Data protection notice

1. Bosch respects your privacy

We view the protection of your privacy during the processing of personal data and the security of all business data to be important considerations that we take into account in our business processes. We process personal data collected during your visit to our online services on a confidential basis and only in compliance with statutory provisions.

Data protection and information security are part of our company policy.

2. Data controller

Robert Bosch GmbH is responsible for processing your data; exceptions are explained in these data protection notices.

Our contact details are as follows:

Robert Bosch GmbH
Business Unit PS-CV
Robert-Bosch-Platz 1
70839 Gerlingen, Germany

E-Mail: kontakt@bosch.de
Phone: +49 711 400 40990

To assert your rights, report data privacy incidents or submit suggestions and complaints regarding the processing of your personal data, or to revoke your consent, we recommend that you contact our Group Data Protection Officer:

Data Protection Officer Information Security and Privacy (C/ISP)
Robert Bosch GmbH

P.O. Box 30 02 20
70442 Stuttgart, GERMANY

Or use the following link:
www.bkms-system.net/bosch-dataprotection

3. Collection, processing, and use of personal data

3.1 · Categories of processed data

Communication data (e.g., name, telephone number, email address, postal address, IP address) are processed.

3.2 · Fundamental principles

The term “personal data” covers all information that refers to an identified or identifiable natural person, such as names, addresses, telephone numbers or email addresses, which are an expression of the identity of a person.

We only collect, process, and use personal data (including IP addresses) if there is a statutory basis to do so or if you have granted us your consent in this regard, such as in the course of registration.

3.3 · Purposes of processing and legal bases

We and service providers contracted by us process your personal data for the following processing purposes:

3.3.1 · Making this online service available

Legal basis: an overriding legitimate interest on our part in direct marketing, provided that this occurs in accordance with data protection requirements and the provisions of competition law.

3.3.2 · Answering user inquiries sent using a contact form

Legal bases: an overriding legitimate interest on our part in marketing and in the improvement of our products and services, provided that this occurs in accordance with data protection requirements and the requirements of competition law and/or contract performance or consent.

3.3.3 · Investigation of disruptions and for security reasons

Legal bases: fulfillment of our legal obligations in the area of data security and an overriding legitimate interest in the elimination of disruptions and in the security of our services.

3.3.4 · Internal and external advertising, in addition to market research and coverage measurement as permitted by law or by consent

Legal basis: consent and/or an overriding legitimate interest on our part in direct marketing, provided that this occurs in accordance with data protection requirements and the provisions of competition law.

3.3.5 · Assertion and defense of our rights

Legal basis: a legitimate interest on our part with regard to the enforcement and defense of our rights.

3.4 · Log-Files

Every time you use the internet, certain information is automatically transmitted by your internet browser and stored in log files.

Log files are stored by us for the purpose of investigating service disruptions and for security reasons (e.g., to clarify attempted attacks) for a period of 90 days. Log files whose further storage is necessary for the purpose of evidence are exempt from deletion until the final clarification of the respective incident and may be passed on to investigative authorities in individual cases.

The following information is stored in the log files:

• IP address (internet protocol address) of the end device from which our website is accessed;
• Internet address of the website from which our website was accessed (origin or referrer URL);
• Name of the service provider used to access the website;
• Name of the files or information retrieved;
• Date and time as well as duration of the retrieval;
• amount of data transferred;
• Operating system and information on the Internet browser used, including installed add-ons (e.g., for Flash Player);
• http status code (e.g., "request successful" or "requested file not found").

3.5 · Children

This online service is not aimed at children younger than 16.

3.6 Disclosure of data

3.6.1 · Data transfer to other controllers

In general, your personal data will only be transferred to other controllers if this is necessary for the fulfillment of a contract, if we or the third party have a legitimate

interest in the transfer, or if you have given your consent. For details on the legal basis and the recipients or categories of recipients, please refer to the section Processing purposes and legal bases.

Additionally, data may be transferred to other controllers if we are obliged to do so by law or by enforceable official or court order.

