Privacy Policy of ANDREAS STIHL NV
(Information from Data protection | STIHL)
We would like to inform you in this Privacy Notice about the processing of your personal data. Below you will find, among other things, information on how and why we process your personal data and what rights you have in this respect.
Last updated May 7, 2025
SCOPE OF THE PRIVACY NOTICE
In this Privacy Notice we provide you with information about the processing of your personal data in connection with visiting and using our website.
To assist you in quickly obtaining information that is relevant to you, we have divided this Privacy Notice into individual sections:
In this Privacy Police, we provide you with information in accordance with the requirements of the European General Data Protection Regulation (hereinafter "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of personal data.
In this Privacy Police, we provide you with information in accordance with the requirements of the European General Data Protection Regulation (hereinafter "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council). We also comply with the requirements of other national data protection laws that may apply to the processing of personal data.
1. CONTROLLER AND DATA PROTECTION OFFICER
1.1 CONTROLLER
The controller under data protection law will determine the purpose and means of the processing of your personal data and ensure compliance with the requirements of the data protection legislation. Where two or more controllers jointly determine the purposes and means of processing, such controllers shall be jointly responsible for the processing, being referred to as joint controllers.
The controller responsible for the processing of your data in connection with this website is:
STIHL NV
Veurtstraat 117, 2870 Puurs-Sint-Amands, Belgium
Email address - privacy@stihl.be
VAT number BE0427.714.768
If you would like further information, please contact us at any time using the contact details specified above.
2. GENERAL INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA
2.1 GENERAL INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA
When we use the term "personal information" in this Privacy Notice, we are referring to any information relating to you.
Examples of personal data are your name, email address and postal address. However, your personal data includes any data that is linked to or relating to you. We refer to data that does not refer to you as "non-personal data" or "anonymous data". The data protection rules and this Privacy Notice do not apply to such data.
We understand that the processing of your personal data includes, for example, the collection, storage or deletion of your data.
2.2 SUMMARY OF THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
We process your personal data only where we can rely on such processing on a legal basis or if this is lawful under applicable data protection law, i.e. the processing is legally permitted. Within the framework of the GDPR, most of the processing of your personal data is based on the following legal grounds:
The processing of your personal data is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR).
Your explicit consent has been given for the processing of personal data for one or more specific purposes (Article 6(1)(a) GDPR).
The processing of your personal data is necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c) of the GDPR).
The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms requiring the protection of personal data (Article 6(1)(f) of the GDPR).
Additional information regarding which processing operations are specifically based on certain legal bases or under which data protection legislation the processing is permitted is set out below in this Privacy Notice.
2.3 WHAT PERSONAL DATA WE COLLECT FROM YOU
We process personal data that you provide to us, that we collect (automatically) or that we receive from third parties.
In principle, you are not obliged to provide us with your personal data. However, the disclosure of certain personal data may be necessary to enable us to offer and provide you with the website and website features.
Personal data you provide to us
We process information that you provide to us. For example, you may call or contact us in some way and provide us with certain information by these means. We collect and process this data to enable you to use our website. If you do not provide us with certain information, it may exclude or affect the use or full functionality of our website.
Personal data that is collected (automatically)
Certain information is collected and processed by us (automatically) when you use our website. This includes data such as your IP (Internet Protocol) address, login-specific data and data that is processed in such a way as to make our website technically available.
Personal data we receive from third parties
Sometimes we do not receive information directly from you. This may be the case, for example, if information about you is provided to us by third parties. For example, we work with companies that provide services to us and give us information about you.
3. VISITING OUR WEBSITE
When you visit our website, the browser used on your device automatically sends information to our website's server and temporarily stores it in a log file.
If you would like to learn more about cookies on our website, please click here.
Categories of personal data
The following information is processed when you visit the website:
Your IP (Internet Protocol) address
The date and time of access
The name and URL of the accessed file
The website/application from which you have accessed (referrer URL)
The browser you use and, if applicable, the operating system of the device you use to access our website and the name of the access provider.
Purpose
Your personal data is processed for the following purposes:
To ensure a smooth connection is established
To ensure that our website is user-friendly
To analyze system security and stability
Legal basis
We base the processing of your personal data on the following legal bases:
The processing of your personal data is necessary to enable you to access the website and to ensure the performance, long-term functionality and security of our website and systems.
