Data protection notice

1. Data Protection Notice

Robert Bosch GmbH (hereinafter “Bosch” or “We” or “Us”) welcomes you to our internet pages and mobile applications (together also referred to as “Online Offers”). We thank you for your interest in our company and our products.

Important Notice for U.S. and Canadian residents:
We have updated our Privacy Notice to provide supplemental details regarding certain rights provided under the U.S. and Canada Data Protection Requirements.

Review updates of the U.S. and Canada Privacy Rights/Privacy Notice

2. Bosch respects your privacy

The protection of your privacy throughout the course of processing personal data as well as the security of all business data are important concerns to us. We process personal data that was gathered during your visit of our Online Offers confidentially and only in accordance with statutory regulations.

Data protection and information security are included in our corporate policy.

3. Controller

Robert Bosch GmbH is the controller responsible for the processing of your data; exceptions are outlined in this data protection notice.

Our contact details are as follows:

Robert Bosch GmbH
Robert-Bosch-Platz 1
70839 Gerlingen-Schillerhöhe
GERMANY

E-Mail: kontakt@bosch.de
Phone: +49 711 400 40990

4. Collection, processing, and usage of personal data

4.1. Processed categories of data

Communication data (e.g., name, telephone number, e-mail address, address, IP address) are processed.

4.2. Principles

Personal data consists of all in-formation related to an identified or identifiable natural person, this includes, e.g., names, addresses, phone numbers, email addresses, contractual master data, contract accounting and payment data, which is an expression of a person’s identity.

We collect, process, and use personal data (including IP addresses) only when there is either a statutory legal basis to do so or if you have given your consent to the processing or use of personal data concerning this matter, e.g., by means of registration.

4.3. Processing purposes and legal basis

We as well as the service providers commissioned by us; process your personal data for the following processing purposes:

4.3.2 Resolving service disruptions as well as for security reasons

Legal basis: Fulfillment of our legal obligations within the scope of data security and legitimate interest in resolving service disruptions as well as in the protection of our offers

4.3.3 Reach analysis done within the scope statutorily permitted or based on consent

Legal basis: Consent

4.3.4 Safeguarding and defending our rights

Legal basis: Legitimate interest on our part for safeguarding and defending our rights

4.4. Log files

Each time you use the internet, your browser is transmitting certain information which we store in so-called log files.

We store log files to determine service disruptions and for security reasons (e.g., to investigate attack attempts) for a period of 90 days and delete them after-wards. Log files which need to be maintained for evidence purposes are excluded from deletion until the respective incident is resolved and may, on a case-by-case basis, be passed on to investigating authorities.

Log files are also used for analysis purposes (without the IP address or without the complete IP address) see module “Reach analysis“ (see no. 4.3.2).

In log files, the following information is saved:

• IP address (internet protocol address) of the terminal device used to access the Online Offer;
• Internet address of the website from which the Online Offer is accessed (so-called URL of origin or referrer URL);
• Name of the service provider which was used to access the Online Offer;
• Name of the files or information accessed;
• Date and time as well as duration of recalling the data;
• Amount of data transferred;
• Operating system and information on the internet browser used, including add-ons installed (e.g., Flash Player);
• http status code (e.g., “Request successful” or “File requested not found”).

4.5. Children

This Online Offer is not meant for children under 16 years of age.

4.6. Service providers (general)

We involve external service providers with tasks such as sales and marketing services, contract management, payment handling, programming, data hosting and hotline services. We have chosen those service providers carefully and monitor them on a regular basis, especially regarding their diligent handling of and protection of the data that they store. All service providers are obliged to maintain confidentiality and to comply with the statutory provisions. Service providers may also be other Bosch group companies.

4.7. Transfer to recipients outside the EEA

We might transfer personal data to recipients located outside the EEA into so-called third countries. In such cases, prior to the transfer we ensure that either the data recipient provides an appropriate level of data protection or that you have consented to the transfer.

You are entitled to receive an overview of third country recipients and a copy of the specifically agreed-provisions securing an appropriate level of data protection. For this purpose, please use the statements made in the “Contact” section (see no. 10).

