Robert Bosch (South East Asia) Pte. Ltd. and its subsidiaries and related companies in ASEAN (‘Robert Bosch Singapore’, ‘we’, ‘us’ ‘our’, etc.) take the protection of your personal data very seriously. Consequently, data protection and information security are an integral part of our corporate policy for ASEAN.
‘Personal data’ means all the information that relates to an identified or identifiable natural person (that is, an individual) – for example, your name, telephone number, email address and street / mailing address.
In this Privacy Policy, we set out information about how we process personal data if and when we collect personal data about you in connection with providing you with our products and/or services or otherwise do business with you and when you use our online service. (Our website may include links to third party websites. They are not covered by this Privacy Policy. Please check the third party website for information about how they may process personal data.)
This Privacy Policy does not include how we process personal data in connection with recruitment, human resources management and ex-employees. If you would like information about how we process personal data for these categories of individuals, please email asean.dpo@sg.bosch.com and we will be happy to send you a copy of it.
We have written this Privacy Policy in a way that is straightforward and easy for you to understand. You are welcome to read it from end-to-end. Otherwise, you may like to click on a link below to take you directly to the parts of it that are most relevant to you.
For general information about how we process personal data, how we keep it secure, when we dispose of personal data and when we transfer it overseas see no. 3, no. 8 (security), no. 9 (disposal) and no. 10 (overseas transfer).
To find information relevant to your relationship with us:
• customers
• business partners, suppliers and other business contacts
• users of our online service
To find information about your rights:
• limiting the information you provide to us
• withdrawing consent; opting out of marketing messages
• data accuracy
• access to personal data
• correction of personal data
• making a complaint
Some countries in ASEAN do not yet have data protection laws. If you live in such a country we generally aim to protect your personal data as if there were data protection laws that apply to you.
The data protection laws in some countries in ASEAN are different from the data protection laws in other countries in ASEAN. We generally aim to protect your personal data as if the strictest standard of data protection law applies to you.
We collect personal data about you only for specific and legitimate purposes. We notify you about those purposes and we process such personal data only in ways that are compatible with the specific and legitimate purposes that we tell you about. We process personal data about you lawfully and fairly.
We only collect personal data about you that is adequate and not excessive in relation to the purpose(s) for which we process it. We take care to make sure such personal data is accurate and relevant and, where necessary for the purposes for which we process it, we keep it up-to-date.
We retain personal data about you only for so long as we need to do so for legal and business purposes. For so long as we retain such personal data we make reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.
We want to treat all of the individuals with whom we interact equally, but sometimes we cannot do so because of the way we must apply the laws.
In Singapore, the data protection law requires us to obtain your consent before we collect, use, disclosure and store (collectively, ‘Process’) personal data about you, except where there is an exception to the requirement for consent. For example, we do not need consent to process personal data to respond to an emergency threatens someone’s life, health or safety.
Elsewhere in ASEAN, the data protection laws lay out the lawful bases on which we may process personal data about you. Broadly, these are:
• where processing personal data is necessary for us to fulfil a contract we have with you – for example, where we have provided you with a product warranty – or in order to take steps at your request prior to entering into a contract
• where the processing is necessary for us to comply with a legal obligation to which we are subject
• where the processing is necessary to protect your vitally important interests, including your life and health
• where the processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such legitimate interests are over ridden by your fundamental rights and freedoms and/or
• where we have your consent to process personal data about you
We generally collect personal data directly from you. We will ask you for it (including contact information) when you interact with us, including when we are responding to your enquiries about our products or services. Sometimes we collect it from a third party, but only after checking that the third party has the right to provide the personal data to us – for example, where they do so at your request to enable us to provide information to you or to provide you with our products and/or services.
The personal data we collect about or relating to you depends on the circumstances in which we interact with you. We only collect personal data for purposes that are directly related to our business activities and when it is necessary for such purposes. We set out more specific information below, but generally:
• when you initiate contact with us, we collect contact information from you that enables us to respond to you and that generally enables us to communicate with you, and send messages to you, for the purpose or purposes for which you contacted us – for example, your name, username, email address, phone number, mailing address, physical / street address and your IP address – if at any time we ask for information that you prefer not to provide, please let us know (see no. 12 for our contact details)
• we collect information about our relationship with you, such as the types of products and/or services that we provide that may be of interest to you and information that helps us tailor our services to you
• we collect transaction information about how you interact with us, including enquiries, account information, transaction information when you purchase our products and/or use or services and information about how you use our products and/or our services – transaction information may include your payment card (or other payment) details when you purchase products through our website or otherwise pay us for providing you with products and/or services and
• for information about how you use our online services see no.6.
