The Privacy Notice applies to personal data collecting on Sthil’s Australian website www.stihl.com.au. operated by Stihl Pty Ltd.
We would like to inform you about the processing of your personal data in this Privacy Notice. You will find below, among other things, information on how and why we process your personal data and what rights you have in this respect. For the purposes of this notice, “personal data” has the same meaning as “personal information” defined in the Privacy Act 1988 (cth), and “process” means collect, use or disclose.
In this Privacy Notice we provide you with information about the processing of your personal data in connection with visiting and using our website.
To help you get the information that is relevant to you at a glance, we have broken down this Privacy Notice into individual sections:
In this Privacy Notice we provide you with information in accordance with the requirements of applicable privacy laws. In Australia, this is the Privacy Act 1988 (Cth).
For the purposes of this Privacy Notice, the “controller” means the entity that determines the purposes and means of the processing of your personal data and ensure compliance with the requirements of data protection legislation. Where two or more controllers jointly determine the purposes and means of the processing, those controllers shall be jointly responsible for the processing, so-called joint controllers.
The controller responsible for the processing of your personal data in connection with this website is:
Stihl Pty Ltd
Attention: Privacy Officer
Postal address: 5 Kingston Park Court, Knoxfield VIC 3180 Australia
Email: privacy@stihl.com.au
ABN 76 004 881 145
("we", "us", “our”).
If you would like further information, please contact us at any time using the contact details specified above.
Where we use the term “personal data” in this Privacy Notice we mean any information relating to you or which reasonably identifies you.
Examples of personal data are your name, email address and postal address. However, your personal data include any data that are linked to you or that relate to you. We refer to data that do not relate to you as “non-personal data” or “anonymous data”. This Privacy Notice do not apply to these data.
We understand processing of your personal data to include, for example, the collection, storage, or erasure of your data.
If the data processing is governed by the UK or EU GDPR, we process your personal data only if we can base the processing on a legal basis or if this is lawful under the applicable data protection law, i.e. the processing is legally permissible. Within the scope of the GDPR most of the processing of your personal data is based on the following legal basis:
Further information on which processing operations are specifically based on which legal basis or under which data protection legislation processing is permissible is set out below in this Privacy Notice.
What personal data we collect from you
We process personal data that you provide to us, that we collect (automatically) or that we receive from third parties.
In principle, you are not obliged to provide your personal data to us. However, the disclosure of certain personal data may be necessary to enable us to offer and provide the website and all the functions of the website to you.
Personal data that you provide to us
We process information that you provide to us. For example, you may call us or contact us in some other way and provide certain information to us by these means. We collect and process these data to enable you to use our website. If you do not provide us with certain information, this may exclude or impair the use or full functionality of our website.
Personal data that are collected (automatically)
Certain information is collected and processed by us (automatically) when you use our website. This includes data such as your IP address, specific login data and data that are processed to enable us to make our website technically available.
Personal data that we receive from third parties
Sometimes we do not receive information directly from you. This may be the case, for example, if information about you is provided to us by third parties. For example, we work with companies that provide services for us and provide us with information about you.
When you visit our website, the browser used on your device automatically sends information to the server on our website and temporarily stores it in a log file.
If you would like to learn more about the cookies we use on our website, please click here.
Categories of personal data
The following information is processed when the website is visited:
Purpose
Your personal data are processed for the following purposes:
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
If you have any questions, you can contact us at any time by email, post, telephone, contact forms or any other means. If you contact us, we will usually reply to you via the means of communication chosen by you.
Categories of personal data
The following information is processed when communicating with you:
Purpose
Your personal data are processed for the following purposes:
These purposes are hereinafter collectively referred to as "support".
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Our website contains guidance tools in relation to our products, such as our Chain-Bar-Advisor.
Categories of personal data
The following information is processed in connection with the product guidance tools:
Purpose
Your personal data are processed for the following purposes:
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 this Privacy Notice.
On our website we give you the opportunity to register for our newsletter.
Where you receive newsletters and other electronic marketing communications from us, you may opt out of receiving further marketing communications by following the opt out instructions provided in the communication.
Personalised newsletters
Please note that when sending the newsletter, we carry out performance measurement and analyse your usage behaviour. For this analysis the emails sent contain so-called web beacons or tracking pixels. These are located on our servers and tell us when and how you retrieve our newsletter. For the analysis we link the above-mentioned data and web beacons to your email address.
