) Google Analytics web analysis

We use the Google Analytics analysis tool on our website. Google Analytics is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics with the extension "anonymize IP". This means that your IP address will be shortened before it is sent to Google in the United States, so that Google will not receive your full IP address from us.

You can learn more about how Google uses the information collected through this service here: www.google.com/policies/privacy/partners/.

Categories of personal data
The following information is processed in connection with the use of Google Analytics:
Your IP address
Unique user ID assigned by the browser
The user's click behaviour on the website
The subpages that the user accesses
Browser type, URL, screen resolution
Time stamp

Purpose

We use Google Analytics to analyse your use of the website, to obtain reports about web page activities, and to obtain other Google services associated with your use of our website and other Internet use.

This will enable us to continuously improve our website, its user-friendliness and our offering, and to tailor them to suit your needs and interests.

Legal basis

Your personal data are processed based on your consent given to us in the Privacy Preference Centre. You can access this via the Cookie Notice.
The use of Google Analytics requires the setting of a cookie. To that end, if required by law we shall obtain your consent in the Privacy Preference Centre. For more information about our cookies, see our Cookie Notice.

Storage period

We shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 7 of this Privacy Notice.

The Privacy Policy for Google Ltd.’s Google Analytics can be found here:

https://policies.google.com/privacy?hl=en

6 Your STIHL Account on the STIHL Digital Platform

6.1 Register your STIHL Account

The registration of a STIHL Account is necessary for you to use the STIHL Digital Platform, the Solutions and other offerings and services of the STIHL Group. The STIHL Account is your user account with which you log in after registration with the STIHL Digital Platform, the Solutions and other offers and services of the STIHL Group.

If the information provided by you during registration changes, you can change such information at any time on the STIHL Digital Platform, if this is provided for.

As part of the registration process, we will inform you which information is required for registration and which is voluntary.

Categories of personal information

The following information is processed when registering a STIHL Account:

first name, surname, title, email address, set password, date of birth;
contact and address data;
your country and language;
date and time of registration; and
the version of the Terms of Use that you accept and the date and time of your consent.

Purpose

The processing of your personal information serves the following purpose or purposes:

Setting up and providing a STIHL Account as a user account to use the STIHL Digital Platform, the Solutions and other offerings and services of the STIHL Group.

Legal basis

The processing of your personal information is necessary for setting up your STIHL Account and making it permanently available to you as your user account for the STIHL Digital Platform, Solutions and other offerings and services of the STIHL Group.

The processing of your personal information, which is not strictly necessary for setting up your STIHL Account and of which you voluntarily inform us, yet is required, for example, so that we can improve your experience with STIHL.

6.2 Logging in with your STIHL Account with the STIHL Digital Platform and the Solutions

You use your STIHL Account to log into the STIHL Digital Platform, the Solutions and other offerings and services of the STIHL Group.

Categories of personal information

The following information will be processed when logging in with the STIHL Account:

Your STIHL Account;
The password you have set for your STIHL Account.

Purpose

The processing of your personal information serves the following purpose or purposes:

logging in and authentication with the STIHL Digital Platform, Solutions and other offerings and services of the STIHL Group;
access to the data stored by you with the STIHL Digital Platform, Solutions and other offerings and services of the STIHL Group; and
protecting your account and data from unauthorised access.

Legal basis

The processing of your personal information is necessary for enabling you to log into the STIHL Digital Platform, the Solutions and other offerings and services of the STIHL Group.

6.3 Invitation to register a STIHL Account

You can be invited by existing users of STIHL Digital Platform or Solutions to the STIHL Digital Platform and Solutions. If you are invited, you will receive an email from us with a link to register a STIHL Account. If you decide to create a STIHL Account, the information the inviting user provided about you may already be pre-populated in certain sections of account registration.

If you do not create a STIHL Account, we will delete the data about you, provided to us by the inviting user.

Categories of personal information

The following information shall be processed in connection with the invitation:

the first name, surname, title, email address provided by the inviting user;
the country and language related to the inviting user; and
date and time of invitation.

Purpose

The processing of your personal information serves the following purpose or purposes:

The opportunity to invite you to the STIHL Digital Platform and Solutions.
You can be invited to the STIHL Digital Platform and Solutions, among other things, so that you can use certain functions linked to other users after you have created a STIHL Account, for example within the framework of the Solutions. For example, you can become a member of organisations or teams within the framework of Solutions.

