Bosch Privacy Notice – Highlights/Notice at Collection

Robert Bosch Tool Corporation has set out below some important highlights of the Privacy Notice for our PRO360 Website and Mobile Application, (collectively, “PRO360 Services”). You can obtain more information about how we collect, use, disclose and safeguard your personal information by reviewing our full Privacy Notice below.

What personal information do we collect?

For more information see Collection of Personal Information and Sources of Personal Information sections below.

We collect various types of information about our users in connection with the services or products, including:

Information we collect directly from you (i.e., when given by you);
Information we collect indirectly from you (i.e., collected when you use the PRO360 Services); and
Information we obtain from third-party sources.

We also may collect information in ways that we describe to you at the point of collection or otherwise with your consent. The personal information we collect includes identifiers, commercial information, geolocation data, internet or other similar network activity, professional or employment-related information, and inferences. The section titled “Collection of Personal Information” contains more information on these categories.

Why do we collect personal information and how is it used?

For more information see Collection of Personal Information below.

Business Purposes:

Fulfilling or meeting the reason you provided the information.
Technical administration of Bosch and Bosch affiliate websites, mobile applications and/or services.
Maintaining the safety, security, and integrity of our websites, products and services, databases and other technology assets, and business.
Customer, vendor, licensor and/or supplier administration, review and/or reports.
Administering, maintaining, personalizing and improving Bosch and Bosch affiliates’ mobile applications, products and services, including, without limitation, to authenticate users, process payments, provide requested services, provide optional additional services and to develop new features, products and/or services.
Providing customer service.
Compliance with legal and/or regulatory requirements.

Commercial Purposes:

Responding to submitted inquiries and customer service requests and other questions and/or comments.
For the U.S. and Canada, this data may be used for marketing and analytic purposes.
Registration to our online offers in order to use extended functionalities with our Integrated Customer Profile Management.
Providing Promotions and Loyalty Programs
Providing Product and/or customer surveys
Email Newsletters

Bosch will not collect or use personal information for materially different, unrelated or incompatible purposes without providing you notice (or obtaining your consent, where required by applicable laws in the relevant jurisdiction). Additionally, Bosch only retains personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

Is personal information disclosed, sold, or shared?

For more information see Disclosure, Sale, and Sharing of Personal Information – Past 12 months, Personal Information Sales: Opt-Out and Opt-In Rights, and Use of Cookies below.

Bosch may disclose your information with:

Bosch affiliated entities,
service providers, marketing partners and other partners and entities performing work on Bosch’s behalf,
relevant authorities in accordance with, and as Bosch deems required, necessary and/or appropriate by, or in connection with, applicable law, regulation, court order or legal process;
Bosch.IO GmbH processes your data for the purposes of "registration and login with SingleKey ID", as well as "overview and maintenance of master data and apps with SingleKey ID" under joint responsibility with us.

We do not sell or share your personal information collected through the PRO360 Services, therefore we do not offer the right to opt out of the selling or sharing of your personal information.

What are the risks?

We may transfer your personal information to states, provinces, or countries other than where you reside, including to affiliates and service providers. Therefore, your information may be accessible to courts, law enforcement and national authorities in such other jurisdictions. You can obtain information about Bosch’s policies and practices with respect to foreign service providers, or ask questions about the collection, use, disclosure or storage of personal information by such service providers, by contacting our Privacy Notice Administrator as described in the Privacy Notice.
Bosch security measures are being continuously improved in accordance with the state of technological developments, however, absolute protection is not possible. We cannot guarantee the security of information posted or transmitted using the PRO360 Services.

What else should you know?

Your personal information will be stored in the US, Netherlands, and Germany and accessible to Bosch affiliates and service providers.
You may contact our Privacy Notice Administrator, as described in the Privacy Notice, with any questions about the collection of your personal information.
In some circumstances, you also may have a right to access, update, and correct inaccuracies in your personal data (e.g., pursuant to local law).
Any additional choices you may have are described in the full Privacy Notice below.

BOSCH PRO360 PRIVACY NOTICE

I. Introduction

Robert Bosch Tool Corporation is pleased to have you PRO360 Services and welcomes your interest in the services or products provided through the PRO360 Services. This Privacy Notice applies to all users of the PRO360 Services and the Services, anywhere in the United States, Canada, and their respective territories and possessions.

The protection of your privacy is an important concern to which we pay special attention. We process personal information collected during your visit to the PRO360 Services and use of Services in compliance with this Privacy Notice and all applicable laws and regulations. Data protection and information security are part of Bosch corporate policy.