We base the processing of personal data on the legal basis of Article 6(1)(f) of the GDPR.
Retention period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
4. USE OF OUR WEBSITE AND SERVICES
4.1 CONTACT AND COMMUNICATION
If you have any questions, you may contact us at any time by email, mail, telephone, contact forms or any other means. If you contact us, we will usually respond by the same means of communication that you have chosen.
Categories of personal data
The following information is processed when we communicate with you.
Your contact details, such as phone number or email address
Communication with you, including recordings of telephone conversations with you, if applicable.
Data relating to your order or concern, such as the subject of your order or our communication with you.
Data necessary to clarify your concern.
Purpose
Your personal data is processed for the following purposes:
To contact you if you have contacted us with questions or other concerns
To communicate with you regarding the subject of your orders and concerns, for example for information purposes or to comply with legal or contractual obligations
If we record telephone conversations with you, it is for quality control and training purposes.
To improve our support
These purposes are referred to later, collectively, as "support".
Legal basis
We base the processing of your personal data on the following legal basis:
The processing of your personal data in connection with our support is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
We base the processing of personal data on the legal basis of Article 6(1)(b) of the GDPR.
We provide you with certain support services outside of the existing contractual relationship.
We base the processing of personal data on the legal basis of Article 6(1)(f) of the GDPR.
We have a legitimate interest in supporting you with questions about our offers and services and in ensuring the satisfaction of our (former and future) customers.
In the case of certain processing of your personal data, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR to the extent that this is necessary.
This applies in particular to the recording of telephone calls.
Retention Period
In principle, we will process your personal data only insofar as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
5. MARKETING AND USER EXPERIENCE
5.1 COOKIES AND SIMILAR TECHNOLOGIES
We use technologies on our website with the intention of making the website easier to use and to make it easier to use and to provide certain functionalities. Such technologies include, for example, cookies, pixels and scripts. This section provides information about your personal data in this context.
In our Cookie Notification We explain which cookies and similar technologies are used by us on our website, for what purposes and how you can control these cookies.
5.2 PROVIDING, DEVELOPING AND IMPROVING OUR WEBSITE
(a) Google Analytics Network Analytics
We use Google Analytics analysis tool on our website. Google Analytics is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google", together with other Alphabet Inc. Google companies identified as "Google").
We use Google Analytics with the "anonymize IP" extension. This means that your IP (Internet Protocol) address will be truncated before it is sent to Google in the United States, so that Google will not receive your full IP address from us.
Categories of personal data
The following information is processed in connection with the use of Google Analytics:
Your IP (Internet Protocol) address
Unique identification number assigned by the browser
The user's clicking behavior on the website
The subpages accessed by the user
Browser type, URL, screen resolution
Timestamp
Purpose
We use Google Analytics to analyze your use of the website, to obtain reports on website activities, and to obtain other Google services associated with your use of our website and other Internet uses.
This will enable us to continually improve our website, its usability and offering, and its design to suit your needs and interests.
Legal basis
We base the processing of your personal data on the following legal bases:
Your personal data is processed on the basis of the consent you have given us in the Privacy Preference Center. It can be accessed via the Cookie Notice.
We base the processing of personal data on the legal basis of Article 6(1)(a) of the GDPR.
The use of Google Analytics requires the setting of a cookie. For this purpose, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR in the Privacy Preference Center. For more information about our cookies, please see our website Cookie Policy.
Retention Period
In general, we will only process your personal data for as long as necessary to achieve these purposes. For more information on the retention period, please refer to Section 6 of this Privacy Policy.
Transfer of your data to countries outside the EEA
In connection with the use of Google Analytics, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy Policy
Further information on the terms of use and data protection can be found at www.google.com/analytics/terms/nl.html and on www.google.com/intl/nl/analytics/privacyoverview.html.
(b) Google Optimize
Our website uses the "Google Optimize" service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service enables us to improve the appeal, content and functionality of our website by making available new functions and content to a certain portion of our users and statistically analyzing changes in website use. Google Optimize is a sub-service of Google Analytics (see Google Analytics, section a directly above).
