Data protection information of ANDREAS STIHL AG & Co. KG

(Status: 18.08.2021)

We would hereby like to inform you about the processing of personal data carried out by ANDREAS STIHL AG & Co. KG (hereinafter "STIHL") processes personal data in accordance with the EU General Data Protection Regulation on the award.stihl.com website and in the context of the STIHL CUTTING EDGE AWARD. If you have any questions or comments about this data protection information, you can send them at any time to the email address given in section 2.

Table of contents
1. Overview
2. Name and contact details of the data controller and the data protection officer
3. Purposes of data processing, legal basis and legitimate interests pursued by STIHL or a third party as well as categories of recipients
3.1 Calling up our website
3.2 Registration on the online platform / participation in the STIHL CUTTING EDGE AWARD / voting as part of the STIHL CUTTING EDGE AWARD
3.3. online presence and website optimization
4. Transmission of data
5. Your rights
5.1 Overview
5.2 Right of objection
6. Changes to this statement
 

1. Overview

The following data protection information informs you about the nature and extent of the processing of so-called personal data by ANDREAS STIHL AG & Co. KG ("STIHL") on the award.stihl.com website. Personal data is information that can be directly or indirectly attributed to you or can be attributed to you.

If you have any questions about our data protection information, please feel free to contact our data protection officer at any time.

2. Name and contact details of the responsible person and the data protection officer

This data protection information applies to data processing by ANDREAS STIHL AG & Co. KG, Badstraße 115, 71336 Waiblingen in the context of the online presence for the "CUTTING EDGE AWARD". The STIHL data protection officer can be contacted at ANDREAS STIHL AG & Co. KG, Stuttgarter Straße 80, 71332 Waiblingen, Germany, in the name of the Data Protection Department, or at datenschutz@stihl.de.

3. Purposes of data processing, legal basis and legitimate interests pursued by STIHL or a third party, and categories of recipients

3.1 Calling up our website

When you access our website, the browser used on your end device automatically sends information to the server of our website and stores it temporarily in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until automatic deletion:

- the IP address of the requesting internet-capable device,
- the date and time of access,
- the name and URL of the file accessed,
- time zone difference to Greenwich Mean Time (GMT),
- access status/HTTP status code,
- transferred data volume,
- the website/application from which the access was made (referrer URL),
- the browser you are using, language settings and, if applicable, the operating system of your Internet-enabled computer.

The legal basis for the processing of the IP address is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that we do not draw any conclusions about your identity from the collected data.

The IP address of your terminal device and the other data listed above are used by us for the following purposes:

- Ensuring a smooth connection setup,
- Ensuring a comfortable use of our website/application,
- evaluation of system security and stability as well as
- other administrative purposes.

The data is stored and automatically deleted after the aforementioned purposes have been achieved.

3.2 Registration on the online platform / participation in the STIHL CUTTING EDGE AWARD / voting as part of the STIHL CUTTING EDGE AWARD

STIHL is the host and organizer of the STIL CUTTING EDGE AWARD, a competition for students in which they can submit innovative ideas, projects and concepts and participate in a competition. In this context, we process the data required for the conclusion, implementation or termination of participation in a STIHL CUTTING EDGE AWARD. This includes:

3.2.1 Registration and creation of a user account.

Both participation and voting require registration of a user account. We collect the necessary information required for the creation of your user account and registration, i.e. your name, email address and password. The legal basis for this processing of your data is Art. 6 (1) lit. b DSGVO, as you provide us with the data on the basis of the contractual relationship between you and us.

3.2.2 Profile

Your first name, last name, address, e-mail address, telephone number, gender, date of birth, course of study, number of semesters and the name of the university are recorded in your profile. You do not need to provide any additional information in your profile. If applicable, your profile will also indicate affiliation with one or more teams. Please note that the full information of your profile is fully visible to STIHL mentors and STIHL jury members. Your submitted idea is also visible to others on or off our website (e.g. visitors to our website or users of search engines).

We also offer you the opportunity to register for our newsletter in your profile. The processing of your data in the context of sending the newsletter is based on your consent (Article 6(1)(a) DSGVO). You can revoke your consent thus declared at any time with effect for the future. For this purpose, it is sufficient to send a short note by email to the email address specified under 2. or click on the "unsubscribe" button at the end of each newsletter.

3.2.3 Messages, contributions, and uploads

We collect personal data from you when you upload it to our website, for example when you upload documents or presentations as part of your participation in the AWARD, when you chat or send messages with other participants or STIHL, or when you use public message boards. If you contact us by phone, e-mail, mail, social media services, contact forms or in any other way with a request, or if we contact you, we will of course also process your personal data, e.g. name, address, telephone number, as well as the content of the message. We use this communication data exclusively to comply with your respective request and to communicate with you. If you post on a message board / message wall, it can be viewed by all participants.