Legal basis

The processing of your personal information is necessary to assist you in creating a STIHL account, for example when a dealer sends you an invitation as part of the setup process for a STIHL product.

The processing of your personal information is necessary in order to be able to invite you to the STIHL Digital Platform or the Solutions. This is a feature that we offer existing users so that, for example, you can become a member of an organisation of the existing user if you want to.

7 Processing your personal information with the STIHL connected Solution

7.1 STIHL Smart Device - STIHL Smart Connector

STIHL Smart Connectors include the STIHL Smart Connector, the STIHL Smart Connector 2 A, and all future generations of STIHL Smart Connectors.

If you do not connect your STIHL Smart Connector or several STIHL Smart Connectors to your STIHL Account via the STIHL connected app or the STIHL connected box, STIHL will not process data related to your STIHL Smart Connector and your device, which we assign to you. In this case, we do not process any personal information from you.

7.2 STIHL Smart Device - STIHL Smart Batteries

STIHL Smart batteries include the generation 1 and 2 STIHL smart batteries, as well as all future generations.

If you do not connect your STIHL Smart Batteries to your STIHL connected app or STIHL connected box to your STIHL Account, STIHL will not process any data related to your STIHL Smart Batteries, which we assign to you. In this case, we do not process any personal information from you.

7.3 STIHL Smart Device - STIHL connected box

The STIHL connected box transmits the operating data of your devices and data of the STIHL Smart Batteries directly to STIHL via a LAN or WLAN network. A connection between your STIHL Smart Connector or your STIHL Smart Battery and the STIHL connected app is not required when using the STIHL connected box to transfer the data to STIHL, as the connection can be established solely via the STIHL connected box. The data transmitted via the STIHL connected box is immediately available in your STIHL connected app or your STIHL connected portal after transmission.

If you have not configured the STIHL connected box via the STIHL connected portal and linked it to a STIHL account, no data will be transmitted to us. In this case, we do not process any personal information from you.

7.4 STIHL Smart Device - STIHL connected mobile box

With the STIHL connected mobile box, you do not need a LAN or WLAN network, because the runtime and position data are transmitted via the mobile network or via Bluetooth® Low Energy (BLE). For the use of the STIHL connected mobile box you need a Mini-SIM card with separate mobile contract (not included in the scope of delivery).

In connection with the transmission of data over the mobile network of the mobile telecommunications provider chosen by you, the processing of personal information by the mobile telephony provider chosen by you occurs. Information on the processing of personal information in connection with the transmission of data over the mobile network can be found regularly in the Privacy Notice of your mobile provider.

If you have not configured the STIHL connected mobile box and linked it to a STIHL Account, no data will be transmitted to us. In this case, we do not process any personal information from you.

7.5 STIHL connected app

If you connect your STIHL Smart Devices, such as your STIHL Smart Connector or your STIHL Smart Batteries to the STIHL connected app and have logged in to the STIHL connected app with your STIHL Account, data will be transmitted to us and processed by us.

In relation to the processing of your personal information in connection with the STIHL connected app, we differentiate according to the functions of the STIHL connected app.

(a) Registering a STIHL Account and logging in to the STIHL connected app

With regard to the processing of your personal information in connection with the registration of a STIHL Account and logging into the STIHL connected app, we refer to section 5 of this Privacy Notice.

(b) Processing data of the Smart Connectors in the STIHL connected app

If you connect your STIHL Smart Connector or several STIHL Smart Connectors via the STIHL connected app to your STIHL Account, we process data related to your STIHL Smart Connector and your device, which we assign to you. In this case, we process personal information from you.

Categories of personal information

The following information is processed when connecting STIHL Smart Connectors to a device and your STIHL connected app and linked to your STIHL Account:

technical information of the STIHL Smart Connectors (e.g. Mac address, software version);
technical information of the connected machines (e.g. machine last seen, tool id);
usage data of the connected machine (e.g. runtime, error event, servicing event);
Runtime information and runtime analysis (only with STIHL Smart Connector 2 A); and
date and time of data collection.

Purpose

The processing of your personal information serves the following purpose or purposes:

identifying and ensuring the functionality of your STIHL Smart Connectors;
ensuring adequate use of STIHL connected fleet management in relation to device usage, reviewing operational readiness, (run-)time-based control of servicing instructions; and
ensuring adequate customer support.

