Data privacy information for the use of our social media channels

Provider

Andreas Stihl Limited
Contra House
Oak Close
Camberley
GU15 3FG
United Kingdom

Phone: + 44 1276 20202
E -mail: enquiries@stihl.co.uk

Limited partnership with registered office in Waiblingen, HRA 260269, District Court Stuttgart

Personally liable partners:

Hans Peter Stihl and STIHL Aktiengesellschaft with registered office in Waiblingen, HRB 263722, Stuttgart District Court

The Executive Board of STIHL AG is entitled to represent:

  • Michael Traub, Chairman of the Executive Board
  • Ingrid Jägerin, Executive Board Member Finance
  • Anke Kleinschmit, Executive Board Member Research & Development
  • Sarah Gewert, Executive Board Member Marketing and Sales
  • Dr. Michael Prochaska, Executive Board Member Human Resources and Legal Affairs
  • Martin Schwarz, Executive Board Member Manufacturing and Material

Chairman of the Supervisory Board of STIHL AG: Dr. Nikolas Stihl

VAT identification number: DE 147330096

Privacy policy

The following data protection information informs you about the type and scope of the processing of so-called personal data by STIHL. Personal data is information that can be directly or indirectly assigned to your person.

Our social media channels are operated by:

Andreas Stihl Limited
Contra House
Oak Close
GU15 3FG
United Kingdom

STIHL's data protection officer can be reached at the aforementioned address or at compliance@stihl.co.uk 

We will revise this privacy policy in the event of changes to this website or on other occasions that make this necessary. The current version can always be found on this website. Therefore, you should visit this website regularly to find out about the current status of the privacy policy.

Facebook

When you visit our fan page, your profile information as well as information about the visit will essentially be processed by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA  (hereinafter referred to as "Facebook"). When you visit our fan page, your personal data will also be processed by Facebook for its own purposes, the scope of the data processed depends on whether you have a Facebook account or not, and whether you are logged in or not; in any case, at least your IP address will be processed. However, we are not fully transparent about what personal data is processed by Facebook for and for what purpose, so we expressly point out that you use Facebook on your own responsibility. All further information on the cookies used, the other technologies, the processing purposes, the storage period and your rights can be found in the privacy policy of Facebook.

When you visit our fan page, we process, in particular, information about user interactions (e.g. likes and comments), public profile information, demographic and statistical data as well as the data transmitted to us in the context of messages and comments.

We are jointly responsible for the processing of your personal data as the operator of a fan page with Facebook. The joint responsibility relates in particular to the use of the "Facebook Insights" function, more precisely to the collection, storage and further processing of the Insights data. Facebook is responsible for the collection and storage of the data, STIHL only receives anonymised evaluations of the insights data. STIHL is responsible for the operation of the Facebook fan page. Our company does not make any decisions about the processing of Insights data.

The use of your personal data for advertising purposes is a particular priority for Facebook. We use the statistics function to find out more about the visitors to our fan page. The use of the feature allows us to tailor our content to the respective target group. In this way, we also use demographic information on the age and origin of the users, for example, although no personal reference is possible for us here.

The parties have entered into an agreement on joint responsibility (https://www.facebook.com/legal/terms/page_controller_addendum). For the processing of Insights data, it has been agreed that Facebook assumes the obligation to protect the rights of the data subject and the necessary information obligations in accordance with Art. 13 and 14 UK GDPR. Data protection rights can be invoked with both Facebook and STIHL. We will forward all data subject requests concerning processing for which Facebook is responsible to Facebook for processing. You can object to data processing by Facebook here .

The processing of the personal data of visitors to our Facebook fan page is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) UK GDPR. Our legitimate interest is to ensure communication with our customers and to inform them about news related to our products.

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement. In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers.

Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK and  European Economic Area under certain circumstances. In these cases, we ensure that an adequate level of data protection comparable to the standards within the UK is established at the recipient's premises prior to the transfer of your personal data. This can be achieved, for example, through UK standard contracts or binding corporate rules or special conventions to which the company may submit. To the extent that you access Facebook pages and interact with Facebook applications, Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, has access to your data. Between Meta Platforms Ireland Limited and us, the following agreement has been entered into between Meta Platforms Ireland Limited and us:

https://m.facebook.com/legal/terms/UK_Data_Transfer_Addendum

Instagram

When you visit the platform, your profile information as well as information about the visit will essentially be processed by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (hereinafter referred to as "Instagram"). Instagram also processes your personal data if you do not have an Instagram account or not, are logged into it or not, at least the IP address is processed. However, we are not fully transparent about what personal data is processed by Instagram for and for what purpose, so we expressly point out that you use Instagram on your own responsibility. All further information on the cookies used, the other technologies, the processing purposes, the storage period and your rights can be found in Instagram's privacy policy.