Cookies are set when using the service. The information on your use of our website generated by doing so is generally transferred to and stored on a server of Google in the United States (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use Google Optimize with IP anonymization activated, meaning that your IP address is truncated by Google while still in the EU/EEA. It is only in exceptional cases that the full IP address is sent to a Google server located in the US and truncated there. Google will use this information for the purpose of evaluating your use of our website in order to compile reports on the optimization test and associated website activity for us and to provide other services to us relating to the use of the website and the Internet.
The legal basis for the data processing is your consent pursuant to Articles 6(1)(a) and 49(1)(a) GDPR. You can change this consent at any time with effect for the future by changing your settings in the Consent Manager.
(c) YouTube
We embed video content via YouTube on our website. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ('Google Ltd', together with Alphabet Inc.'s Google companies identified as "Google").
Categories of personal data
The following information is processed in connection with your use of YouTube:
Your IP (Internet Protocol) address
Information about your device
Browser
Operating system
Information about the video content you have watched
Purpose
We link video content via YouTube to inform you about our products and offers.
Legal basis
We base the processing of your personal data on the following legal bases:
Video content is presented with a thumbnail image. Your data is processed by Google only if you have consented to the processing of your data ("two-click solution").
We process your personal data on the basis of Article 5 (1) of the LAPD
Using YouTube requires a cookie to be installed. To this end, we will obtain your consent under Article 5 (1) of the LAPD on the cookie banner. For more information about our cookies, see our Cookie Notification.
Storage period
In principle, we will process your personal data only insofar as it is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside the EEA
In connection with the use of YouTube, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy Policy
Google's Privacy Policy for the processing of personal data in connection with YouTube can be found here:
https://policies.google.com/privacy?hl=en
(d) Google Maps
We incorporate Google Maps into our website. Google Maps is supplied by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Ltd", together with other Alphabet Inc. Google companies identified as "Google").
Categories of personal data
The following information is processed in connection with the use of Google Maps:
Your IP (Internet Protocol) address
Information about your device
Browser
Operating system
Your location
Purpose
We incorporate maps via Google Maps to provide geographic information.
Legal basis
We base the processing of your personal data on the following legal bases:
Your data is processed by Google only if you have consented to the processing of your data ("two-click solution").
We process your personal data on the basis of Art. 6 para. 1 p. 1 lit. a) GDPR.
Storage period
In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside of the EEA
If the data is processed outside the European Economic Area / the EU, where there is no level of protection in accordance with the European standard, Google declares that it uses standard contractual clause
Privacy Policy
You can find more information about Google's terms of use and data protection at www.cloud.google.com/maps-platform/terms/ or on https://policies.google.com/privacy?hl=nl.
(e) Mouseflow ApS web analysis tool
We use Mouseflow, a web analysis tool offered by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, on our website. The tool records individual visits that are selected at random and also transfers the visitor's anonymized IP address to the provider of this tool.
The tool allows us to prepare a record of mouse movements and mouse clicks. These can be played back on a random basis as what are known as session replays and can be analyzed in heat maps so that we can identify potential improvements for this website. Mouseflow can also be used to conduct surveys that are designed to measure visitor satisfaction levels. The surveys performed and participation in them are also recorded in a cookie created by the tool.
This tool is used exclusively with your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time as described above by changing your cookie settings.
You can find further information on data protection measures taken by the provider and on the use of Mouseflow in the provider's Privacy Statement: https://mouseflow.com/legal/
5.3 ADVERTISING (TRACKING)
(a) Google Ads
We incorporate Google Ads into our website. Google Ads is provided by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Categories of personal data
The following information is processed in connection with the use of Google Ads:
Your IP (Internet Protocol) address
Information about your device
Browser
Operating system
Purpose
We use Google Ads to conduct search advertising campaigns if you have visited our website before. These services allow us to combine our advertisements with certain keywords or, if you have visited our website in the past, to advertise services that you have viewed on our website, for example. We may display expression-of-interest advertising on other network sites within the Google Search and Display Network (such as a "Google Ad" as part of Google Search or on other Google Partner network sites).
Legal basis
We base the processing of your personal data on the following legal bases:
Your personal data is processed on the basis of your consent given to us in the Privacy Preference Center.
We base the processing of personal data on the legal basis of Article 6(1)(a) of the GDPR.
