This data protection notice explains how we handle your personal data when you register for our marketing email communication.
(1) Controller, Contact The Controller under data protection law is Scintilla AG, Luterbachstrasse 10, 4528 Zuchwil, Switzerland (hereinafter „Scintilla“, “we”), contact@ch.bosch.com
For some processing activities, we can act as Joint Controller (according to Article 26 GDPR (General Data Protection Regulation of the European Union) together with other entities that are part of the Bosch group. Additionally, some data might be shared between multiple Bosch entities acting as independent Controllers. Please refer in both cases to the section “Data exchanges within the Bosch Group”, to learn more about processing activities in which we process your personal data jointly or independently with other Bosch entities.
(2) Processing of personal data The following personal data of the participants will be processed:
- Name, first name
- e-mail address
- Preferences (e.g. type of power tool, type of processed material, etc.).
- Specification of the trade (in order to personalize the marketing email communication)
(3) Purpose of processing This data is collected, processed and used for the following purpose:
- Personalization of the marketing content
- Invitation to participate in contests / prize draws
- Contacting for market research purposes and usability tests
- Consultation in personal service matters (e.g. dealer search)
- Building a customer profile
(4) Legal basis The legal basis for this processing is Art. 31 para. 2 let. a) FADP; If you are living in the European Economic Area, the legal bases for these processing activities are Art. 6 para. 1 let. a) GDPR (consent – marketing related processing you have consented to), Art. 6 para. 1 let. f) GDPR (legitimate interest - storage of data & some marketing usage) and Art. 6 para. 1 let. c) GDPR (legal obligation – fulfillment of legal obligation regarding storage of some data).
(5) Necessity of provision The provision of personal data is necessary for marketing email communication.
(6) Data exchanges within the Bosch Group
Joint processing of personal data
For some processing activities, we process personal data jointly with one or multiple Bosch group entities under the GDPR regulation. In these cases, the involved parties have jointly determined the purposes and the means of processing your personal data. The following table shall serve as an overview about potential processing activities under Joint Controllership in which multiple Bosch entities are involved.
|
Processing activity |
Involved parties |
Description of the joint processing |
|
Newsletter |
Us and all entities stated in the consent text you accepted |
Your personal data collected via your registration to our newsletter is made available to all Involved parties. The database is used jointly to enable each individual party to send out newsletter or initiate other marketing activities as described in the newsletter registration form. The involved parties therefore process the data to improve their individual sales and increase their market presence. |
In addition to the responsibilities for the individual processing activities set out in the table above, the following applies: The involved parties shall provide you as data subject with the information required under Articles 13 and 14 GDPR in a precise, transparent, understandable and easily accessible form in clear and simple language free of charge. Each party shall provide the other involved party with all necessary information from its sphere of activity. The involved parties shall inform each other without undue delay of any data subject rights asserted by you as a data subject. They shall provide each other with all information required to respond to your requests for information. You assert your data subject rights directly against each involved party at any time.
Independent Controllership
If one of the parties mentioned above processes independently (for its own purposes) of the other party your personal data for the purposes stated in the table above, this is done under independent Controllership. Only the parties mentioned above might process your personal data in independent Controllership. In addition, for marketing related communication, we state the Controllership in each marketing communication itself.
(7) Data transfer The data of the participants will only be processed by Scintilla and Robert Bosch Power Tools GMBH.
(8) Duration of storage, retention periods Deletion of your data by the end of legitimate interest. Anonymization of your data after withdrawal of consent or within two months after the end of the last offline event.
(9) Reporting of data protection incidents, assertion of data subject rights. To report data protection incidents and to assert your rights, please use the following link: https://www.bkms-system.net/bosch-datenschutz.
(10) Data subject rights. There is a right to information on the part of the controller about the personal data concerned and – insofar as the legal requirements are met - to correction of inaccurate data or to deletion, e.g. if the data is no longer required for the purposes pursued. There is also the right to restriction of processing and the right to data portability, insofar as the legal requirements are met.
(11) Right of appeal to the supervisory authority. You have the right to lodge a complaint with a
Data Protection Authority. To do so, you can contact the data protection authority responsible for your place of residence or your canton or the data protection authority responsible for us. This is:
Office of the Federal Data Protection and Information Commissioner FDPIC
Feldeggweg 1
CH - 3003 Berne
Telefon: +41 (0)58 462 43 95
Telefax: +41 (0)58 465 99 96
If you are living or working in the European Economic Area, you can lodge a compliant with the Data Protection Authority of the respective member state.
(12) Data protection officer. For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our data protection officer:
Data Protection Officer
Bosch Group Information Security and Privacy Department (C/ISP)
P.O. Box 30 02 20
70442 Stuttgart
GERMANY
or
mailtto: DPO@bosch.com
Status: September 2024