Product offering, sales and support
In connection with our product offerings, sales and support we collect personal data that is about you or relates to you when:
• you request information from us about products or services and/or you seek support, such as warranty and/or other aftermarket support (for example, in relation to power tools), from us and/or you join one of our workshops or training activities and/or
• you participate in a sales promotion, competition, redemption or cash rebate programme and/or you subscribe to our email or newsletter list(s)
and we use that personal data only for the purpose for which we collected it
Warranty registration and technical support
In connection with warranty registration and technical support we collect and use personal data that is about you or relates to you when you register a product with us for warranty purposes and if you contact us for technical support and (in each case) we use that personal data only for the purpose for which we collected it
We do not sell personal data about or relating to you. We do, however, disclose it as follows:
• to our subsidiaries and related companies where reasonably necessary for the various purposes for which we use such personal data – see ‘Howe we use personal data about or relating to you’
• we engage a third party service provider to assist us with conducting the activities for which we collect and use the personal data, such as service dealers, retailers, training providers and agents – in this case, the third party service provider is under contractual arrangements with us to ensure that your personal data is protected
• you consent
• you would reasonably expect, or you have been told, that personal data of that kind is usually passed to those individuals, bodies or agencies
• we are required or authorised by law to disclose it
On our website, we use the services of Qualtrics LLC, 333 W. River Park Drive, Provo UT 84604, USA to conduct customer, product, and satisfaction surveys. The goal is to continuously develop and improve our products and services. If you participate in a satisfaction survey, only so-called "lod data" (date and time stamp / information about your browser and your browser settings / information about your terminal device / usage data) will be processed. Participation in a satisfaction survey is voluntary. The legal basis for the data processing is your consent, Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future.
As part of the Qualtrics services also Cookies are used, in particular to maintain the current satisfaction survey during your browsing session and to prevent multiple participations. For more information about Qualtrics LLC and how Qualtrics processes personal data, please visit https://www.qualtrics.com/privacy-statement/.
We generally collect personal data directly from you. We will ask you for it (including contact information and relationship information) when you interact with us, including when we are responding to your enquiries about our services and pricing or when we are working with you in the course of establishing a business relationship with you and/or company and when we are providing our services to you and/or your company.
Sometimes we collect personal data about you from a third party, such as another individual working at your company – for example, when they add you to a project team.
If you are an individual who does business with us, including if you work for a company that does business with us, we may collect the following types of personal data about or relating to you:
• contact information that enables us to communicate with, and send messages to, you – such as your name, username, work email address, work phone number and mobile phone number
• information about our business relationship with you and that helps us to do business with you and/or with the your company, such as the types of products and/or services that we provide that may be of interest to you and/or your company and information that helps us tailor our services for you and/or your company and
• transaction information about how you interact with us, including enquiries, account information, transaction information when you and/or your company purchase our products and/or use our services and information about how you and/or your company use our products and/or our services
• for information about how you use our online services see no. 6.
We use personal data about or relating to you:
• to fulfil your and/or your company’s requests for products and/or services and for related activities, such as products and/or service delivery, customer service, account / relationship management, support and training and to provide other services related to your and/or your company’s business relationship with us
• to send you marketing communications, including offers that may be targeted based on your and/or your company’s apparent interests, business characteristics and location
• to administer surveys and to carry out promotional events and to determine if you and/or your company are eligible for certain services or offers
• to provide you and/or your company with additional information that we think may be of interest to you and/or your company, such as news about us, announcements made by us and technical information such as technical service bulletins
• to manage our everyday business needs and interactions with you and/or your company, including delivering our products and/or services to you and/or your company, processing payments, managing our financial accounting, carrying out product research and development, administering our website, analysing your and/or your company’s use of our services, preventing fraud and maintaining the security of our systems and processes, reporting and legal compliance and managing our business continuity
We do not sell personal data about or relating to you. We do, however, disclose it as follows:
• to our subsidiaries and related companies where reasonably necessary for the various purposes for which we use such personal data – see ‘How we use personal data about or relating to you’
• when we engage a third party service provider to assist us with conducting the activities for which we collect and use personal data, such as persons that provide services to us (such as physical product delivery, audit services and other internal management purposes) – in these cases, the third party service provider is under contractual arrangements with us that require the service provider to ensure that your personal data is protected and not used by the service provider for any purpose other than providing the specific contracted service
• we are required or authorised by law to disclose it
In the context of our online service, we may use cookies and other tracking mechanisms. Cookies are small text files that may be stored on your device when you visit our online service. Tracking is possible using different technologies. In particular, we process information using pixel technology and/or during log file analysis. We distinguish between:
• cookies that are mandatorily required for the technical functions of the online service
• cookies and tracking mechanisms that are not mandatorily required for the technical functions of the online service – it is generally possible to use the online service with these cookies and tracking mechanisms
‘Technically required cookies’ means those cookies that are necessary for ensuring the technical provision of
the online service. They include, for example, cookies that store data to ensure smooth reproduction of video or audio footage. Technically required cookies will be deleted when you leave the website.
