STIHL MY iMOW® Applications

Privacy Policy

 

As at: 2023-01

Market: United Kingdom

 

We are pleased to inform you about the processing of your personal data in this Privacy Policy. Below, you will find information on how we process your personal data, the reasons why we process your personal data, and the data subject rights you have in this regard.

 

If you would like further information not contained in this Privacy Policy, you can contact us and our Data Protection Officer at any time via the contact details stated in section 2 of this Privacy Policy.

1             SCOPE OF THE PRIVACY POLICY

In this Privacy Policy, we inform you about the processing of your personal data in connection with the STIHL MY iMOW® App and the browser-based application for the use of your iMOW® robot mower ("STIHL MY iMOW® Web App") together also referred to as "STIHL MY iMOW® Applications".

You can use a limited range of functions of the STIHL MY iMOW® Applications without logging into the STIHL MY iMOW® Applications. To log into the STIHL MY iMOW® Applications you need a STIHL Account for the STIHL Digital Platform and its Solutions. Information on the processing of your personal data in connection with the STIHL Digital Platform and your STIHL Account can be found in the Privacy Policy  https://app.stihl.com/en-gb/legal/privacy for the STIHL Digital Platform and STIHL Solutions.

In this Privacy Policy, we inform you according to the requirements of the European General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council as transposed into United Kingdom national law by operation of section 3 of the European Union (Withdrawal) Act 2018 and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019 (“UK GDPR”). In addition, we observe other national data protection regulations that may apply to the processing of your personal data.

We will inform you about the processing of your personal data relating to the web addresses (Uniform Resource Locator, "URL") you access. Should you access the STIHL MY iMOW® Applications via a URL that is intended to serve a different country and its legal requirements (i.e. you, as an example, instead of accessing the STIHL URL ending in “co.uk”, access a STIHL URL ending in “.de”) you may end up not being informed in accordance with applicable local legal requirements. For data protection reasons, we do not determine your place of residence ("localisation") to determine the law applicable to you.

2             CONTROLLER AND DATA PROTECTION OFFICER

2.1          Controller

The controller under data protection law decides on the purposes and means of the processing and ensures compliance with the data protection regulations.

The following is responsible for the processing of your personal data in connection with the STIHL MY iMOW® Applications, subject to any deviating information in this Privacy Policy:

 

STIHL Tirol GmbH ("STIHL Tirol", "we")

 

Address: Hans-Peter-Stihl-Str. A-6336 Langkampfen/Kufstein, Austria

 

Email: datenschutzinfo@stihl.at

 

Regional Court of Innsbruck under FN 46276 d, VAT identification number ATU32234908

 

2.2          Joint controller

We are responsible for certain processing operations together with other companies of the STIHL Group. Further information on these processing operations subject to joint responsibility and the STIHL companies and our partners involved in the processing can be found below in this Privacy Policy. If the processing of your personal data is carried out in joint responsibility, an agreement on the processing in joint responsibility has been concluded between the STIHL company or our partners involved in the processing.

For a list of STIHL Group companies and how we refer to them in this Privacy Policy, see Section 6.

Please note that we can also cooperate with companies of the STIHL Group and companies outside the STIHL Group within the framework of a separate responsibility, i.e. two independently responsible entities and by means of contract processing.

2.3          Data Protection Officer

The Data Protection Officer of STIHL Tirol can be reached by post at the address for the controller, addressed to "zu Hd. Abteilung Datenschutz" or email to datenschutzinfo@stihl.at.

In the case of processing personal data in join controllership, please also contact the Data Protection Officer at the above contact details.

3             GENERAL INFORMATION ON THE PROCESSING OF YOUR PERSONAL DATA

3.1          Processing of your personal data

When we use the term “personal data” in this Privacy Policy, we mean all information that relates to you.

Personal data include, for example, your name, email address or postal address. However, your personal data also include all data that are linked to you or that relate to you, such as data that will be processed when you use the MY iMOW® Applications. We refer to data that does not relate to you as non-personal or anonymous data. The data protection regulations and this Privacy Policy do not apply to such data.

By processing your personal data, we mean, for example, its collection, storage or erasure.