To use Google Ads, you need to set a cookie. For this purpose, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR in the Privacy Preference Center. For more information about our cookies, please see our Cookie Policy.
Retention Period
In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside the EEA
In connection with the use of Google Ads, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Policy.
Privacy Policy
Google's privacy policy for the processing of personal data in connection with Google Ads can be found here:
https://policies.google.com/privacy?hl=en
(b) Microsoft Advertising
We use Microsoft Advertising on our website. Microsoft Advertising is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft").
Categories of personal data
The following information is processed in connection with Microsoft Advertising:
Your IP address
Information about your device
Browser
Operating system
Purpose
We use Microsoft Advertising to conduct search advertising campaigns if you have visited our website. These services allow us to combine our advertisements with certain keywords or, if you have visited our website in the past, to advertise services that you have viewed on our website, for example, to advertise based on expressions of interest expressed on other websites within the Microsoft Search Network.
Legal basis
We base the processing of your personal data on the following legal bases:
Your personal data is processed on the basis of your consent given to us in the Privacy Preference Center.
We base the processing of personal data on the legal basis of Article 6(1)(a) of the GDPR.
Microsoft's use of advertising requires the setting of a cookie. For this purpose, we will obtain your consent in accordance with Article 6(1)(a) of the GDPR in the Privacy Preference Center. For more information about cookies, please refer to Cookie Policy.
Retention period
In principle, we will process your personal data only insofar as it is necessary to achieve our purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside the EEA
In connection with the use of Microsoft Advertising, personal data is transferred to countries outside the EEA. For more information, please see Section 8 of this Privacy Notice.
Privacy Policy
Microsoft's privacy policy for the processing of personal data in connection with Microsoft Advertising can be found here: https://about.ads.microsoft.com/en-us/policies/legal-privacy-and-security
5.4 SOCIAL MEDIA
On our website we use pixels from social networks. The pixels are activated and your data are processed by social networks only after you have consented to the processing of personal data by social networks in the Privacy Preference Centre.
If you are registered as a user on a social network whose pixels we use, your visit to our website can be linked to your user account on that social network. We point out that social networks can then link the data collected about you via the pixels used on our website to other personal data from you even if you are not a user of the social network.
Please also note that social network providers may also process the personal data processed via the pixel for their own purposes. In addition, we may be jointly responsible with social network providers for certain processing activities.
In the case of joint controllership, we shall conclude an agreement with the social network provider on the processing of personal data under joint controllership.
Please see the Privacy Policies of the social networks, which we will indicate below.
Categories of personal data
The following information is processed in connection with the use of pixels:
Your IP address
Information about your device
Browser
Operating system
Purpose
We use pixels from social networks to display information and advertising on our products, offers and services to you on the respective social network. In addition to being displayed on the respective social network, information and advertising on our products, offers and services may be displayed to you on other websites that also offer the respective pixel.
By using pixels, we obtain information about our promotional activities, especially on social networks.
Legal basis
We base the processing of your personal data on the following legal basis:
Your personal data is processed on the basis of your consent given to us in the Privacy Preference Center.
We base the processing of personal data on the legal basis of Article 6(1)(a) of the GDPR.
Retention Period
In principle, we shall process your personal data only for as long as is necessary to achieve these purposes. For more information on the storage period, see section 6 of this Privacy Notice.
Transfer of your data to countries outside the EEA
In connection with the use of pixels, personal data may be transferred to countries outside the India. For more information, see section 8 of this Privacy Notice.
Pixels used and Privacy Policies for the pixels used
We list the pixels of social networks used by us below together with information about the social network provider and the Privacy Policy for the respective social network and pixel.
(a) Meta (Facebook) pixel
The Meta pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
Meta's Privacy Policy for the processing of personal data in connection with Meta pixels can be found here:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
6. RETENTION PERIOD
We will store your data only for as long as it is necessary to provide our offers, in particular our website, or for as long as we have a legitimate interest in continuing to store your data. The period of storage of your personal data depends in particular on the category of personal data processed and the purpose of the processing. The storage of your personal data is also considered to be based on your consent to its storage.
Finally, we take into account statutory storage periods, which may require us to keep your data for a certain period. Your data will therefore be stored if this is provided for by the European or national legislator, in European Union regulations, in laws or other provisions to which we are subject. Corresponding requirements are also found in particular in commercial or tax legislation or derive from regular limitation periods.
