In this Privacy Policy, we would like to inform you about the processing of your personal data. Below you will find, among other things, information on how and why we process your personal data and what rights you have in this regard.
In this Privacy Policy, we provide information on the processing of your personal data in connection with your visit to and use of our website.
To make it easier for you to quickly review the information that is relevant for you, we have divided this Privacy Policy into individual sections:
In this Privacy Policy, we provide information in accordance with the requirements of the European General Data Protection Regulation ("GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of your personal data.
The Data Controller under data protection laws determines the purposes and means of the processing of your personal data and ensures compliance with the requirements of data protection laws. Where two or more controllers jointly determine the purposes and means of the processing, these controllers are jointly responsible for the processing, the so-called joint controllers.
The controller responsible for the processing of personal data in connection with this website is:
ANDREAS STIHL Sp. z o. o.
Postal address: Sady, 16 Poznańska Street, 62-080 Tarnowo Podgórne
Email: poczta@stihl.pl
Tax identification number: 7810008540
("we", "us").
For further information, feel free to contact us at any time using the contact details provided above.
Our Data Protection Officer can be contacted by sending a letter to the address of the administrator with the note "for the attention of the Data Protection Officer" or by sending an e-mail to inspektor@bezpieczne-dane.eu.
When we use the term "personal information" in this Privacy Policy, it means all information that relates to you.
Examples of personal information include your name, email address, and mailing address. However, your personal data includes any data that is associated with or relates to you. Data that does not relate to you will be referred to as non-personal data or anonymous data." The provisions of data protection law and this Privacy Policy do not apply to such data.
By the processing of your personal data, we mean, for example, their collection, storage or deletion.
We only process your personal data if we have a legal basis for the processing or if such processing is lawful under applicable data protection laws, i.e. when the processing is permissible under the law. In the case of GDPR, we process your personal data mainly on the following legal grounds:
Further information on which processing operations are based specifically on which legal basis or under which data protection laws the processing is permitted can be found below in this Privacy Policy.
We process personal data that you provide to us and that we collect (automatically) and receive from third parties.
In principle, you are not obliged to provide us with personal data. However, it may be necessary to disclose some of your personal information in order for us to offer and provide you with the website and all of its features.
Personal data you provide to us
We process the information you provide to us. For example, if you call or contact us and provide us with specific personal information in this way. We collect and process this data to enable you to use our website. If you do not provide us with certain information, this may prevent or limit the use of our website or its full functionality.
Personal Information We Collect (Automatically)
Some information is collected and processed by us (automatically) when you use our website. This includes data such as your IP address, certain login data and data processed to enable us to provide our website technically.
Personal data we receive from third parties
In some cases, we do not receive information directly from you. For example, if your personal data has been provided by third parties. We work with companies that provide us with services and who in turn provide us with personal data about you.
When you access our website, the browser used on your device automatically sends information to our website's server and temporarily stores it in a "log file".
If you want to know more about the cookies we use on our website, you can find more information here.
Categories of personal data
The following information is processed when you visit the website:
Purpose
Your personal data is processed for the following purposes:
Legal basis
The legal bases we rely on to process your personal data are as follows:
We have a legitimate interest in ensuring the performance, long-term functionality and security of our website and systems.
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
If you have any questions, you can contact us at any time via email, post, phone, contact forms or otherwise. If you contact us, we will usually respond to them via the means of communication you have chosen.
Categories of personal data
When communicating with you, the following personal data will be processed:
Purpose
Your personal data is processed for the following purposes:
These objectives are hereinafter collectively referred to as "support".
Legal basis
We base the processing of your personal data on the following legal basis:
This applies in particular to the recording of telephone conversations.
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
We use technologies on our website that are designed to make the website easier to use and more user-friendly and to provide various features. These technologies include, for example, cookies, pixels and scripts. This section provides information about your personal data in this context.
In our Cookie Policy We explain which cookies and similar technologies we use on our website for what purposes and how you can manage these cookies.
We use the analysis tool Google Analytics on our website. Google Analytics is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google", together with other Google companies owned by Alphabet Inc. "Google").
We use Google Analytics with the extension "anonymize IP". This means that your IP address will be shortened before it is sent to Google in the United States, so that Google will not receive your full IP address from us.