4.8. Duration of storage, retention periods

Principally, we store your data for as long as it is necessary to render our Online Offers and connected services or for as long as we have a legitimate interest in storing the data (e.g. we might still have a legitimate interest in postal mail marketing after fulfillment of our contractual obligations). In all other cases we delete your personal data with the exception of data we are obliged to store for the fulfillment of legal obligations (e.g. due to retention periods under the tax and commercial codes we are obliged to have documents such as contracts and in-voices available for a certain period of time).

5. Usage of Cookies

In the context of our online ser-vice, cookies and tracking mechanisms may be used. Cookies are small text files that may be stored on your device when visiting our online service. Tracking is possible using different technologies. In particular, we process information using pixel technology and/or during log file analysis.

5.1. Categories

We distinguish between cookies that are mandatorily required for the technical functions of the online service and such cookies and tracking mechanisms that are not mandatorily required for the technical function of the online service.

It is generally possible to use the online service without any cookies that serve non-technical purposes.

5.2. Technically required cookies

By technically required cookies we mean cookies without those the technical provision of the online service cannot be ensured. These include e.g. cookies that store data to ensure smooth reproduction of video or audio footage.

Such cookies will be deleted when you leave the website.

5.3. Cookies and tracking mechanisms that are technically not required

We use marketing cookies and tracking mechanisms. We only use cookies and tracking mechanisms if you have given us your prior consent in each case. With the exception of the cookie that saves the current status of your privacy settings (selection cookie). This cookie is set based on legitimate interest.

Marketing cookies and tracking mechanisms

By using marketing cookies and tracking mechanisms we and our partners are able to show you offerings based on your interests, resulting from an analysis of your user behavior:

• Statistics:
  By using statistical tools, we measure e.g. the number of your page views.

Please note that using the tools might include transfer of your data to recipients outside of the EEA where there is no adequate level of data protection pursuant to the GDPR (e.g. the USA). For more details in this respect please refer to the following description of the individual marketing tools.

• Name: Google Analytics
  Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Function: Analysis of user behavior (page retrievals, number of visitors and visits, down-loads), creation of pseudonymous user profiles based on cross-device information of logged-in Google users (cross-device tracking), enrichment of pseudonymous user data with target group-specific information provided by Google, retargeting, UX testing, conversion tracking and retargeting in conjunction with Google Ads

• Name: Google Tag Manager
  Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Function: Administration of website tags via a user inter-face, integration of program codes on our websites

5.4. Management of cookies and tracking mechanisms

You can manage your cookie and tracking mechanism settings in the browser and/or our privacy settings:

Note: The settings you have made refer only to the browser used in each case.

Deactivation of all cookies

If you wish to deactivate all cookies, please deactivate cookies in your browser settings. Please note that this may affect the functionality of the website.

Management of your settings with regard to cookies and tracking mechanisms not re-quired technically

When visiting our websites, you will be asked in a cookie layer whether you consent to our using of any Comfort cookies, marketing cookies or tracking mechanisms, respectively.

In our privacy settings, you may withdraw the consent with effect for the future or grant your consent at a later point in time.

6. External links

Our Online Offers may contain links to internet pages of third parties, in particular providers who are not related to us. Upon clicking on the link, we have no influence on the collecting, processing and use of personal da-ta possibly transmitted by clicking on the link to the third party (such as the IP address or the URL of the site on which the link is located) as the conduct of third parties is naturally beyond our control. We do not assume responsibility for the processing of personal data by third parties.

7. Security

Our employees and the companies providing services on our behalf, are obliged to confidentiality and to compliance with the applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that are administrated by us especially from the risks of unintended or unlawful destruction, manipulation, loss, change or unauthorized disclosure or un-authorized access. Our security measures are, pursuant to technological progress, constantly being improved.

8. User rights

To enforce your rights, please use the details provided in the “Contact“ section (see no. 10). In doing so, please ensure that an unambiguous identification of your person is possible.

8.1. Right to information and access

You have the right to obtain confirmation from us about whether or not your personal data is being processed, and, if this is the case, access to your personal data.

8.2. Right to correction and deletion

You have the right to obtain the rectification of inaccurate per-sonal data. As far as statutory requirements are fulfilled, you have the right to obtain the completion or deletion of your data.