Legal basis

The processing of your personal information is necessary for enabling your use of the STIHL connected app according to the features offered in connection with the STIHL Smart Connectors.

(c) Processing of data from STIHL Smart Batteries in the STIHL connected app

If you connect your STIHL Smart Batteries to your STIHL Account via the STIHL connected app, we process data related to your STIHL Smart Batteries, which we assign to you. In this case, we process personal information from you.

Categories of personal information

When STIHL Smart Batteries are connected to your account, battery-specific usage data are associated with your account. These data are:

technical information of STIHL Smart Batteries;
technical information of the connected machines;
usage data of the connected battery; and
date and time of data collection.

Purpose

The processing of your personal information serves the following purpose or purposes:

identifying and ensuring the functionality of your STIHL Smart Batteries;
ensuring adequate use of STIHL connected fleet management in relation to battery usage, reviewing operational readiness, (run-) time-based evaluation possibility in relation to battery usage; and
ensuring adequate customer support.

Legal basis

The processing of your personal information is necessary for enabling your use of the STIHL connected app according to the features offered in connection with the STIHL Smart Batteries.

(d) Nearby Function

If you are logged in with your STIHL Account in the STIHL connected app and are near STIHL Smart Connectors or STIHL Smart Batteries, which you have assigned to your organisation, these STIHL Smart Connectors or STIHL Smart Batteries will be displayed in the STIHL connected app under the ‘Nearby Function’.

Data is not transmitted to us or processed by us as part of the Nearby Function. The following explanations are therefore only intended to better understand the Nearby Function. If you have any questions about the Nearby Function or specifically the processing of data in the context of the Nearby Function, we are of course at your disposal.

Categories of personal information

The following information is processed in the context of the Nearby Function:

location information of your smartphone (if enabled);
designation of the STIHL Smart Connectors that are close to you and within range of the Bluetooth® technology used; and
dates and times of data transfer.

Purpose

The purpose of the processing of the data shall be for the purpose of:

displaying the position of your STIHL Smart Connectors or Smart Batteries on a map; and
using the digital fleet management.

(e) Geo-position/ Location data

If you have activated this in your STIHL connected app, we process the data collected by the STIHL Smart Connector or the STIHL Smart Battery linked to the geo-position of your connected mobile device.

If you have linked your STIHL account to a STIHL Smart Connected Box, the STIHL connected box location will be transmitted when the data of your STIHL Smart Connector are synchronised - if you have stored them accordingly.

If you have activated this and linked your STIHL Account to a STIHL connected mobile box, the STIHL connected mobile box location will be transmitted when the data of the STIHL connected mobile box - and thus the data of the STIHL Smart Connectors connected to the STIHL Connect - are synchronised.

Categories of personal information

The following information will be processed if you have activated or stored it accordingly:

your location information based on the location of the mobile device you are linking;
the location of your STIHL connected box;
location information of your STIHL connected mobile box; and
date and time of data transfer.

Purpose

The processing of your personal information serves the following purpose or purposes:

displaying the position of your STIHL Smart Connectors or the STIHL connected (mobile) box on a map; and
using the digital fleet management.

Legal basis

The processing of your geo-position/location data will only take place if you have activated the corresponding function, have stored the corresponding data or ask us to activate this function.

(f) Your STIHL specialist retailer

If you have stored data for a STIHL specialist retailer for STIHL connected and have granted it a corresponding permission in the STIHL connected portal, certain data will be transmitted to the specialist retailer you have input.

At no time will images or personal notes, that you have stored in your STIHL Account or that you have uploaded, be forwarded. By configuring the STIHL connected app and the STIHL connected portal, we ensure that you always have transparency and control over the data transmitted to the specialist retailers.

You also have the possibility to forward specific data, such as device-specific data, directly to your specialist retailer by means of a contact form.

Categories of personal information

The following information will be processed:

information regarding your STIHL Account; and
usage data and events of STIHL Smart Devices filed with the specialist retailer (depending on the rights you have granted to your STIHL specialist retailer).

Purpose

The processing of your personal information serves the following purpose or purposes:

closer contact with your specialist retailer so that they can optimally support you with service offers (e.g. in the case of repairs and servicing).

Legal basis

The processing of your personal information is necessary, as far as you decide to input specialist retailers, so that you can be supported by them in the best possible way. The data provided to the specialist retailer is limited to what is necessary for this purpose and you have control over whether you want to input a specialist retailer.