In the event of a legal dispute, we will retain the personal data we need for our legal defence until the final conclusion of the proceedings.
For further information on the storage period, please contact us using the contact details which can be found in section 1 of this Privacy Notice.
7. RECIPIENTS OF YOUR PERSONAL DATA
7.1 RECEPTORS WITHIN THE STIHL GROUP
In certain cases we share your personal data with other companies of the STIHL Group. The processing by these STIHL companies is regularly done for us. The processing of your personal data may also be carried out under the sole control of the STIHL company that receives your data or under the joint control of that company with us.
If we share your personal data with other controllers, this will in principle only be done if it is necessary for the performance of a contract with you, if we or the third party has a legitimate interest in doing so or if you have agreed to this.
The processing of your personal data by another STIHL company on our behalf is based on a data processing contract on behalf of the controller within the meaning of the GDPR.
In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. This agreement sets out, among other things, the obligations of the joint controllers with regard to compliance with the requirements of the GDPR. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.
7.2 RECIPIENTS OUTSIDE THE STIHL GROUP (THIRD PARTIES)
In addition to the recipients in the STIHL Group, we also share your personal data with third parties, in connection with individual processing operations and taking into account data protection requirements. These third parties include service providers who process your personal data for us and service providers who provide services for us who are associated with the processing of your personal data. The processing of your personal data may also be carried out under the sole control of the third parties receiving your data or under the joint control of those third parties with us.
If we share your personal data with other controllers, this will in principle only take place if it is necessary for the performance of a contract with you, if we or a third party has a legitimate interest in doing so or if you have consented to this.
In connection with the processing of your personal data we use the following categories of service providers:
IT (information technology) service providers (data hosting providers)
Support (customer support)
Lawyers, accountants and tax advisors
Vendors of marketing applications or applications to improve the user experience
Human Ressource Management Systems (in case of some STIHL subsidaries, who manage their job application process through a third party system)
Where we are required to do so under the GDPR or the laws of the EU member states, we will also transfer your data to authorities and courts.
The processing of your personal data by third parties on our behalf is based on a data processing agreement on behalf of the controller within the meaning of the GDPR.
In the case of joint controllership, we will enter into a data processing agreement as part of joint controllership. We will be happy to provide you with the essential elements of this agreement upon request. To do so, please contact us using the contact details provided in Section 1 of this Privacy Policy.
8. TRANSFER OF YOUR PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA
Regardless of where your personal data is processed, it is our top priority that the level of protection guaranteed by the GDPR is always ensured.
If we transfer personal data to recipients outside the European Economic Area, we comply with the requirements set out in Chapter V of the GDPR. If we work with third parties or use service providers that may transfer your personal data to countries outside the European Economic Area, we oblige these third parties or service providers to comply with the requirements of Chapter V of the GDPR.
Please note that not all countries outside the European Economic Area have a level of data protection deemed adequate by the European Commission (so-called "adequacy decision"). A list of countries for which an adequacy decision has been adopted can be found at the following link: Adequacy decisions (europa.eu).
If an adequacy decision has not been adopted, we conclude standard contractual clauses adopted by the European Commission with the recipients of personal data ((EU) 2021/914 of 4 April 2021 - C (2021) 3972, OJ L 2021 (2021) 3972, OJ L 2021/914. EU No L 199/31 of 7 June 2021). In the case of transfer of data to other controllers, we apply the first module of these standard contractual clauses, and in the case of transfer of data to our processors, we use the second module. Where necessary, in addition to entering into standard contractual clauses, we will also take additional measures to protect your personal data.
You can ask us at any time for an overview of recipients in countries outside the European Economic Area and information about the measures we have taken to ensure the level of protection of the GDPR using the contact details set out in Section 1 of this Privacy Policy.