This does not apply to data which is necessary for billing or accounting purposes, or which is subject to a statutory retention period. If access to such data is not required, however, its processing is restricted (see the following).

8.3. Restriction of processing

As far as statutory requirements are fulfilled you have the right to demand for restriction of the processing of your data.

8.4. Data portability

As far as statutory requirements are fulfilled you may request to receive data that you have pro-vided to us in a structured, commonly used and machine-readable format or — if technically feasible — that we transfer those data to a third party.

8.5. Objection to data processing based on the legal basis of “legitimate interest”

In addition, you have the right to object to the processing of your personal data at any time, insofar as this is based on “legitimate interest”. We will then terminate the processing of your data, unless we demonstrate compelling legitimate grounds according to legal requirements which override your rights.

8.6. Withdrawal of consent

In case you consented to the processing of your data, you have the right to revoke this consent at any time with effect for the future. The lawfulness of data processing prior to your withdrawal remains unchanged.

8.7. Right to lodge complaint with supervisory authority

You have the right to lodge a complaint with a supervisory authority. You can appeal to the supervisory authority which is responsible for your place of residence or your state of residency or to the supervisory authority responsible for us. This is:

State Commissioner for Data Protection and Freedom of Information

Address:

Lautenschlagerstraße 20
70173 Stuttgart
GERMANY

Postal address:

P.O. Box 10 29 32
70025 Stuttgart
GERMANY

Phone: +49 711 615541-0
Fax: +49 711 615541-15
Email to: poststelle@lfdi.bwl.de

9. Changes to the Data Protection Notice

We reserve the right to change our security and data protection measures. In such cases, we will amend our data protection notice accordingly. Please, therefore, notice the current version of our data protection no-tice, as this is subject to changes.

10. Contact

If you wish to contact us, please find us at the address stated in the “Controller” section (see no. 3).

To assert your rights and to notify data protection incidents please use the following link:
https://www.bkms-system.net/bosch-dataprotection

For suggestions and complaints regarding the processing of your personal data we recommend that you contact our data protection officer:

Data Protection Officer
Information Security and Privacy (C/ISP)
Robert Bosch GmbH
P.O. Box 30 02 20
70442 Stuttgart
GERMANY

or

Email to: DPO@bosch.com

Effective date: 2025.01.01

U.S./Canada Privacy Disclosure of Robert Bosch GmbH for our website “code.bosch.com”

This U.S. and Canadian Disclosure supplements the information contained in Bosch’s website code.bosch.com [“website”] Data Protection Notice and applies solely to all visitors, users, and others of the website”. We adopt this U.S. and Canadian Disclosure to comply with the U.S. and Canadian Data Protection Requirements and any terms defined in U.S. and Canadian privacy frameworks have the same meaning when used in this U.S. and Canadian Disclosure.

Robert Bosch GmbH acts as a controller of your personal information. We determine how and why personal information can be used and provides the specific Service.

Any comments, complaints, or questions regarding the processing of your personal information may be emailed to privacy.policy@us.bosch.com or mailed to the Privacy Notice Administrator 38000 Hills Tech Drive, Farmington Hills, Michigan 48331.

You can obtain more information about how we collect, use, disclose and safeguard your personal information by reviewing our full Privacy Notice below.

Collection of Personal Information

The website has collected the following Personal Information from users” within the last twelve (12) months.

Bosch will continue to collect the Personal Information described above. If any additional Personal Information is collected by Bosch, we will provide any required notice(s), and where applicable obtain any required consent(s), in accordance with applicable laws in the relevant jurisdiction.

Sources of Personal Information

Bosch collects personal information from the following categories of sources:

1. Indirectly from you

For example, from observing your use of the website” and/or the Services, or services related thereto. The following data may be collected automatically: the website from which you visit Bosch (referrer), pages viewed, files downloaded (downloads), individual links clicked, search words or search phrases (site search), duration of visit, browser used, device data (e.g., unique device identifier, MAC address, IP address, serial number, hardware model, network information and operating system and version), and other relevant details and/or information. If the visit is a result of online advertising such as banners, video ads, search engine advertising, etc., Bosch or its agents, representatives, suppliers, vendors or consultants may record which banner, adware, etc. motivated or assisted with the website.