(g) Servicing Management

As part of servicing management, you can manage the servicing of the equipment you link. This allows you to use the service intervals recommended by us or to define your own service intervals. If you arrange for the servicing of a device or refer to you for servicing-related data, this information will be linked to your STIHL Account.

Categories of personal information

The following information will be processed:

customised service intervals; and
date and time of completion of a service.

Purpose

The processing of your personal information serves the following purpose or purposes:

documentation related to digital machine file (history of all events that occurred).

Legal basis

The processing of your personal information is necessary for enabling your use of the servicing function.

(h) Error Analysis and Tracking

In addition to processing your personal information to ensure the security and quality of our offerings and services, certain collected data will be transmitted to us as part of an extended error analysis if you have given a corresponding consent in the STIHL connected app.

In addition, if you have agreed to an extended collection of the data in the context of the error analysis, a precise error identification will be carried out.

Categories of personal information

The following information will be processed:

information on the device used (e.g. smartphone);
information on the location of use;
error log data;
usage analysis data; and
date and time of data transfer.

Purpose

The processing of your personal information serves the following purpose or purposes:

troubleshooting and ensuring support; and
app usage analysis.

Legal basis

The processing of your personal information will only take place if you have given your consent.

7.6 STIHL connected portal

The STIHL connected portal offers you functions that go beyond the scope of the STIHL connected app. Below we inform you about the processing of your personal information when using these additional functions. Please take into account the preceding section on the processing of your personal information within the STIHL connected app, which applies in an essentially comparable way as to the same functions in the STIHL connected portal.

(a) Creating an organisation and inviting members (e.g. employees)

You can create an organisation in the STIHL connect portal, for example, for your company. You can add members to this organisation, such as your employees.

Members are added by an invitation function. Further information on the processing of personal information within the scope of the invitation function can also be found below and above under section 5.3.

The creation and management of an organisation always requires connection with a STIHL Account that is used by you or another authorised person. The STIHL Account associated with the organisation can be changed. For more information on how to manage your organisation and grant rights within the organisation, see the STIHL Digital Platform Terms of Use in the Special Part related to STIHL Connected.

If you have added a person you have invited to your organisation, you can also assign them to a team within the organisation.

You also have the option to create teams without assigning members of the organisation to the teams you create, but instead you can assign the STIHL Smart Devices you have stored to a team.

Responsibility for personal information

The processing of the personal information of the members of your organisation is the responsibility of the entity behind the organisation, for example a company as a legal entity or yourself. This does not affect our responsibility, which is independent of and separate from your responsibility.

Categories of personal information

If the person you invite wants to join your organisation, that person must create a STIHL Account. For the processing of the personal information in the context of the registration for a STIHL Account, we refer to section 5 of this Privacy Notice.

The following information will also be processed:

organisation to which you add the member;
if applicable, information about the team to which you add the member; and
data about the STIHL Smart Devices.

Purpose

With this feature, we want to give you the opportunity to manage and group as a unit (team) the usage of your STIHL Smart Devices in relation to the members of your organisation or separately to the Smart Devices.

Legal basis

The processing of the data collected by the Smart Connectors and processed in the STIHL connected portal or the STIHL connected app is in conformity with previous statements. This shall apply in an essentially comparable way as to the processing of personal information in connection with the use of the STIHL connected app portal by the members of your organisation.

Please note previous information on your responsibility for the processing of personal information of the members of your organisation. If the members of your organisation are your employees, you may have to take into consideration special legal requirements regarding the processing of their personal information.

8 PROCESSING OF YOUR PERSONAL DATA IN RELATION TO THE “MY STIHL” SOLUTION

MY STIHL is a Solution which you can use via your mobile device (“Mobile App”) or your browser (“Web App”). This Privacy Notice applies to both Mobile App and Web App, which are together the “App”.

Please note that you can use the MY STIHL Web App and certain functionalities of the MY STIHL Mobile App only after you have logged in to MY STIHL with your STIHL Account. For information on the processing of personal data in connection with registering and logging in with your STIHL Account, see section 6 of this Privacy Notice.

8.1 Digital Tool Shed

Please note that the Digital Tool Shed functionality is available to you only after you have logged in to MY STIHL with your STIHL Account.

In the MY STIHL App you can manage your STIHL devices in the Digital Tool Shed. Besides your STIHL devices you can also include and manage other manufacturers’ devices in your Digital Tool Shed.