You can disable the display of images by default in your email application to restrict the processing of data through the use of our newsletter. In this case you will not be able to see the newsletter in full and you may not be able to use all the features. If you have the images displayed manually, the above-mentioned tracking is performed.
For more information on how we process your personal data for marketing purposes and to improve your user experience, see section 5, Marketing and user experience. In particular, we draw your attention to information on the processing of your personal data in connection with Oracle Eloqua.
Categories of personal data
The following information is processed in connection with the newsletter distribution:
Purpose
Your personal data are processed for the following purposes:
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
We use technologies on our website that are intended to facilitate the use of the website and make it more user-friendly and to provide various functionalities. Such technologies include, for example, cookies, pixels and scripts. This section provides information on your personal data in this context.
In our Cookie Notice we explain what cookies and similar technologies we use on our website for what purposes and how you can manage these cookies.
We use the Google Analytics analysis tool on our website. Google Analytics is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google LLC", together with other Google companies of Alphabet Inc. "Google").
We use Google Analytics with the extension "anonymize IP". This means that your IP address will be shortened before it is sent to Google in the United States, so that Google will not receive your full IP address from us.
Categories of personal data
The following information is processed in connection with the use of Google Analytics:
Purpose
We use Google Analytics to analyse your use of the website, to obtain reports about web page activities, and to obtain other Google services associated with your use of our website and other Internet use.
This will enable us to continuously improve our website, its user-friendliness and our offering, and to tailor them to suit your needs and interests.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Privacy Policy
The Privacy Policy for Google Ltd.’s Google Analytics can be found here:
https://policies.google.com/privacy?hl=en-US
We use reCAPTCHA v2 on our website. reCAPTCHA v2 is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Ltd", together with other Google companies of Alphabet Inc. "Google").
Categories of personal data
The following information is processed in connection with the use of Google reCAPTCHA:
Purpose
We use reCAPTCHA v2 to prevent abusive automated entries in web forms, thereby protecting the host's technical systems.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
In connection with the use of reCAPTCHA v2, personal data are transferred to countries outside of your jurisdiction. For more information, see section 7 of this Privacy Notice.
Privacy Policy
The Privacy Policy for Google Ltd’s reCAPTCHA can be found here:
https://policies.google.com/privacy?hl=en-US
On our website we embed video content via YouTube. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google Ltd’, together with other Google companies of Alphabet Inc. “Google”).
Categories of personal data
The following information is processed in connection with the use of YouTube:
Purpose
We link video content via YouTube to inform you about our products and offers.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
Privacy Policy
Google’s Privacy Policy for the processing of personal data in connection with YouTube can be found here:
https://policies.google.com/privacy?hl=en-US
On our website we embed maps from Google Maps. Google Maps is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ltd”, together with other Google companies of Alphabet Inc. “Google”).
Categories of personal data
The following information is processed in connection with the use of Google Maps:
Purpose
We embed maps via Google Maps to display geographic information.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
In connection with the use of Google Maps, personal data are transferred to countries outside of your jurisdiction. For more information, see section 7 of this Privacy Notice.
Privacy Policy
Google's Privacy Policy for the processing of personal data in connection with Google Maps can be found here:
https://policies.google.com/privacy?hl=en-US
5.3 Advertising (tracking)
We use Oracle Eloqua. Oracle Eloqua is provided by Oracle Deutschland B.V. & Co. KG, Riesstrasse 25, 80992 Munich ("Oracle").
Categories of personal data
The following information is processed in connection with the use of Oracle Eloqua:
Purpose
We use Oracle Eloqua to personalise our emails and to determine whether our emails, particularly our newsletters, are opened and which links in our emails you click on. We use this information to improve our emails and the offers and services we provide. The aim is to tailor our website and services and offers, especially our emails, to suit your needs and interests.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
In connection with the use of Oracle Eloqua, personal data may be transferred to countries outside of your jurisdiction. For more information, see section 7 of this Privacy Notice.
Privacy Policy
Oracle's Privacy Policy for the processing of personal data in connection with Oracle Eloqua can be found here:
https://www.oracle.com/au/legal/privacy/privacy-policy.html
On our website we embed Google Ads. Google Ads is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Categories of personal data
The following information is processed in connection with the use of Google Ads:
Purpose
We use Google Ads to run search advertisement campaigns if you have visited our website before. The services allow us to combine our ads with certain keywords or, if you have visited our website in the past, to advertise services that you have viewed on our website, for example. We may display interest-based advertising on other websites within the Google Search and Display Network (as a “Google Ad” as part of the Google Search or on other Google Partner websites).