3.2          Legal basis for the processing of your personal data (Overview)

We process your personal data only if we can base the processing on a legal basis or if such is lawful in accordance with the applicable data protection regulations, i.e. that the processing is permissible within the scope of the law. In the context of the UK GDPR, we base the processing of your personal data for the most part on the following legal bases:

·                     The processing of your personal data is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures that take place at your request (Article 6 (1) (b) UK GDPR).

·                     You have given us your consent to the processing of your personal data for one or more specific purposes (Article 6 (1) (a) UK GDPR).

·                     The processing of your personal data is necessary to fulfil a legal obligation to which we are subject (Article 6 (1) (c) UK GDPR).

·                     The processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Article 6 (1) (f) UK GDPR).

Further information on which processing operations we specifically base on which legal basis or under which data protection regulations the processing is permitted, can be found below in this Privacy Policy.

3.3          Personal data we process

We process the personal data that you provide us, that we collect (automatically) or that we receive from third parties. In principle, you are not obligated to provide us with your personal data. However, the disclosure of certain personal data may be necessary to enable us to offer you the STIHL MY iMOW® Applications.

Personal data you provide to us

We process the information you provide to us. For example, you can call us or contact us otherwise and provide us with certain information in this way. You can provide us with further data when you make certain settings or configure MY iMOW® Applications according to your needs. We collect and process this data to enable you to use the STIHL MY iMOW® Applications. If you do not provide us with certain information, the use or functionality of the STIHL MY iMOW® Applications may be excluded or impaired.

Personal data we collect

We collect certain information (automatically) and process it when you use the STIHL MY iMOW® Applications. This includes, for example, data such as your IP address, certain login data and data that will be processed so that we can technically provide you with the STIHL MY iMOW® Applications.

Personal data we receive from third parties

In some cases, we do not receive information directly from you. This may be the case, for example, if information about you is provided to us by third parties. We work with companies that provide services to us and who in turn provide us with information about you. These include, for example, payment service providers or providers of what are known as app stores.

4             Processing your personal data in the case of the STIHL MY iMOW® Applications

4.1          Visiting the STIHL MY iMOW® Web App website

When accessing our website, the browser used on your device automatically sends information to our website server, which temporarily saves it in a so-called log file. 

Categories of personal data

The following information will be processed when the website is accessed:

·                     the IP address of the requesting Internet-enabled device;

·                     the date and time of the access;

·                     the name and URL of the retrieved file;

·                     the website/application from which access was gained (referrer URL); and

·                     the browser you are using and, if applicable, the operating system of your Internet-enabled computer and the name of your access provider.

Purpose

The processing of your personal data serves the following purpose or purposes:

·         ensuring a smooth connection;

·         ensuring a comfortable use of our website/application; and

·         evaluation of system security and stability.

Legal basis

We base the processing of your personal data on the following legal basis:

·         The website is accessed during the initiation or execution of a contract.

We process your personal data based on Article 6 (1) (b) UK GDPR.

·         The processing of your personal data is necessary for enabling you to access the website and ensuring the performance, consistent functionality and security of our website and systems.

We process your personal data based on Article 6 (1) (f) UK GDPR.

It is in our legitimate interest to ensure the performance, consistent functionality and security of our website and systems.

4.2          Settings and control of your iMOW® robot mower

Controller

Within the context of controlling your iMOW® robot mower, we work with ANDREAS STIHL to be able to provide you with fast and easy control of your iMOW® robot mower. In this respect, we process the personal data as joint controllers.

Categories of personal data

The following information will be processed:

·         settings related to your iMOW® robot mower, such as cutting height, safety functions, rain sensor;

·         properties of your mowing application, such as start of mowing, duration of mowing job, if desired mowing zone, standard mowing time;

·         a mower plan, if any, that you have defined.

Purpose

The processing of your personal data serves the following purpose or purposes:

·         the configuration of your iMOW® robot mower;

·         the control of your iMOW® robot mower.

Legal basis

We base the processing of your personal data on the following legal basis:

·         The processing of your personal data is necessary in order to be able to offer you the functionalities offered in the MY iMOW® Applications, such as the control of your iMOW®.

