Data protection Information

Data protection Information of Robert Bosch LLC on the occasion of its participation in the CES from January 7 to 10 in Las Vegas, Nevada, USA, handed to you on request of Bosch Sensortec GmbH, Germany

Our Reference
RobertBosch LLC on behalf of Bosch Sensortec GmbH, Germany

Preface: With this data protection notice, Robert Bosch LLC informs you as a visitor to CES in Las Ve-gas, Nevada, at the request of BST GmbH, based in Germany, about your rights under the GDPR (Gen-eral Data Protection Regulation) applicable in the European Economic Area (27 countries of the Eu-ropean Union plus Norway, Liechtenstein, and Iceland). This only concerns you to the extent that you:

• have expressed your interest by allowing the data to be read from your badge at CES
• have expressed an interest in one of the BST products and also in the components contained therein (in particular the gesture control)
• the location of your company is in Europe¹

1 Data Protection and Information Security According to Art. 13 GDPR

1.1 Information according to Art. 13 GDPR

The protection of your privacy throughout the course of processing personal data as well as the secu-rity of all business data is an important concern to us. We process personal data confidentially and only in accordance with statutory regulations.

Data protection and information security are included in our corporate policy.

1.2 Principles

Personal data consists of all information related to an identified or identifiable natural person, this includes, e.g. names, addresses, phone numbers, email addresses, contractual master data, contract accounting and payment data, which is an expression of a person's identity.

We process personal data only when there is a statutory legal basis to do so.

2 Controller

Controller for the processing of your personal data as far as it falls under scope of GDPR is BST GmbH (we):

Bosch Sensortec GmbH,
Department BST/MBC
Gerhard-Kindler-Strasse 9
72770 Reutlingen, Baden-Wuerttemberg, Germany
Marketing.BST@bosch-sensortec.com

3 Processing purposes

3.1 Processing purposes and legal basis

We process your personal data for the following processing purposes:

• Lead generation with partners
• To generate turnover and business in the long run.

3.2 Transmission of personal data to third parties

We do not transfer your personal data to third parties.

3.3 Option: legitimate interest for BST GmbH, Germany

The legal basis for the processing is legitimate interest, GDPR Art. 6 para.1 lit f.

3.4 Option: legitimate interest for a third party

No third party has a legitimate interest.

3.5 Special data categories

We do not process any special data about your person (e.g. statements about your health, religion or sexual orientation).

3.5.1 Data transfer to other controllers

BST GmbH does not plan to transfer your personal data to any other parties.

Principally, your personal data is forwarded to other controllers only if required for the fulfillment of a contractual obligation, or if we ourselves, or a third party, have/has a legitimate interest in the da-ta transfer, or if you have given your consent. Particulars on the legal basis and the recipients or cat-egories of recipients can be found in the Section “Processing purposes and legal basis”.
Additionally, data may be transferred to other controllers when we are obliged to do so due to stat-utory regulations or enforceable administrative or judicial orders.

3.5.2 Data Transfer to recipients outside the EEA

We might transfer personal data to recipients located outside the EEA into so-called third countries.

In such cases, prior to the transfer we ensure that either the data recipient provides an appropriate level of data protection or that you have consented to the transfer.

You are entitled to receive an overview of third country recipients and a copy of the specifically agreed provisions securing an appropriate level of data protection. For this purpose, please use the contact information stated above.

3.5.3 Data Processing under commission

In cases when we involve external processors, we make sure to choose those processors carefully and monitor them on a regular basis, especially regarding their diligent handling of and protection of the data that they store. All processors are obliged to maintain confidentiality and to comply to the statutory provisions. Processors may also be other Bosch group companies.

4 Duration of storage, retention periods

Principally, we erase your personal data if a purpose and legal basis for data processing does not exist anymore, or we are legally obliged to erase. Please note that we are not allowed to erase personal data, which we have to keep to fulfill a legal obligation (e.g. retention periods under the tax and commercial codes, which require the availability of certain documents such as contracts and invoices for a certain period of time).

5 Rights of Data Subjects

To assert your data subject rights and to notify possible data protection incidents please use the fol-lowing link: https://www.bkms-system.net/bkwebanon/report/clientInfo?cin=18rbds19&language=eng.

When assessing data subject rights, please ensure that an unambiguous identification of your person is possible.

You may also contact our Data Protection Officer using the contact information stated below.

5.1 Right to information and access

You have the right to obtain confirmation from us about whether your personal data is being pro-cessed, and, if this is the case, access to your personal data.

5.2 Right to correction and deletion

You have the right to obtain the rectification or completion of inaccurate personal data or deletion of your data as far as statutory requirements are fulfilled.

5.3 Restriction of processing

You have the right to demand for – as far as statutory requirements are fulfilled – restriction of the processing of your data.

5.4 Data portability

You are entitled to receive data that you have provided to us in a structured, commonly used and machine-readable format or – if technically feasible – to demand that we transfer those data to a third party.

5.5 Objection to data processing based on the legal basis of “legitimate interest”

In addition, you have the right to object to the processing of your personal data at any time, insofar as this is based on legitimate interest. We will then terminate the processing of your data, unless we demonstrate compelling legitimate grounds according to legal requirements which override your rights.

5.6 Withdrawal of consent

In case you consented to the processing of your data, you have the right to revoke this consent at any time with effect for the future. The lawfulness of data processing prior to your withdrawal re-mains unchanged.

Bosch Sensortec GmbH
Department: BST/MBC
Gerhard-Kindler-Strasse 9
72770 Reutlingen, Baden-Wuerttemberg, Germany
Marketing.BST@bosch-sensortec.com

6 Data Protection Officer

You may contact or Data Protection Officer at any time using the following contact information:

Data Protection Officer
Information Security and Privacy (C/ISP)
Robert Bosch GmbH
post box 30 02 20
70442 Stuttgart, Germany
DPO@bosch.com.

7 Right to lodge complaint with supervisory authority

You have the right to lodge a complaint with a supervisory authority. You can appeal to the supervi-sory authority which is responsible for your place of residence or your state of residency or to the supervisory authority responsible for us. This is:

State Commissioner for Data Protection and Freedom of Information

Address:
Königstrasse 10a
70173 Stuttgart

Postal address:
P.O. Box 10 29 32
70025 Stuttgart, Germany

Phone: +49 711/615541-0
Fax: +49 711/615541-15
Email: poststelle@lfdi.bwl.de

8 Changes to the Data Protection Notice

We reserve the right to change our security and data protection measures. In such cases, we will ad-just our data protection notice accordingly.

This data protection notice is effective of: December 15, 2024

9 Change of purpose

No change of purpose as this is the first issue.

10 History

First issue December 2024

Sources

^{¹Anything which is declared in this Privacy Notification only refers to the definition given here:}

• ^{Your consent, your interest for one of the BST products, location of your company is in Eu-rope where it falls under the scope of the GDPR}

^{The transfer of data from Robert Bosch LLC to other interested parties is not part of this document.}