The Digital Tool Shed offers you a large variety of functionalities. Information on the processing of your personal data in connection with the various functionalities is set out below.

(a) Adding STIHL devices to the Digital Tool Shed

You can add STIHL devices to your Digital Tool Shed. To this end, you can manually input your STIHL devices and information on your STIHL devices in the Digital Tool Shed. In addition, you can also search our systems and our dealers’ systems for possible links between the email address you use for your STIHL Account and your STIHL devices. You can then add the data and devices linked to your email address to your Digital Tool Shed (please note that the email address that you specify for your STIHL Account and the email address that is linked to your devices must be identical).

Categories of personal information

The following information is processed when you add STIHL devices to the Digital Tool Shed:

Serial numbers
Your chosen name for the device (“nickname”) (optional information)
The setting of a service reminder, i.e. we recommend a service date for your device to you and you can determine whether and how you want to be reminded of this service date (optional information)
Purchase date of your STIHL device
Date on which you registered the device in the Digital Tool Shed

Purpose

The processing of your personal information serves the following purpose or purposes:

Setting up your device in the Digital Tool Shed to enable you to use additional functionalities built on setting up your device in the Digital Tool Shed
Information on the devices that you use helps us to understand which devices are of interest to you and how we can support you with the devices you use and other devices.

Legal basis

The processing of your personal information within the framework of setting up the device in the Digital Tool Shed is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. The contract on which we base the processing of your personal data is the Terms of Use concluded between you and us for the use of MY STIHL, including the functionalities offered by us.
We process your personal information in order to understand which devices are of interest to you and so that we can support you with the devices you use and other devices.

(b) Warranty extension

If you add your STIHL device to the Digital Tool Shed we offer you a warranty extension for your STIHL device, provided it is eligible for a warranty extension in your market.

The warranty extension is offered to you by the local STIHL company in your market. Therefore the terms of the local STIHL company apply to the warranty extension. These terms as well as the Privacy Notice of the of the local STIHL company are made available to you in MY STIHL for you to retrieve.

Please note that we may forward certain personal information that is necessary to conclude the warranty extension to your local STIHL company.

Categories of personal information

The following information is processed when checking a warranty extension and forwarding your personal data to your local STIHL company:

Serial numbers
Purchase date of your STIHL device
Data for the purposes of checking to what extent your device is eligible for a warranty extension; these may also be data relating to you
First name, last name, title, email address

Purpose

The processing of your personal information serves the following purpose or purposes:

Checking whether your STIHL device is eligible for a warranty extension
Forwarding your information to your local STIHL company to enable the warranty extension to be concluded

Legal basis

The processing of your personal information in the context of the warranty extension is necessary in order to take steps at your request prior to entering into a contract. The taking of steps prior to entering into a contract and the processing of your personal data occur in relation to the warranty extension.

(c) Adding other manufacturers’ devices to the Digital Tool Shed

You can add other manufacturers’ devices to your Digital Tool Shed.

Categories of personal information

The following information is processed when you add other manufacturers’ devices to the Digital Tool Shed:

Manufacturer of the device
Product category
Product name
Date on which you registered the device in the Digital Tool Shed
Your chosen name for the device (“nickname”) (optional information)
Purchase date (optional information)
Type of drive (optional information)
Date of the expiry of the warranty (optional information)

Purpose

The processing of your personal information serves the following purpose or purposes:

Setting up your device in the Digital Tool Shed to enable you to use additional functionalities built on setting up your device in the Digital Tool Shed
Information on the devices that you use helps us to understand which devices are of interest to you and how we can support you with the devices you use and other devices

Legal basis

We base the processing of your personal information on the following legal bases:

The processing of your personal information within the framework of setting up the device in the Digital Tool Shed is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. The contract on which we base the processing of your personal data is the Terms of Use concluded between you and us for the use of MY STIHL, including the functionalities offered by us.
We process your personal information in order to understand which devices are of interest to you and so that we can support you with the devices you use and other devices.

(d) Personalising and managing devices in the Digital Tool Shed

You can personalise and manage your devices stored in the Digital Tool Shed. For example, you can assign a “profile picture” to your device in the Digital Tool Shed and store documents of your choosing, for example invoices, linked to your device in the Digital Tool Shed.

If you have added a STIHL device to your Digital Tool Shed we make the appropriate instruction manual available to you for you to retrieve.