9. YOUR RIGHTS AND THE EXERCISE OF YOUR RIGHTS
In addition to the right to revoke a consent granted by you to us, you have the following additional rights, provided that the respective legal conditions are met:
right of access to your personal data stored with us pursuant to Article 15 GDPR;
the right to rectification of inaccurate personal data and the right to the completion of incomplete personal data pursuant to Article 16 of the GDPR;
the right to erasure of your personal data stored with us pursuant to Article 17 GDPR, provided that no statutory or contractual retention periods or other legal rights or obligations for further retention are to be observed;
right to restriction of the processing of your data pursuant to Article 18 GDPR;
right to data portability in accordance with Article 20 GDPR;
Right to lodge a complaint with a supervisory authority:
Dutch Data Protection Authority
P.O. Box 93374, 2509 AJ THE HAGUE
Tel: 070-8888 500*
Fax: 070-8888 501
privacy@autoriteitpersoonsgegevens.nl
9.1 RIGHT OF ACCESS
You have the right to request confirmation as to whether or not your personal data will be processed. When we process your personal data, you have the right to access information about that personal data and to certain information required by law. For more information on the right of access, see Art. 15 GDPR.
9.2 RIGHT TO RECTIFICATION
You have the right to request the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data. For more information on the right to rectification, see Art. 16 GDPR.
We always strive to ensure the accuracy of our users' personal information. Therefore, please notify us immediately of any changes to your personal information (such as changes of address) so that we can keep it up to date.
9.3 RIGHT TO ERASURE
If the legal requirements are met, you can request that we delete your personal data immediately. This applies in particular if:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the processing of personal data is based on your consent, you withdraw this consent and we cannot base the processing on another legal basis;
you have objected to the processing of your personal data on grounds relating to your particular situation and there are no overriding grounds for the processing of your personal data.
if your personal data has been transferred to third parties and we are obliged to delete your personal data, we will inform these third parties of the deletion of the data, insofar as this is required by law.
We would like to point out that your right to erasure is subject to limitations. For example, we cannot delete personal data that we need to keep because of legal requirements. Data that we need to assert, exercise or defend legal entitlements is also excluded from the right to erasure. For more information on the right to erasure, see Art. 17 GDPR.
9.4 RIGHT TO RESTRICT PROCESSING
If the legal requirements are satisfied, you can obtain restrictions on the processing of your personal data. In particular, this is the case when:
the accuracy of your personal data is disputed by you. The processing of your data will be restricted for a period enabling us to verify the accuracy of your personal data;
the processing of your personal data is not lawful and you request the restriction of their use instead of the erasure of your personal data;
we no longer need your personal data for the purposes of the processing, but you need the data for the establishment, exercise or defence of legal claims;
you have objected to the processing of your personal data on grounds relating to your particular situation pending verification that our legitimate grounds for the processing override your grounds.
For more information on the right to restriction of processing, see Art. 18 GDPR.
9.5 RIGHT TO DATA PORTABILITY
You have the right to receive the personal data that you have provided to us and that we process for the performance of a contract, either on the basis of your consent or by automated procedures, in a structured, customary and machine-readable format. You also have the right, if the above-mentioned conditions are met, to have this data passed on directly to a third party, insofar as this is technically feasible. For more information on the right to data portability, see Art. 20 GDPR.
9.6 WITHDRAWAL OF CONSENT
If you have consented to the processing of your personal data, you can revoke this consent at any time with effect for the future. This does not affect the lawfulness of the processing of your data up to the time of revocation.
9.7 RIGHT TO LODGE COMPLAINTS WITH SUPERVISORY AUTHORITIES ON DATA PROTECTION MATTERS
If you believe that the processing of your personal data infringes applicable data protection law, you may lodge a complaint with a data protection supervisory authority, in particular the data protection supervisory authority of the place of your habitual residence, place of work or of the alleged infringement.
9.8 RIGHT TO OBJECT
Provided that the requirements of Article 21(1) of the GDPR are met, you may object to the data processing on grounds relating to your particular situation.
The above-mentioned general right to object applies to all purposes of the processing set out in this Privacy Policy that are carried out on the basis of Article 6(1)(f) of the GDPR. In contrast to the specific right to object to data processing for advertising purposes, in accordance with the GDPR, we are only obliged to give effect to such a general right to object if you can demonstrate overriding reasons.
10. CHANGES TO THIS PRIVACY NOTICE
In this Privacy Policy, we always provide up-to-date, complete and essentially definitive information on the processing of your personal data in connection with our website. This requires us to update this Privacy Policy regularly. We therefore recommend that you read this Privacy Policy regularly.