Date: 07.8.2023

1. General information

1.1 This Privacy Policy applies to data concerning you that we collect when you:

• Access or visit our website
• Use the services listed under Item 3
• Participate in competitions, surveys and prize draws
• Enter into, modify and conduct contractual relationships.

1.2 Controller:
1.2.1 This website is a service provided by Festool GmbH, located in Wendlingen am Neckar, Germany (referred to below as Festool). The controller for data processing in connection with the applications set out under Item 3 of this Privacy Policy is Festool GmbH, Wertstraße 20, 73240 Wendlingen, Germany.
1.2.2 The controller for data processing in the case of the other applications is your respective Festool contractual partner. You can find more details on this subject in the supplementary information on your rights as a data subject.
1.3 This data is collected and processed by Festool and its affiliated companies [in particular, TTS Tooltechnic Systems AG & Co. KG and the companies specified at https://subsidiaries.festool.com, and is used solely for the respective business purpose. You can find more details on the individual purposes in the supplementary information. 1.4 You can contact our Data Protection Officer at datenschutz@tts-company.com or our postal address, FAO "Data Protection Officer".

2. How is your personal data processed?

2.1. General information on the purposes of the processing
We primarily collect, store and process your personal data for the sole purpose of fulfilling our contractual obligations to you or where you have given your consent for us to do so. However, we also use your data for the purpose of complying with procedures or legal provisions that affect us, provided that this is necessary to safeguard our own legitimate interests or the legitimate interests of others, in order to enforce, protect or exercise our rights or to defend ourselves against claims. 

2.2 Data you disclose to us

2.2.1: As a general rule, you can use our website without disclosing personal information to us directly. For some services, such as our newsletter service or the MyFestool members’ area, we will request personal information from you. This includes data such as your name or email address, which lets us make the service in question quick and user-friendly, or lets us provide the service in general. Below, in Section 3 of this Privacy Policy, you can find more details about all of the services offered on our website.
2.2.2: In particular, the collection and processing of personal data is necessary for entering into, modifying and conducting contractual relationships, so that we can fulfil our contractual obligations. You can find more details on this subject in the supplementary information.

2.3. Data we automatically obtain when you use our online services
Some data is obtained whenever you visit our website.

2.3.1 Log data
Data obtained automatically includes web server log data. We activate this logging solely in exceptional cases in order to investigate support cases and safeguard the stability and security of our service (Article 6(1f) GDPR). Each record consists of:

• Date and time of the request
• Client and server IP address, port and protocol status
• The name of the file or page requested and the length of the request
• Login information for the relevant web service, if you sign on with a user account
• Browser type and referrer (last page requested by the client)
• This data is analysed for technical purposes solely on an anonymous basis. No statistical analysis is performed. 

2.3.2 Cookies
Cookies are small files containing a string of characters which store certain information in plain text or encrypted form. Cookies are sent by the server to your computer, where they are stored. Their primary purpose is to identify the computer from which a website has been accessed. If you sign on to a website, cookies are used to notify the server of the sign-on and check the permissions for accessing the page. Every cookie has an expiry date, after which it is no longer valid. The user’s path through various pages of the website and even across various websites can be tracked using cookies. By using cookies, we can improve communication between our server and your computer, thus making it easier to use a website. Cookies can be generated by both the website operator and third-party providers. Your browser gives you the option of displaying the cookies which exist on your computer, deleting existing cookies, or configuring the settings so that not all, or no further, cookies are stored. Please be aware that some functions will not work, or will not work properly, if you block cookies.
Further information about the cookies used can be found in the Cookie Consent Management.

2.3.3 Social media plugins
Our website also uses the following social network plugins:

• Facebook
• Twitter
• Instagram
• Google+
• YouTube

These are services provided by the US companies:

• Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
• Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
• Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

On our website the plugins are recognisable by the respective companies’ logos or the "Like" or "Recommend" add-ons, for example. When you visit one of our websites which contains this type of plugin, your browser establishes a direct connection with the relevant company’s servers, and the content of the plugin is, in turn, transmitted to your browser, which incorporates it into the website being displayed. This is how the fact that you have visited our website is passed on to these companies. We are neither able to influence the data collected and processing operations, nor are the full extent of the data collection, the purposes of processing and the retention periods known to us. Neither is there any information available to us concerning the erasure of the collected data by the provider of the plugin. The provider of the plugin stores the data collected about you as a usage profile and uses this profile for the purposes of advertising, market research and/or tailoring the design of their website to demand. Analysis of this kind is primarily carried out (including for users who are not logged in) in order to display appropriate advertising and to inform other users on the social network about your activity on our website. You have the right to object to the creation of this user profile, and if you wish to exercise this right you must contact the provider of the respective plugin. We use these plugins to enable you to interact with social networks and other users, and to enable us to improve our service and design it so that it is more interesting to you as a user. The first sentence of Article 6(1f) GDPR provides the legal basis for the use of these plugins.
Provided that you are logged in to these companies’ sites via your personal user account when you visit our website, they can associate the website visit with that account. By interacting with plugins, e.g. by clicking on the "Like" button or leaving a comment, this related information is sent directly to these companies and stored on their systems. If you would like to prevent this sort of data being sent, you need to log out of your account at the company in question before visiting our website. Please refer to the following companies’ data protection notices for information about the purpose and scope of data collection, further processing and use of your data by them, as well as your associated rights and the settings options for protecting your privacy:

• Facebook
• Twitter
• Instagram
• Google Privacy Policy
• YouTube Terms of Service 

2.3.4 Firebase
To improve our understanding of user behaviour and to optimise our service, we use Firebase. This involves anonymised user data being transmitted to Firebase. We also make use of other Firebase functions that enhance user guidance, assess the reasons for errors within the apps, and enable push notifications. Firebase is a real-time database, which is used to embed real-time information in a website. Firebase is a subsidiary company of Google and is headquartered in San Francisco (CA), USA. To view the Firebase Privacy Policy, visit https://www.firebase.com/terms/privacy-policy.html. The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data.

2.3.5 Crashlytics
Our apps use Crashlytics, developed by Crashlytics Inc, USA. Crashlytics is part of the Google Group. Crashlytics identifies software errors and the reasons behind them. To do this, it gathers information such as device status, terminal type, device identification and saves this data in pseudonymised form. You can prevent data from being collected and stored by changing the corresponding setting within the app. For more information on the Crashlytics Privacy Policy, visit: https://try.crashlytics.com/terms/privacy-policy.pdf. The first sentence of Article 6(1f) GDPR provides the legal basis for processing your data.

3. Individual online services

3.1 Contact form
Our website gives you the option of using a contact form to get in touch with us so that we can provide answers to your individual questions as well. In each case, we need your surname, first name, email address and message so that we can contact you. If you give us your phone number or postal address, we will also be happy to call you back with an answer to your question or contact you in writing. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.

3.2 Newsletters
We can send you our newsletter as a way of staying in touch with us. The legal basis for this, in accordance with the first sentence of Article 6(1a) GDPR, is your consent. For this, we use your title and name, so that we can address you personally in the newsletter, as well as your email address and the topics that interest you. To ensure that no one else has registered you for the newsletter subscription and that you do not receive unwanted emails, you will receive a confirmation email sent to the email address you provided. You will need to click on the link in the email to activate the subscription. User behaviour related to the newsletter service is analysed in anonymised form with no link being established to a specific person. This includes:

• Mailings sent and delivered
• Opens (measured/invisible/total)
• Clicks and opens by end devices
• Clicks, opens and delivery over time
• Bounces (email is undeliverable)
• Subscription cancellations
• Activity rate

The only required information for sending you our newsletter is your email address. Supplying additional data, identified separately, is voluntary and is used to address you personally. After you have given confirmation, we will store the data you provide in order to send you the newsletter (the first sentence of Article 6(1a) GDPR provides the legal basis for this).
You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal of consent by clicking the link provided in each newsletter email. "

3.3 MyFestool
You can register for our free MyFestool service. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.
This gives you online access to Festool’s full range of services. For registration, we need your first name, surname, email address and postal address as well as your company’s business sector. If you use our additional services within MyFestool, additional personal data (e.g. device data for Warranty all-inclusive) may be required.
To delete your MyFestool account, please log in to the MyFestool area and click on the “Delete MyFestool account” link in the Personal data area.

When you log in with your MyFestool account, you sometimes have the option (e.g. in the Festool Work app) to log in using your biometric ID through either a fingerprint (also known as "touch ID" or "fingerprint ID") or facial recognition (known as "face ID"). Technology in your end device facilitates the biometric ID. Your biometric data is stored and processed locally on your end device. We are not given access to your biometric data; instead, we receive a notification from your end device indicating whether or not biometric identification has been confirmed. You can activate/deactivate biometric identification at any time via the MyFestool account settings in the Festool Work app.

The provider of your operating system is responsible for the processing of your biometric data. If you wish to find out more about how the provider of your operating system processes your personal data, please refer to the privacy policy of your provider (Android/Apple). The legal basis for processing your biometric data in the performance of biometric identification is your consent (Article 9(2a) GDPR), which you have granted to the provider of your operating system.

3.4 Information request via the web
Our free information service can notify you about attractive offers, new products and tips for optimising the use of machinery. We need the name, address and business sector of your company,plus a contact name for this service.

3.5. Festool ideas platform
You can use the Festool ideas platform to send us your idea for improving our products. We have provided you with a form for submitting your idea, for which we need your contact data and details of your idea. The special conditions in the non-disclosure statement available on the platform apply. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data.