Disclosure, Sale, and Sharing of Personal Information — Past 12 Months

Bosch may use, store, compile, manipulate, share and disclose your personal information with third parties for the purposes stated above. Your personal information is shared with the following:

• Bosch affiliated entities to leverage shared services and improve our Services.
• Bosch service providers and other partners performing work on Bosch’s behalf, such as data analytics companies.
• Relevant authorities in accordance with, and as Bosch deems required, necessary and/or appropriate by, or in connection with, applicable law, regulation, court order or legal process.

By accessing and/or using the website or the Services, you consent to the above uses and disclosure of your personal information in accordance with this notice.

Sale or Sharing of Personal Information. In the preceding twelve (12) months, Bosch has not shared or sold personal information processed within this website for a business or commercial purpose. Bosch does not sell or share your personal information; therefore, we do not offer the right to opt out of the selling or sharing of your personal information.

This site does utilize Google Analytics to track website performance and user engagement. Bosch has enacted Google’s Restricted Data Processing and does not share your personal information with Google.

California “Shine the Light” Privacy Rights

California’s “Shine The Light” law permits those Bosch customers who are residents of California to annually request a list of their Personal Information (if any) that Bosch disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties. At this time, Bosch currently does not share any Personal Information with third parties for direct marketing purposes.

How We Respond to Do Not Track Signals

Bosch does not sell or share your personal information collected through the website/services to third parties as defined by relevant laws. Therefore, we do not recognize “Do Not Track” (“DNT”) or GPC.

Your Rights — U.S.

State specific privacy laws within the United States provide data subjects certain rights regarding the personal information that businesses collect and how the collected personal information is used. If you would like to exercise data subject right available to you, find the “Exercise your Rights” section below. Our privacy team will examine your request and respond to you as quickly as possible. We may still use any aggregated and de-identified Personal Information that does not identify any individual and may also retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our Agreements.

Dependent on the state of your residence, you may be provided the following rights:

• Portability — receive your personal information in a transferable and readily usable format, when technically feasible.
• Right to Delete — your personal information, subject to certain exceptions.
• Right to Correction — of the personal information we maintain about you.
• Right to Opt-Out — of sale or sharing of personal information to third parties, targeted advertising, profiling, automated decision making, collection of sensitive personal information, or collection of personal information through the operation of a voice or facial recognition.
• Right to Question the Results of Profiling — and to review your personal information used for profiling, to question the results, to be informed of the reasons of the resulting decision, and to be informed of what actions you can take to secure a different decision.
• If a decision was based on inaccurate personal information, you have the right to have the personal information corrected and the profiling decision reevaluated.
• Right to Restrict Sensitive Personal Information — to limit the use and disclosure or to opt-out.
• Right to Appeal — our decision regarding your submitted request.
• Right to not be discriminated against — for exercising your privacy rights

* States include California, Colorado, Connecticut, Delaware, Florida, Iowa, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia

Your Rights — Canada

Individuals located in Canada have certain rights pursuant to Canadian Privacy Laws. Subject to certain exceptions and limitations, and depending upon the jurisdiction where you reside, such rights may include:

a) The right to withdraw your consent to the collection, use or disclosure of your personal information.

b) The right to be informed of the existence, use, and disclosure of your personal information, and to be provided with an account of the use that has been made or is being made of this information as well as the third parties to which it has been disclosed (including a list of organizations to which your information may have disclosed).

c) The right to challenge the accuracy and completeness of your personal information, and have it amended, updated, or rectified as appropriate.

d) The right to acquire information about Bosch’s policies and practices with respect to personal information, including: a description of the type of personal information held by Bosch and a general account of its use; a copy of any brochures or other information that explain our policies, standards, or codes; and information about what personal information is shared with or accessible to our affiliates.

e) The right to challenge Bosch’s compliance with the applicable Canadian Privacy Laws.

How to Exercise Your Rights

To exercise your rights, submit a verifiable consumer request or access request, as applicable, to us by either:

Calling us at (888-43-BOSCH (888-432-6724)).
Sending an email to: privacy.policy@us.bosch.com

To assist Bosch in processing your request when exercising your rights, supply the following information:

• Full name
• Phone number
• Address
• Any information you can provide about your previous contact with Bosch (e.g., contact point / touchpoint with Bosch, screenshots, reference to a specific product/newsletter)

Only you (or based on your state of residence, an authorized agent authorized by you to act on your behalf — see Section Authorized Agent below for more information) may make a verifiable consumer request or access request, as applicable related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. Your verifiable consumer request or access request, as applicable, must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request or access request does not require you to create an account with us, but if you already have an account with us, you may be required to make your request through that account.