II. Scope

This Notice covers our treatment of personally identifiable information, as defined by numerous statutes in the United States, personal information as defined by Canada’s Personal Information Protection and Electronic Documents Act and any applicable substantially similar provincial legislation, and personal information as defined by the Mexican Federal Law on Protection of Personal Data Held by Private Parties, which we gather when you are accessing, viewing, completing, or using the PRO360 Services..

III. Collection of Personal Information

The PRO360 Services has collected the following personal information from users of the PRO360 Services within the last twelve (12) months:

Identifiers

Category and Sources of Information
We collect this information from our users, customers, and business partners. We also generate identifiers internally.

Examples
First name, last name, alias, postal address, telephone number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Company Name, trade.

Business or Commercial Purpose
Business- To enable use of our sites, services, and products, to communicate with you, and to understand how our Users interact with our sites. Administering, maintaining, personalizing and improving Bosch and Bosch affiliates’ mobile applications, products and services, including, without limitation, to authenticate users, provide requested services, provide optional additional services and to develop new features, products and/or services.
Providing customer service.
Commercial - To improve our offerings, responding to submitted inquiries and customer service requests and other questions and/or comments, for marketing and analytic purposes, registration to our online offers in order to use extended functionalities with our Integrated Customer Profile Management, promotions and Loyalty Programs, product and/or customer surveys, newsletters

We disclose, share or sell this data?
We disclose this data with our service providers and with business partners, including those whom you instruct us to send this information. We do not sell/share this data.

Retention
Bosch only retains personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

Personal Information

Category and Sources of Information
We collect this information from our users, customers, and business partners

Business or Commercial Purpose
Business- To enable use of our sites, services, and products, to communicate with you, and to understand how our Users interact with our sites. Administering, maintaining, personalizing and improving Bosch and Bosch affiliates’ mobile applications, products and services, including, without limitation, to authenticate users, provide requested services, provide optional additional services and to develop new features, products and/or services. Providing customer service.
Commercial - To improve our offerings, responding to submitted inquiries and customer service requests and other questions and/or comments, for marketing and analytic purposes, registration to our online offers in order to use extended functionalities with our Integrated Customer Profile Management ,promotions and Loyalty Programs, product and/or customer surveys, newsletters.

Commercial Information

Category and Sources of Information
We collect this information from our customers, and generate it internally during transactions with our customers

Examples
Records of personal property, Where purchased, Price, contracts, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Business or Commercial Purpose
Business - Fulfilling or meeting the reason you provided the information. Administering, maintaining, personalizing and improving Bosch and Bosch affiliates’ mobile applications, products and services, including, without limitation, to authenticate users, process payments, provide requested services, provide optional additional services and to develop new features, products and/or services.
Commercial- Providing customer service, Compliance with legal and/or regulatory requirements. Responding to submitted inquiries and customer service requests and other questions and/or comments. For the U.S., this data may be used for marketing and analytic purposes. Providing Promotions and Loyalty Programs, Providing Product and/or customer surveys

Geolocation Data

Category and Sources of Information

Examples
Location Data

Business or Commercial Purpose
Business- To authenticate users, requested services, provide optional additional services.
Commercial- For the U.S., and Canada this data may be used for marketing and analytic purposes.

Internet or other similar network activity

Category and Sources of Information
We collect this information from our users and customers

Examples
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Additionally, we may use technology to monitor how you interact with our PRO360. This may include without limitation which links you click on, information that you type into our online forms, and about your device or browser. Please discontinue use of the PRO360 if you do not consent to our collection of such information.

Business or Commercial Purpose
Business - Administering, maintaining, personalizing and improving Bosch and Bosch affiliates’ mobile applications, products and services, including, without limitation, to authenticate users, process payments, provide requested services, provide optional additional services and to develop new features, products and/or services.
Commercial- For the U.S., this data may be used for marketing and analytic purposes.

Professional or employment-related information

Category and Sources of Information
We collect this information from our users, customers, and business partners

Examples
Company Data: name, last name, email address, company details. dealer users: name, last name, email address, company details, EIN number.

Business or Commercial Purpose
Business - Fulfilling or meeting the reason you provided the information. provide requested services, provide optional additional services.
Commercial, Providing customer service, Compliance with legal and/or regulatory requirements, Responding to submitted inquiries and customer service requests and other questions and/or comments. For the U.S., this data may be used for marketing and analytic purposes. Providing Promotions and Loyalty Programs, Providing Product and/or customer surveys.

