When you visit our fan page, your profile information and information about your visit is processed primarily by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland (hereinafter "Facebook Ireland"). Data is also processed if you do not have a Facebook account or are not logged in. You can find all further information on this in the Facebook data policy.
We process the data of visitors to our fan page, in particular information about user interactions (e.g. likes and comments), public profile information, demographic and statistical data as well as data transmitted to us in the context of news and comments.
In the opinion of the European Court of Justice (ECJ), we as the operator of a fan page are jointly responsible with Facebook Ireland for the processing of your personal data. The decision of the ECJ of 05.06.2018 can be found here, the decision of 29.07.2019 can be found here. The joint responsibility concerns in particular the use of the "Facebook Insights" function, more precisely the collection, storage and further processing of the Insights data. Facebook Ireland is responsible for the collection and storage of the data. STIHL only receives anonymized evaluations of the Insights data. Our company does not make any decisions about the processing of Insights data.
The promotional use of your personal data is particularly important for Facebook. We use the statistics function to learn more about the visitors of our fan page. Using this function enables us to adapt our content to the respective target group. In this way, we also use demographic information on the age and origin of the users, for example, although no personal reference is possible for us here.
The parties have concluded an agreement on joint responsibility (https://www.facebook.com/legal/terms/page_controller_addendum). For the processing of Insights data, it was agreed that Facebook Ireland will assume the obligation to protect the rights of the data subject and the necessary information obligations in accordance with Art. 13 and 14 GDPR. Data protection rights can be asserted both with Facebook Ireland and with STIHL. We will forward all requests from data subjects concerning processings for which Facebook Ireland is responsible to Facebook Ireland for processing.
The processing of the personal data of visitors to our Facebook fan page is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to ensure communication with our customers and their information about news related to our products.
You can revoke the data processing by Facebook here.
Data transfer
Certain processing operations, such as customer correspondence, are carried out by companies within the STIHL Group. Data is therefore regularly transferred within the group of companies. As a rule, the transmission is based on a contract processing agreement. In other cases, e.g. for the analysis of statistical, aggregated data for the purpose of market research, Art. 6 para. 1 lit. f GDPR is the legal basis for the transmission, whereby our legitimate interest lies in the efficient design of our processes and offers.
Data will only be transferred if this is necessary to fulfil the above-mentioned purposes, e.g. in the context of the management of our channel by an appropriately commissioned agency.
We would like to point out that the data processed when using social platforms and networks may possibly be processed outside the European Economic Area. In these cases, we will ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient's premises before your personal data is transferred. This can be achieved, for example, by means of EU standard contracts or binding corporate rules or special agreements to which the company may be subject.
Deletion of data
We process your data on our systems to the extent that this is necessary to fulfil the above-mentioned purposes or if there are statutory retention obligations. Your data will be deleted immediately after these periods have expired.
Your rights
In addition to the right to revoke your consent granted to us, you are entitled to the following further rights if the respective legal requirements are met:
- Right to information about your personal data stored with us in accordance with Art. 15 GDP
- Right to correction of incorrect or completion of correct data in accordance with Art. 16 GDP
- Right to delete your data stored with us in accordance with Art. 17 GDPR insofar as no legal or contractual retention periods or other legal obligations or rights to further storage must be observe
- Right to limit the processing of your data in accordance with Art. 18 GDP
- Right to data transferability according to Art. 20 GDP
- Right to appeal to a supervisory authority
Under the conditions of Art. 21 para. 1 GDPR, data processing may be objected to for reasons arising from the specific situation of the data subject.
The above-mentioned general right of objection applies to all processing purposes described in this privacy policy which are processed on the basis of Art. 6 para. 1 lit. f GDPR or for the purposes of direct marketing.