Data protection notice from Robert Bosch Ltda.

Robert Bosch Ltda (hereinafter "Bosch" or "We") welcomes you to our internet pages and mobile applications (also referred to jointly as "Online Offers"). Thank you for your interest in our company and our products.

1. Bosch respects your privacy

The protection of your privacy during the processing of personal data as well as the security of all business data is an important concern to us. We process personal data that is collected when you visit our Online Offers confidentially and only in accordance with statutory regulations.

Data protection and information security are included in our corporate policy.

2. Controller

Bosch is the controller responsible for the processing of your data; exceptions are presented in this data protection notification.

Our contact details are as follows:

Robert Bosch Ltda, Via Anhanguera,

Km 98 Campinas, Postbox 954

CEP 13.065-970.

Phone: + 55 0800 704 5446

2.3 All data that you actively enter on the page may be collected, e.g. by completing any forms that may be available, as well as some automatically generated information such as IP with date and time, browser features, pages accessed etc.

3. Collection, processing and use of personal data

3.1. Category of processed data

The following categories of data are processed:

Communication data (e.g. name, telephone number, electronic address, IP address).

Customer history.

3.2. Basic principles

Personal data consists of all information related to an identified or identifiable natural person, which includes e.g. data. Names, addresses, phone numbers, e-mail addresses, contractual registration data, contract accounting and payment data are an expression of a person’s identity.

We only collect, process and use personal data (including IP addresses) when there is a legal basis, e.g. for the fulfillment of a legal obligation, To regulate or when you have given your consent to the processing of your personal data.

3.3. Purpose of the Processing

We as well as the service providers we have ordered; process your personal data for the following processing purposes:

Provide services and or information based on legitimate interest.

3.3.1. Chatbot function

Respond to user requests within the scope of a chatbot

3.3.2. Safeguarding and defending our rights.

Legitimate interest on our part for safeguarding and defending our rights

3.4. Registration

If you wish to use or gain access to benefits that require fulfillment of a contract, we ask for your registration. By registering, we collect personal data required for the fulfillment of the contract (e.g. first name, last name, date of birth, electronic address, if applicable, details of the preferred payment method or details of the account holder)and additional data on a voluntary basis, if applicable. Mandatory data is marked with a *.

3.5. Log files

Every time you use the internet, your browser is transmitting certain information that we store in so-called log files.

We store log files to determine service interruptions and for security reasons (e.g. to investigate attack attempts) for a period of 06 months and delete them later. Log files that need to be maintained for evidence purposes are not deleted until the respective incident is resolved and can, on a case-by-case basis, be passed on to investigating authorities.

In log files the following information is saved:

IP address (internet protocol address) of the terminal device used to access the Online Offer;

Internet address of the website from which the Online Offer is accessed (so-called origin URL or referrer URL);

Name of the service provider used to access the Online Offer;

Name of the files or information accessed;

Date and time and duration of data storage;

Amount of data transferred;

Operating system and information about the internet browser used, including attachments installed (e.g. Flash Player);

Http status code (e.g. "Request successful" or "Requested file not found").

3.6. Chatbot

Within the scope of this Online Offer, we give you the opportunity to learn about the products and services we offer via a chat. When using the chat, the chat conversation is recorded. After the chat, it will be deleted immediately afterwards, unless the chat is part of a support or service request. In the latter case, the chat content is assigned to your customer account and will be saved for the purpose of fulfillment of contractual obligations.

3.7. Children and adolescents

This online service is not intended for data subjects under the age of 16 years.

3.8. Shared use of data

Your personal data is passed on to third parties only if it is necessary to fulfil a contractual obligation, or if we or the third party have a legitimate interest in the data transfer, or if you have given your consent. Information about recipients or categories of recipients can be found in Section - 3.3. Purpose of the Processing.

In addition, data can be transferred to third parties when we are obliged to do so due to legal regulations or applicable administrative or judicial orders.

3.8.1. Service providers (General)

We involve external service providers with tasks such as marketing service and data hosting. We have chosen these service providers carefully and monitor them on a regular basis, especially regarding the diligent handling and protection of the data they store. All service providers are obliged to maintain confidentiality and to comply with the statutory provisions. Service providers may also be other Bosch group companies.

3.9. Transfer to recipients outside Brazil

We may transfer personal data to recipients located outside Brazil to so-called third countries. In such cases, prior to the transfer we ensure that the data recipient provides an appropriate level of data protection.