Inferences drawn from other personal information

Category and Sources of Information
We generate these internally

Examples
Profile reflecting a person's preferences, behavior,.

Bosch will continue to collect the personal information described above. If any additional personal information is collected by Bosch, we will provide any required notice(s), and where applicable obtain any required consent(s), in accordance with applicable laws in the relevant jurisdiction.

IV. Sources of Personal Information

Bosch collects personal information from the following categories of sources:

1. Directly from You. For example, when given by you or collected from you through your access to and/or use of the PRO360 Services, in context of registering an account, subscribing to our Services, posting materials, Surveys, or when you contact customer support or otherwise interact or communicate with Bosch, its agents, representatives, through the PRO360 Services. This information may include, without limitation, your first and last name, address, phone number, e-mail address, password, IP Address, country and any other information you choose to provide us.

2. Indirectly from You. For example, from observing your use of the PRO360 Services and/or the Services, or services related thereto. The following data may be collected automatically: the website from which you visit Bosch (referrer), pages viewed, files downloaded (downloads), individual links clicked, search words or search phrases (site search), duration of visit, browser used, device data (e.g., unique device identifier, MAC address, IP address, serial number, hardware model, network information and operating system and version), and other relevant details and/or information. If the visit is a result of online advertising such as banners, video ads, search engine advertising, etc., Bosch or its agents, representatives, suppliers, vendors or consultants may record which banner, adware, etc. motivated or assisted with the visit to PRO360 Services.

Bosch will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated or incompatible purposes without providing you notice or obtaining your consent, where required by applicable laws in the relevant jurisdiction.

V. Disclosure, Sale and Sharing of Personal Information – Past 12 Months

Bosch may use, store, compile, manipulate, share and disclose your personal information with third parties for the purposes stated above. Your personal information is disclosed with the following:

• Bosch affiliated entities, including Bosch’s parent company in Germany, Robert Bosch GmbH, to leverage shared services and improve our Services;

• Bosch service providers, marketing partners and other partners and entities performing work on Bosch’s behalf, such as hosting vendors, advertising service providers, data analytics companies, marketing service companies, list managers and delivery companies.

• Relevant authorities in accordance with, and as Bosch deems required, necessary and/or appropriate by, or in connection with, applicable law, regulation, court order or legal process;

• Bosch.IO GmbH processes your data for the purposes of "registration and login with SingleKey ID", as well as "overview and maintenance of master data and apps with SingleKey ID" under joint responsibility with us.

By accessing and/or using the PRO360 Services, you consent to the above uses and disclosure of your personal information in accordance with this notice.

We do not sell or share your personal information collected through the PRO360 Services, therefore we do not offer the right to opt out of the selling or sharing of your personal information.

VI. Use of Third-Party Web Analytics Tools

The PRO360 Services uses web analytics tools, such as the Google Analytics web analytics tool, to provide us with an analysis of your use of the PRO360 Services, overall use of and traffic on the PRO360 Services and other related services. Google Analytics uses cookies that enable an analysis of your use of the PRO360 Services. The information generated by the cookie about your use of the PRO360 Services (such as when you visited the PRO360 Services, the referrer URL, details on the configuration of your operating system, your browser and your access provider) are generally transmitted to, and stored on, a server of Google located in the U.S.A. You are able to opt out of Google Analytics by downloading and utilizing the Google Analytics Opt-out Browser Add-on, which you can obtain at https://tools.google.com/dlpage/gaoptout?hl=en. Bosch has enacted Google’s Restricted Data Processing as to not constitute a sale or sharing of data with Google.

Google Analytics is Google HQ, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"). We use Google Analytics with the additional function offered by Google to anonymize IP addresses. While doing so, Google already shortens IPs within the EU in most cases and only does so in the United States in exceptional cases, while always saving shortened IPs only.

Bosch uses any information gathered by such analytics tools to analyze your use of the PRO360 Services, to generate reports on website activities and to perform other PRO360 Services related services to you. Only authorized persons have access to this anonymized data.

VII. International Data Transfer

Bosch may transfer your personal information to Bosch’s parent company in Germany, Robert Bosch GmbH, and/or to any other Bosch affiliates throughout the world, including, without limitation, Robert Bosch Tool Corporation, when processing, storing, analyzing, and otherwise using data. Bosch may also transfer your data to a service, provider, contractor, or third party outside the country of origin. Accordingly, your personal information may be accessible to courts, law enforcement and national authorities in countries other than the country in which you reside. You can obtain information about Bosch’s policies and practices with respect to foreign service providers (including affiliates), or ask questions about the collection, use, disclosure or storage of personal information by such service providers, by contacting our Privacy Notice Administrator as described below.

