General Data Protection

Bosch eBike Systems data protection notices

Robert Bosch GmbH (hereinafter "Bosch eBike Systems" or "We" or "Us") welcomes you to our website including all subdomains. Thank you for your interest in our company and our products.

The protection of your privacy in the processing of personal data and the safety of all business data are important concerns that we take into account in our business processes. Data protection and information security are anchored in our corporate policy.

Data Controller

The person responsible for processing your data is:  

Robert Bosch GmbH
Robert-Bosch-Platz 1
70839 Gerlingen-Schillerhöhe

You can reach us at:
E-mail address: contact@remove.this.bosch-ebike.co.uk

Collection, processing and use of personal data

Principles

Personal data means any information relating to an identified or identifiable natural person, such as name, address, telephone number, e-mail addresses, contract data, booking data and billing data, that express the identity of a person.

We gather, process and use personal data (including IP addresses) only if there is a legal basis for doing so, or if you have given us your consent, e.g. during the course of registration.

 

Categories of data processed

The categories of data processed are as follows: 

• Communication data (e.g. name, telephone, e-mail, address, IP address)

• User data (user name, SingleKey ID, company name)

• Log files

• Contract master data (contractual relationship, interest in a product or contract)

 

Processing purposes and legal bases

We and the service providers commissioned by us process your personal data for the following purposes:

  • Provision of this online offer
    Legal basis: Contract performance. The following conditions apply.
     
  • To determine malfunctions and for safety reasons 
    Legal basis: Fulfilment of our legal obligations in the area of data safety and legitimate interest in the elimination of disruptions and the safety of our offerings).
     
  • Proprietary and third-party advertising as well as market research (e.g. improvement of products/services) and range measurement to the extent permitted by law or on the basis of consent 
    Legal basis: Consent/legitimate interest on our part in direct marketing, as long as this is done in accordance with data protection and competition law requirements.
     
  • Sending a newsletter with the recipient's consent by e-mail or SMS/MMS
    Legal basis: Consent.
     
  • Preservation and defence of our rights
    Legal basis: Legitimate interest on our part in asserting and defending our rights.

Login with SingleKey ID, Joint Controllership

You can log in to our services using SingleKey ID.

SingleKey ID was devised by Bosch.IO GmbH for the Bosch Group to provide users with a comprehensive login option on Bosch websites, shops, apps and services. Bosch.IO GmbH, Ullsteinstrasse 128, 12109 Berlin, Germany, is responsible for providing SingleKey ID.

Bosch.IO GmbH processes your data for the purposes of "Registration and login with SingleKey ID" and "Overview and management of data and applications with SingleKey ID" in joint responsibility with us. For more information, see: https://singlekey-id.com/data-protection-notice/.

After a one-time registration, you can use SingleKey ID to log in. To do this, you will be forwarded to a login screen at Bosch.IO GmbH. After successful authentication, Bosch.IO GmbH provides us with the necessary personal data (e.g., e-mail address, telephone number, first name, last name, language, country). Your password will not be sent to us.

You can terminate your SingleKey ID user agreement at any time on the SingleKey ID website by deleting your SingleKey ID: https://singlekey-id.com/myprofile/.

Please note that by deleting your SingleKey ID you will lose access to all Bosch websites, shops, apps and services that you used to log in to with your SingleKey ID.

Log files

Whenever you use the Internet, your Internet browser automatically transmits certain information and we store it in so-called log files. 

The log files are stored by us for a period of 7 days to determine malfunctions and for safety reasons (e.g. to clarify attempted attacks) and then deleted. Log files whose further storage is necessary for evidentiary purposes are excluded from the deletion until the final investigation of the relevant incident and, in individual cases, may be forwarded to the investigating authorities. 