We process your personal data based on Article 6 (1) (b) UK GDPR.

4.3          Locating your iMOW® robot mower

Categories of personal data

The following information is processed in the process of locating your iMOW® robot mower:

·         The current geo-coordinates of the iMOW® robot mower are processed when your iMOW® robot mower is connected to the Internet.

·         The "Home Area" of the iMOW® robot mower is processed after the "Home Area" function is activated on the mower.

Purpose

The processing of your personal data serves the following purpose or purposes:

·         You have the possibility to display your iMOW® robot mower on a map in your MY iMOW® Applications and locate it so that you are always informed about the location of your iMOW.

·         Displaying weather forecasts in the mowing plan of the MY iMOW® applications.

·         By activating the Home Area function, the mower can lock itself when moved outside the area.

Legal basis

We base the processing of your personal data in connection with the location of your iMOW on:

·         The processing of your personal data is necessary in order to be able to offer you the weather forecast offered in the MY iMOW® App, the location functionality and the device lock.

We process your personal data based on Article 6 (1) (b) UK GDPR.

·         The processing of your personal data is necessary to assist you in retrieving your iMOW® robotic lawnmower, if you ask us to do so.

We process your personal data based on Article 6 (1) (f) UK GDPR.

4.4          Voice control of your iMOW® robot mower

You can use and control your iMOW® robot mower via the MY iMOW® App, including various voice control systems. You will find below information about voice control systems and their providers. We also refer to the privacy policies of these providers, in which you will find further information on the processing of your personal data in connection with the use of voice control.

 Controller

If you use one of the voice control systems, the providers of these voice systems may process your personal data subject to their own responsibility in accordance with the providers' privacy policies. This means, among other things, that these providers can process your data for their own purposes.

Categories of personal data

The following information will be processed when communicating with you:

·         properties of your mowing application or control of your iMOW® mowing robot, such as starting mowing, duration of mowing jobs, if desired mowing zone, standard mowing time;

·         a mower plan, if any, that you have defined.

Purpose

The processing of your personal data serves the following purpose or purposes:

·         Controlling your iMOW® robot mower by voice command and providing or querying the current iMOW® status by voice command.

Legal basis

We base the processing of your personal data by us and the transfer of your personal data to the provider you use on the following legal basis:

·         The processing of your personal data is necessary in order to be able to offer you the functionality of voice control offered in the MY iMOW® Applications.

We base the processing of your data on the legal basis of Article 6 (1) (b) UK GDPR.

·         The processing is necessary for ensuring the security and functionality of the voice control function. This means that we will further develop the voice control of the iMOW® robot mower on the basis of your use of voice control. 

We base the processing of your personal data on the legal basis of Article 6 (1) (f) UK GDPR.

It is in our legitimate interest to further develop our offers and services for you and to improve your usage experience of STIHL MY iMOW® Applications.

·         For certain processing of your personal data, we will obtain your consent in accordance with Article 6 (1) (a) UK GDPR to the extent necessary.

In the context of obtaining your consent, we will inform you about the processing of your personal data on the basis of your consent.

Voice control provider

·         Voice control via Apple Shortcuts App: Provider is Apple. The privacy policy is available at.:
https://www.apple.com/legal/privacy/data/en/shortcuts-sharing/

·         Voice control via Amazon Alexa: Provider is Amazon. The privacy policy is available at:
https://www.amazon.com/gp/help/customer/display.html?nodeId=GVP69FUJ48X9DK8V

·         Voice control via Google Assistant: Provider is Google. The privacy policy is available at.: https://policies.google.com/privacy

 

4.5          Communication with you

There are various ways to contact us, for example by email, by post, by telephone, via contact forms or by other means. We will be happy to answer any questions you may have via any of the communication channels we provide. We will generally contact you by email.

Joint responsibility

If you communicate with STIHL Tirol, STIHL Tirol is responsible for the processing of your personal data. If communication with you or processing your request or concern requires the involvement of other STIHL Group companies, we will process your request or concern together with these companies. Depending on the subject-matter of your request or concern, the companies incorporated by STIHL Tirol process your personal data on behalf of STIHL Tirol or as a jointly responsible body with STIHL Tirol.