Categories of personal information

The following information is processed when you personalise and manage your devices:

Files that you have used to personalise your device in MY STIHL (e.g. pictures) or that you have added in the course of managing your device in MY STIHL and their file names
We collect information on how often you use this functionality. We anonymise this information and process only aggregate data, i.e. combined with other users' data, without any possibility of the identity of individual users being inferred.

Purpose

The processing of your personal information serves the following purpose or purposes:

Scope to personalise your device
Possibility to store and manage information and data related to your device

Legal basis

We base the processing of your personal information on the following legal bases:

The processing of your personal information within the framework of personalising and managing your device is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. The contract on which we base the processing of your personal data is the Terms of Use concluded between you and us for the use of MY STIHL, including the functionalities offered by us.
We process your personal information in order to understand which functionalities are of interest to our users.

(e) Servicing and service date reminder

In the Digital Tool Shed we offer you various functionalities in relation to the servicing of your devices.

For example, you have the option to retrieve service information on your devices and to be reminded of the service date recommended by us for your respective device.

If you enable the reminder feature for your device, we will remind you of a service date on your desired date and by your desired means of communication. You can choose whether you would like to be reminded by us via a “notification” within “MY STIHL” or also via email.

In addition, we provide you with the service logs for the devices you have stored in the Digital Tool Shed. These contain information on service steps taken by your STIHL dealer during a service appointment. You can also see the contact details of the dealer carrying out the inspection in the service logs.

If you want to have an inspection or arrange a service appointment, you can send an appointment request to your STIHL dealer in your MY STIHL App.

Categories of personal information

The following information is processed in the context of the servicing and the service date reminder features:

If you retrieve an instruction manual for your STIHL device or a service log, we collect information on how often you use this functionality. We anonymise this information and process only aggregate data, i.e. combined with other users' data, without any possibility of the identity of individual users being inferred.
If you want and enable a service date reminder, we process the date you specify for the reminder as well as information on the type of reminder you want
If you send an appointment request to your STIHL dealer via MY STIHL, we process your desired date, your message to the STIHL dealer (optional) and your desired service package (if available in your country)
We collect information on how often you use this functionality. We anonymise this information and process only aggregate data, i.e. combined with other users’ data, without any possibility of the identity of individual users being inferred.

Purpose

The processing of your personal information serves the following purpose or purposes:

Scope to personalise your device
Possibility to store and manage information and data related to your device

Legal basis

We base the processing of your personal information on the following legal bases:

The processing of your personal information within the framework of the servicing and service date reminder features is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. The contract on which we base the processing of your personal data is the Terms of Use concluded between you and us for the use of MY STIHL, including the functionalities offered by us. Your personal data is forwarded to your chosen STIHL dealer in order to take steps prior to entering into a contract in connection with an inspection and the servicing of your STIHL device.
We process your personal information in order to understand which functionalities are of interest to our users.

8.2 Feedback on MY STIHL

You have the option to give us feedback on MY STIHL. To this end, please use the free text field provided in MY STIHL as well as the evaluation options provided.

Categories of personal information

The following information is processed in connection with your feedback:

Your feedback and your evaluation

Purpose

The processing of your personal information serves the following purpose or purposes:

Your feedback and your evaluation helps us to further develop MY STIHL to suit your needs

Legal basis

We base the processing of your personal information on the following legal basis:

We process your personal information in order to understand which products suit your needs and which ones we will further develop for you.

8.3 Your STIHL dealer

You have the option to search for STIHL dealers near you and to store STIHL dealers as your “favourite dealers” in MY STIHL. You can identify a favourite dealer as your “main dealer”.

You have the option to give us feedback on your experience with your STIHL dealer and to rate the dealer.

In order to show you the STIHL dealers near you we embed maps from Google Maps. Google Maps is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (together with other Google companies of Alphabet Inc. “Google”). Google may also access and use your personal information for its own purposes when you use Google Maps, in accordance with its own privacy Notice (see below).

Categories of personal data

The following information is processed:

Information on your chosen favourite dealers
We collect information on how often you use this functionality. We anonymise this information and process only aggregate data, i.e. combined with other users’ data, without any possibility of the identity of individual users being inferred.

Purpose

The processing of your personal information serves the following purpose or purposes:

The processing of information on the dealers you choose as your favourite dealers or main dealers enables us to learn more about your relationship with our STIHL dealers. Your personal data is processed for the purpose of being able to continually improve your relationship with our STIHL dealers.
Your satisfaction with our STIHL dealers is of the utmost importance to us. Your personal data is processed for the purpose of determining whether you are satisfied with your STIHL dealer.