Since, according to the conditions of participation, the public also has the opportunity to vote on the submitted ideas and projects, the public can view contributions to the AWARD, individual and team profiles as well as achievements and work results at the AWARD (presentations).

The legal basis for this is Article 6(1)(b) DSGVO, i.e. you provide us with the data on the basis of the contractual relationship between you and us.

3.2.4 Storage of your data
In principle, we store the data collected for the purpose of processing the contract until the expiry of the STIHL CUTTING EDGE AWARD plus a three-month grace period. If you have registered for the newsletter, we will store and use your data until you revoke your consent, at the longest for a period of five years from the registration of your user account.

After the expiration of these periods, we retain any information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period (regularly ten years from the conclusion of the contract), the data will be processed again solely in the event of an audit by the tax authorities.

3.3 Online presence and website optimization

3.3.1 Cookies - General Information

In order to make visiting our websites more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (so-called long-term cookies). Cookies cannot be used to access other files on your computer or to determine your e-mail address.

On this website, the cookies listed in the cookie information are used.

Insofar as we use cookies that are absolutely necessary for the provision of our websites, the legal basis for the processing of personal data using these cookies is Art. 6 (1) lit. f) DSGVO.

A processing of personal data by cookies for marketing purposes or for the creation of statistics only takes place if you have given us your consent for this. The legal basis for this is Art. 6 para. 1 lit. a) DSGVO.

You can revoke your consent at any time without giving reasons by following the link below and adjusting the permitted functionalities.

Cookies are stored on your terminal device and you have full control over their use. By changing the settings of the Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, you may no longer be able to use all the functions of the websites to their full extent.

3.3.2 Web analysis with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"). The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, 1600. Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

The STIHL website uses Google Analytics with the extension "anonymize IP". This means that your IP address collected by the Google Analytics cookie is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of STIHL, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time as described above by adjusting your cookie preferences.

In addition, you can delete already stored cookies at any time in your browser settings. If you do this, you may no longer be able to fully use all functions of the websites.

You can find more information on the terms of use and data protection under this link or under this link.

3.3.3 Facebook Conversion Tracking Pixel

In the context of usage-based online advertising, we use the Custom Audiences service of Facebook Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA). For this purpose, we define target groups of users based on certain characteristics in the Facebook Ads Manager, who are subsequently shown ads within the Facebook network. Users are selected by Facebook based on the profile information they provide and other data provided through their use of Facebook. If a user clicks on an advertisement and subsequently arrives on our website, Facebook receives the information that the user has clicked on the advertising banner via the Facebook pixel embedded on our website.

Basically, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Facebook for analysis and marketing purposes. A Facebook cookie is set in the process. This collects information about your activities on our website (e.g. surfing behavior, subpages visited, etc.). For the geographic targeting of advertising, your IP address is also stored and used.

Facebook Custom Audiences via the customer list is not used by us, as is the "extended matching" function.

For more information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your settings options for protecting your privacy, please refer to Facebook's privacy policy. Settings regarding which advertisements are displayed to you on Facebook can be made under this link as well as in the account settings of Facebook.

The legal basis for the processing of personal data using the Facebook Pixel is Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time as described above under 3.3.1. by adjusting your cookie preferences.

In addition, you can delete already stored cookies at any time in your browser settings. If you do this, you may no longer be able to fully use all functions of the websites.

You can find more information on data protection at Facebook here.

3.3.4 LinkedIn Insights Tag and Conversion Tracking

We use the LinkedIn Conversion Tracking service of LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, 94085-2810 USA as part of the evaluation of our online advertising. The responsible entity for users in the EU/EEA and Switzerland is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

For this purpose, we define target groups of users based on certain characteristics in the LinkedIn Campaign Manager, who will subsequently be shown advertisements within the LinkedIn network. Users are selected by LinkedIn based on the profile information they provide, as well as other data provided when using LinkedIn. If a user clicks on an advertisement and subsequently arrives on our website, LinkedIn receives the information that the user has clicked on the advertising banner via the conversion tag embedded on our website.

The LinkedIn tag thus enables the collection of the following data:
- Visited website, including the URL,
- referrers
- IP address
- Device and browser properties (user agent)
- and timestamp.

IP addresses are shortened or hashed (for cross-device use) by LinkedIn. Members' direct identifiers are removed within 7 days to pseudonymize the data. The remaining pseudonymous data is then deleted within 180 days.

LinkedIn does not share the personal data with us, as the website operator, but only provides us with reports and notifications (which do not identify the user) about website visits and ad performance. LinkedIn also provides so-called retargeting, so we, as website operator, can show personalized ads outside our website using this data without identifying individual members. Data that does not identify you is also used to improve ad relevance and reach LinkedIn members across devices. LinkedIn members can control the use of their personal information for advertising purposes through their account settings. LinkedIn refers to the following link to customize advertising preferences.