Furthermore, data can be transferred to other data processors to the extent that we are obliged to do so due to statutory provisions or due to enforceable official and/or judicial orders.

3.6.2 · (General) service providers

We appoint external service providers for tasks such as marketing services, programming, data hosting, and hotline services. We have chosen these service providers carefully and monitor them on a regular basis, in particular their careful treatment and protection of the data stored with them. We oblige all service providers to maintain confidentiality and to comply with the statutory regulations. Service providers can also be other companies in the Bosch Group.

3.7 · Duration of storage; retention periods

As a rule, we store your data for as long as is necessary to maintain our online presence and provide associated services, or for as long as we have a legitimate interest in continued storage (e.g., we may still have a legitimate interest in postal marketing after fulfillment of a contract). After this point, we will delete your personal data with the exception of data that we must continue to store in order to fulfill legal obligations (e.g., we are obligated to retain contracts and invoices for a specific period because of mandatory storage periods defined in tax law and commercial law).

5. External links

Our websites may contain links to internet pages of third parties, in particular providers who are not related to us. Upon clicking on the link, we have no influence on the collecting, processing and use of personal data possibly transmitted by clicking on the link to the third party (such as the IP address or the URL of the site on which the link is located) as the conduct of third parties is beyond our control. We do not assume responsibility for the processing of personal data by third parties.

6. Security and protection of rights

We may also process your personal data to investigate service disruptions and for security reasons to comply with our legal obligations in the area of data security, as well as on the basis of our legitimate interest in the elimination of service disruptions and the security of our offers.

We may process your personal data to protect and defend our rights. This purpose also constitutes our legitimate interest.

7. Data subject rights

Please use the information in the Contact section to assert your rights. When doing so, please ensure that we can clearly identify you. You have the right to request access to the personal data concerning you, as well as the right to rectification, the right to erasure, the right to restriction of processing and the right to data portability. Insofar as you have given us consent to process your personal data, you may revoke this consent at any time with future effect.

7.1 Right to information and disclosure

You are entitled to obtain information from us on the processing of your data. For this purpose, you can assert a right of access regarding your personal data that we process.

7.2 Right to correction and deletion

You can demand that we correct inaccurate data and – provided the legal conditions are fulfilled – completion or deletion of your data.

This does not apply to data that are required for the purposes of invoicing and accounting, nor to data subject to the legal obligation of retention. To the extent that the access to such data is not required, its processing will be restricted (see below).

7.3 Restriction of processing

Insofar as legal requirements are met, you can ask us to restrict the processing of your data.

7.4 · Data portability

Provided that the statutory conditions are fulfilled, you are entitled to receive data that you have provided to us in a structured, commonly used and machine-readable format or – to the technically feasible extent – request the transfer of such data to a third party.

7.5.· Objecting to data processing based on “legitimate interest”

If the processing of your personal data is based on “legitimate interest”, you also have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. The reasons shall be stated. We will then terminate processing your data unless we can prove - in accordance with the legal requirements - compelling legitimate grounds for the processing which override your rights.

7.6 · Revoking consent

If you have consented to us processing your data, you can withdraw this consent at any time with effect for the future. This also applies to the revocation of declarations of consent given to us before the GDPR (General Data Protection Regulation) took effect: in other words, prior to May 25, 2018. This shall not affect the lawfulness of processing your data up until the time of revocation.

8. Change to the data protection notice

We reserve the right to change our security and data protection measures. In such cases, we will amend our Data Protection Notice accordingly. Therefore, please note the current version of our Data Protection Notice, as it is subject to change.

9. Contact

If you wish to contact us, please find us at the address stated in the Controller section.

To assert your rights please use the following link:

https://request.privacy-bosch.com/entity/RBCM/

For suggestions and complaints regarding the processing of your personal data we recommend that you contact our data protection officer:

Data Protection Officer Information Security and Privacy (C/ISP)
Robert Bosch GmbH
P.O. Box 30 02 20
70442 Stuttgart, GERMANY

or

Email: DPO@bosch.com

Last revised: 11/04/2025