Astra Legal Documents

Promotion of Access of Information Act (PAIA)

Manual prepared in accordance with section 51 of the Promotion of Access Information Act

Applicable in South Africa only

Download PAIA Manual
Download POPI Policy
Download Request for Access PAIA Form 2

Bosch Africa (hereinafter “Bosch” or “We” or “Us”) welcome you to our website and thank you for your interest in our company and our products.

The protection of your privacy when processing personal information as well as the security of all business data are important issues to us, which we consider in our business processes.

1 General Information

1.1 Responsible Party

We, Robert Bosch South Africa Pty (Ltd), are responsible for processing your personal information on this website.

Our contact details are as follows:

Robert Bosch South Africa Pty (Ltd)
Private Bag X118
Midrand
SOUTH AFRICA

E-mail: Contact@za.bosch.com
Telephone: +27 11 651-9600

1.2 Children

Please note that this website is not intended for children.

1.3 Categories of personal information

We process the following categories of personal information:

– communication data (e.g., name, telephone, e-mail, address, IP address);

1.4 Duration of storage, retention periods

We store your data for as long as is necessary to provide our website and the associated services or for as long as we have a legitimate interest in continuing to store your data (e.g., we may still have a legitimate interest in postal marketing even after a contract has been fulfilled). In all other cases we delete your personal information except for such data that we are obliged to store in order to fulfill legal obligations (e.g., we are obliged to retain documents such as contracts and invoices for a certain period due to retention periods under tax and commercial law).

1.5 Data transfer to other responsible party

In general, your personal information will only be transferred to other operators if this is necessary for the fulfillment of a contract, if we or the third party have a legitimate interest in the transfer, or if you have given your consent. For details on the legal basis and the recipients or categories of recipients, please refer to the section “2. Processing purposes and legal bases”.

Additionally, data may be transferred to other responsible parties if we are obliged to do so by law or by enforceable official or court order.

1.6 Data transfer to service providers

We involve external service providers with tasks such as sales and marketing services, contract management, payment handling, programming, data hosting, and hotline services. We have carefully selected these service providers and monitor them regularly, in particular their careful handling and safeguarding of the data stored with them. All service providers are obliged to maintain confidentiality and to comply with the statutory provisions. Service providers may also be other companies from the Bosch Group.

1.7 Transfer to recipients outside of South Africa

We may transfer personal information to recipients located outside of South Africa into third countries. In such cases, we ensure before the transfer that either the data recipient provides an adequate level of data protection or that your consent to the transfer has been obtained.

You can obtain a copy of the appropriate or suitable safeguards. Please use the information mentioned in the “10. Contact” section for this purpose.

2. Processing purposes and legal bases

We and service providers contracted by us process your personal information for the following processing purposes:

2.1 Provision of the website

If you use our website solely for information purposes, that is, without registering or otherwise sending us information, we process your personal information to provide this website based on our legitimate interest to present us and to ensure stability and security.

In order to optimize the loading times of our website, we use “Azure Content Delivery Network (CDN) Services.” Providers are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18, Ireland.

The CDN helps to provide the content of our website — especially large media files such as graphics, text, or scripts — more quickly with the help of a network of geographically distributed servers, thereby reducing loading times.

The use of the CDN services is based on our overriding legitimate interest within the meaning of article 11 (f) of Personal Information Act in the efficient provision of our website.

In context of this processing, personal information is transmitted to the USA. The transmission is based on European Standard Contractual Clauses in which Microsoft guarantees to comply with the European data protection law for its provided services.

Further information on privacy in connection with Microsoft’s CDN service is available here: https://azure.microsoft.com/en-us/support/legal/. Microsoft’s privacy policy can be found here: https://privacy.microsoft.com/en-us/privacystatement.

2.2 Communication

Contact

You can contact us via a provided contact form or by other channels, such as e-mail or telephone. We store and use your personal information, such as name, e-mail, address, and telephone number, to communicate with you. We process your personal information based on our legitimate interest in customer support and to improve our products and services.

Chatbot

We offer you the possibility of receiving advice on our products and services via chatbot. In this case, your personal information is processed on the basis of our legitimate interest in customer support and to improve our products and services.

During the use of the chat, we store the chat history. After the chat has ended, this data will be deleted, unless the chat is part of a support or service request. In the latter case, the content of the chat will be assigned to your customer account and stored for the purpose of fulfilling the contract.

2.3 Security and protection of rights

We may also process your personal information to investigate service disruptions and for security reasons to comply with our legal obligations in the area of data security, as well as on the basis of our legitimate interest in the elimination of service disruptions and the security of our offers.