We process this data to evaluate our advertising campaigns. The legal basis for the processing is your voluntary consent within the meaning of Art. 6 (1) lit. a DSGVO. Without your consent via our Consent Tool, no processing of data for LinkedIn Conversion Tracking takes place.

Within the framework of LinkedIn conversion tracking, LinkedIn naturally has access to the listed data. In particular, it is possible that in addition to LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, 94085-2810 USA also has access to your data.

The LinkedIn Corporation is located here in an insecure third country, in which the level of data protection is lower. It cannot be ruled out that your data will also be transmitted to such a third country when using this function. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred. This can be achieved, for example, via EU standard contracts or Binding Corporate Rules or special agreements to whose regulations the company may be subject.

The legal basis for the processing of personal data using the Facebook Pixel is Art. 6 (1) lit. a DSGVO. You can revoke this consent at any time as described above under 3.3.1. by adjusting your cookie preferences.
In addition, you can delete already stored cookies at any time in your browser settings. If you do this, you may no longer be able to fully use all functions of the websites.
For more information about the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your settings options for protecting your privacy, you can also refer to the privacy policy of LinkedIn.

Further information on LinkedIn Conversion Tracking can be found here.

Further information on data processing and storage duration can be found here.

3.3.5 YouTube plugin

On our website we have integrated videos from YouTube. This service is operated by Google Inc.
Here, we use the option of extended data protection provided by YouTube to protect your personal data.

When you visit a website on which a corresponding video has been embedded, your browser establishes a direct connection to Google's servers. The content of the plugin is transmitted by Google directly to your browser and embedded in the page. Through the integration, Google receives the information that your browser has called up the corresponding page of our website, even if you do not have a YouTube account or are not currently logged into YouTube. This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there.
If you are logged into YouTube, Google can directly assign the visit to our website to your respective account. We would like to point out that we, as the website provider, have no knowledge of the content of the transmitted data or its use by Google. The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google's privacy policy here.

If you do not want Google to assign the data collected via our website directly to your account with YouTube, you must log out of YouTube before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, e.g. with the script blocker "NoScript" here.

The legal basis for the processing of personal data using the plugin is Art. 6 (1) lit. f DSGVO.

3.4 Social media

We also offer you extensive personal support via our social media pages. If you send us a request via one of these social media, we will forward the request to the relevant department. For more information on the processing of your personal data when using social networks, please refer to our Social Media Policy.

3.5 Statistical evaluation

STIHL also processes the personal data collected to create statistical evaluations. These serve the purpose of improving and further developing the products and services offered by STIHL, in particular with regard to product features, product safety, service quality, marketing and with regard to optimizing the dealer network. Personal data is only used to the extent necessary for the above-mentioned purposes. As far as possible, the data is pseudonymized or anonymized before it is used. In order to increase the statistical significance of the evaluations, STIHL also combines the aforementioned data with information on meteorological and/or geographical characteristics from other data sources such as weather and map services. The results of the evaluations are used exclusively in aggregated form and are also passed on in this form and for the aforementioned purposes to other companies affiliated with STIHL, if necessary. Customer-related evaluations are not carried out unless the customer has expressly consented to this. The legal basis for processing the data described above is Art. 6 (1) p. 1 lit. f DSGVO.

4. Transmission of data

The online platform and the website are operated by our service provider Agorize Germany GmbH, Hospitalstraße 35, 70174 Stuttgart. Your personal data will be processed by our service provider and, if applicable, its subcontractors within the framework of order processing pursuant to Art. 28 DSGVO

If we transfer your data to recipients located outside the European Union or the European Economic Area, the data transfer will take place on the basis of an adequacy decision of the EU Commission or on the basis of suitable guarantees, in particular so-called standard contractual clauses of the EU Commission.

5. Your rights

5.1 Overview

In addition to the right to revoke the consent you have given to us, you have the following additional rights if the respective legal requirements are met:

Right to information about your personal data stored by us in accordance with Art. 15 DSGVO;
Right to correct incorrect data or to complete correct data according to Art. 16 DSGVO,
Right to delete your data stored by us according to Art. 17 DSGVO as far as no legal or contractual retention periods or other legal obligations or rights for further storage are to be observed,
Right to restrict the processing of your data according to Art. 18 DSGVO,
Right to data portability according to Art. 20 DSGVO.
Right to lodge a complaint with a supervisory authority.

5.2 Right of objection

Under the conditions of Art. 21 (1) DSGVO, data processing may be objected to for reasons arising from the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in this Data Protection Information, which are processed on the basis of Article 6(1)(f) DSGVO. Unlike the specific right of objection directed at data processing for promotional purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so.

6. Changes to this statement

We revise this data protection information when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website. Therefore, you should visit this website regularly to inform yourself about the current status of the data protection declaration.