The following information is stored in the log files: 

  • The IP (Internet Protocol) address of the device from which the online offering is accessed;
  • Internet address of the website from which the online offering was accessed (known as the originating or referrer URL);
  • Name of the service provider through which the online offering is accessed;
  • Name of the retrieved files and/or information;
  • Date, time and duration of the retrieval;
  • Transferred data volume;
  •  Operating system and information about the Internet browser used, including installed add-ons (e.g. for Flash Player);
  • http status code (e.g. "request successful" or "requested file not found").

Children

This online offer is not intended for children under the age of 16.

Transfer of data to other data controllers

Your personal data will only be transmitted to other data controllers if this is necessary for the fulfilment of the contract, if we or the third party have a legitimate interest in transferring the data and/or you have granted your consent. For details on the legal bases and the recipients or categories of recipients, please refer to the section on processing purposes and legal bases. In addition, data may also be transmitted to other data controllers if we are obliged to do so by law or by enforceable administrative or court order.

Service providers (general)

We commission external service providers with tasks such as sales and marketing services, contract management, payment processing, programming, data hosting and hotline services. We have carefully selected these service providers and monitor them regularly, in particular their careful handling and protection of the data stored with them. All service providers are obliged by us to maintain confidentiality and to comply with legal requirements. Other companies in the Bosch Group may also be service providers.

Transfer to recipients outside the EEA

We may also transfer personal data to recipients located outside the EEA in so-called third countries. In this case, we shall ensure before transfer that either an adequate level of data protection exists on the recipient's side or that your consent to the transfer has been obtained.

You can obtain from us an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure an adequate level of data protection. Please use the information in the contact section for this purpose.

Duration of storage; retention periods

In principle, we store your data for as long as is necessary to provide our online service and the associated services or we have a justified interest in continued storage (e.g. we may still have a justified interest in marketing by post even after fulfilment of a contract). We will thereafter delete your personal data with the exception of data that we are required to retain to comply with legal obligations (e.g. we are required by tax and commercial law to retain documents such as contracts and invoices for a certain period of time).

Use of cookies

Cookies and tracking mechanisms may be used in the context of providing our online services. 

Cookies are small text files that are stored on your device when you visit an online offering. 

Tracking is possible using various technologies. We process information in particular in the context of pixel technology or log file analysis.

Technically essential cookies

By technically essential cookies we mean cookies without which the technical provision of the online offer cannot be guaranteed. This includes, for example, cookies that store data in order to ensure smooth playback of video or audio content.

These cookies are deleted after the end of your visit.

Technically non-essential cookies and tracking mechanisms

We only use these cookies and tracking mechanisms if you have given us your prior consent in each case. An exception to this is the cookie that stores the current status of your privacy settings (selection cookie). This is set on the basis of a legitimate interest.

We divide these cookies and tracking mechanisms into two sub-categories:

Comfort cookies

These cookies facilitate the operation and thus enable more convenient surfing on our online offer, e.g. your language settings can be stored in these cookies.

Marketing cookies and tracking mechanisms

General

By using marketing cookies and tracking mechanisms we and our partners can display interest-based offers based on an analysis of your usage behaviour:

  • Statistics: By using statistical tools we measure e.g. the number of your page views. 
  • Conversion tracking: Our Conversion Tracking partners place a cookie on your computer (‘conversion cookie’) for this analysis service if you have accessed our website via an ad of the relevant partner. These cookies generally expire after 30 days. If you visit a specific page of ours and the cookie has not expired, we and the Conversion Tracking partner can recognise that a certain user clicked on the ad and was redirected to our site. This is also possible across devices. The information collected using the conversion cookie is used to generate conversion statistics and to record the total number of users who clicked on the ad and were redirected to a page with a Conversion Tracking tag.

Name: Google Analytics 

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Function: Analyse user behaviour (page views, number of visitors and visits, downloads) and conversion tracking. 

Name: Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Function: Management of website tags via an interface, integration of programme code on our websites.

 

Management of cookies and tracking mechanisms

You can manage your cookie and tracking mechanism settings in your browser and/or in our privacy settings:

Note: The settings you choose only relate to the browser you use. 