We only use cookies and tracking mechanisms that are not technically required if you have given us your prior consent in each case. With regard to these cookies and tracking mechanisms, we distinguish:
• convenience cookies – they facilitate operation of the online service and thus allow you to browse it more comfortably (for example, your language settings may be included in these cookies)
• marketing cookies and tracking mechanisms:
o marketing cookies and tracking mechanisms enable us and our partners to show you offerings based on your interests, resulting from an analysis of your user behavior
o statistical tools enable us to measure, for example, the number of pages in our online service you that you view
o conversion tracking tools are placed on your device by our marketing partners if you accessed our website via an advertisement of such marketing partner (and are normally are no longer valid after 30 days) – if you visit certain pages of our website and the cookie has not yet expired, we and the relevant marketing partner can recognise that you clicked on the advertisement and were redirected to our website, which enables us to compile conversion statistics and to record the total number of users who clicked on the relevant advertisement and were redirected to our website
- Retargeting:
These tools create user profiles by means of advertising cookies or third-party advertising cookies so called "web beacons" (invisible graphics that are also called pixels or tracking pixels), or by means of comparable technologies. These are used for interest-based advertising and to control the frequency with which the user looks at certain advertisements. The relevant provider is the controller responsible for the processing of data in connection with the tool. The providers of the tools might disclose information also to third parties for the purposes mentioned above. Please note the data protection notices of the relevant provider in this context.
• social plugins – some of the pages of our online service involve content and services of other providers (for example, Facebook, Twitter), which may also use cookies and active modules – for more details regarding social plugins please refer to the section below on social plugins
You can manage your cookie and tracking mechanism settings in the browser and/or our privacy settings.
(Note: the settings you have made refer only to the browser used in each case.)
If you wish to deactivate all cookies, please deactivate cookies in your browser settings. Please note that this may affect the functionality of the website.
When visiting our websites, you will be asked in a cookie layer whether you consent to our using of convenience cookies, marketing cookies or tracking mechanisms, respectively.
In our privacy settings, you may withdraw the consent with effect for the future or grant your consent at a later point in time.
• Name: Google Analytics
Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Analysis of user behavior (page retrievals, number of visitors and visits, downloads), creation of pseudonymous user profiles based on cross-device information of logged-in Google users (cross-device tracking), enrichment of pseudonymous user data with target group-specific information provided by Google, retargeting, UX testing, conversion tracking, and retargeting in conjunction with Google Ads
• Name: Monetate
Provider: Monetate Inc., 100 Crosby Street #402, New York, NY 10012, USA
Purpose: Cookies can track how users browse across multiple pages; usability testing
• Name: Tealium
Provider: Tealium Inc., 11095 Torreyana Road San Diego, CA 92121, USA
Purpose: Segmenting and profiling in real time; tag management
• Meta Pixel
Meta Pixel
Provider: 1 Hacker Way, Menlo Park, CA, USA
Function: Collects data that tracks conversions from Meta ads, optimizes ads, builds targeted audiences for future ads, and remarkets to you if you have already taken some kind of action on the website.
https://www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=952192354843755
• LinkedIn Insight tag
LinkedIn Insight Tag
Provider: Sunnyvale, California, United States
Function: Tracks conversions from LinkedIn, retargets website visitors, and unlocks additional insights about members interacting with our ads.
• Google Floodlight
Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Function: Tracking of user behavior, measures the success of promotion campaigns and their optimization, Conversion Tracking, Retargeting
Name: Facebook Pixel
Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Together with Facebook, we are responsible for the processing of your personal data within the context of the processing of your personal data on our online offering using Facebook Pixel.