3.10. Duration of storage, retention periods

We store your data for as long as it takes to provide our online offers and services or for as long as we have a legitimate interest in storing the data (for example, we may still have a legitimate interest in e-mail marketing after fulfillment of our contractual obligations). In all other cases, we delete your personal data with the exception of data we are obliged to store for the fulfillment of legal obligations (for example, due to retention periods according to tax and commercial codes we are obliged to have documents such as contracts and tax notes available for a certain period of time).

4. Use of Cookies

In the context of our online service, cookies and tracking mechanisms can be used.

Cookies are small text files that can be stored on your device when you visit our online service.

Tracking is possible using different technologies. In particular, we process information using pixel technology and/or during log file analysis.

4.1. Categories

We distinguish between cookies that are technically necessary for the functions of the online service and cookies and tracking mechanisms that are not technically necessary for the function of the online service.

The online service can generally be used without cookies that serve non-technical purposes.

4.1.1. Strictly necessary cookies

Strictly necessary cookies are those for which the technical provision of the online service cannot be ensured. These include e.g. cookies that store data to ensure playback of video or audio recordings.

These cookies will be deleted when you leave the online service.

4.1.2. Cookies and tracking mechanisms that are not strictly necessary

We only use cookies and tracking mechanisms if you give us your prior consent in each case. With the exception of the cookie that saves the current status of your privacy settings (selection cookie). These cookies are set on the basis of legitimate interest.

We distinguish between two sub-categories in relation to these cookies and tracking mechanisms:

4.2. Functionality cookies

These cookies facilitate operation and therefore enable you to navigate our online service with more comfort. For example: Your language settings may be included in these cookies.

4.3. Marketing cookies and tracking mechanisms

General

By using cookies and marketing tracking mechanisms, we and our partners can display offerings based on your interests, resulting from a user behavior analysis:

- Statistics

When using statistical tools, we measure, for example, the number of your page views

- Conversion tracking:

Our conversion tracking partners place a cookie on your computer ("conversion cookie") if you accessed our website via an advertisement of the respective partner. These cookies are normally no longer valid after 30 days. If you visit certain pages of our website and the cookie has not yet expired, we and the relevant conversion partner can recognize that a certain user clicked on the advert and was then redirected to our website. This can also be done on multiple devices. The information obtained via the conversion cookie is intended to compile conversion statistics and record the total number of users who clicked on the respective advert and were redirected to a website with conversion tracking tag.

- Social plugins:

Some pages of our online service involve content and services of other providers (Example: Facebook, Twitter), who may also use cookies and active modules.

- Retargeting:

These tools create user profiles via advertising cookies or third-party advertising cookies, called "web beacons" (invisible graphics also called tracking pixels or pixels), or via comparable technologies. They are used for interest-based advertising and to control the frequency with which the user sees particular adverts. The controller responsible for processing the data in connection with the tool is the relevant provider. The providers of the tools may also disclose information to third parties for the purposes listed above. Please observe the relevant supplier data protection notices in this context.

Please note that the use of the tools may include the transfer of your data to recipients outside Brazil, where there is no adequate level of data protection according to the LGPD. For more details, please refer to the following description of the individual marketing tools.

4.3.1. Google Analytics

Name: Google Analytics

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Analysis of user behavior (retrieval of pages, number of visitors and visits, downloads), creation of pseudonymous user profiles based on information between devices of Google logged-in users (device tracking), enhancement of pseudonymous user data with target group-specific information provided by Google, retargeting, UX testing, conversion tracking and retargeting in conjunction with Google Ads.

4.3.2. Google Tag Manager

Name: Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Administration of website tags via a user interface, integration of program codes on our websites.

4.3.3. Google Ads

Name: Google Ads

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: To serve announcements, remarketing, conversion tracking.

More information is available at: (https://adssettings.google.com/authenticated) .

4.4. Managing cookies and tracking mechanisms

You can manage your cookie settings and tracking mechanism in your browser and/or in our privacy settings.

Note: The settings you have made refer only to the browser used in each case.

4.4.1. Deactivation of all cookies

If you want to disable all cookies, disable cookies in your browser settings. Note that this may affect the functionality of the website.

4.4.2. Management of your settings regarding cookies and tracking mechanisms that are not strictly necessary

When visiting our Online Offers, you will be asked in a cookie layer whether you agree to the use of functionality cookies, marketing cookies or tracking mechanisms respectively.