Categories of personal data
The following information is processed in connection with the use of Google Analytics:
Purpose
We use Google Analytics to analyze your use of the website, to obtain reports on website activity and to obtain other Google services related to the use of our website and other Internet usage.
This will enable us to continuously improve our website, its user-friendliness and our offer, and to tailor them to your needs and interests.
Legal basis
We base the processing of your personal data on the following legal basis:
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of Google Analytics, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy
The privacy policy of Google Analytics by Google Ltd. can be found here:
https://policies.google.com/privacy?hl=pl
Our website uses the "Google Optimize" service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service enables us to improve the appeal, content and functionality of our website by making available new functions and content to a certain amount of our users and statistically analyzing changes in website use. Google Optimize is a sub-service of Google Analytics (see Google Analytics).
Cookies are set when using the service. The information on your use of our website generated by doing so is generally transferred to and stored on a server of Google in the United States (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use Google Optimize with IP anonymization activated, meaning that your IP address is truncated by Google while still in the EU/EEA. It is only in exceptional cases that the full IP address is sent to a Google server located in the US and truncated there. Google will use this information for the purpose of evaluating your use of our website in order to compile reports on the optimization test and associated website activity for us and to provide other services to us relating to the use of the website and the Internet.
The legal basis for the data processing is your consent pursuant to Articles 6(1)(a) and 49(1)(a) GDPR. You can change this consent at any time with effect for the future by changing your settings in the Consent Manager.
We embed video content on our website via YouTube. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Ltd", together with other Google companies owned by Alphabet Inc. "Google").
Categories of personal data
The following information is processed in connection with the use of YouTube:
Purpose
We link video content via YouTube to inform you about our products and offers.
Legal basis
We base the processing of your personal data on the following legal basis:
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
Privacy
Google's privacy policy on the processing of personal data in connection with YouTube can be found here:
https://policies.google.com/privacy?hl=pl
We use Mouseflow, a web analysis tool offered by Mouseflow ApS (Flaesketorvet 68, 1711 Copenhagen, Denmark) on our website. The tool records individual visits that are selected at random and also transfers the visitor's anonymized IP address to the provider of this tool. The tool allows us to prepare a record of mouse movements and mouse clicks. These can be played back on a random basis as what are known as session replays and can be analyzed in heat maps so that we can identify potential improvements for this website. Mouseflow can also be used to conduct surveys that are designed to measure visitor satisfaction levels. The surveys performed and participation in them are also recorded in a cookie created by the tool.
This tool is used exclusively with your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time as described above by changing your cookie settings.
You can find further information on data protection measures taken by the provider and on the use of Mouseflow in the provider's Privacy Statement: https://mouseflow.com/legal/
We use Oracle Eloqua. Oracle Eloqua is provided by Oracle Deutschland B.V. & Co. KG, Riesstrasse 25, 80992 Munich ("Oracle").
Categories of personal data
The following information is processed in connection with the use of Oracle Eloqua:
Purpose
We use Oracle Eloqua to personalize our emails and determine whether our emails, particularly our newsletters, are opened and which links in our emails are clicked. We use this information to improve our emails and the offers and services we provide. The aim is to tailor our website, services and offers, in particular our emails, to your needs and interests.
Legal basis
We base the processing of your personal data on the following legal basis:
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with your use of Oracle Eloqua, personal information may be transferred to countries outside of the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy
Oracle's privacy policy regarding the processing of personal information in connection with Oracle Eloqua can be found here:
https://www.oracle.com/pl/legal/privacy/
We embed Google ads on our website. Google Ads is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Categories of personal data
The following information is processed in connection with the use of Google Ads:
Purpose
We use Google Ads to run search advertising campaigns if you have visited our website before. These services allow us to link our advertisements to certain keywords or, if you have visited our website in the past, to advertise, for example, the services you viewed on our website at that time. We may display interest-based ads on other websites within the Google Search and Display Network (as a "Google ad" within Google Search or on other Google partner websites).
Legal basis
We base the processing of your personal data on the following legal basis:
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of Google Ads, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy
Google's privacy policy regarding the processing of personal data in connection with Google Ads can be found here:
https://policies.google.com/privacy?hl=pl
We use Microsoft advertising on our website. Microsoft ads are provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").
Categories of personal data
In connection with the use of Microsoft advertising, the following information is processed:
Purpose
We use Microsoft Advertising to run search advertising campaigns if you have visited our website before. These services allow us to link our advertisements to certain keywords or, if you have visited our website in the past, to advertise, for example, the services you viewed on our website at that time. This allows us to show you interest-based ads on other sites within the Microsoft Search Network.