We process the data of visitors to our profile, in particular information about user interactions (e.g. likes and comments), public profile information, demographic and statistical data, as well as the data transmitted to us in the context of messages and comments. You can object to data processing by Instagram here .

We use the statistics function to learn more about the visitors to our profile. Demographic and statistical data in the context of so-called "insights" data help us to adapt our content to the respective target group. For us, this is aggregated data, a personal reference is not possible for us.

The processing of the personal data of visitors to our Instagram account is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) UK GDPR. Our legitimate interest is to ensure communication with our customers and to inform them about news related to our products.

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement. In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers.

Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK or European Economic Area under certain circumstances. In these cases, we ensure that an adequate level of data protection comparable to the standards within the UK is established at the recipient's premises prior to the transfer of your personal data. This can be achieved, for example, through UK standard contracts or binding corporate rules or special conventions to which the company may submit. To the extent that you access Instagram pages and interact with Instagram applications, Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, has access to your data. The following agreement has been entered into between Meta Platforms Inc and us: https://m.facebook.com/legal/terms/UK_Data_Transfer_Addendum

PINTEREST

We use the social media network Pinterest (operator: Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA). Depending on whether you have a Pinterest user account or not, whether you are logged in to it or not, and what settings you have made https://help.pinterest.com/en/article/your-privacy-and-data-settings, Pinterest collects and processes different personal data from you, at least your IP address. We have no influence on this data processing and do not have a transparent overview, and we do not receive this data. We expressly point out that you use Pinterest at your own risk. You can find out more about data protection, data processing, storage period, the cookies / other technologies used, the purposes of processing and your rights on Pinterest under https://policy.pinterest.com/en/privacy-policy.

For the UK, the Irish company Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter referred to as Pinterest Ltd.) together with Pinterest Inc., 651 Brannan Street, San Francisco, CA 94103, USA) is responsible for all data protection-related aspects.

We have entered into a joint responsibility agreement with Pinterest Ltd. We have entered into a joint responsibility agreement with Pinterest Ltd.. https://business.pinterest.com/en-gb/pinterest-advertising-services-agreement/. The joint responsibility concerns the data provided by the user to Pinterest Ltd. and Pinterest Inc., the data that the user provides to us when using the Pinterest page and the data derived from it, and also includes the data with ad service feature, activity and advertising data.

 The joint responsibility concerns the data provided by the user to Pinterest Ltd. and Pinterest Inc., the data that the user provides to us when using the Pinterest page and the data derived from it, and also includes the data with ad service feature, activity and advertising data.

For the processing of Insights data, it has been agreed that STIHL assumes the obligation to protect the rights of the data subject and the necessary information obligations in accordance with Art. 13 and 14 UK GDPR. Data protection rights can also be asserted at STIHL. We will process all data subject requests concerning processing for which we are jointly responsible with Pinterest, to the extent that we are able to do so.

We will forward requests from data subjects concerning processing that is not subject to joint responsibility, for which Pinterest Ltd. is responsible, e.g. also the objection pursuant to Art. 21 UK GDPR, to Pinterest Ltd. for processing. Data subject requests to Pinterest can  be sent to privacy-support@pinterest.com.

The processing of the personal data of visitors to our Pinterest account is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) UK GDPR. Our legitimate interest is to ensure communication with our customers and to inform them about news related to our products.

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement.  In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers. Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK or European Economic Area under certain circumstances. Pinterest also processes data in the United States, among other places. Pinterest is not currently certified under the Data Privacy Framework (DPF) program and is not included in the International Trade Administration's (ITA) Data Privacy Framework list. This means that Pinterest has not publicly committed itself to complying with DPF obligations and any data transfer to the USA cannot take place without additional measures. Pinterest uses standard contractual clauses approved by UK Government as the basis for data processing by recipients based in third countries (outside the UK and European Union) or data transfer there. These clauses oblige Pinterest to comply with the UK level of data protection when processing personal data outside the UK. These clauses are based on an implementing decision of the UK Government.

TIKTOK

We have an account on the TikTok platform, of the Chinese company ByteDance. If you live in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, TikTok Technology Limited, an Irish company (“TikTok Ireland”), and TikTok Information Technologies UK Limited (“TikTok UK”), a UK company, ("TikTok," "our," "we," or "us") are the joint controllers of your information processed in connection with this Privacy Policy. You can find out more about data protection at TikTok, the cookies or other technologies used, the purposes of processing, the storage period and your rights under https://www.tiktok.com/legal/page/eea/privacy-policy/en and in the terms of use https://www.tiktok.com/legal/page/eea/terms-of-service/en

We do not know which of your data, depending on whether you are logged in or not, or whether you have an account or not, but also for what purpose the data is processed. We have no influence on this and do not have full knowledge, but at least your IP address will be processed. We therefore expressly point out that you use TikTok on your own responsibility. You can find out more about the cookies and tracking technologies used by TikTok here (https://www.tiktok.com/legal/page/global/cookie-policy/en). We expressly point out that you use TikTok at your own risk.