Categories of personal data

The following information will be processed when communicating with you:

·         your contact details such as your telephone number or email address;

·         data relating to your request or concern, such as the subject of your request or our communication with you.

Purpose

The processing of your personal data serves the following purpose or purposes:

·         communication with you if you have questions about the STIHL MY iMOW® Applications or the iMOW® robot mower;

·         handling and responding to your enquiries and concerns;

·         communication with you outside of enquiries and concerns, for example for information purposes or for the fulfilment of legal obligations;

·         when we record telephone calls, this is done for quality assurance and training purposes;

Legal basis

We base the processing of your personal data in connection with the communication with you on different legal bases, depending on the background of the communication. The following shall apply:

·         Communication with you is necessary to fulfil the contract for the STIHL MY iMOW® Applications or to conclude a contract for the use of STIHL MY iMOW® Applications.

We base the processing of your personal data with you on the legal basis of Article 6 (1) (b) UK GDPR.

Communication with you is necessary to ensure the security and functionality of the STIHL MY iMOW® Applications or the iMOW® robot mower. This also includes that we develop the STIHL MY iMOW® Applications or the iMOW® robot mower on the basis of your feedback and experience. This may require that we ask for your opinion and assessment.

We base the processing of your personal data on the legal basis of Article 6 (1) (f) UK GDPR.

It is in our legitimate interest to further develop our offers and services for you and to improve your experience of using STIHL MY iMOW® Applications or the iMOW® robot mower.

·         For certain processing of your personal data, we will obtain your consent in accordance with Article 6 (1) (a) UK GDPR to the extent necessary.

This applies in particular to the recording of telephone calls.

4.6          Support

If you have any questions or if you cannot use the STIHL MY iMOW® Applications or the iMOW® robot mower as described by us, our Support is always at your disposal. We will inform and support you if, regardless of your contact with us, we find that you cannot use the STIHL MY iMOW® Applications or the iMOW® robot mower as described by us.

Controller

As part of the support, we work with other STIHL Group companies to provide you with quick and easy assistance. Therefore, as STIHL TIROL, ANDREAS STIHL supports us in providing support for the MY iMOW® App or the iMOW® robot mower. Processing operations to improve our support and the MY iMOW® App or the iMOW® robot mower are carried out under joint responsibility with ANDREAS STIHL.

Categories of personal data

The following information will be processed as part of the support:

·         your contact details;

·         communication with you, including recordings of telephone conversations with you, if you have given your consent to the recording;

·         data related to the support case and the data required to resolve your support case.

Purpose

The processing of your personal data serves the following purpose or purposes:

·         processing your support request;

·         if we record the telephone conversations in the context of the support on the basis of your consent, this will be done for quality assurance and training purposes;

·         improving our support.

Legal basis

We base the processing of your personal data in connection with our support on different legal bases depending on the support request and an existing contractual relationship. The following shall apply:

·         Our support and performances as part of the support are required to fulfil the contract for the STIHL MY iMOW® Applications.

We process your personal data in connection with the support based on the legal basis of Article 6 (1) (b) UK GDPR.

·         We provide you with certain support performances outside of an existing contractual relationship.

We base the processing of your personal data in connection with our support, which we provide to you outside of an existing contractual relationship on Article 6 (1) (f) UK GDPR. We have a legitimate interest in assisting you with questions about our offers and services and ensuring the satisfaction of our (former and future) customers.

·         For certain processing of your personal data, we will obtain your consent in accordance with Article 6 (1) (a) UK GDPR to the extent necessary.

This applies in particular to the recording of telephone conversations during support.

4.7  Product development and statistical analysis

We process certain data in order to improve and further develop STIHL MY iMOW® applications or the iMOW® robot mower and other offers and services (or our support). This concerns in particular data about the use of STIHL MY iMOW® applications as well as data related to, among other things, the properties, security and quality of our offer.

As far as possible, the data will be pseudonymised or anonymised prior to processing for product development and statistical evaluation. If the data are anonymised, they are no longer personal data.