Legal basis
We base the processing of your personal data on the following legal basis:
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of Microsoft Advertising, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Notice.
Privacy
Microsoft's privacy policy regarding the processing of personal data in connection with Microsoft advertising can be found here:
https://about.ads.microsoft.com/en-us/policies/legal-privacy-and-security.
We use pixels from social networks on our website. Pixels are activated and your data is processed by social networks only after you have consented to the processing of personal data by social networks in the Privacy Preference Center.
If you are registered as a user of a social network whose pixels we use, your visit to our website may be linked to your user account on that social network. We point out that social networks may then associate the data collected about you through the pixels used on our website with your other personal data, even if you are not a user of the social network.
Please note that social network providers may also process personal data processed via the pixel for their own purposes. In addition, we may be jointly responsible with the providers of social networks for certain data processing activities.
In the case of joint controllership, we will enter into an agreement with the social network provider on the processing of personal data within the framework of joint controllership.
Please read the privacy policies of the social networks, which we will indicate below.
Categories of personal data
In connection with the use of pixels, the following information is processed:
Purpose
We use pixels from social networks to display information and advertisements about our products, offers and services on the relevant social network. In addition to this display on the relevant social network, you may see information and advertisements about our products, offers and services on other websites that also offer the corresponding pixel.
With the help of pixels, we obtain information about our promotional activities, especially on social networks.
Legal basis
We base the processing of your personal data on the following legal basis:
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of pixels, personal data may be transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Pixels used and Privacy Policy for pixels used
Below you will find a list of the social network pixels we use, together with information about the social network provider and the privacy policy for the respective social network and pixel.
The Twitter pixel is provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103 ("X Corp.").
The X Corp. privacy policy regarding the processing of personal data in connection with Twitter pixels can be found here:
https://twitter.com/pl/privacytwitter.com/pl/privacy/
The Meta Pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
Meta's privacy policy on the processing of personal data in connection with Meta pixels can be found here:
https://www.facebook.com/about/privacy/www.facebook.com/about/privacy/
The Pinterest pixel is provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
Pinterest's privacy policy on the processing of personal data in connection with Pinterest pixels can be found here:
https://policy.pinterest.com/pl/privacy-policypolicy.pinterest.com/pl/privacy-policy
We will only keep your data for as long as it is necessary to provide our services, in particular our website, or for as long as we have a legitimate interest in continuing to store this data. The retention period for personal data depends in particular on the category of personal data processed and the purpose of the processing. Data retention is also considered based on your consent to store it.
Finally, we take into account legal retention periods that may oblige us to keep your data for a certain period of time. Your data will therefore be stored if this is provided for by the European or national legislator in the regulations, laws or other regulations of the European Union to which we are subject. The relevant requirements can also be found in particular in commercial and tax regulations or result from statutory limitation periods.
In the event of a litigation, we will store the personal data that we need for our legal defense until the final conclusion of the proceedings.
For more information about the retention period, please contact us using the contact details provided in Section 1 of this Privacy Policy.
In certain cases, we share your personal data with other companies of the STIHL Group. Processing by these STIHL companies is carried out on a regular basis on our behalf. The processing of your personal data may also take place under the sole supervision of the STIHL company receiving your data or under the joint supervision of this company and us.
If we share your personal data with other controllers, this will generally only happen if this is necessary for the performance of the contract between us and you, if we or a third party have a legitimate interest in doing so, or if you have given your consent to do so.
The processing of your personal data by another STIHL company on our behalf is based on a data processing contract on behalf of the controller within the meaning of the GDPR.
In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. This agreement sets out, among other things, the obligations of the joint controllers with regard to compliance with the requirements of the GDPR. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.
In addition to recipients within the STIHL Group, we also share your personal data with third parties with regard to individual processing operations and taking into account data protection requirements. These third parties include service providers who process your personal data on our behalf and service providers who provide services for us related to the processing of personal data. The processing of your personal data may also be under the sole control of the third parties receiving your data or under the joint control of these third parties and us.
If we share your personal data with other controllers, this will generally only be done if this is necessary for the performance of the contract between us and you, if we or a third party have a legitimate interest in doing so, or if you have given us your consent to do so.