If data is transferred to countries outside the UK and European Economic Area where there is no level of data protection corresponding to the UK standard, TikTok says it uses standard data protection clauses in accordance with the UK GDPR, see https://ads.tiktok.com/i18n/official/policy/controller-to-controller. We have entered into standard contractual clauses with TikTok. TikTok Information Technologies UK Limited, 6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom and TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok") are jointly responsible.

TikTok and STIHL are both independent controllers. You can assert your rights as a data subject against STIHL.

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement. In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers.

Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK and European Economic Area under certain circumstances. In these cases, we ensure that an adequate level of data protection comparable to the standards within the UK is established at the recipient's premises prior to the transfer of your personal data. This can be achieved, for example, through UK standard contracts or binding corporate rules or special conventions to which the company may submit.

TikTok states that it passes on the data collected to service providers, partners, in the group of companies and to others (https://www.tiktok.com/legal/page/eea/privacy-policy/en). This may also lead to transfers to countries outside the UK and EEA and thus to third countries where there is no equivalent level of data protection to the UK, in which case TikTok uses standard data protection clauses in accordance with Art. 46 (2) (c) UK GDPR, according to its own statements. 

X (formerly Twitter)

When you visit the Platform, your profile information as well as information about the visit is essentially processed by Twitter International Unlimited Company,  a subsidiary of X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA (hereinafter referred to as "X"). In this case, data is processed by X, depending on whether you have an X account or not and/or whether you are logged in or not, or at least your IP address. For us, there is no full transparency as to which data is processed by X and for what purpose, so we expressly point out that you use X on your own responsibility. All further information on the cookies used, the other technologies, the processing purposes, the storage period and your rights can be found in X's privacy policy .

We process the data of visitors to our profile, in particular information about user interactions (e.g. likes, reposts and comments), public profile information, statistical data as well as the data transmitted to us in the context of messages and comments.

The use of your personal data for advertising purposes is a particular priority for X. We only use the statistics function to obtain information about our profile and its users. This data gives us information about visits to our profile, mentions of our X-commerce and the growth of our account. However, this data is purely statistical for us, it is not possible for us to assign it to individual persons. You can object to the processing of data by X here .

STIHL, as the operator of the X account, and X are jointly responsible for the data provided by the user to X as well as for the data that the user provides to us when using the X channel. This applies to the data of users, as well as visitors and followers. STIHL assumes the obligation to safeguard the rights of the data subject and the necessary information obligations in accordance with Art. 13 and 14 UK GDPR and fulfils the requests of data subjects insofar as this relates to STIHL's processing.

The processing of the personal data of visitors to our X-Profile is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) UK GDPR. Our legitimate interest is to ensure communication with our customers and to inform them about news related to our products.

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement. In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers.

Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK and  European Economic Area under certain circumstances. In these cases, we ensure that an adequate level of data protection comparable to the standards within the UK is established at the recipient's premises prior to the transfer of your personal data. This can be achieved, for example, through UK standard contracts or binding corporate rules or special conventions to which the company may submit.

X may share your data so that the data can also be processed in countries where there is no level of data protection equivalent to that of the UK. This can be done, for example, to the U.S. parent company. The data will also be passed on if you post or share it with the general public, with X users, with X partners. It may also be passed on to service providers, advertisers or to them via content and integration of third parties. Disclosure may also be made to affiliated companies, in corporate transactions or in the public interest, as well as for the prevention of damage. For more information, see https://twitter.com/en/privacy#x-privacy-1. Insofar as data processing takes place in the course of the transfer in an insecure third country, X uses the current standard contractual clauses appropriate for the UK. Our contractual partner is the European X in Ireland. 

LinkedIn

When you visit the platform, your profile information as well as information about the visit is essentially processed by LinkedIn Corporation, Sunnyvale, 1000 W Maude Ave, United States (hereinafter referred to as "LinkedIn"). In doing so, your personal data will be processed, regardless of whether you have a LinkedIn account or not, or are logged into it or not. However, we do not have full transparency about what personal data is processed by LinkedIn for and for what purpose, so we expressly point out that you use LinkedIn on your own responsibility. All further information on the cookies used, the other technologies, the processing purposes, the storage period and your rights can be found in the Privacy Policy from LinkedIn.      