3.6. Festool app
You can also manage important online functions with your smartphone by using the Festool app. This includes management of your Festool account, registration for Warranty all-inclusive, an overview of your registered devices, direct contact with Festool, and a dealer search facility using GPS or a search form. In general, no further personal data is collected when compared with the traditional method of using these services. The system has a location identification option for the dealer search. The user is free to accept this location identification as ascertained by the system or enter a location of his or her choice instead. The first sentence of Article 6(1b) GDPR provides the legal basis for processing your data. The Festool app collects and processes more data than the traditional method of using these services. This additional data comprises the user's personal details (first and last name, email address), their role permissions within your company and their saved shopping lists. This data and the personal profile are stored on the user's mobile device within the app even when offline. This additional data is submitted voluntarily and at your discretion. Please be aware that certain functions of the app will not work if you have not provided these details.

For optimised use of individual functions within the Festool consumables app, you also have the option of storing your contact partners' details. Festool processes this data exclusively within the scope of the app's user relationship. You remain the controller, within the meaning of the data protection regulations, of the contact details that you enter. Please ensure that you comply with these regulations. In the future, you will also have the option when purchasing Festool products which have a Bluetooth® interface to connect these products with your Festool Work app. This means that you can find out information about the technical status of your Festool products (e.g. battery status) via your mobile devices (e.g. smartphone or tablet on which you have downloaded the app) or download supporting software updates for the Festool products. By connecting the Festool product and the mobile device, telemetric data is collected. We use this data for analysis purposes and for troubleshooting.

You can choose to connect a Festool product to your mobile device. Should you not wish to transfer this data, please do not activate the Bluetooth® functionality on the Festool product. If you decide against this data transfer, you can of course still use the Festool product. It simply means that additional service functions via the app are not possible.

The Bluetooth® word mark and associated logos are registered brands of Bluetooth SIG, Inc. and any use of these brands by Festool takes place under licence. Any other brands or names belong to the respective owners.

4. Social media
Via our presence on social media (Facebook, Twitter, YouTube), we also offer you comprehensive personal support and the option of staying in touch with us. These social media services collect personal data independently, e.g. via the profile of you created on these services or via social plugins implemented on the websites of third parties. Article 6(1b) or Article 6(1f) GDPR provide the legal basis for this. If you send us a query via one of these social media, we will forward the query to the relevant department. The data is used solely for the purposes of responding to your query and is not passed on to third parties. If you wish to get in touch with us via social media, you have to register with these services. The companies behind the service in question may collect, store and use personal data. The nature, scope and processing of this data is beyond our control. These are services provided by the US companies:
• Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
• Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
• Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

5. What rights can you exercise?

5.1 Right to object:

• You have the right to object to the processing of your personal data for direct marketing purposes at any time, without giving any reason.

  Please direct your written objection to Festool GmbH, Wertstr. 20, 73240 Wendlingen, Germany or send an email to: customerservice-int@festool.com. Consent can be withdrawn at any time, either by using the link in the newsletter or by sending written notification.

  When cancelling the newsletter, you can also just remove individual newsletter topics at any time under the "Newsletter" tab, which is equivalent to unsubscribing from the newsletter. Information on cancelling a subscription can be found within every newsletter.

• Where we process your data for the purpose of safeguarding legitimate interests, you can object to the processing on grounds relating to your particular situation. We will then stop processing your personal data, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or where the processing is used for the establishment, exercise or defence of legal claims.

 

We wish to inform you that, in order to enter into and conduct contractual relationships, you must provide the personal data and company data necessary for establishing, fulfilling and terminating the contractual relationship and the performance of the associated contractual obligations, or that we are required to collect by law. If you exercise your right to object in this regard or do not provide us with this data, we will not be in a position to fulfil the contract with you.

5.2 Further rights:

5.2.1: Right of access:

You can obtain information on the data stored about you personally from the respective controller.

5.2.2: Right to rectification, erasure

Furthermore, you can have your data rectified or erased if certain criteria are met.

5.2.3: Other rights:

You also have the right to restrict the processing of your personal data, as well as the right to obtain the data you have provided in a structured, commonly used and machine-readable format.
You can lodge a complaint with the aforementioned Data Protection Officer or the competent supervisory data protection authority.

6. Safeguarding your data:

6.1: We take technical and organisational measures to protect your data against unauthorised access, unintentional modification, accidental loss or unlawful destruction. Nevertheless, electronic or physical transfers and storage of data can never be completely secure. Every transfer is therefore made at your own risk.

6.2 As part of this Privacy Policy, we wish to provide you with an as quick and as comprehensive explanation of the relevant topics as possible. Additional information on the respective purposes for which your data is processed and clarifications of the terminology we use can be found on our website. Still have questions? Please get in touch using the contact address set out in the supplementary information.

7. Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time, taking into consideration the applicable data protection regulations.