This Data Protection Notice explains how we handle your personal data when you participate in our PRO Deals.
The controller in charge of processing your data is Robert Bosch Limited with its registered office at C/O Bosch Rexroth, Viewfield Industrial Estate, Glenrothes, KY6 2RD, UK; exceptions are explained in this Data Protection Notice.
The following personal data will be processed as part of the Promotion:
- Communication data (name, phone number, e-mail address, address).
- Contract master data (contractual relationship, product or contractual interests).
Personal data is all information that relates to an identified or identifiable natural person, for example names, addresses, telephone numbers, e-mail addresses and contractual, accounting and billing information, that expresses an individual's identity. We only collect, process and use personal data (including IP addresses) if there is a legal basis to do so or you have granted us your consent to do so, for example during registration.
We and the service providers we contract process your personal data for the following processing purposes:
- Participation in the Promotion and delivery of the Reward Item (legal basis: performance of the contract).
- Self-promotion and third-party promotion, as well as market research and reach analysis to the legally permitted extent or on the basis of consent (legal basis: consent/our legitimate interest in direct marketing provided it complies with data protection and competition regulations).
- Product and/or customer surveys by post (legal basis: legitimate interest in the improvement of products/services, consent).
- Product and/or customer surveys by e-mail and/or telephone, provided you have expressly opted into them (legal basis: consent).
- Sending a newsletter with the recipient's consent by e-mail or text message/MMS (legal basis: consent).
- Safeguarding and defending our rights (legal basis: our legitimate interest in asserting and defending our rights).
The provision of personal data is necessary for the participation in the Promotion. Non-provision may result in non-participation.
We will only ever pass on your personal data to other controllers if this is necessary in order to perform the contract, if we or the third party have/has a legitimate interest in passing on the data, or if you have granted your consent to this. Details about the legal basis and recipients and/or categories of recipients are provided in the “Purpose of processing and legal basis” section. In addition, data may be passed on to other controllers if we are obliged to do so on the basis of legal provisions or enforceable official or judicial orders.
We commission external service providers to perform tasks such as sales and marketing services, contract management and payment processing. We have selected these service providers with care and monitor them on a regular basis, particularly with regard to the careful handling and safeguarding of the data they store. All the service providers are required by us to maintain confidentiality and comply with statutory requirements. Service providers may also be other companies in the Bosch Group.
In order to give notification of your parcels , we will pass your e-mail address when implementing the contract to
General Logistics Systems
Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
This company processes the data as an independent person in charge.
Participants' data will be stored for as long as is necessary to provide our online services and the related services, for as long as we have your consent to process your personal data or for as long as we have a legitimate interest in storing it further (e.g. we may still have a legitimate interest in postal marketing even after the contract has been performed). After this time, we will erase your personal data, with the exception of the data that we must continue storing in order to comply with legal obligations (e.g. due to retention periods under tax and commercial law, we are obliged to retain, for example, contracts and invoices for a certain period).
Our employees and the service providers we contract are obliged to maintain confidentiality and to comply with the provisions of the applicable data protection legislation. We take all required technical and organisational measures to guarantee an appropriate level of protection and to protect your data that is managed by us in particular from risks of unintentional or wrongful destruction, manipulation, loss, modification or unauthorised disclosure and unauthorised access. Our security measures are continually improved in accordance with the state of technological developments.
To report data protection incidents, please use the following link: https://www.bkms-system.net/bosch-datenschutz. To assert your rights, please use the following link: https://request.privacy-bosch.com/
Please use the address given in the "Controller" section above to assert your rights. When doing so, please ensure that it is possible for us to clearly identify you.
You have the right to obtain information from us about the processing of your data. To do so, you can assert your right of access in relation to your personal information that we process.
You may request us to rectify incorrect data and, provided the legal requirements are met, complete or erase your data. This does not apply to data that is necessary for billing and accounting purposes, or that is subject to legal obligations to retain data. However, if access to this data is not required, the processing of such data is restricted (see “Restriction of processing” below).
You may request us to restrict the processing of your data, provided the legal requirements are met.
If you have granted us your consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data will remain unaffected by this up to the point at which your consent is withdrawn.
You also have the right to withdraw your consent to us processing your data at any time. If you object, we will stop processing your data unless, in accordance with legal requirements, we are able to prove that there are compelling legitimate reasons for continued processing that outweigh your rights.
You also have the right to receive data that you provided us with in a structured, commonly used and machine-readable format or to request that this data be transmitted to a third party, where this is technically feasible.
You have the right to appeal to a data protection supervisory authority. To do so, you can contact the data protection supervisory authority responsible for your place of residence or the data protection supervisory authority under whose jurisdiction we fall (which is the ICO in the UK).
For the UK this is:
Information Commissioner's Office Address:
First Contact Team
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Or
Phone: +44 (0)303 123 1113
E-mail: casework@ico.org.uk
For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our Data Protection Officer:
Data Protection Officer
Information Security and Data Protection Department Bosch Group (C/ISP)
P.O. Box 30 02 20
70442 Stuttgart
Germany
Or
E-mail: DPO@bosch.com
Date: 13.03.2025.