Privacy Policy

Date: 11.5.2018

1. General information

1.1 This Privacy Policy applies to data concerning you that we collect when you:

  • Access or visit our website
  • Use the services listed under Item 3
  • Participate in competitions, surveys and prize draws
  • Enter into, modify and conduct contractual relationships.

1.2 Controller:
1.2.1 This website is a service provided by Festool GmbH, located in Wendlingen am Neckar, Germany (referred to below as Festool). The controller for data processing in connection with the applications set out under Item 3 of this Privacy Policy is Festool GmbH, Wertstraße 20, 73240 Wendlingen, Germany. 1.2.2 The controller for data processing in the case of the other applications is your respective Festool contractual partner. You can find more details on this subject in the supplementary information on your rights as a data subject.
1.3 This data is collected and processed by Festool and its affiliated companies [in particular, TTS Tooltechnic Systems AG & Co. KG and the companies specified at http://subsidiaries.festool.com], and is used solely for the respective business purpose. You can find more details on the individual purposes in the supplementary information. 1.4 You can contact our Data Protection Officer at datenschutz@festo.com or our postal address, FAO "Data Protection Officer".

2. How is your personal data processed?

2.1. General information on the purposes of the processing
We primarily collect, store and process your personal data for the sole purpose of fulfilling our contractual obligations to you or where you have given your consent for us to do so. However, we also use your data for the purpose of complying with procedures or legal provisions that affect us, provided that this is necessary to safeguard our own legitimate interests or the legitimate interests of others, in order to enforce, protect or exercise our rights or to defend ourselves against claims. 

2.2 Data you disclose to us

2.2.1: As a general rule, you can use our website without disclosing personal information to us directly. For some services, such as our newsletter service or the myFestool members’ area, we will request personal information from you. This includes data such as your name or email address, which lets us make the service in question quick and user-friendly, or lets us provide the service in general. Below, in Section 3 of this Privacy Policy, you can find more details about all of the services offered on our website.
2.2.2: In particular, the collection and processing of personal data is necessary for entering into, modifying and conducting contractual relationships, so that we can fulfil our contractual obligations. You can find more details on this subject in the supplementary information.

2.3. Data we automatically obtain when you use our online services
Some data is obtained whenever you visit our website.

2.3.1 Log data
Data obtained automatically includes web server log data. We activate this logging solely in exceptional cases in order to investigate support cases and safeguard the stability and security of our service (Article 6(1f) GDPR). Each record consists of:

  • Date and time of the request
  • Client and server IP address, port and protocol status
  • The name of the file or page requested and the length of the request
  • Login information for the relevant web service, if you sign on with a user account
  • Browser type and referrer (last page requested by the client)
  • This data is analysed for technical purposes solely on an anonymous basis. No statistical analysis is performed. 

2.3.2 Cookies
Cookies are small files containing a string of characters which store certain information in plain text or encrypted form. Cookies are sent by the server to your computer, where they are stored. Their primary purpose is to identify the computer from which a website has been accessed. If you sign on to a website, cookies are used to notify the server of the sign-on and check the permissions for accessing the page. Every cookie has an expiry date, after which it is no longer valid. The user’s path through various pages of the website and even across various websites can be tracked using cookies. By using cookies, we can improve communication between our server and your computer, thus making it easier to use a website. Cookies can be generated by both the website operator and third-party providers. Your browser gives you the option of displaying the cookies which exist on your computer, deleting existing cookies, or configuring the settings so that not all, or no further, cookies are stored. Please be aware that some functions will not work, or will not work properly, if you block cookies. 

2.3.3 Usage analysis

2.3.3.1 Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), or Google for short. Google Analytics uses text files known as cookies. Cookies are stored on your computer and generate information about your use of our website. The first sentence of Article 6(1f) GDPR provides the legal basis for the use of Google Analytics.
This information is sent for storage on a Google server in the USA. IP address anonymisation is active on this website, meaning that your IP address is shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area before it is sent. The full IP address is only sent to a Google server in the USA and shortened there in exceptional cases. In exceptional cases where personal data is transferred to the USA, Google complies with the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
Google uses the information produced to create analyses and reports on website usage and activity on behalf of Festool GmbH and in order to render additional services relating to the use of the website and the internet for Festool GmbH. In particular, this involves functions relating to display advertising such as Google Analytics service reports, categorised according to demographic characteristics and interests. Google Analytics service reports categorised according to demographic characteristics and interests include data and third-party provider visitor data (such as age, gender and interests) acquired through targeted advertising by Google. Google may also transfer this information to third parties where required by law or insofar as third parties process this data on behalf of Google.