VIII. Children’s Privacy

Bosch does not knowingly collect or use any personal information from online visitors under the age of 16. Bosch does not knowingly allow visitors under the age of 16 to participate in any promotions or contests made available on PRO360 Services from time to time.

IX. California “Shine the Light” Privacy Rights

California’s “Shine The Light” law permits those Bosch customers who are residents of California to annually request a list of their personal information (if any) that Bosch disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties. At this time, Bosch currently does not share any personal information with third parties for direct marketing purposes.

X. Use of Links to Affiliated Sites

The PRO360 Services may contain links to other Bosch sites. The PRO360 Services provides these links only as a convenience. Your use of these Affiliated Sites and any related services are outside the scope of this Privacy Notice and is governed by the Privacy Notice and any other terms referred to or located on such Affiliated Sites.

XI. Use of External Links

The PRO360 Services may contain links to third-party websites or services operated by providers that are not associated with Bosch. After you click the link, Bosch no longer has any influence over the collection, storage, use or processing of any personal information transmitted by clicking the link (such as the IP address or URL of the page that contains the link), as the behavior of third parties is, by nature, beyond Bosch control. Therefore, Bosch is not responsible for the collection, storage, use, disclosure or other processing of personal information by such third parties. For further clarity, this Privacy Notice does not apply to any such third-party websites or services; refer to the privacy statements or policies for such third-party websites or services for information about how they collect, use, disclose and protect personal information.

XII. Security

Bosch takes commercially reasonable efforts to ensure that your data collected by Bosch through the PRO360 Services is protected against tampering, loss, destruction, access by unauthorized persons or unauthorized disclosure. Bosch security measures are being continuously improved in accordance with the state of technological developments, however, absolute protection is not possible.

When you register with Bosch, you are required to create a username and password. You must not share this access information with anyone else as you are personally responsible for any information transmitted while logged in with your username and password. We disclaim any and all liability for any information transmitted due to an unauthorized log in.

XIII. Use of Cookies

1. Bosch Cookies.

Bosch uses cookies and active components (e.g., JavaScript) to track visitors’ preferences and customize the design of the PRO360 Services.

Cookies are small text files stored on your computer or device when you visit a PRO360 Services. If you wish, you can delete the cookies at any time from your web browser. However, this can result in some functions no longer being available. For information on deleting the cookies, consult your browser‘s help function.

Bosch makes it possible to control the use of cookies. To do so, click the “Privacy settings” link in the footer. This link gives you additional information about the cookies used. In addition, you can configure which cookies you want to use there.

2. Cookies, Tracking Mechanisms, and Cookie Retargeting

Cookies, Tracking Mechanisms, and Cookie Retargeting create user profiles by means of advertising cookies or third-party advertising cookies so called "web beacons" (invisible graphics that are also called pixels or tracking pixels), or by means of comparable technologies. These are used for interest-based advertising and to control the frequency with which the user looks at certain advertisements. The relevant provider of these tools is the controller responsible for the processing of data in connection with the tool. The providers of the tools might disclose information also to third parties for the purposes mentioned above. The data protection notices of the relevant provider in this context should be reviewed.. The following may be incorporated into this website at various times for various marketing campaigns:

Name: Tealium iQ Tag Management

Provider: Tealium Inc, 9605 Scranton Road, Suite 600, San Diego CA 92121 USA.

Function: Tealium iQ Tag Manager is used to manage website tags via an interface, as well as to integrate program codes on our websites. The tag manager itself does not store any of your personal data.

Name: Tealium Audience Stream Customer Data Platform

Provider: Tealium Inc, 9605 Scranton Road, Suite 600, San Diego CA 92121 USA.

Function: Tealium Audience Stream is a cookie that pseudonymously records your user behavior (movement profile, purchasing behavior) on our digital offers and also includes data that is already stored in the general customer database. This is used to improve your browsing experience, analyze website traffic, support campaign planning and analysis and to display personalized advertising on advertising networks such as Facebook Ads. Tealium Audience Stream also enables us to create target groups, which we use for customer matching for remarketing campaigns.

Name: Qualtrics, LLC

Provider: Qualtrics LLC, 333 W. River Park Drive, Provo UT 84604, USA.

