Data protection notice from Robert Bosch Ltda.

Robert Bosch Ltd. (hereinafter "Bosch" and/or "We") welcomes your visit to our web pages and websites, as well as our mobile applications, and your interest in our company and our products.

Bosch respects your privacy

The protection of your privacy in the processing of your personal data, as well as the security of all company data, is for us a matter of great importance, being taken into account in our corporate processes. We process personal data collected during your visit to our website and our mobile applications, treating it confidentially and only in accordance with legal requirements.

Data protection and information security are part of our corporate policy.

Controller

Bosch is the controller responsible for processing your data; exceptions are presented in this data protection notice.

Our contact details are as follows:

Robert Bosch Ltd, Via Anhanguera,

Km 98 Campinas, PO Box 954

Zip Code 13.065-970.

Phone: + 55 0800 704 5446

Collection, processing and use of personal data

3.1. Category of data processed

The following categories of data are processed:

Communication data (Ex: Full name, telephone, electronic address, IP address).

Company Information (Ex: Name)

3.2. Principles

Personal data consists of all information relating to the identified or identifiable natural person, which includes, e.g. names, addresses, telephone numbers, e-mail addresses, contractual registration data, contract accounting and payment data, which are an expression of a person’s identity.

We collect, process and use personal data (including IP addresses) only when there is a legal basis, for example, for the fulfilment of a legal obligation, when you have given your consent to the processing of your personal data.

3.3. Purpose of Processing

We, as well as the service providers commissioned by us; process your personal data for the following processing purposes:

3.3.1. Newsletter (e-mail, SMS / MMS)

Within the scope of our online offers, you can subscribe to receive newsletter whose main purpose is to inform about our products and in the capture of lead for sales, for more information see the module newsletter with registration; Right of revocation.

3.3.2. Safeguard and defend our rights

Legitimate interest on our part to safeguard and defend our rights.

3.4. Registration

If you wish to use or gain access to benefits that require fulfillment of a contract, we request your registration. With your registration, we collect personal data necessary for the performance of the contract (e.g. name, surname, date of birth, email address, if applicable, details of the preferred payment method or about the account holder)as well as additional data on a voluntary basis, if applicable. Mandatory information is marked with an *.

3.5. Log Files

Each time you use the Internet, your browser is transmitting certain information that we store in so-called log files.

We store log files to determine service interruptions and for security reasons (for example, to investigate attack attempts) for a period of 06 months and delete them later. Log files that need to be kept for evidence purposes are not deleted until the respective incident is resolved and can, on a case-by-case basis, be passed on to investigating authorities.

In the log files, the following information is saved:

• IP address (Internet protocol address) of the terminal device used to access the Online Offering;
• Internet address of the website from which the Online Offer is accessed (called source URL or referral URL);
• the name of the service provider used to access the Online Offer;
• name of files or information accessed;
• date and time and duration of data storage;
• the amount of data transferred;
• operating system and information about the internet browser used, including add-ons installed (for example: Flash Player);
• Http status code (for example, "Successful request" or "Requested file not found").

3.6. Children and adolescents

This online offer is not intended for data subjects under the age of 16.

3.7. Shared use of data

Your personal data is forwarded to third parties only if it is necessary for the fulfilment of a contractual obligation, or if we ourselves, or third parties, have a legitimate interest in the transfer of data, or if you have given your consent. Information about recipients or categories of recipients can be found in Section - Purpose of Processing.

In addition, data may be transferred to third parties where we are required to do so due to applicable legal regulations or administrative or judicial orders.

3.7.1. Service providers (General)

We engage external service providers with tasks such as sales, marketing service, data hosting and hotline services. We choose these service providers carefully and monitor them regularly, especially with regard to the diligent treatment and protection of the data they store. All service providers are required to maintain confidentiality and comply with legal provisions. Service providers can also be other companies in the Bosch group.

• Operator Service: Hubspot Inc. 25 First Street, Cambridge, MA 02141 USA (Tax ID: 20-2632791): Marketing Hub Professional. Contact Information Management, Sales and Marketing.