Joint responsibility

In the context of product development and statistical analysis, we cooperate with other companies of the STIHL Group, in particular with ANDREAS STIHL. The processing with ANDREAS STIHL takes place in joint responsibility.

Categories of personal data

The following information is processed in the framework of product development and statistical analysis:

·         data on the use of the STIHL MY iMOW® Applications or the iMOW® robot mower;

·         data on the properties, security and quality of the STIHL MY iMOW® Applications or the iMOW® robot mower;

·         other information we have, e.g. from support requests from you. 

Purpose

The processing of your personal data serves the following purpose or purposes:

·         improvement and further development of STIHL MY iMOW® Applications or the iMOW® robot mower;

·         product development, including in the area of artificial intelligence, (machine learning);

·         market research;

·         ensuring the security and quality of the STIHL MY iMOW® Applications.

Legal basis

We base the processing of your data on the following legal basis:

·         We base the processing of your personal data in connection with the product development and statistical analysis on legal basis of Article 6 (1) (f) UK GDPR.

Our legitimate interest is in improving and further developing the STIHL MY iMOW® Applications or the iMOW® robot mower and other offerings and services of STIHL Tirol and the STIHL Group as well as in guaranteeing the security and quality of the STIHL MY iMOW® Applications or the iMOW® robot mower.

5             STORAGE PERIOD

As long as you use the STIHL MY iMOW® Applications or until you delete your STIHL Account, we will process your personal data as it is necessary to provide you with the STIHL MY iMOW® Applications you want. The storage period for your personal data depends in particular on which of the features offered by the STIHL MY iMOW® Applications you use.

In addition, the storage period depends on the category of personal data processed and the purpose of the processing. Finally, we take into account legal retention periods, which may obligate us to keep your data for a certain period of time. Accordingly, storage may take place if this is provided for by applicable regulations, laws or other provisions to which we are subject.

In the event of a legal dispute, we will keep the personal data we need for legal defence until the final conclusion of the proceedings.

For more information on the storage period, please contact us via the contact details to be found in this Privacy Policy under section 2.

6             RECIPIENTS OF YOUR PERSONAL DATA

6.1          Recipients within the STIHL Group

We share your personal data with other STIHL Group companies in certain cases. The processing by these STIHL companies is carried out on our behalf or subject to our own responsibility. If the processing is carried out on our behalf, a contract has been concluded between us and the respective STIHL company for the processing of data within the meaning of the UK GDPR.

6.2          Recipients outside the STIHL Group

(a)           In addition to recipients of the STIHL Group, we share your personal data with our partners, in relation to individual processing operations and taking into account the data protection regulations. Our partners include service providers who process your personal data on our behalf and service providers who provide services for us that accompany the processing of your personal data. In connection with the processing of your personal data, we use the following categories of service providers:

(i)            IT Service Providers (Data Hosting Providers);

(ii)           Support (Customer Support);

(iii)          Lawyers, auditors and tax advisers.

(b)           Third parties in case of a legal requirement. We also disclose your personal data if disclosure is required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process served on us, or to protect the rights or safety of the STIHL MY iMOW® Applications, us or the STIHL Group.

(c)           Third parties in case of a corporate transaction. In addition, information about our customers, including Personal Data, may be disclosed as part of any merger, sale, transfer of our assets, acquisition, bankruptcy, or similar event. 

7             TRANSMISSION OF YOUR PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM

The highest priority for us is that the level of protection guaranteed by the UK GDPR is always ensured. If we pass on personal data to recipients whose systems for processing your personal data or their subcontractors are located outside the European Economic Area and the United Kingdom, or if we transfer personal data to recipients outside the European Economic Area and the United Kingdom, we comply with the requirements of Chapter V of the UK GDPR.

Whenever we make transfers of your personal data, we  ensure to implement appropriate safeguards in accordance with applicable data protection laws. Whenever we make transfers of your personal data, we  ensure to implement appropriate safeguards in accordance with applicable data protection laws, e.g. the International Data Transfer Addendum to the EU Commission standard contractual clauses, relating to transfers to non-EEA countries without an Adequacy Decision. You can ask us for an overview of the recipients in countries outside the European Economic Area and the United Kingdom and information on the measures we have taken to ensure the level of protection of the UK GDPR at any time via the contact details specified under section 2 in this Privacy Policy.