Legal basis

The processing of your personal information is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. The contract on which we base the processing of your personal data is the Terms of Use concluded between you and us for the use of MY STIHL, including the functionalities offered by us.

Google Privacy Notice

Google's Privacy Notice for the processing of personal information in connection with Google Maps can be found here: https://policies.google.com/privacy?hl=en-US

8.4 YouTube

We embed video content via YouTube. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ltd”, together with other Google companies of Alphabet Inc. “Google”).

Categories of personal information

The following information is processed in connection with the use of YouTube:

Your IP address
Information about your device
Browser
Operating system

Purpose

We link video content via YouTube to inform you about our products and services.

Legal basis

We base the processing of your personal information on the following legal bases:

Video content is displayed with a thumbnail image. Your data are processed by Google only when you have consented to the processing of your data ("two-click solution").
The use of YouTube requires setting a cookie. To that end, if required by applicable law, we shall obtain your consent in the cookie banner.

Storage period

In principle, we shall process your personal data only as long as is necessary to achieve these purposes. For more information on the storage period, see section 9 of this Privacy Notice.

Transfer of your data to countries outside the EEA

In connection with the use of YouTube, personal data may be transferred outside of your jurisdiction of residence. For more information, see section 11 of this Privacy Notice.

Google Privacy Notice

Google's Privacy Notice for the processing of personal data in connection with YouTube can be found here: https://policies.google.com/privacy?hl=en-US

9 STORAGE PERIOD

As long as you use the STIHL Digital Platform and the Solutions or until you delete your STIHL Account, we will process your personal information as it is necessary to provide you with the STIHL Digital Platform and the Solutions you want. The storage period for your personal information depends in particular on which of our Solutions and which of the features offered by the Solutions you use.

In addition, the storage period depends on the category of personal information processed and the purpose of the processing. Finally, we take into account legal retention periods, which may obligate us to keep your data for a certain period of time. Accordingly, storage may take place if this is provided for by the applicable regulations, laws or other provisions to which we are subject. Corresponding requirements are also found in particular in commercial and tax legislation or derive from the regular statutory limitation periods.

In the event of a legal dispute, we will keep the personal information we need for our legal defence until the final conclusion of the proceedings.

For more information on the storage period, please contact us via the contact details to be found Notice under section 2 of this Privacy Notice.

10 RECIPIENTS OF YOUR PERSONAL INFORMATION

10.1 Recipients within the STIHL Group

We share your personal information with other STIHL Group companies in certain cases for the purposes set out in this Privacy Notice. The processing by these STIHL companies is regularly carried out on our behalf. The processing of your personal information may also be carried out under the sole controllership of the STIHL company receiving your data or under the joint controllership of that company with us. If the processing is carried out by another STIHL company on our behalf, a contract has been concluded between us and the respective STIHL company for the processing of personal information.

10.2 Recipients outside the STIHL Group

In addition to recipients of the STIHL Group, we share your personal information with third parties, in relation to individual processing operations and taking into account the data protection regulations. These third parties include service providers who process your personal information on our behalf (as our data processors), and service providers who provide services to us that may include processing your personal information independently. The processing of your personal data may also be carried out under the sole controllership of the third parties receiving your information or under the joint controllership of those third parties with us.

If we share your personal data with other controllers, this will in principle be done only if this is necessary for the performance of a contract with you, or if you have consented to this.

In connection with the processing of your personal information, we use the following categories of service providers:

IT Service Providers (Data Hosting Providers);
Support (Customer Support); and
Lawyers, auditors and tax advisers.

We also pass on your data to the authorities and courts, to the extent required by applicable laws and regulations.

10.3 Exceptions

We may disclose your personal information to a third party without your consent if permitted or required ‎by applicable law. We may also disclose your personal information, in accordance with applicable law, in ‎connection with ‎a corporate re-organization, a merger or amalgamation with another entity, or a sale of ‎all or a ‎substantial portion of our assets provided that the disclosed information continues to be used ‎solely for ‎the purposes permitted by this privacy Notice by the entity acquiring the information.‎

11 TRANSMISSION OF YOUR PERSONAL INFORMATION OUTSIDE OF YOUR JURISDICTION OF RESIDENCE

It is possible that, in the process of providing our services to you, we may need to transfer your personal information outside of your jurisdiction of residence. Regardless of where your personal information is processed, the highest priority for us is that the level of protection guaranteed by the applicable privacy laws and regulations of your jurisdiction is always ensured.