3.8. Transfer to recipients outside Brazil

We may transfer personal data to recipients located outside of Brazil to so-called third countries. In such cases, prior to transfer, we ensure that the recipient of the data provides an appropriate level of data protection.

3.9. Storage duration, retention periods

We store your data for as long as it is necessary to provide our online offers and services or as long as we have a legitimate interest in storing the data (for example, we may still have a legitimate interest in email marketing after fulfilling our contractual obligations). In all other cases, we delete your personal data, with the exception of the data that we are required to store for the fulfilment of legal obligations (for example, due to retention periods according to tax and commercial codes, we are required to have documents such as contracts and invoices available for a certain period of time).

4. Use of Cookies

In the context of our online service, cookies and tracking mechanisms may be used.

Cookies are small text files that can be stored on your device when you visit our online service.

Tracking is possible using different technologies. In particular, we process information using pixel technology and/or while analyzing the log file.

4.1. Categories

We distinguish between cookies that are technically necessary for the functions of the online service and cookies and tracking mechanisms that are not technically necessary for the function of the online service.

In general, it is possible to use the online service without cookies serving non-technical purposes.

4.1.1. Technically necessary cookies

Technically necessary cookies, are what the technical provision of the online service cannot be assured. These include, e.g. Cookies. , cookies that store data to ensure playback of video or audio recordings.

These cookies will be deleted when you leave the online service.

4.1.2. Cookies and tracking mechanisms that are not technically necessary

We only use cookies and tracking mechanisms if you give us your prior consent for each case. With the exception of the cookie that saves the current status of your privacy settings (selection cookie). These cookies are set on the basis of legitimate interest.

We distinguish between two subcategories with regard to these cookies and tracking mechanisms:

4.2. Cookies for comfort

These cookies facilitate operation and thus allow you to navigate our online service with more comfort. For example: Your language settings may be included in these cookies.

4.3. Marketing cookies and tracking mechanisms

General:

When using cookies and tracking mechanisms for marketing, we and our partners may display offers based on your interests, resulting from an analysis of user behavior:

Statistics:

When using statistical tools, we measure, for example, the number of your page views.

Tracking of conversions:

Our conversion tracking partners place a cookie on your computer ("conversion cookie") if you have accessed our website through an advertisement from the respective partner. Typically, these cookies are no longer valid after 30 days. If you visit certain pages of our website and the cookie has not yet expired, we and the relevant conversion partner may recognize that a particular user clicked on the ad and was then redirected to our website. This can also be done on multiple devices. The information obtained through the conversion cookie is intended to compile conversion statistics and record the total number of users who clicked on the respective ad and were redirected to a website with a conversion tracking tag.

Redirection:

These tools create user profiles through advertising cookies or third-party advertising cookies, called "web beacons" (invisible graphics also called pixels or tracking pixels), or through comparable technologies. They are used for interest-based advertising and to control how often the user sees certain ads. The relevant provider is the controller responsible for processing the data in connection with the tool. Tool providers may also disclose information to third parties for the purposes mentioned above. Please note the data protection notices of the relevant supplier in this context.

Note that the use of the tools may include the transfer of your data to recipients outside of Brazil, where there is no adequate level of data protection according to the LGPD. For more details on this, see the following description of individual marketing tools.

4.3.1. Google Analytics

Name: Google Analytics

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Function: Analysis of user behavior (retrieval of pages, number of visitors and visits, downloads), creation of pseudonymous user profiles based on information between devices of logged-in Google users (device tracking)enrichment of pseudonymous user data with target group-specific information provided by Google, retargeting, UX testing, conversion tracking and retargeting in conjunction with Google Ads.

4.4. Cookie management and tracking mechanisms

You can manage your cookie settings and tracking mechanism in the browser and/or in our privacy settings.

Note: The settings made refer only to the browser used in each case.

4.4.1. Deactivation of all cookies

If you want to disable all cookies, disable cookies in your browser settings. Please note that this may affect the functionality of the website.