We process the data of visitors to our profile, in particular information about user interactions (e.g. "likes", reactions, shares and comments), public profile information (e.g. position, employer), statistical data as well as the data transmitted to us in the context of messages and comments.

The use of your personal data for advertising purposes is a priority for LinkedIn in particular. We only use the statistics function to obtain information about our profile and how users interact with it. For example, this data provides us with information about visits to our profile, demographic data about followers and visitors, or information about the performance of updates. However, all of this data is purely statistical for us, it is not possible for us to assign it to individual persons.

The processing of the personal data of visitors to our LinkedIn profile is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) UK GDPR. Our legitimate interest is to ensure communication with our customers, to present our company as an employer and to inform us about news from our company.

You can object to data processing by LinkedIn here .

STIHL is jointly responsible with the platform operator for the data that you provide as a user on the platform and has concluded a corresponding contract with the platform: https://legal.linkedin.com/pages-joint-controller-addendum

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement. In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers.

Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK and European Economic Area under certain circumstances. In these cases, we ensure that an adequate level of data protection comparable to the standards within the UK is established at the recipient's premises prior to the transfer of your personal data. This can be achieved, for example, through approved standard contracts or binding corporate rules or special conventions to which the company may submit. According to LinkedIn, data is shared in the context of communication archiving, to third parties for the provision of services, to companies affiliated with LinkedIn, corporate transactions, for legal disclosure, whereby you can find more information at https://www.linkedin.com/legal/privacy-policy#share. Insofar as data is processed outside the UK and EU in unsafe third countries, LinkedIn's current standard contractual clauses are used, see also https://www.linkedin.com/help/linkedin/answer/a1343190?trk=microsites-frontend_legal_privacy-policy&lang=en-us&intendedLocale=en. For more information about the Data Privacy Framework, see https://www.linkedin.com/help/linkedin/answer/a1343190?trk=microsites-frontend_legal_privacy-policy&lang=en-us&intendedLocale=en.

YouTube

When you visit the platform, your profile information as well as information about the visit will essentially be processed by Google LLC., 1600 Amphitheatre Parkway in Mountain View, California 94043, USA.  Data is also processed if you do not have a Google account or are not logged into it, at least the IP address. However, there is no full transparency for us about what personal data is processed by YouTube for and for what purpose, so we expressly point out that you use YouTube on your own responsibility. All further information on the cookies used, the other technologies, the processing purposes, the storage period and your rights can be found in Google's privacy policy .

We process the data of visitors to our account, in particular information about user interactions (e.g. likes and comments), the user name as well as demographic and statistical data.

The use of your personal data for advertising purposes is a particular priority for Google. We use the statistics feature to learn more about our viewers. We gain insights into the performance of our videos and the demographics of our viewers. For us, this is purely statistical data, a personal reference is not possible for us.

The processing of the personal data of visitors to our YouTube account is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) UK GDPR. Our legitimate interest is to ensure communication with our customers, to present our company to the outside world and to promote our product range.

You can object to data processing by Google here .

Certain processing, such as customer correspondence, is handled by companies within the STIHL Group. For this reason, data is regularly transferred within the group of companies. As a rule, the transfer takes place on the basis of an order processing agreement. In other cases, for example for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 (1) (f) UK GDPR is the legal basis for the transfer, whereby our legitimate interest lies in the efficient design of our processes and offers.

Otherwise, data will only be transmitted if this is necessary for the fulfilment of the above-mentioned purposes, for example in the context of the management of our channel by an appropriately commissioned agency.

We would like to point out that the data processed when using social platforms and networks may be processed outside the UK and European Economic Area under certain circumstances. In these cases, we ensure that an adequate level of data protection comparable to the standards within the UK is established at the recipient's premises prior to the transfer of your personal data. This can be achieved, for example, through UK approved standard contracts or binding corporate rules or special conventions to which the company may submit.

Your rights

In addition to the right to revoke the consent you have given to us, you have the following further rights under the UK GDPR if the respective legal requirements are met with regard to your personal data, insofar as they are processed by STIHL: 

  • Right to information about your personal data stored by us;
  • Right to rectification of incorrect data or to the completion of correct data,
  • Right to erasure of your data stored by us, insofar as no statutory or contractual retention periods or other legal obligations or rights for further storage have to be complied with,
  • Right to restriction of the processing of your data
  • Right to data portability 
  • Right to lodge a complaint with a supervisory authority.

Under the conditions of Art. 21 (1) UK GDPR, data processing may be objected to on grounds relating to the particular situation of the data subject.

The above general right to object applies to all processing purposes described in this data protection information, which are processed on the basis of Art. 6 (1) (f) UK GDPR or for the purpose of direct marketing.

April 2024