Data Protection Notice

Bosch Secure Authentication GmbH (hereinafter "BOSCH" or "We" or "Us") welcomes you to our internet pages and web-based and mobile applications (together also referred to as "Online Offers"). We thank you for your interest in our company and our products.

BOSCH respects your privacy

The protection of your privacy throughout the course of processing personal data as well as the security of all business data are important concerns to us. We process personal data that was gathered during your visit of our Online Offers confidentially and only in accordance with statutory regulations. Data protection and information security are included in our corporate policy.

1. Data Fiduciary

Bosch Secure Authentication GmbH is the Data Fiduciary responsible for the processing of your data; exceptions are outlined in this data protection notice.

Our contact details are as follows:

Bosch Secure Authentication GmbH
Königstraße 78
70173 Stuttgart
E-Mail: authentication.service@de.bosch.com
Phone: +49 711 400 40990

2. Collection, processing, and us-age of personal data

2.1. Processed categories of data

The following categories of data are processed:

2.2. Principles

Personal data consists of all in-formation related to an identified or identifiable natural person, this includes, e.g. names, addresses, phone numbers, email addresses, contractual master data, contract accounting and payment data, which is an ex-pression of a person's identity. We collect, process, and use personal data (including IP addresses) only when there is either a statutory legal basis to do so or if you have given your consent to the processing or use of personal data concerning this matter, e.g. by means of registration.

2.3. Processing purposes and legal basis

We as well as the service providers commissioned by us, process your personal data for the following processing purposes:

3. Children

This Online Offer is not meant for children under 18 years of age.

4. Data transfer to other Data Fiduciaries

Principally, your personal data is forwarded to other Data Fiduciaries only if required for the fulfillment of a contractual obligation, or if we ourselves, or a third party, have a legitimate use, or if you have given your consent. Particulars on the legal basis and the recipients or categories of recipients can be found in the Section – Processing purposes and legal basis.

Additionally, data may be transferred to other Data Fiduciaries when we are obliged to do so due to statutory regulations or enforceable administrative or judicial orders.

5. Service providers (general)

We involve external service providers with tasks such as data hosting. We have chosen those service providers carefully and monitor them on a regular basis, especially regarding their diligent handling of and protection of the data that they store. All service providers are obliged to maintain confidentiality and to comply with the statutory provisions. Service providers may also be other Bosch group companies.

6. Duration of storage, retention periods

Principally, we store your data for as long as it is necessary to render our Online Offers and connected services or for as long as we have a legitimate use for storing the data. In all other cases we delete your personal data except for data we are obliged to store for the fulfillment of legal obligations (e.g. due to retention periods under the tax and commercial codes we are obliged to have documents such as contracts and in-voices available for a certain period of time).

7. Usage of Cookies

In the context of our online service, cookies and tracking mechanisms may be used. Cookies are small text files that may be stored on your device when visiting our online service. Tracking is possible using different technologies. In particular, we process information using pixel technology and/or during log file analysis.

7.1 Categories

We distinguish between cookies that are mandatorily required for the technical functions of the online service and such cookies and tracking mechanisms that are not mandatorily required for the technical function of the online service. It is generally possible to use the online service without any cookies that serve non-technical purposes.

7.1.1 Technically required cookies

By technically required cookies we mean cookies without those the technical provision of the online service cannot be ensured. These include e.g. cookies that store data to ensure smooth reproduction of video or audio footage. Such cookies will be deleted when you leave the Online Offer.

7.1.2 Cookies and tracking mechanisms that are technically not required

We only use cookies and tracking mechanisms if you have given us your prior consent in each case. With the exception of the cookie that saves the current status of your privacy settings (selection cookie). This cookie is set based on legitimate interest.

7.1.2.1 Tracking mechanism

We need statistical information about the use of our online offering in order to make it more user-friendly, measure reach, and conduct market research. For this purpose, we use the app analysis tools described in this section. The providers of the tools process data only as processors in accordance with our instructions and not for their own purposes. You will find information on the respective provider for each tool below. If these tools use tracking mechanisms or user profiles, we will only use these tools if you have given us your prior consent to do so. Please note that when using the tools, your data may be transferred to recipients outside the EEA where there is no adequate level of data protection in accordance with the GDPR (e.g. USA). For details, please refer to the following description of the individual tools.

- New Relic (analytics service)
The analytics service of New Relic is provided by New Relic, 188 Spear Street, Suite 1000, San Francisco 94105, United States. The data collected helps us analyze and optimize the use of Origify. The information is also transferred to New Relic in the United States.
Function: diagnostic analysis and cumulative usage (e.g., crashes, error messages, HTTP response time, interaction analysis).
The New Relic service is used only with the user's consent. Consent can be given in the app settings. The legal basis for data processing is consent.

You can revoke your consent at any time with future effect by disabling the "Device technical data, share" feature in the app settings.

For more information on data protection at New Relic, please refer to New Relic's privacy policy at https://newrelic.com/termsandconditions/services-notices.

8. Usage of our mobile applications

In addition to our Online Offers, we offer mobile applications ("Apps"), which you can download to your mobile device. Beyond the data collected on websites, we collect additional personal data through our apps that specifically result from the usage of a mobile device. This is subject to your prior consent.

9. Data processing by App Store operators

We do not collect data, and it is beyond our responsibility, when data, such as username, email address and individual device identifier are transferred to an app store (e.g., Google Play by Google, App Store by Apple, Galaxy Apps Store by Samsung) when downloading the respective application. We are unable to influence this data collection and further processing by the App Store as Data Fiduciary.

10. Security

Our employees and the companies providing services on our behalf, are obliged to confidentiality and to compliance with the applicable data protection laws. We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that are administrated by us especially from the risks of unintended or unlawful destruction, manipulation, loss, change or unauthorized disclosure or un-authorized access. Our security measures are, pursuant to technological progress, constantly being improved.

11. User rights

YOUR RIGHTS

You may exercise certain rights over your personal data, as permitted by applicable laws:

Right to Access Information

You have the right to request confirmation as to whether we are processing your personal data and to obtain a summary of such personal data and information about the processing activities, including the purposes of processing and categories of data shared with third parties.

Right to Correction and Erasure

You have the right to request correction, completion, updating, or erasure of your personal data where it is inaccurate, incomplete, or no longer necessary for the purpose for which it was collected, unless retention is required by law.

Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw such consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.

Please note that withdrawal may impact your ability to use certain features or services.

Right to Grievance Redressal

You have the right to raise grievances regarding the processing of your personal data. We will address such grievances in a timely and effective manner through the contact details provided in the "Contact" section.

Right to Lodge a Complaint

If you are not satisfied with the resolution of your grievance, you have the right to lodge a complaint with the Data Protection Board of India, in accordance with applicable procedures.

To enforce your rights, please use the details provided in the Contact section. In doing so, please ensure that an unambiguous identification of your person is possible.

13. Contact

If you wish to contact us, please find us at the address stated in the "Data Fiduciary" section.

To assert your rights and to notify data protection incidents please use the following link: https://request.privacy-bosch.com/entity/RB.

To report data protection incidents, use the following link: https://www.bkms-system.net/bosch-dataprotection.

For suggestions and complaints regarding the processing of your personal data we recommend that you contact our data protection officer:

Data Protection Officer
Information Security and Privacy (C/ISP)
Robert Bosch GmbH
P.O. Box 30 02 20
70442 Stuttgart, GERMANY
or
mailto: DPO@bosch.com