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
In connection with the use of Google Ads, personal data are transferred to countries outside of your jurisdiction. For more information, see section 7 of this Privacy Notice.
Privacy Policy
Google's Privacy Policy for the processing of personal data in connection with Google Ads can be found here:
https://policies.google.com/privacy?hl=en-US
On our website we use Microsoft Advertising. Microsoft Advertising is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").
Categories of personal data
The following information is processed in connection with the use of Microsoft Advertising:
Purpose
We use Microsoft Advertising to run search advertisement campaigns for you if you have visited our website before. The services allow us to combine our ads with certain keywords or, if you have visited our web site in the past, to advertise services that you have viewed on our website, for example. This enables us to display interest-based advertising on other websites within the Microsoft Search Network.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
In connection with the use of Microsoft Advertising, personal data are transferred to countries outside of your jurisdiction. For more information, see section 7 of this Privacy Notice.
Privacy Policy
Microsoft's Privacy Policy for the processing of personal data in connection with Microsoft Advertising can be found here:
https://privacy.microsoft.com/en-us/privacystatement
On our website we use pixels from social networks. The pixels are activated and your data are processed by social networks only.
If you are registered as a user on a social network whose pixels we use, your visit to our website can be linked to your user account on that social network. We point out that social networks can then link the data collected about you via the pixels used on our website to other personal data from you even if you are not a user of the social network.
Please also note that social network providers may also process the personal data processed via the pixel for their own purposes. In addition, we may be jointly responsible with social network providers for certain processing activities.
In the case of joint controllership, we shall conclude an agreement with the social network provider on the processing of personal data under joint controllership.
Please see the Privacy Policies of the social networks, which we will indicate below.
Categories of personal data
The following information is processed in connection with the use of pixels:
Purpose
We use pixels from social networks to display information and advertising on our products, offers and services to you on the respective social network. In addition to being displayed on the respective social network, information and advertising on our products, offers and services may be displayed to you on other websites that also offer the respective pixel.
By using pixels, we obtain information about our promotional activities, especially on social networks.
Legal basis
We base the processing of your personal data on the following legal basis:
Storage period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of your jurisdiction
In connection with the use of pixels, personal data may be transferred to countries outside of your jurisdiction. For more information, see section 7 of this Privacy Notice.
Pixels used and Privacy Policies for the pixels used
We list the pixels of social networks used by us below together with information about the social network provider and the Privacy Policy for the respective social network and pixel.
The Meta pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
Meta's Privacy Policy for the processing of personal data in connection with Meta pixels can be found here:
https://www.facebook.com/about/privacy/
We shall store your data only for as long as is necessary to provide our offerings, in particular our website, or for as long as we have a legitimate interest or legitimate purpose in continuing to store your data. The storage period for your personal data depends in particular on the category of personal data processed and the purpose of the processing. Storage of your data is also considered based on your consent to its storage.
Finally, we take into account statutory storage periods, which may require us to keep your data for a certain period of time. Your data will therefore be stored if this is provided for by Australian or the European or national legislator in European Union regulations, laws or other provisions to which we are subject. Corresponding requirements are also found in particular in commercial and tax legislation or derive from the regular statutory limitation periods.
In the event of a legal dispute, we will keep the personal data that we need for our legal defence until the final conclusion of the proceedings.
For further information on the storage period, please contact us using the contact details that can be found in section 1 of this Privacy Notice.
In certain cases, we share your personal data with other companies in the STIHL Group. Processing by these STIHL companies is done regularly on our behalf. The processing of your personal data may also be carried out under the sole controllership of the STIHL company receiving your data or under the joint controllership of that company with us.
If we share your personal data with other controllers, this will in principle be done only if this is necessary for the performance of a contract with you, if we or the third party have a legitimate interest in this or if you have agreed to this.
Processing of your personal data by another STIHL company on our behalf is carried out on the basis of a contract for processing data on behalf of a controller within the meaning of the GDPR.
In the case of joint controllership, we shall conclude an agreement on processing under joint controllership. This agreement shall lay down, inter alia, the obligations of the joint controllers in relation to compliance with the requirements of the GDPR (if applicable) and any other data protection laws that we may be required to comply with including the Privacy Act 1988 (Cth). We shall be happy to provide you with the essential elements of this agreement on request. To this end, please contact us using the contact details that can be found in section 1 of this Privacy Notice.