We may process your personal information to protect and defend our rights. This purpose also constitutes our legitimate interest.

2.4 Website optimization and reporting

We use anonymized web analytics without cookies for our website optimization and reporting purposes. When your web browser sends a request to our web server, we first check automatically whether it contains personal information (e.g. IP addresses or click IDs) and anonymize the data if necessary. We only analyze the information remaining after anonymization, which cannot be traced back to an identifiable person. The legal basis is our legitimate interest in continuously improving our website and in obtaining information about the performance of our website and the effectiveness of our marketing measures (e.g. page views, click rates, time spent on our website, download rates).

3. Log files

Every time you use the internet, certain information is automatically transmitted by your internet browser and stored in log files.

Log files are stored by us for the purpose of investigating service disruptions and for security reasons (e.g., to clarify attempted attacks) for a period of 90 days. Log files whose further storage is necessary for the purpose of evidence are exempt from deletion until the final clarification of the respective incident and may be passed on to investigative authorities in individual cases.

The following information is stored in the log files:

- IP address (internet protocol address) of the end device from which our website is accessed;
– Internet address of the website from which our website was accessed (origin or referrer URL);
– name of the service provider used to access the website;
– name of the files or information retrieved;
– date and time as well as duration of the retrieval;
– amount of data transferred;
– operating system and information on the Internet browser used, including installed add-ons (e.g., for Flash Player);
– HTTP status code (e.g., “request successful” or “requested file not found”).

4. Information storage and access

4.1 Use of cookies and other technologies

In the course of providing our website, cookies and other technologies may be used that either store information on your terminal equipment or gain access to information stored on your terminal equipment.

Cookies are small text files that can be stored on your end device when you visit a website.

The use of our website is generally possible without cookies that are not technically necessary.

4.2 Technically necessary cookies

By technically necessary cookies, we mean cookies without which the technical provision of the website cannot be guaranteed. This includes, for example, cookies that store data in order to ensure the interference-free playback of video or audio content.

These cookies are deleted at the end of your visit.

4.3 Technically not necessary mechanisms

We only use technically not necessary cookies and tracking mechanisms if you have given us your prior consent.

The only exception to this is the cookie that stores the current status of your privacy settings (“selection cookie”).

Integration of technically not necessary mechanisms

We use third-party tools to integrate technically not necessary cookies and mechanisms. These tools ensure that technically not necessary cookies and mechanisms are only set with your consent.

We use the following tool:

Name: Google Tag Manager
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Function: Management of website tags via an interface, integration of program codes on our websites

Analysis

We use analysis tools to improve our products and services. We measure, for example, the number of page views or your behavior on our website. This may also include the evaluation of log files.

We use the following tool:

Name: Google Analytics
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Function: Analyze user behavior (page views, number of visitors and visits, downloads), create pseudonymous user profiles based on cross-device information of logged-in Google users (cross-device tracking), enrich pseudonymous user data with target group-specific information provided by Google.

Additional information:

We use the “anonymize IP” function, which anonymizes your IP address before writing it to disc.

We use the paid version of Google Analytics, in which the data collected on our website via Google Analytics is stored on own Google servers. Google may not use this data for its own purposes or mix it with other data that Google collects about you in other ways, such as when you are logged into your Google account on your browser while visiting our website.

4.4 Managing cookies and tracking mechanisms

In the browser and/or in our “Privacy settings”, you can manage your cookie and tracking mechanism settings.
Please note: The settings you make each apply only to the browser you are using.

Switch off all cookie
If you would like to disable all cookies, please go to your browser settings and disable the setting of cookies. Please note that this may affect the functionality of this website.

5. Plugins

5.1 Plugins

We offer the use of plugins from various social and other networks on our website.

Plugins represent extensions of the providers of the social networks. We therefore have no influence on the further processing of the data collected and stored via the plugins by the providers of the respective networks.

For information on the purpose and scope of the collection, further processing and deletion of the data by the respective provider, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of the respective provider.

5.2 “2-click solution”

Plugins are inactive by default.

To increase the protection of your data when visiting our website, the plugins are integrated into the page by means of a “2-click solution”. With this 2-click solution, we protect you from having your visit to our websites recorded by default and possibly evaluated by providers of the respective plugin.

If you do not want the providers of the respective networks to receive data about your use of this website and possibly store or further use it, you should not activate the respective plugins.