4.4.2. Managing your settings with respect to technically unnecessary cookies and tracking mechanisms

When visiting our Online Offerings, you will be asked in a layer of cookies whether you agree to the use of comfort cookies, marketing cookies or tracking mechanisms respectively.

In our privacy settings, you can revoke consent with effect for the future or grant your consent later.

5. Newsletter with registration; Right of withdrawal

Within the scope of our Online offers, you can subscribe to receive Newsletter. We will only send you email newsletter, mobile messaging application (e.g. WhatsApp), SMS after your explicit confirmation of the activation of the Newsletter service by clicking on the address in a notification. If you no longer wish to receive newsletters, you may unsubscribe at any time by revoking your consent. You can revoke your consent to send an electronic newsletter by clicking on the address that is sent in your respective newsletter email or in the administrative settings of the online offer. Alternatively, please contact us through the contact provided in the Contact section.

6. External links

Our online offers may contain links to third party Internet pages, providers that are not related to us. By clicking on the link, we have no influence on the collection, processing and use of personal data possibly transmitted by clicking on the third party link (such as the IP address or the URL of the website on which the link is located) how third party conduct is naturally out of our control. We do not assume responsibility for the processing of personal data by third parties.

7. Security

Our employees and the companies that provide services on our behalf are required to maintain confidentiality and comply with applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that is managed by us, especially from the risks of unintentional or illegal destruction, manipulation, loss, alteration, disclosure or unauthorized access. Our security measures comply with technological progress and are constantly being improved.

8. Rights of the user

To assert your rights, use the details provided in the Contact section. In doing so, please ensure that unambiguous identification of your person is possible.

Right of confirmation of the existence of treatment and access

You have the right to obtain our confirmation as to whether or not your personal data is being processed and, if applicable, access to your personal data.

Right to correction of incomplete, inaccurate or outdated data

You have the right to object to the accuracy of any personal data and to correct it

Right to anonymity, blocking or deletion

If your data is unnecessary, excessive or processed in non-compliance with the provisions of the General Data Protection Act (LGPD), you have the right to obtain your anonymity, blocking or deletion.

Data portability

You may request the receipt of data you have provided to us in a structured, commonly used and machine-readable format or - if technically feasible - that we transfer this data to a third party.

Right to delete the data

You have the right to request the deletion of your personal data processed with your consent, except in some cases set out in the General Data Protection Act (LGPD)such as when your personal data is indispensable to our compliance with legal or regulatory obligations.

Right to object

If there is a breach of the provisions of the General Data Protection Act (LGPD), you have the right to object to the processing of your personal data.

Information about third parties

You have the right to be informed about the public and private entities with which we carry out the shared use of your personal data.

Consent information

When the processing of your personal data is carried out on the basis of your consent, you have the right to be informed about the possibility of denying such consent and the consequences of such denial.

Withdrawal of consent

If you have consented to the processing of your data, you have the right to revoke this consent at any time with future effect. The legality of the data processing prior to its withdrawal remains unchanged.

Review of automated decisions

You have the right to request the review of decisions made solely on the basis of automated processing of personal data that affect your interests.

9. Right to lodge a complaint with the supervisory authority

You have the right to file a complaint with the National Data Protection Authority of Brazil, which can be contacted through the following channel:

https://www.gov.br/anpd/pt-br/canais_atendimento

10. Changes to the data protection notice

We reserve the right to change our security and data protection measures. In such cases, we will change our data protection notice accordingly. Therefore, please note the current version of our data protection notice as it is subject to change.

11. Contact

If you wish to contact us, please find us at the address indicated in the "Controller" section.

For suggestions and complaints about the processing of your personal data, we recommend that you contact our data controller:

• Data Security Officer - Latin America
• Mail box 954 - CEP 13.065-970
• Hotel address: Via Anhanguera, Km 98 Campinas
• BRAZIL
• E-mail: DBBR@br.bosch.com (please do not send emails with commercial content)
• Phone: +55 (19) 2103 4511