If we pass on personal information to recipients whose systems for processing your personal information or their subcontractors are located outside of your jurisdiction of residence, or if we transfer personal information to recipients outside of your jurisdiction of residence, we will comply with all applicable legal requirements, including, when required, performing all necessary data privacy assessments and having in place written agreements for the protection of personal information with recipient parties.

You can ask us for an overview of the recipients outside your jurisdiction of residence.

12 YOUR RIGHTS AND ASSERTING THEM

If you wish to assert your rights as specified below, you can contact us at any time and without any required form via the communication channels specified in this Privacy Notice. By email and on the other communication channels, you can reach STIHL direct and the Data Protection Officer of STIHL direct via the contact details specified under section 2 of this Privacy Notice.

12.1 Right to access your information

You have the right to request confirmation as to whether or not we hold your personal information, and, if we do, to request in writing access to that information.

We will also give you information about the ways in which your personal information is ‎‎being used and a description of the recipients to whom that ‎information has been ‎disclosed. We may charge you a reasonable fee for doing ‎so.‎ In some situations, we may not be able to provide access to certain personal ‎information (for example, if ‎disclosure would reveal personal information about another ‎individual, if we are prevented by law from providing access to ‎certain personal ‎information, etc.). If we refuse an access request, we will notify you in writing, ‎document the reasons for refusal, ‎and outline further steps that are available to ‎you.‎

12.2 Right to rectification

You have the right to request the rectification of incorrect personal information concerning you without delay. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal information, and if you believe there is a mistake in ‎your personal information, you may ask for it to ‎be corrected. We ‎may ask you to provide documentation that our files are wrong. ‎Where we agree ‎that the information is incorrect, we will correct it and notify ‎anyone to whom we ‎sent this information. If we do not agree that the information is incorrect, we will ‎ include in our file a notification that the correction was requested but not ‎made.‎

We always strive to ensure the accuracy of your personal information. We therefore ask you to notify us immediately of any changes to your personal information (such as changes in address), so that we can ensure that your personal information is up-to-date.

12.3 Right to erasure

If the legal requirements are met, you may request us to erase your personal information immediately. This shall be the case, in particular, where:

you contest the accuracy of your personal information. The processing of your information will be restricted for a period enabling us to verify the accuracy of your personal data;
your personal information will no longer be required for the purposes for which it was collected or otherwise processed;
the processing of your personal information is based on your consent, you revoke this consent;
if your personal information has been passed on to third parties and we are obligated to erase your personal information, we will inform these third parties about the erasure, insofar as this is required by law.

We would like to point out that your right to erasure is subject to restrictions. For example, we may not erase any personal information that we have to keep further due to legal requirements. Data that we need in order to assert, exercise or defend legal claims are also excluded from your right to erasure.

12.4 Right to de-indexation

If you are a resident of the province of Québec, you may, in certain situations and if the legal requirements are met, require that we stop disseminating your personal information, or that we de-index any hyperlink attached to your name that provides access to your personal information.

12.5 Right to data portability

You have the right to receive the personal information you have provided us and which we process for the fulfilment of the contract, in a structured, customary and machine-readable format. You also have the right, in the event that the aforementioned conditions are met, that we transmit these data directly to a third party, insofar as this is technically feasible.

12.6 Withdrawal of consent

If you have given your consent to the processing of your personal information, you can revoke it at any time with effect for the future. The lawfulness of the processing of your personal information up until revocation remains unaffected.

12.7 Right to object to data protection or privacy authorities

If you consider that the processing of your personal information violates applicable data protection and privacy laws, you may lodge a complaint with a data protection or privacy supervisory authority, in particular the data protection or privacy supervisory authority at your location, place of work or place of alleged infringement.

13 AMENDMENTS TO THIS PRIVACY NOTICE

In this Privacy Notice, we will always keep you fully and completely informed about the processing of your personal information in connection with the STIHL Digital Platform and the Solutions. This requires that we update this Privacy Notice regularly, for example when we offer new solutions on the STIHL Digital Platform. We therefore recommend that you consult this Privacy Notice regularly.

New Privacy Notice

We are updating the legal documents and this is available as a preview.