Function: On our website, we use the services of Qualtrics LLC, 333 W. River Park Drive, Provo UT 84604, USA to conduct customer, product, and satisfaction surveys. The goal is to continuously develop and improve our products and services. If you participate in a satisfaction survey, only so-called "log data" (date and time stamp / information about your browser and your browser settings / information about your terminal device / usage data) will be processed. Participation in a satisfaction survey is voluntary. The legal basis for the data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

As part of the Qualtrics services also Cookies are used, in particular to maintain the current satisfaction survey during your browsing session and to prevent multiple participations. For more information about Qualtrics LLC and how Qualtrics processes personal data, please visit https://www.qualtrics.com/privacy-statement/.

Processing of the advertising identifier / advertising ID

With your consent, we use the so-called ”advertising identifier” (IDFA) for devices with the iOS operating system and the so-called advertising ID for those with Android for advertising purposes. These are non-permanent identification numbers for a specific device which are provided by iOS or Android. The data collected through this is not linked with other device-specific information. We use the identification numbers in order to provide you with personalized advertising and to be able to analyze your usage. If you activate the ”No ad tracking” option in the iOS settings under ”Privacy” – ”Apple Advertising” or the ”Deactivate interest-based advertising” option on Android under ”Google Settings” – ”Advertising”, then we are only able to take the following measures: Measurement of your interaction with banners by counting the number of times a banner is shown without being clicked on (”frequency capping”), click rate, determination of unique usage (”unique user”) and security measures, fraud prevention and troubleshooting. You can delete the IDFA or the advertising ID at any time in the device settings (”Reset Ad ID”); a new identification number will then be generated which is not merged with the previously collected data. We would like to note that you may not be able to use all of the functions of our app if you restrict the use of the respective identification number.

XIV. How We Respond to Do Not Track Signals

The “Do Not Track” (“DNT”) privacy preference is an option that may be made in some web browsers allowing you to opt-out of tracking by websites and online services. At this time, global standard DNT technology is not yet finalized and not all browsers support DNT. We therefore do not recognize and/or respond to all DNT signals.

XV. International Users

This is a U.S. website and service targeted to users in the U.S. and Canada, and the PRO360 Services and Bosch Services are subject to U.S. and Canadian laws, as applicable, including, without limitation, those governing the privacy and security of your information. If you use Bosch Services, you are transferring your information to Bosch in the United States. By using the Bosch Services or providing your information to Bosch through the Services you consent to the transfer of your personal information to the United States, and Bosch handling of your information in accordance with applicable U.S. requirements and this Privacy Notice. Accordingly, your personal information may be accessible to courts, law enforcement and national authorities in the United States. You can obtain information about Bosch’s policies and practices with respect to service providers (including affiliates) outside the country where you reside, or ask questions about the collection, use, disclosure or storage of personal information by such service providers, by contacting our Privacy Notice Administrator as described below.

XVI. Your Rights - US

Dependent on the state of your residence * you may be provided the following data subject rights:

Right to Confirm/Know/Disclose - what personal information Bosch has collected about you, the sources from which it is collected, the purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it.

Right to Access/Obtain - a copy of the personal information collected about you, including information about automated decision making.

Right to Data Portability - receive your personal information in a transferable and readily usable format, when technically feasible.

Right to Delete - your personal information, subject to certain exceptions.

Right to Correction - of the personal information we maintain about you.

Right to Opt-Out –of sale or sharing of personal information to third parties, targeted advertising, profiling, automated decision making, collection of sensitive personal information, or collection of personal information through the operation of a voice or facial recognition.

Right to Question the Results of Profiling - and to review your personal information used for profiling, to question the results, to be informed of the reasons of the resulting decision, and to be informed of what actions you can take to secure a different decision.

If a decision was based on inaccurate personal information, you have the right to have the personal information corrected and the profiling decision reevaluated.

Right to Restrict Sensitive Personal Information - to limit the use and disclosure or to opt-out.

Right to Appeal – our decision regarding your submitted request.

Right to not be discriminated against for exercising your privacy rights

* States include California, Colorado, Connecticut, Delaware, Florida, Iowa, Maryland, Minnesota , Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia

XVII. Your Rights – Canada

Individuals located in Canada have certain rights pursuant to Canadian Privacy Laws. Subject to certain exceptions and limitations, and depending upon the jurisdiction where you reside, such rights may include:

a. The right to withdraw your consent to the collection, use or disclosure of your personal information.

b. The right to be informed of the existence, use, and disclosure of your personal information, and to be provided with an account of the use that has been made or is being made of this information as well as the third parties to which it has been disclosed (including a list of organizations to which your information may have disclosed).

c. The right to challenge the accuracy and completeness of your personal information, and have it amended, updated, or rectified as appropriate.

d. The right to acquire information about Bosch’s policies and practices with respect to personal information, including: a description of the type of personal information held by Bosch and a general account of its use; a copy of any brochures or other information that explain our policies, standards, or codes; and information about what personal information is shared with or accessible to our service providers or affiliates, including outside of Canada.

e. The right to data portability.

f. The right to challenge Bosch’s compliance with the applicable Canadian Privacy Laws.