In addition to recipients in the STIHL Group, we also share your personal data with third parties, in respect of individual processing operations and taking into account the data protection requirements. These third parties include service providers that process your personal data on our behalf and service providers that provide services for us that are associated with the processing of your personal data. The processing of your personal data may also be carried out under the sole controllership of the third parties receiving your data or under the joint controllership of those third parties with us.
If we share your personal data with other controllers, this will in principle be done only if this is necessary for the performance of a contract with you, if we or the third party have a legitimate interest in this or if you have consented to this.
In connection with the processing of your personal data we use the following categories of service providers:
Where we are obliged to do so under the Privacy Act, GDPR or the law of EU Member States, we will also pass on your data to authorities and courts.
In Australia, we may also disclose your information where you have consented to the disclosure or it is otherwise permitted under the Privacy Act.
Processing of your personal data by third parties on our behalf is carried out on the basis of a contract for processing data on behalf of a controller within the meaning of the GDPR.
In the case of controllership, we shall conclude an agreement on processing under joint controllership. We shall be happy to provide you with the essential elements of this agreement on request. To this end, please contact us using the contact details that can be found in section 1 of this Privacy Notice.
Regardless of where your personal data are processed, our highest priority is to always ensure the level of protection guaranteed by the GDPR.
If we transfer personal data to recipients outside the European Economic Area, we comply with the requirements of Chapter V of the GDPR. If we work with third parties or use service providers that may transfer your personal data to countries outside the European Economic Area, we shall oblige those third parties or service providers to comply with the requirements of Chapter V of the GDPR.
We point out that not all countries outside the European Economic Area have a level of data protection that is recognised as adequate by the European Commission (so-called "adequacy decision"). A list of the countries for which an adequacy decision has been adopted can be found at the following link: Adequacy decisions (europa.eu).
Where an adequacy decision has not been adopted, we conclude the standard contractual clauses adopted by the EU Commission with the recipients of your personal data ((EU) 2021/914 of 4 April 2021 – C (2021) 3972, OJ EU No L 199/31 of 7 June 2021). For transfer to other controllers we use Module One of these standard contractual clauses and for transfer to our processors we use Module Two. If necessary, in addition to concluding the standard contractual clauses we shall also take additional measures to protect your personal data.
You can ask us for an overview of recipients in countries outside the European Economic Area and for information on the measures we have taken to ensure the level of protection of the GDPR at any time using the contact details specified in section 1 of this Privacy Notice.
If you reside in Australia, we may transfer your personal data to countries outside of Australia including Germany, United States and Poland. We take reasonable steps to ensure that the overseas recipients of your personal information do not breach the Privacy Act 1988 (Cth) relating to your personal information.
If you wish to exercise your rights set out below, you can contact us informally at any time using the means of communication specified in this Privacy Notice. You can contact us by email and the other means of communication using the contact details set out in section 1 of this Privacy Notice.
You may access the personal data that you hold about you by contacting us. If you would like to know what personal data we hold about you, please contact us. There may be instances where we cannot grant you access to the personal data that we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will give you written reasons for any refusal.
If you discover that there is an error or information is missing, you may send a correction request to us, and we will review your request for amendment. Where we decide not to make a requested amendment and you disagree, you may request a note of your requested correction to be added to your personal data that explains your correction request.
If you have given your consent to the processing of your personal data, you may withdraw it at any time with future effect. This shall be without prejudice to the lawfulness of the processing of your data until it has been withdrawn.
If you believe that your privacy has been breached, please contact us using the contact information above.
We request that complaints about breaches of privacy be made in writing, so we can be sure about the details of the complaint. We will attempt to confirm as appropriate and necessary with you, your understanding of the conduct relevant to the complaint and what you expect as an outcome. We will inform you whether we will conduct an investigation. If we determine an investigation is required, we will provide the name, title, and contact details of the investigating officer and the estimated completion date for the investigation process.
After we have completed our enquiries, we will contact you, usually in writing, to advise the outcome and invite a response to our conclusions about the complaint. If we receive a response from you, we will assess it and advise if we have changed our view.
if you are not satisfied with the way your privacy-related complaint is handled by us, you may refer your complaint to the Office of the Information Commissioner (https://www.oaic.gov.au/) for guidance on alternative courses of action which may be available.
In this Privacy Notice we always provide you with up-to-date, complete and, in principle, final information about the processing of your personal data in connection with our website. This requires us to regularly update this Privacy Notice. We therefore advise you to consult this Privacy Notice on a regular basis.
This Privacy Notice was last updated on 19.02.2024