In order to define the respective responsibilities for the fulfilment of obligations in accordance with the GDPR for joint processing, we have concluded a shared responsibility agreement with Facebook. You can see the key points of the agreement at any time under the following link: https://www.facebook.com/legal/control-ler_addendum. In particular, this governs what security measures Facebook must take into consideration (https://www.facebook.com/le-gal/terms/data_security_terms) and how the rights of data subjects can be asserted vis-à-vis Facebook.
Function: Facebook processes your personal data on the basis of your consent through Facebook Pixel for the generation of campaign reports, conversion tracking, click events and targeted advertising outside our website (retargeting) on the basis of HTTP headers (including IP address, device and browser properties, URL, referrer URL, your person), Pixel-specific data (including Pixel ID and Facebook cookie), click behaviour, optional values (such as conversions, page type), form field names (such as “email”, “address”, “quantity” for purchasing a product or a service)
We do not receive any personal data concerning you from Facebook, but rather receive anonymised campaign reports about the website target audience and ad performance.
You can stop getting interest-based ads from Facebook by changing your advertising preferences on the Facebook website. Alternatively, you can deactivate the use of third-party cookies by visiting the Digital Advertising Alliance opt-out page at http://optout.aboutads.info/?c=2&lang=EN or the http://www.youronlinechoices.com website.
You can find more information at: https://www.facebook.com/policy
In order to optimize the loading times of this website, we use so-called “Content Delivery Network” (CDN) services, offered by public cloud from Microsoft, Microsoft Corporation One Microsoft Way, Redmond, WA 98052-6399 USA. The providers of the CDN Services are Akamai Technologies, Inc., 150 Broadway, Cambridge, MA 02142, USA, Verizon Media Verizon Privacy Office, 1300 I Street, NW Suite 500 East, Washington, DC 20005, and Microsoft itself. The use of the CDN Services represents a predominant legitimate interest within the meaning of article 6 section 1 lit. f GDPR.
Akamai, Verizon, and Microsoft each are certified under the Privacy Shield agreement, providing a guarantee to comply with the European data protection law. The deviating data protection regulations of Akamai, Verizon, and Microsoft, respectively, are applicable for this purpose.
Further information about the privacy policy of Akamai is available here: https://www.akamai.com/de/de/privacy-policies/.
Further information about the privacy policy of Verizon is available here: https://www.verizon.com/about/privacy/.
Further information about the privacy policy of Microsoft is available here: https://privacy.microsoft.com/de-de/privacystatement.
In our Online Offers we may use so-called social plugins from various social networks, such as ‘Like’, ‘Share’ and ‘comment’ buttons made available by Facebook, Twitter, Google+, Pinterest, Instagram, TMall and WeChat.
When you use a social plugin – for example, when you decide to ‘Like’ or ‘Share’ something –your internet browser creates a direct connection to the relevant social network’s server. The result is that the relevant social network provider receives the information that your internet browser accessed from the site on which we make our Online Offers available to you. This happens even if you do not have a user account with the relevant social network provider or are currently not logged into your account. Log files (including the IP address) are, in this case, directly transmitted from your internet browser to a server of the relevant social network provider and might be stored there. The relevant social network provider or its server may be located outside the European Union or the European Economic Area (for example, they may be in the United States).
Social plugins are standalone extensions by social network providers. For this reason, we are unable to influence the scope of data collected and stored by them.
The purpose and scope of the collection of data by a social network, the continued processing and usage of that data by the social network as well as your respective rights and setting options to protect your privacy can be found by consulting the relevant social network's data protection notice.
In case you do not wish social network providers to receive and, if applicable, store or use data, you should not use the respective plugins – that is, you should not use a ‘Like’, ‘Share’, ‘comment’ or similar button on our website.
By using the so-called two click solution (provided by Heise Medien GmbH & Co. KG) we protect your visit to our web pages from being logged and processed by social network providers by default. When using a page of our internet presence which contains such plugins, these are initially deactivated. The plug ins are activated only when you click on the respective button.
If we ask you for personal data that you do not want to provide, please tell us and we will try to continue without it. However, it might not be possible for us to provide the product or service that you are seeking or lack of personal data may result in inconvenience to you when we are providing such product or service.
Where we have obtained your consent to process your personal data, you may withdraw your consent at any time. You can do this by notifying us in writing (which includes email) – see no. 12 for our contact details.
If you have registered for a MyBosch Account you may login to it and edit your contact permissions in the My Profile section of it. Alternatively, you can opt out of commercial emails by clicking the ‘unsubscribe’ line at the bottom of any such email that we send to you. Please note that if you opt-out of commercial emails we may still need to contact you with important transactional information about you and/or your company’s account and/or about a product and/or service that you have purchased from us.