The IP address relayed by your browser within the scope of Google Analytics is not linked to other Google data. You can prevent the use and storage of cookies by changing your browser software's settings accordingly. However, please bear in mind that you may not be able to make full use of all the functions on this website if you do so.
In addition, you can prevent Google collecting and processing data relating to your use of the website that is produced by these cookies (including your IP address). To do so, download and install the browser plugin available at the following link: Browser add-on for opting out of Google Analytics
For browsers on mobile devices or as an alternative to the browser add-on, please click this link to prevent future data collection within this website by Google Analytics. This will store an "opt out" cookie on your device. If you delete your cookies, you will have to click this link again. You can find further information on Google's terms at www.google.com/policies/privacy/

2.3.4 Remarketing

2.3.4.1 Google Tag Manager
This website uses Google Tag Manager, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Tag Manager is used to manage website tags via an interface. No cookies are set and no personal data is captured when Google Tag Manager is used. The tool causes other tags to be created which may potentially capture data. Google Tag Manager does not access this data. If deactivation was carried out at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager. The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data.

2.3.4.2 Google AdWords remarketing
This website uses the Google AdWords remarketing function, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data. Through targeted advertising on Google partner network sites, the Google AdWords remarketing technology gives us a way of reconnecting with users who have already visited our website and shown an interest in our product range. A cookie is created when our site is visited so that the user can be recognised when he or she visits a site belonging to our advertising partners. In addition, user behaviour can be analysed and subsequently used for targeted product recommendations and interest-based advertising. The data stored in the cookie is not combined with other personal data to create user profiles. By using this website, you agree that data relating to you and collected by Google may be processed in the aforementioned manner and for the aforementioned purpose.
You can opt out of the use of cookies by Google by visiting www.google.com/privacy/ads and following the instructions to opt out. Alternatively, you can opt out of the use of cookies by third-party providers by visiting the Network Advertising Initiative's opt out page at www.networkadvertising.org/managing/opt_out.asp.
However, please bear in mind that you may not be able to make full use of all the functions on this website if you do so. You can find further information on Google's terms at www.google.com/policies/privacy/.

2.3.4.3 Facebook remarketing/retargeting
This website uses remarketing tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. These remarketing tags create a direct link between the Facebook server and the user's browser when our website is visited. This sends a record of which of our web pages the user has visited using their IP address to the Facebook server. Facebook matches this information to the personal Facebook account of the user. This information is available for us to use when displaying Facebook ads. We would like to expressly state that we do not receive any information regarding the content of the data that is transferred or their use by Facebook in our capacity as the website operator. For more details on the collection and use of this data by Facebook, your associated rights and options for protecting your personal data, please refer to Facebook's data policy, available at www.facebook.com/about/privacy/. If you do not want Facebook to directly link the collected information to your Facebook user account, you can deactivate the "Custom Audiences" remarketing function here. You must be logged in to Facebook to do so. The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data.

2.3.5 Social media plugins
Our website also uses the following social network plugins:

  • Facebook
  • Twitter
  • Instagram
  • Google+
  • YouTube

These are services provided by the US companies:

  • Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
  • Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
  • Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

On our website the plugins are recognisable by the respective companies’ logos or the "Like" or "Recommend" add-ons, for example. When you visit one of our websites which contains this type of plugin, your browser establishes a direct connection with the relevant company’s servers, and the content of the plugin is, in turn, transmitted to your browser, which incorporates it into the website being displayed. This is how the fact that you have visited our website is passed on to these companies. We are neither able to influence the data collected and processing operations, nor are the full extent of the data collection, the purposes of processing and the retention periods known to us. Neither is there any information available to us concerning the erasure of the collected data by the provider of the plugin. The provider of the plugin stores the data collected about you as a usage profile and uses this profile for the purposes of advertising, market research and/or tailoring the design of their website to demand. Analysis of this kind is primarily carried out (including for users who are not logged in) in order to display appropriate advertising and to inform other users on the social network about your activity on our website. You have the right to object to the creation of this user profile, and if you wish to exercise this right you must contact the provider of the respective plugin. We use these plugins to enable you to interact with social networks and other users, and to enable us to improve our service and design it so that it is more interesting to you as a user. The first sentence of Article 6(1f) GDPR provides the legal basis for the use of these plugins.
Provided that you are logged in to these companies’ sites via your personal user account when you visit our website, they can associate the website visit with that account. By interacting with plugins, e.g. by clicking on the "Like" button or leaving a comment, this related information is sent directly to these companies and stored on their systems. If you would like to prevent this sort of data being sent, you need to log out of your account at the company in question before visiting our website. Please refer to the following companies’ data protection notices for information about the purpose and scope of data collection, further processing and use of your data by them, as well as your associated rights and the settings options for protecting your privacy:

2.3.6 Firebase
To improve our understanding of user behaviour and to optimise our service, we use Firebase. This involves anonymised user data being transmitted to Firebase. We also make use of other Firebase functions that enhance user guidance, assess the reasons for errors within the apps, and enable push notifications. Firebase is a real-time database, which is used to embed real-time information in a website. Firebase is a subsidiary company of Google and is headquartered in San Francisco (CA), USA. To view the Firebase Privacy Policy, visit https://www.firebase.com/terms/privacy-policy.html. The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data.

2.3.7 Crashlytics
Our apps use Crashlytics, developed by Crashlytics Inc, USA. Crashlytics is part of the Google Group. Crashlytics identifies software errors and the reasons behind them. To do this, it gathers information such as device status, terminal type, device identification and saves this data in pseudonymised form. You can prevent data from being collected and stored by changing the corresponding setting within the app. For more information on the Crashlytics Privacy Policy, visit: https://try.crashlytics.com/terms/privacy-policy.pdf. The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data.

2.4 Data we obtain from third parties
In exceptional cases we may obtain information about you from third parties. This primarily concerns cases where your retailer has registered a tool that you have purchased for SERVICE all-inclusive. It is necessary to provide your name and address (as well as your email address) in order to register. In this case, however, we will inform you immediately and you have the option to object to further processing.

3. Individual online services

3.1 Contact form
Our website gives you the option of using a contact form to get in touch with us so that we can provide answers to your individual questions as well. In each case, we need your surname, first name, email address and message so that we can contact you. If you give us your phone number or postal address, we will also be happy to call you back with an answer to your question or contact you in writing. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.

3.2 Newsletters
We can send you our newsletter as a way of staying in touch with us. The legal basis for this, in accordance with the first sentence of Article 6(1a) GDPR, is your consent. For this, we use your title and name, so that we can address you personally in the newsletter, as well as your email address and the topics that interest you. To ensure that no one else has registered you for the newsletter subscription and that you do not receive unwanted emails, you will receive a confirmation email sent to the email address you provided. You will need to click on the link in the email to activate the subscription. User behaviour related to the newsletter service is analysed in anonymised form with no link being established to a specific person. This includes:

  • Mailings sent and delivered
  • Opens (measured/invisible/total)
  • Clicks and opens by end devices
  • Clicks, opens and delivery over time
  • Bounces (email is undeliverable)
  • Subscription cancellations
  • Activity rate

The only required information for sending you our newsletter is your email address. Supplying additional data, identified separately, is voluntary and is used to address you personally. After you have given confirmation, we will store the data you provide in order to send you the newsletter (the first sentence of Article 6(1a) GDPR provides the legal basis for this).
You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal of consent by clicking the link provided in each newsletter email. "

3.3 myFestool
You can register for our free myFestool service. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.
This gives you online access to Festool’s full range of services. For registration, we need your first name, surname, email address and postal address as well as your company’s business sector. If you use our additional services within myFestool, additional personal data (e.g. device data for SERVICE all-inclusive) may be required.
To delete your myFestool account, please log in to the myFestool area and click on the “Delete myFestool account” link in the Personal data area.

3.4 Information request via the web
Our free information service can notify you about attractive offers, new products and tips for optimising the use of machinery. We need the name, address and business sector of your company,plus a contact name for this service.

3.5. Festool ideas platform
You can use the Festool ideas platform to send us your idea for improving our products. We have provided you with a form for submitting your idea, for which we need your contact data and details of your idea. The special conditions in the non-disclosure statement available on the platform apply. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.

3.6. Festool app
You can also manage important online functions with your smartphone by using the Festool app. This includes management of your Festool account, registration for SERVICE all-inclusive, an overview of your registered devices, direct contact with Festool, and a dealer search facility using GPS or a search form. In general, no further personal data is collected when compared with the traditional method of using these services. The system has a location identification option for the dealer search. The user is free to accept this location identification as ascertained by the system or enter a location of his or her choice instead. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data. The Festool app collects and processes more data than the traditional method of using these services. This additional data comprises the user's personal details (first and last name, email address), their role permissions within your company and their saved shopping lists. This data and the personal profile are stored on the user's mobile device within the app even when offline. This additional data is submitted voluntarily and at your discretion. Please be aware that certain functions of the app will not work if you have not provided these details.

