Data Protection Notice for the PRO Deals Promotion 

 

This Data Protection Notice explains how we handle your personal data when you participate in our PRO Deals Promotion.  

 

1. Controller 

The controller in charge of processing your data is Robert Bosch Limited with its registered office at C/O Bosch Rexroth, Viewfield Industrial Estate, Glenrothes, KY6 2RD, UK; exceptions are explained in this Data Protection Notice. 

 

2. Collection, processing and use of personal data 

Data categories processed 

The following categories of data are processed:  

- Communication data (e.g. name, phone number, e-mail address, address). 

- Contract master data (contractual relationship, product or contractual interests). 

 

3. Basic principles 

Personal data is all information that relates to an identified or identifiable natural person, for example names, addresses, telephone numbers, e-mail addresses and contractual, accounting and billing information, that expresses an individual's identity. We only collect, process and use personal data (including IP addresses) if there is a legal basis to do so or you have granted us your consent to do so, for example during registration. 

 

4. Purpose of processing and legal basis 

We and the service providers we contract process your personal data for the following processing purposes: 

  • Participation in the Promotion and delivery of the Reward Item (legal basis: performance of the contract). 
  • Self-promotion and third-party promotion, as well as market research and reach analysis to the legally permitted extent or on the basis of consent (legal basis: consent/our legitimate interest in direct marketing provided it complies with data protection and competition regulations).  
  • Product and/or customer surveys by post (legal basis: legitimate interest in the improvement of products/services, consent).  
  • Product and/or customer surveys by e-mail and/or telephone, provided you have expressly opted into them (legal basis: consent). 
  • Sending a newsletter with the recipient's consent by e-mail or text message/MMS (legal basis: consent).  
  • Safeguarding and defending our rights (legal basis: our legitimate interest in asserting and defending our rights). 

 

5. Necessity of provisioning  

The provision of personal data is necessary for the participation in the Promotion. Non-provision may result in non-participation. 

 

6. Data transfer to other controllers 

We will only ever pass on your personal data to other controllers if this is necessary in order to perform the contract, if we or the third party have/has a legitimate interest in passing on the data, or if you have granted your consent to this. Details about the legal basis and recipients and/or categories of recipients are provided in the “Processing purposes and legal basis” section. In addition, data may be passed on to other controllers if we are obliged to do so on the basis of legal provisions or enforceable official or judicial orders. 

 

7. Data transfer to service providers   

We commission external service providers to perform tasks such as sales and marketing services, contract management and payment processing. We have selected these service providers with care and monitor them on a regular basis, particularly with regard to the careful handling and safeguarding of the data they store. All the service providers are required by us to maintain confidentiality and comply with statutory requirements. Service providers may also be other companies in the Bosch Group. 

 

8. Parcel notification  

In order to give notification of your parcels, we will pass on your e-mail address or telephone number (for SMS communication) when implementing the contract to 

 

DX Network Services Ltd 

Ditton Park Riding Court Road 

SL3 9GL Datchet Slough 

Great Britain 

 

This company processes the data in its capacity as a controller. 

 

Eurobase Ltd 

IDA Business Park 

Cork Road 

Waterford 

Ireland 

 

This company may use logistics providers who process the data in their capacity as a data controller. 

 

9. Storage period  

Participants' data will be stored for as long as is necessary to provide our online services and the related services, for as long as we have your consent to process your personal data or for as long as we have a legitimate interest in storing it further (e.g. we may still have a legitimate interest in postal marketing even after the contract has been performed). After this time, we will erase your personal data, with the exception of the data that we must continue storing in order to comply with legal obligations (e.g. due to retention periods under tax and commercial law, we are obliged to retain, for example, contracts and invoices for a certain period).   

 

10. Security 

Our employees and the service providers we contract are obliged to maintain confidentiality and to comply with the provisions of the applicable data protection legislation. We take all required technical and organisational measures to guarantee an appropriate level of protection and to protect your data that is managed by us in particular from risks of unintentional or wrongful destruction, manipulation, loss, modification or unauthorised disclosure and unauthorised access. Our security measures are continually improved in accordance with the state of technological developments. 

 

11. Reporting of data protection incidents, assertion of rights of data subjects  

To report data protection incidents, please use the following link: https://www.bkms-system.net/bosch-datenschutz. To assert your rights, please use the following link: https://request.privacy-bosch.com/ 

 

12. User rights 

Please use the address given in the "Controller" section above to assert your rights. When doing so, please ensure that it is possible for us to clearly identify you. 

 

13. Right to information and right of access by the data subjects 

You have the right to obtain information from us about the processing of your data. To do so, you can assert your right of access in relation to your personal information that we process. 

 

14. Right to rectification and erasure 

You may request us to rectify incorrect data and, provided the legal requirements are met, complete or erase your data. This does not apply to data that is necessary for billing and accounting purposes, or that is subject to legal obligations to retain data. However, if access to this data is not required, the processing of such data is restricted (see “Restriction of processing” below). 

 

15. Restriction of processing 

You may request us to restrict the processing of your data, provided the legal requirements are met. 

 

16. Withdrawal of consent 

If you have granted us your consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data will remain unaffected by this up to the point at which your consent is withdrawn. 

 

17. Objection of data processing 

You also have the right to withdraw your consent to us processing your data at any time. If you object, we will stop processing your data unless, in accordance with legal requirements, we are able to prove that there are compelling legitimate reasons for continued processing that outweigh your rights. 

 

18. Data portability 

You also have the right to receive data that you provided us with in a structured, commonly used and machine-readable format or to request that this data be transmitted to a third party, where this is technically feasible. 

 

19. Right to lodge a complaint with a supervisory authority  

You have the right to lodge a complaint with a data protection authority. To do so, you can contact the data protection authority responsible for your place of residence or the data protection supervisory authority under whose jurisdiction we fall (which is the ICO in the UK). 

 

This is: 

 

For the UK 

Information Commissioner's Office Address: 

First Contact Team 

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

SK9 5AF  

 

Or 

 

Phone: +44 (0)303 123 1113 

 

E-mail: casework@ico.org.uk  

 

20. Data Protection Officer  

For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our Data Protection Officer: 

 

Information Security and Data Protection (C/ISP) 

Robert Bosch GmbH 

Postfach 300220 

70442 Stuttgart 

Germany 

 

Or 

 

E-mail: DPO@bosch.com 
 
 
Date: 01.01.2025