We take steps to ensure that the personal data we collect is accurate, up-to-date and complete. This includes updating it if and when you let us know that it has changed. If you have registered for a MyBosch Account you may login to it and amend the details in the My Profile section of it. Alternatively, please let us know about any changes by notifying us in writing (which includes email) – see no. 12 for our contact details.
You can request us to provide you with a copy of personal data about you or that refers to you that is in our possession or under our control. We will also give you information about the ways in which we have, or may have, used or disclosed it within the previous 12 months.
If you have registered for a MyBosch Account you may login to it and navigate to the My Products and My Orders sections of it to find out when we have used your personal data for the purpose of products purchased from us and product orders with us. Alternatively, please ask us in writing (which includes email) – see no. 12 for our contact details. We may request information from you that enables us to verify your identity before meeting your request. Subject to you verifying your identity, we will respond to your request as soon as reasonably possible. If we are unable to respond to your request within 30 days we will let you know within that period when we expect to be able to respond to your request.
We reserve the right to charge a fee for access to your personal data, which will be limited to the incremental costs incurred by us in meeting your request. We will notify you of the amount (or, if that cannot be determined, the estimated amount) of the fee before fulfilling your request.
You can request us to correct on error or omission in personal data about you or that refers to you that is in our possession or under our control.
If you have registered for a MyBosch Account you may login to it and amend the details in the My Profile section of it in order to correct any error or simply to update your personal data. Alternatively, notify us about your correction request in writing (which includes email) – see no. 12 for our contact details. We may request information from you that enables us to verify your identity before meeting your request. Subject to you verifying your identity, we will respond to your request as soon as practicable. If we are unable to respond to your request within 30 days we will let you know within that period when we expect to be able to respond to your request. We may also send the corrected personal data to other organisations to which we have disclosed your personal data.
As a leading global supplier of technology and services we take the security of personal data about or referring to you seriously
We have appropriate security measures in place to prevent your personal data being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business ‘need to know’. They will process your personal data only on our instructions.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable supervisory authority of an actual or suspected personal data breach where we are required by contract or law to do so.
We will cease to retain documents that contain personal data about you or that refers to you as soon as it is reasonable to assume that the purpose for which we collected it is no longer being served by us retaining it and we no longer need it for a business or legal purpose. Alternatively, we may anonymise the personal data so that it can no longer be associated with you.
We may from time to time, depending on the circumstances under which you provided personal data to us, have a business need to transfer it (or a copy of it) out of the country in which you gave it to us and to one of our subsidiaries or related companies a different country. For example, if you gave it to us outside of Singapore we might need to transfer it to our regional headquarters in Singapore.
We have entered into contracts to ensure that personal data about or relating to you is treated by the receiving entity with the same degree of care as is required by this Privacy Policy. This includes us adopting uniform practices / standard operating procedures (SOPs) in all of our subsidiaries and related companies in ASEAN (and in the location of our global headquarters, in the European Economic Area).
If you have any complaint about the way in which we have processed personal data about you or that refers to you – that is, if you feel we have not complied with this Privacy Policy and/or with the applicable data protection / privacy law please let us know. You may do this in writing (which includes email) – see no.12 for our contact details. Please include the following:
• sufficient contact details to enable us to identify you
• clear and succinct details about the nature of the complaint – for example, what happened, when you became aware of it and who was involved
• an outline of the impact the event that happened has had on you and
• details of what you would like to see happen to resolve your complaint
We will acknowledge receipt of your complain as soon as practicable. Then we will investigate it. We may need to obtain further information from you, speak to relevant staff members, review relevant documents and/or obtain legal or technical advice to do our investigation. Once we have completed our investigation, we will write to you to let you know the outcome of the investigation.
To assert your rights and to notify data protection incidents please use the following link: https://www.bkms-system.net/bosch-dataprotection.
You can contact us to get further information in relation to this Privacy Policy, to provide comments or to make any complaint by contacting our data protection officer as follows:
By letter:
Data Protection Officer, ASEAN Region
Robert Bosch (S.E.A.) Pte. Ltd.
11 Bishan Street 21
Singapore 573943
By email:
asean.dpo@sg.bosch.com
By phone:
+65 6258 5511
We reserve the right to change and update this Privacy Policy from time to time. We will notify changes by posting them on our website. The amended Privacy Policy will come into effect from the time that it is posted on our website.