For optimised use of individual functions within the Festool consumables app, you also have the option of storing your contact partners' details. Festool processes this data exclusively within the scope of the app's user relationship. You remain the controller, within the meaning of the data protection regulations, of the contact details that you enter. Please ensure that you comply with these regulations. In the future, you will also have the option when purchasing Festool products which have a Bluetooth® interface to connect these products with your Festool Work app. This means that you can find out information about the technical status of your Festool products (e.g. battery status) via your mobile devices (e.g. smartphone or tablet on which you have downloaded the app) or download supporting software updates for the Festool products. By connecting the Festool product and the mobile device, telemetric data is collected. We use this data for analysis purposes and for troubleshooting.

You can choose to connect a Festool product to your mobile device. Should you not wish to transfer this data, please do not activate the Bluetooth® functionality on the Festool product. If you decide against this data transfer, you can of course still use the Festool product. It simply means that additional service functions via the app are not possible.

The Bluetooth® word mark and associated logos are registered brands of Bluetooth SIG, Inc. and any use of these brands by Festool takes place under licence. Any other brands or names belong to the respective owners.

3.7 SERVICE all-inclusive®
You can also register your tools through our website and access SERVICE all-inclusive in this manner. There are two ways of doing this: Log in using your MyFestool account or register the tools without using a MyFestool user account. To do so, we will need your first and surname, your address and email address, as well as your tool info. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.

4. Social media
Via our presence on social media (Facebook, Twitter, YouTube), we also offer you comprehensive personal support and the option of staying in touch with us. These social media services collect personal data independently, e.g. via the profile of you created on these services or via social plugins implemented on the websites of third parties. Article 6(1b) or Article 6(1f) GDPR provide the legal basis for this. If you send us a query via one of these social media, we will forward the query to the relevant department. The data is used solely for the purposes of responding to your query and is not passed on to third parties. If you wish to get in touch with us via social media, you have to register with these services. The companies behind the service in question may collect, store and use personal data. The nature, scope and processing of this data is beyond our control. These are services provided by the US companies:
• Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
• Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
• Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

5. What rights can you exercise?

5.1 Right to object:

  • You have the right to object to the processing of your personal data for direct marketing purposes at any time, without giving any reason.

    Please direct your written objection to Festool GmbH, Wertstr. 20, 73240 Wendlingen, Germany or send an email to: info@festool.com. Consent can be withdrawn at any time, either by using the link in the newsletter or by sending written notification.

    When cancelling the newsletter, you can also just remove individual newsletter topics at any time under the "Newsletter" tab, which is equivalent to unsubscribing from the newsletter. Information on cancelling a subscription can be found within every newsletter.

  • Where we process your data for the purpose of safeguarding legitimate interests, you can object to the processing on grounds relating to your particular situation. We will then stop processing your personal data, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or where the processing is used for the establishment, exercise or defence of legal claims.

 

We wish to inform you that, in order to enter into and conduct contractual relationships, you must provide the personal data and company data necessary for establishing, fulfilling and terminating the contractual relationship and the performance of the associated contractual obligations, or that we are required to collect by law. If you exercise your right to object in this regard or do not provide us with this data, we will not be in a position to fulfil the contract with you.

5.2 Further rights:

5.2.1: Right of access
:

You can obtain information on the data stored about you personally from the respective controller.

5.2.2: Right to rectification, erasure

Furthermore, you can have your data rectified or erased if certain criteria are met.

5.2.3: Other rights:

You also have the right to restrict the processing of your personal data, as well as the right to obtain the data you have provided in a structured, commonly used and machine-readable format.
You can lodge a complaint with the aforementioned Data Protection Officer or the competent supervisory data protection authority.

6. Safeguarding your data:

6.1: We take technical and organisational measures to protect your data against unauthorised access, unintentional modification, accidental loss or unlawful destruction. Nevertheless, electronic or physical transfers and storage of data can never be completely secure. Every transfer is therefore made at your own risk.

6.2 As part of this Privacy Policy, we wish to provide you with an as quick and as comprehensive explanation of the relevant topics as possible. Additional information on the respective purposes for which your data is processed and clarifications of the terminology we use can be found on our website. Still have questions? Please get in touch using the contact address set out in the supplementary information.

7. Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time, taking into consideration the applicable data protection regulations.