In connection with the processing of your personal data, we use the following categories of service providers:
Where we are required to do so under the GDPR or the laws of the EU member states, we will also transfer your data to authorities and courts.
The processing of your personal data by third parties on our behalf is based on a data processing agreement on behalf of the controller within the meaning of the GDPR.
In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.
Regardless of where your personal data is processed, it is our top priority that the level of protection guaranteed by the GDPR is always ensured.
If we transfer personal data to recipients outside the European Economic Area, we comply with the requirements set out in Chapter V of the GDPR. If we work with third parties or use service providers that may transfer your personal data to countries outside the European Economic Area, we oblige these third parties or service providers to comply with the requirements of Chapter V of the GDPR.
Please note that not all countries outside the European Economic Area have a level of data protection deemed adequate by the European Commission (so-called "adequacy decision"). A list of countries for which an adequacy decision has been adopted can be found at the following link: Adequacy decisions (europa.eu).
If an adequacy decision has not been adopted, we conclude standard contractual clauses adopted by the European Commission with the recipients of personal data ((EU) 2021/914 of 4 April 2021 - C (2021) 3972, OJ L 2021 (2021) 3972, OJ L 2021/914. EU No L 199/31 of 7 June 2021). In the case of transfer of data to other controllers, we apply the first module of these standard contractual clauses, and in the case of transfer of data to our processors, we use the second module. Where necessary, in addition to entering into standard contractual clauses, we will also take additional measures to protect your personal data.
You can ask us at any time for an overview of recipients in countries outside the European Economic Area and information about the measures we have taken to ensure the level of protection of the GDPR using the contact details set out in Section 1 of this Privacy Policy.
If you would like to assert your rights set out below, you can contact us at any time and without the required form through the communication channels set out in this Privacy Policy. By email and other communication channels, you can contact us and our Data Protection Officer using the contact details provided in Section 1 of this Privacy Policy.
You have the right to request confirmation as to whether or not your personal data will be processed. When we process your personal data, you have the right to access information about that personal data and to certain information required by law. For more information on the right of access, see Art. 15 GDPR.
You have the right to request the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data. For more information on the right to rectification, see Art. 16 GDPR.
We always strive to ensure the accuracy of our users' personal information. Therefore, please notify us immediately of any changes to your personal information (such as changes of address) so that we can keep it up to date.
If the legal requirements are met, you can request that we delete your personal data immediately. This applies in particular if:
We would like to point out that your right to erasure is subject to limitations. For example, we cannot delete personal data that we need to keep because of legal requirements. Data that we need to assert, exercise or defend legal entitlements is also excluded from the right to erasure. For more information on the right to erasure, see Art. 17 GDPR.
If the legal requirements are met, you can request the restriction of the processing of your personal data. This applies, in particular, to situations where:
For more information on the right to restriction of processing, see Art. 18 GDPR.
You have the right to receive the personal data that you have provided to us and that we process for the performance of a contract, either on the basis of your consent or by automated procedures, in a structured, customary and machine-readable format. You also have the right, if the above-mentioned conditions are met, to have this data passed on directly to a third party, insofar as this is technically feasible. For more information on the right to data portability, see Art. 20 GDPR.
If you have consented to the processing of your personal data, you can revoke this consent at any time with effect for the future. This does not affect the lawfulness of the processing of your data up to the time of revocation.
If you consider that the processing of your personal data violates the applicable data protection regulations, you can lodge a complaint with the supervisory authority dealing with the protection of personal data, in particular with the supervisory authority dealing with the protection of personal data in your city, place of work or place of the alleged violation. With regard to Polish, the local supervisory authority in the field of data protection is the President of the Office for Personal Data Protection (address: 2 Stawki Street, 00-193 Warsaw).
The right to object to the processing of your personal data when processing is based on our legitimate interests
To the extent that we process data on the basis of a legitimate interest, you can object to the processing at any time on grounds arising from your particular situation. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. We assume that we can usually demonstrate such compelling legitimate grounds in the course of processing on the basis of legitimate interest, but we investigate and assess each objection on a case-by-case basis.
For more information on the right to object, see Art. 21 GDPR.
In this Privacy Policy, we always provide up-to-date, complete and essentially definitive information on the processing of your personal data in connection with our website. This requires us to update this Privacy Policy regularly. We therefore recommend that you read this Privacy Policy regularly.