We will only use personal information provided in a verifiable consumer request or access request, as applicable, to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request or access request, as applicable, within forty-five (45) days of its receipt, or sooner where required by applicable law (including Canadian Privacy Laws). If we require more time (up 90 days in total), where permitted by applicable law, we will inform you of the reason and extension period in writing. Opt-out request will be honored as soon as feasibly possible, but no later than 15 days from the date we receive the request.

Notice to Canadian Users: Thirty (30) days if PIPEDA, or provincial laws in British Columbia or Quebec are relevant.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide in response to a verifiable consumer request will only cover the 12-month period preceding the verifiable consumer request’s receipt, unless otherwise required by applicable law. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Notice to Canadian Users: This 12-month limitation will not apply to Canadian access requests.

For data portability requests, where applicable, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request or access request, as applicable, unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Personal Information Sales: Opt In & Opt Out

Bosch does not sell or share your personal information collected through the website/services to third parties as defined by relevant laws. Therefore, we do not offer an opt-out.

Authorized Agent

Dependent on your state of residence you may request certain rights through an authorized agent.

When you submit your request through an authorized agent, we require that you:

1. Provide us a copy of your written permission for the authorized agent to submit the applicable request; and

2. Verify your own identity directly with us.

The foregoing does not apply when you have provided your authorized agent with a power of attorney pursuant to California Probate Code sections 4000 to 4465; provided, that we may require a copy of such power of attorney before fulfilling any request.

Non-Discrimination

We will not discriminate against you for exercising any of your rights. Unless permitted by applicable law, we will not: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Filing a Complaint

Regulatory authorities that oversee the privacy laws and regulations, including the Office of the Privacy Commissioner of Canada, advise individuals to file an objection or challenge with the relevant company before lodging a formal complaint with a regulatory authority. If you are dissatisfied with Bosch’s response to an objection or challenge filed under VIII. How to Exercise Your Rights above, or you if wish to file a complaint with a regulatory authority first, you may do so as follows:

Under PIPEDA: You may file a complaint with the Office of the Privacy Commissioner of Canada. Depending upon the province where you live, you may also (or instead) have the right to file a complaint with the applicable provincial privacy commissioner/regulator.

Under US state laws: You may file a complaint with the applicable state Attorneys General Office or regulatory agency.

Controller Contact

To obtain more information on our products or Services, you may submit your inquiry using one of the contact methods below:

Email: kontakt@bosch.de

Postal Address:

Robert Bosch GmbH
Robert-Bosch-Platz 1
70839 Gerlingen-Schillerhöhe
GERMANY

You may also contact as follows:

Phone: +49 711 400 40990

Changes to Privacy Notice

Due to the constantly changing nature of Bosch business, Bosch reserves the right to change, update, revise and/or modify this Privacy Notice at any time at Bosch’s sole discretion, and Bosch will post any new or revised Privacy Notice here. Any such change, update, revision and/or modification will be effective immediately upon posting on this website, unless we are required to provide direct notice or obtain your consent pursuant to applicable laws. Use of information that Bosch gathers now will be subject to the Privacy Notice in effect at the time of use. By using or navigating around the website” or utilizing any of the Services, you acknowledge that you have read and understood and agree to be bound by this Privacy Notice in and the applicable Terms of Use. If you do not agree to be so bound, do not remain on the website. You are responsible for checking the website frequently to keep apprised of recent changes.

The effective date of this Privacy Notice is January 1, 2025.

1. Privacy notice

Robert Bosch GmbH (hereinafter referred to as “Bosch” or “We”) welcomes you to our websites and mobile applications (collectively also referred to as “Digital Offers”). We appreciate your interest in our company and our products.

2. Bosch respects your privacy

The protection of your privacy during the processing of personal data as well as the security of all commercial data are important concerns for us. We process personal data collected during your visit to our Digital Offers confidentially and in accordance with the laws.