In our privacy settings, you can revoke your consent with effect for the future or grant your consent subsequently

5. Content Distribution Network of Microsoft Azure

To optimise and improve our online service, we use the Services of the Azure Content Distribution Network (CDN). The suppliers are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18, Ireland.

The CDN helps us to deliver the content of our online offer - especially large media files like graphics, text or scripts - more efficiently with the help of a geographically distributed server network, This reduces the charging time.

The use of the CDN services is based on our legitimate interest in the efficient provision of our online service in accordance with Section 7 IX of the LGPD.

In the context of this processing, personal data is transmitted to the USA. The transmission is based on standard contractual clauses in which Microsoft guarantees data protection law compliance for the services provided.

More information about privacy in connection with Microsoft CDN services is available here: https://azure.microsoft.com/pt-br/support/legal/. Microsoft’s privacy policy can be found here: https://privacy.microsoft.com/pt--br/privacystatement.

6. Youtube

Our Online Offers use the Youtube video platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Youtube"). Youtube is a platform that enables playback of audio and video files.

When you access a page of our Online Offers, which contains an embedded Youtube player, this creates a connection to Youtube so that the video or audio file can be streamed and played. In doing so, data is transferred to Youtube as a data controller. We are not responsible for the processing of this data by Youtube.

Additional information about the scope and purpose of the data collected by Youtube, your rights and the available privacy options to be chosen by you can be found in the Youtube data protection notification.

7. External links

Our online offers may contain links to third party internet pages, providers that are not related to us. By clicking on the link, we have no influence on the collection, processing and use of personal data possibly transmitted by clicking on the third-party link (such as the IP address or the URL of the website on which the link is located) how third party conduct is naturally beyond our control. We do not assume responsibility for the processing of personal data by third parties.

8. Safety

Our employees and the companies providing services on our behalf are obliged to maintain confidentiality and to comply with the applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of security and protect your data that is administrated by us, especially from the risks of unintentional or unlawful destruction, manipulation, loss, alteration, disclosure or unauthorized access. Our security measures are, in accordance with technological progress, constantly being improved.

9. User rights

Please use the details provided in the Contact section to enforce your rights. Please make sure that you can clearly identify yourself.

Right to confirmation of processing and access

You have the right to obtain confirmation from us about whether or not your personal data is being processed and, if so, access to your personal data.

Right to correction of incomplete, inaccurate or outdated data

You have the right to object to the accuracy of any personal data and correct it

Right to anonymity, blocking or deletion

If your data is unnecessary, excessive or processed in breach of the provisions of the General Data Protection Act (LGPD), you have the right to obtain anonymity, blocking or erasure.

Data portability

You may request that we receive data that you provided to us in a structured, commonly used, machine-readable format or - if technically feasible - transfer that data to a third party.

Right to delete data

You have the right to request the deletion of your personal data processed with your consent, except for the cases set out in General Data Protection Act (LGPD), such as when your personal data are indispensable for our fulfillment of legal or statutory obligations.

Right to object

In the event of non-compliance with the provisions of the General Data Protection Act (LGPD), you have the right to object to the processing of your personal data.

Third-party information

You have the right to receive information about the public and private bodies with which we use your personal data in a shared manner.

Consent information

When processing your personal data based on your consent, you have the right to be informed about the possibility of denying your consent and the consequences of such denial.

Withdrawal of consent

In case you consented to the processing of your data, you have the right to revoke this consent at any time with future effect. The legality of data processing prior to your withdrawal remains unchanged.

Review of automated decisions

You have the right to request review of decisions taken solely based on automated processing of personal data that affect your interests.

10. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the National Data Protection Authority of Brazil, which can be contacted via the following channel: https://www.gov.br/anpd/pt-br/canais_service

11. Changes to the Data Protection Notice

We reserve the right to change our security and data protection measures. In such cases, we will amend our data protection notice accordingly. Please, therefore, observe the current version of our data protection notice as this is subject to changes.

12. Contact

If you wish to contact us, please find us at the address given in section - 2. Controller.

For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our data officer:

Data Security Officer - Latin America

Postbox 954 - CEP 13.065-970

Via Anhanguera, Km 98 Campinas

BRAZIL

E-mail: Dbbr@br.bosch.com (please do not send e-mails with commercial content)

Phone: +55 (19) 2103 4511

Publication Date 04.08.2023