8             YOUR DATA RIGHTS AND ASSERTING THEM

If you wish to assert your data rights as specified below, you can contact us at any time and without any required form via the communication channels specified in this Privacy Policy. By email and on the other communication channels, you can reach STIHL Tirol and the Data Protection Officer of STIHL Tirol via the contact details specified under section 2 of this Privacy Policy.

8.1          Right to information

You have the right to request confirmation as to whether or not your personal data will be processed. When we process your personal data, you have a right to information about this personal data and certain information required by law. For more information on your right to information, see Art. 15 UK GDPR.

8.2          Right to rectification

You have the right to request the rectification of incorrect personal data concerning you without delay. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data. For more information on your right to rectification, see Art. 16 UK GDPR.

 

We always strive to ensure the accuracy of your personal data. We therefore ask you to notify us immediately of any changes to your data (such as changes in address), so that we can ensure that your personal data is up-to-date.

 

8.3          Right to erasure

If the legal requirements are met, you may request us to erase your personal data immediately. This shall be the case, in particular, where:

·         your personal data will no longer be required for the purposes for which it was collected or otherwise processed;

·         the processing of your personal data is based on your consent, you revoke this consent and we cannot base the processing on another legal basis;

·         you have objected to the processing of your personal data on grounds relating to your particular situation and there are no overriding grounds for the processing of your personal data.

·         if your personal data have been passed on to third parties and we are obligated to erase your personal data, we will inform these third parties about the erasure, insofar as this is required by law.

We would like to point out that your right to erasure is subject to restrictions. For example, we may not erase any personal data that we have to keep further due to legal requirements. Data that we need in order to assert, exercise or defend legal claims are also excluded from your right to erasure. For more information on your right to erasure, see Art. 17 UK GDPR.

8.4          Right to restriction of processing

If the legal requirements are met, you may request a restriction on the processing of your personal data. This is particularly the case where:

·         the accuracy of your personal data is contested by you, or the processing of your data will be limited for a period that allows us to verify the accuracy of your personal data;

·         the processing of your personal data is not lawfully carried out and you require a restriction on the use of your personal data instead of the erasure of your personal data;

·         we no longer need your personal data for the purposes of processing, but you need these data for the establishment, exercise or defence of legal claims;

·         you have objected to the processing of your personal data on grounds relating to your particular situation, as long as it is not clear whether our legitimate grounds for processing outweigh your grounds.

For more information on your right to restriction of processing, see Art. 18 UK GDPR.

8.5          Right to data portability

You have the right to receive the personal data you have provided us and which we process for the fulfilment of the contract, on the basis of your consent or by automated procedures, in a structured, customary and machine-readable format. You also have the right, in the event that the aforementioned conditions are met, that we transmit these data directly to a third party, insofar as this is technically feasible. For more information on your right to data portability, see Art. 20 UK GDPR.

8.6          Right to object to processing

 

Right to object to the processing of your personal data during processing based on our legitimate interests

 

Insofar as we process data on the basis of a legitimate interest, you can object to the processing at any time for reasons that arise from your particular situation. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. We assume that, in the course of processing on the basis of a legitimate interest, we can normally prove such compelling legitimate grounds for protection, but we examine and evaluate each objection individually.

 

For more information on your right of objection, see Art. 21 UK GDPR.

 

 

8.7          Withdrawal of consent

If you have given your consent to the processing of your personal data, you can revoke it at any time with effect for the future. The lawfulness of the processing of your data up until revocation remains unaffected.

8.8          Right to complain to data protection authorities

If you consider that the processing of your personal data violates applicable data protection laws, you may lodge a complaint with your data protection supervisory authority, this being the Information Commissioner's Office for the United Kingdom (0303 123 1113).

9             AMENDMENTS TO THIS PRIVACY POLICY

 

In this Privacy Policy, we will always keep you fully and completely informed about the processing of your personal data in connection with the STIHL MY iMOW® Applications. This requires that we update this Privacy Policy regularly. We therefore recommend that you consult this Privacy Policy regularly.