Data protection and information security are an integral part of our corporate policy.

3. Controller

Robert Bosch GmbH is responsible for the processing of your data; the exceptions are described in this privacy notice.

Our contact details are as follows:
Robert Bosch GmbH
Address: Robert-Bosch-Platz 1
70839 Gerlingen-Schillerhöhe
Germany

E-mail: kontakt@bosch.com
Phone: +49 711 400 40990

4. Collection, processing and use of personal data

4.1. Categories of personal data processed

We process the following categories of personal data:

• Identification data: IP address.
• Internet usage data: Information on user interaction with the portal.

4.2. Principles

Personal data consists of all information related to an identified or identifiable natural person, which includes, but is not limited to names, addresses, telephone numbers, e-mail addresses, contractual master data, contract number and payment data, which is an expression of a person’s identity.

We collect, process and use personal data (including IP addresses) only when you have given consent.

4.3. Purposes of processing and legal basis

We and our service providers commissioned by us process your personal data for the following purposes:

4.3.1. Provision of this digital offer
(Legal basis: Legitimate interest on our part in direct marketing as long as it occurs in accordance with data protection and competition law).

4.3.2. Resolve service outages as well as for security reasons
(Legal basis: Compliance with our legal obligations in the field of data security and legitimate interest in the resolution of service interruptions, as well as in the protection of our digital offers).

4.3.3. Safeguard and defense of our rights
(Legal Basis: Our legitimate interest in safeguarding and defending our rights).

4.3.4. Other purposes

• To facilitate the use of our sites, services and products and to understand how our users interact with our sites.
• To improve our digital offers.

Note to users in Mexico: The legal basis for the processing will always be consent or any of the exceptions provided for in article 10 of the Federal Law on Protection of Personal Data Held by Private Parties. This note applies to any reference to the legal basis.

4.4. Log Files (log files)

Every time you use the Internet, your browser transmits certain information that we store in so-called log files.

We store log files to determine service interruptions and for security reasons (for example, to investigate attack attempts) for a period of 90 days and delete them afterwards. Records to be kept for evidence purposes are excluded from deletion until the respective incident is resolved and, on a case-by-case basis, may be transmitted to the investigating authorities.

Log files are also used for analysis purposes (without the IP address or without the full IP address) see the module “Advertising and/or market research (including web analysis, without customer surveys)”.

The following information is saved in the log files:

• IP address (Internet protocol address) of the terminal device used to access the Digital Offer,
• Internet address of the website from which the Digital Offer is accessed (the so-called source URL or reference URL),
• Name of files or information accessed,
• Date and time as well as duration of the data call,
• Amount of data transferred,
• Operating system and information about the Internet browser used, including installed plugins (e.g., Flash Player),
• http status code (for example, “Successful request” or “Requested file not found”).

4.5. Children

This digital offer is not intended for children under 18.

4.6. Transfer of data to other Controllers

Primarily, your personal data is transmitted to other controllers only if it is necessary for the fulfillment of a contractual obligation, or if we or a third party has a legitimate interest in transferring data or if you have given your consent. Details on the legal basis and recipients or categories of recipients can be found in the Section – Purposes of Processing and Legal Basis.

In addition, data may be transferred to other Controllers when we are required to do so due to legal regulations or administrative or judicial orders.

Note to users in Mexico: The legal basis for the transfer will always be consent or any of the exceptions provided for in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties. It should be pointed out that, in accordance with the Mexican legal framework, some of the transfers mentioned are actually transmissions in cases where the recipient acts as Processor.

4.6.1. Service Providers (general)
We engage external service providers with tasks such as sales and marketing services, contract management, payment management, scheduling, data hosting and hotline services. We have carefully chosen these service providers and monitor them regularly, especially with regard to their diligent handling and protection of the data they store. All service providers are required to maintain confidentiality and comply with legal provisions. Service providers may also be other companies in the Bosch group.

Note to users in Mexico: Generally suppliers act as Data Processors, so communications of personal data with these, are considered transmissions.

4.7. Transfers to recipients outside the EEA

We may transfer personal data to recipients outside the EEA, the so-called third countries. In this case, we ensure before the transfer that the recipient complies with an appropriate level of data protection or that you have consented to the transfer.