Activating the plugin

You can decide for yourself whether you want to interact with the network of the respective provider and whether your data should be transmitted to the respective provider or not. Only with your click on the provided button, the plugins are activated and integrated into the page by transmitting the content of the respective plugin from the server of the associated provider directly to your browser. Subsequently, you can perform the desired interaction with the network with another click. If you decide to activate a plugin, we process your data based on your consent.

Collection of data by the providers

When a plugin is activated, your browser establishes a direct connection to the servers of the respective provider. Through this, the respective provider receives the information that your browser has called up the corresponding page of our website; even if you do not have a user account with the provider or are not currently logged in to it.

If you already have a user account with a provider of a network and you are already logged in while visiting our websites, the operator of the respective network may be able to assign the visit to your personal user account as soon as you activate the plugins. This may enable the provider to analyze your usage behavior and store it in a profile.

In addition, your IP address and other data about your browser settings are transmitted by your browser directly to a server of the respective provider and may be stored there.

Deactivating the plugin

If you no longer wish to use an activated plugin, you can also deactivate the plugin using the button provided. Please note that data already transmitted will not be affected by this.

5.3 YouTube

This website uses videos from the video platform YouTube. YouTube is a platform that enables the playback of video files. It is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and its parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To increase the protection of your data when visiting our website, the YouTube content is integrated into the page in “privacy enhanced mode.”

This way, a connection to YouTube, including a transmission of log data to YouTube, is only established when you perform an interaction with the player.

When you interact with the active YouTube player, data is also transmitted to YouTube as responsible party and contact is made with the Google DoubleClick advertising network, which may trigger further data processing operations over which we have no control.

For more information, please see YouTube’s privacy policy.

5.4 Google Maps

This website uses map services from Google Maps. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and its parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you interact with Google Maps, data is also transmitted to Google as responsible party and contact is made with the Google DoubleClick advertising network, which may trigger further data processing operations over which we have no control.

For more information, please see Google’s privacy policy.

6. Obligation to provide personal information

You must provide those personal information that are required for the establishment and implementation of a business relationship and for the fulfillment of the associated contractual obligations or for the processing of which we are legally obligated.

We mark such personal information in the respective forms or functions with an “*”.

Please note that without the provision of such personal information, we will not be able to enter into or perform a contract with you. In this case, certain services (see “2. Processing purposes and legal basis”) cannot be used.

7. External Links

Our websites may contain links to internet pages of third parties, in particular providers who are not related to us. Upon clicking on the link, we have no influence on the collecting, processing, and use of personal information possibly transmitted by clicking on the link to the third party (such as the IP address or the URL of the site on which the link is located) as the conduct of third parties is beyond our control. We do not assume responsibility for the processing of personal information by third parties.

8. Data subject rights

8.1 Assertion of your rights

Please use the information in the “10. Contact” section to assert your rights. When doing so, please ensure that we can clearly identify you.

You have the right to request access to the personal information concerning you, as well as the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability. Insofar as you have given us consent to process your personal information, you may revoke this consent at any time with future effect.

8.2 Objection to direct marketing

You can object to the processing of your personal information for advertising purposes (“advertising objection”) at any time. Please note that, for organizational reasons, there may be an overlap between your objection and the use of your data in the context of an already ongoing campaign.

8.3 Objection to data processing based on “legitimate interest”

If the processing of your personal information is based on “legitimate interest”, you also have the right to object to the processing of your personal information at any time on grounds relating to your particular situation. The reasons shall be stated.

We will then terminate processing your data unless we can prove — in accordance with the legal requirements — compelling legitimate grounds for the processing which override your rights.

9. Right to lodge complaint with Information Regulator

You have the right to submit a complaint to the Regulator.

You can appeal to the Regulator, which is responsible for your place of residence or your state of residency, or to the Regulator responsible for us. This is:

The Information Regulator (South Africa)

Woodmead North Office Park,

54 Maxwell Drive Woodmead, Johannesburg, 2191

Cell No. +27 (0) 1 02 35 200

E-mail : POPIAComplaints@inforegulator.org.za

10. Contact

If you wish to contact us, please find us at the address stated in the “1.1 Responsible party” section.

To assert your rights and to notify data protection incidents please use the following link: https://www.bkms-system.net/bosch-dataprotection.

For suggestions and complaints regarding the processing of your personal information we recommend that you contact our Information Officer:

Information Officer
Robert Bosch South Africa Pty (Ltd)
Private Bag X118
Midrand
SOUTH AFRICA

e-mail to: africa.dpo@bosch.com

11. Changes to the Data protection notice

We reserve the right to change our security and data protection measures. In such cases, we will amend our data protection notice accordingly. Therefore, please note the current version of our data protection notice, as it is subject to change.