Disabling all cookies

If you wish to disable all cookies, please go to your browser settings and deactivate the setting of cookies. Please note that this may affect the functionality of the website. 

Managing your settings regarding technically non-essential cookies and tracking mechanisms

When you visit our website, you will be asked in a cookie layer whether you grant your consent for the use of comfort cookies and marketing cookies and/or tracking mechanisms. 

In our privacy settings, you can revoke consents already given with future effect or give us your consent at a later date.

Newsletter with registration option; right of withdrawal

You can subscribe to our newsletter as part of our online service. If you later decide you no longer wish to receive newsletters, you can cancel your subscription at any time by withdrawing your consent. For e-mail newsletters, you can withdraw using the link contained in the newsletter, or in the administration settings of the respective online service. Alternatively, please contact us using the information in the Contact section.

External links

Our online offer may contain links to web pages of third parties not affiliated with us. After clicking on the link, we no longer have any influence on the collection, processing and use of any personal data transferred to the third party by clicking on the link (such as the IP address or the URL of the page on which the link is located), since the conduct of third parties is of course beyond our control. We accept no responsibility for the processing of such personal data by third parties.

Safety

Our employees and the service companies commissioned by us are bound to secrecy and compliance with the provisions of the applicable data protection laws. 

We take all necessary technical and organisational measures to ensure an adequate level of protection and to protect your data managed by us in particular against the risks of accidental or unlawful destruction, manipulation, loss, alteration or unauthorised disclosure or access. Our safety measures are constantly being improved in line with technological developments.

Rights of users

Please use the information in the Contact Us section to exercise your rights. Please make sure to provide enough information so we can clearly identify you.

Right to information and disclosure

You have the right to receive information from us about the processing of your data. To this end, you may exercise a right to information regarding your personal data that we process. 

Right to correction and deletion

You can request us to correct incorrect data. Provided the legal requirements are fulfilled, you can demand the completion or deletion of your data. This does not apply to data which is required for invoicing and accounting purposes, or which is subject to a legal obligation to retain. However, if access to such data is not required, its processing will be restricted (see below).

Processing restrictions

You can demand from us - provided the legal requirements are fulfilled - that we restrict the processing of your data. 

Data portability

Provided the legal requirements are met, you can ask to receive the data provided by you to us in a structured, common and machine-readable format and/or – if technically feasible – to require the data to be transmitted to a third party.

Objection to data processing in the event of legal basis of "legitimate interest"

In addition, you have the right to object to data processing by us at any time, insofar as this is done on the legal basis of "legitimate interest". We will then suspend the processing of your data unless we can prove - in accordance with the statutory provisions - that there are compelling and legitimate grounds for further processing which outweigh your rights. 

Revocation of consent

If you have given us permission to process your data, you can revoke it at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.

Right of appeal to the supervisory authority:

You have the right to file a complaint with a data protection authority. You can contact the data protection authority responsible for your place of residence or federal state or the data protection authority responsible for us. It is:  

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Address:

Lautenschlagerstrasse 20
70173 Stuttgart, Germany

Postal address:

P.O. Box 10 29 32
70025 Stuttgart, Germany

Tel.: +49 (711)/615541-0
FAX: +49 (711)/615541-15 

E-mail: poststelle@remove.this.lfdi.bwl.de

Changes to the data protection notice

We reserve the right to change our safety and data protection measures. In these cases, we will also adapt our notice on data protection accordingly. Please therefore note the current version of our privacy policy.

Contact

If you would like to contact us, you can reach us at the address given in the “Data Controller” section.
 

To exercise your rights, use the following link: https://request.privacy-bosch.com/entity/RB/lang/en-EN/ .

To report data protection incidents, please use the following link:https://www.bkms-system.net/bosch-dataprotection .

For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our data protection officer:

Data Protection Officer
Bosch Group Information Security and Privacy Department (C/ISP)

Postfach 30 02 20, 70442 Stuttgart, GERMANY

Or e-mail to: DPO@remove.this.bosch.com

Date: 8/11/2023