You can ask us for an overview of the recipient third countries and a copy of the specifically agreed provisions ensuring an appropriate level of data protection. Please take advantage of the information provided in the “Contact” section.

4.8. Duration of storage, storage periods

Primarily, we store your data for as long as necessary to provide our digital offers and related services or as long as we have a legitimate interest in storing the data (i.e. we may still have a legitimate interest in postal marketing after the performance of our contractual obligations). In all other cases, we delete your personal data with the exception of data that we are obliged to store for the fulfillment of legal obligations (for example, due to retention periods under the tax and commercial codes, we are required to have documents such as contracts and invoices available for a certain period of time).

Note for users in Mexico: Personal data will not be kept for a longer period than that required for the purpose for which they were obtained unless there is an obligation established by law to store them for a certain period.

5. Use of cookies

In the context of our digital offer, cookies and tracking (tracking) mechanisms may be used. Cookies are small text files that can be stored on your device when visiting our digital service. Tracking (tracking) is possible using different technologies. In particular, we process the information using pixel technology and/or during the analysis of log files.

5.1. Categories of cookies

We distinguish between cookies that are mandatory for the technical functions of the digital service and cookies and tracking (tracking) mechanisms that are not strictly necessary for the technical function of the digital service.

In general, it is possible to use the digital service without any cookies that serve non-technical purposes.

5.1.1. Technically required cookies
By technically required cookies we mean cookies without which the provision of the digital service cannot be technically assured. These include, for example, cookies that store data to ensure smooth playback of video or audio streams.
Such cookies will be deleted when you leave the website.

5.1.2. Cookies and tracking (tracking) mechanisms that are not technically required
We only use cookies and tracking (tracking) mechanisms if you have given us your prior consent in each case. With the exception of the cookie that stores the current status of your privacy settings (selection cookie). This cookie is based on legitimate interest.
Note for users in Mexico: The use of cookies that obtain and/or use personal data will always require the corresponding consent depending on the type of data.

We distinguish between two sub-categories in relation to these cookies and the tracking mechanism:

5.2. Comfort Cookies

These cookies facilitate the operation and therefore allow you to search/navigate more comfortably on the online service, i.e. your language settings may be included in these cookies.

5.3. Marketing cookies (advertising) and tracking mechanisms (tracking)

General

By using marketing cookies and tracking mechanisms, we and our partners may show you offers based on your interests, as a result of an analysis of your user behavior:

• Statistics: Using statistical tools, we measure, for example, the number of visits to the page.
• Conversion tracking: Our conversion tracking partners place a cookie on your computer (“conversion cookie”) if you accessed our website through an advertisement from the respective partner. Normally, these cookies are no longer valid after 30 days. If you visit certain pages of our website and the cookie has not yet expired, we and the corresponding conversion partner may acknowledge that a certain user clicked on the ad and therefore was redirected to our website. This can also be done across multiple devices. The information obtained through the conversion cookie serves to compile conversion statistics and record the total number of users who clicked on the respective ad and were redirected to a website with a tracking tag of conversions.
• Social plugins: Some of the pages of our digital service involve content and services of other providers (for example, Facebook, X) that may also use cookies and active modules. For more details about social plugins, see the section about social plugins
• Retargeting: These tools create user profiles through advertising cookies or third party advertising cookies called “web beacons” (invisible graphics that are also called pixels or tracking pixels), or through comparable technologies. These are used for interest-based advertising and to control how often the user watches certain ads. The relevant provider is the Data Controller in relation to the tool. Tool providers may also disclose information to third parties for the purposes mentioned above. Please note the privacy notices of the relevant provider in this context.

Please note that the use of the tools may include the transfer of your data to recipients outside the EEA where there is no appropriate level of data protection in accordance with the GDPR (i.e. USA). For more details on this, see the following description of individual marketing tools.

5.3.1. Google Analytics
About Me Name: Google Analytics
Supplier: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Function: Analysis of user behavior (retrieval of pages, number of visitors and visits, downloads), creation of pseudonymous user profiles based on cross-device (multi-device) information of connected Google users (cross-tracking of devices), enrichment of pseudonymous user data with target group specific information provided by Google, retargeting, user experience testing, conversion tracking and retargeting in conjunction with Google Ads.

5.4. Management of cookies and tracking mechanisms

You can manage your cookie settings in your browser and/or our privacy settings.

Note: The settings you have made refer only to the browser used in each case.

5.4.1. Deactivation of all cookies
If you wish to disable all cookies, please disable cookies in your browser settings. Please note that this may affect the functionality of the website.

5.4.2. Management of your settings with regard to cookies and tracking mechanisms not required technically
When you visit our websites, you will be asked in a cookie layer whether or not you consent to the use of any comfort cookies, marketing cookies (advertising) or tracking mechanisms, respectively.

In your privacy settings, you may withdraw consent with effect for the future or grant your consent at a later time.

6. External links

Our Digital Offers may contain links to third-party websites (providers with which we are not associated). After clicking on the link, we no longer have control over the collection, processing and use of any personal data (such as the IP address or the URL of the page containing the link) because the behavior of third parties is beyond our control. Bosch assumes no responsibility for the processing of such personal data by third parties.

7. Security during the processing of data

Our employees and companies providing services on our behalf are bound by confidentiality and compliance with applicable data protection laws.

We take all necessary technical and organizational measures to ensure an adequate level of security and to protect your data managed by us, especially from the risks of unintentional or illegal destruction, manipulation, loss, unauthorized change or disclosure or unauthorized access. Our safety measures, in accordance with technological progress, are constantly being improved.

8. Users’ rights

For the validation of your rights, use the information provided in the “Contact” section. In doing so, please ensure that an unambiguous identification of your person is possible.

8.1. Right to information and access

You have the right to obtain confirmation from us as about whether or not your personal data is being processed, and if this is the case, access to your personal data.

Note for users in Mexico: Data subjects also have the right to be informed of the privacy notice to which the processing refers.

8.2. Right to correction and deletion

You have the right to obtain rectification of your inaccurate personal data. As long as you comply with the legal requirements, you have the right to have your data completed or deleted.

This is not valid for data that is necessary for billing or accounting purposes or that is subject to a legal retention period. If it is not necessary to access this data, its processing is limited (see below).

8.3. Restriction of processing

As far as statutory requirements are fulfilled you have the right to demand for restriction of the processing of your data.

8.4 Data portability

As far as statutory requirements are fulfilled, you may request to receive the data you have provided to us in a structured, commonly used and machine-readable format or if it is technically feasible, that we transfer those data to a third party.

8.5. Objection to direct marketing

Additionally, you may object at any time to the processing of your personal data for direct marketing purposes. Please consider that due to organizational reasons, there may be an overlap between your objection and the use of your data within the scope of a campaign which is already running.

8.6. Objection to data processing based on the legal basis of “legitimate interest”

In addition, you have the right to object to the processing of your personal data at any time as long as it is based on the “legitimate interest”. We will then terminate the processing of your data, unless we demonstrate compelling legitimate grounds according to legal requirements which override your rights.

Note for users in Mexico: The right of objection may be exercised with respect to any secondary purpose of the processing.

8.7. Withdrawal of consent

In case you consented to the processing of your data, you have the right to revoke this consent at any time with effect for the future. The lawfulness of data processing prior to your withdrawal remains unchanged.

9. Right to lodge complaint with supervisory authority

You have the right to lodge a complaint with a supervisory authority. You can appeal to the supervisory authority which is responsible for your place of residence or your state of residency or to the supervisory authority responsible for us. This is:

State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Address:

Lautenschlagerstraße 20
70173 Stuttgart
Germany

Postal address:

Post Office Box 10 29 32
70025 Stuttgart
Germany

telephone: 0711/615541-0
FAX: 0711/615541-15
e-mail: poststelle@lfdi.bwl.de

Note for users in Mexico: You can also file a complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI) or file a request for a rights protection procedure.

10. Changes to the Privacy Notice

We reserve the right to modify our security and data protection measures. In such cases, we will modify our privacy notice accordingly. Therefore, please note the current version of our privacy notice as it is subject to change. Changes to the privacy notice will be posted on this website.

11. Contact

If you wish to contact us, please find us at the address stated in the “Controller” section.

Effective date: 2025.01.01