XVIII. How to Exercise Your Rights

To exercise your rights, submit a verifiable consumer request or access request, as applicable, to us by either:

Calling us at (888-43-BOSCH (888-432-6724)).

Sending an email to: Optout.PTNA@us.bosch.com

You can also ask us not to sell or share your personal information via the “Your Privacy Choices[A1] ” link at the footer of our website.

To assist Bosch in processing your request when exercising your rights, supply the following information:

Full name
Phone number
Address
Any information you can provide about your previous contact with Bosch (e.g. contact point / touchpoint with Bosch, screenshots, reference to a specific product/newsletter)

Only you (or based on your state of residence, an authorized agent authorized by you to act on your behalf – see Section Authorized Agent below for more information) may make a verifiable consumer request or access request, as applicable related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. Your verifiable consumer request or access request, as applicable, must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request or access request does not require you to create an account with us, but if you already have an account with us, you may be required to make your request through that account.

We will only use personal information provided in a verifiable consumer request or access request, as applicable, to verify the requestor’s identity or authority to make the request.

XIX. Response Timing and Format

We endeavor to respond to a verifiable consumer request or access request, as applicable, within forty-five (45) days of its receipt, or sooner where required by applicable law (including Canadian Privacy Laws). If we require more time (up 90 days in total), where permitted by applicable law, we will inform you of the reason and extension period in writing. Opt-out request will be honored as soon as feasibly possible, but no later than 15 days from the date we receive the request.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide in response to a verifiable consumer request will only cover the 12-month period preceding the verifiable consumer request's receipt, unless otherwise required by applicable law. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

For data portability requests, where applicable, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request or access request, as applicable, unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Under the CPRA, in response to a request to know, Bosch should provide all the personal information collected and maintained about the consumer, including beyond the 12-month period unless doing so proves impossible or would involve disproportionate effort.

XX. Personal Information Sales: Opt-Out and Opt-In Rights

Robert Bosch Tool Corporation does not sell or share your personal information collected through the website/services to third parties as defined by relevant laws. Therefore, we do not offer an opt-out.

XXI. Authorized Agent

I. California

As a California resident you may also exercise your request to know or request to delete through an authorized agent. When you submit your request through an authorized agent, we require that you:

1. Provide us a copy of your written permission for the authorized agent to submit the applicable request; and

2. Verify your own identity directly with us.

The foregoing does not apply when you have provided your authorized agent with a power of attorney pursuant to California Probate Code sections 4000 to 4465; provided, that we may require a copy of such power of attorney before fulfilling any request.

II. Colorado

As a Colorado resident you may also exercise your request to opt-out through an authorized agent. When you submit your request through an authorized agent, we require that you:

1. Provide us a copy of your written permission for the authorized agent to submit the applicable request; and

2. Verify your own identity directly with us.

XXII. Non-Discrimination/Financial Incentives

We will not discriminate against you for exercising any of your rights. Unless permitted by applicable law, we will not: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by applicable law that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. When we offer financial incentives, we request identifiers and contact information, though we may also request additional personal information such as Products purchased, information contained in the proof of purchase. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

We currently provide the following loyalty program: PRODEALS

The personal information we collect in connection to the loyalty program includes identifiers, commercial information, geolocation data, internet or other similar network activity, professional or employment-related information, and inferences. Personal data will not be provided to Data Brokers.

Registration and consent to the loyalty program can be found here. https://www.boschtools.com/us/en/pro360/terms/

The loyalty program terms can be found be here. https://www.boschtools.com/us/en/pro360/terms/

XXIII. Filing a Complaint

Regulatory authorities that oversee the privacy laws and regulations, including the Office of the Privacy Commissioner of Canada, advise individuals to file an objection or challenge with the relevant company before lodging a formal complaint with a regulatory authority. If you are dissatisfied with Bosch’s response to an objection or challenge filed under Article XX above, or you if wish to file a complaint with a regulatory authority first, you may do so as follows:

Under PIPEDA: You may file a complaint with the Office of the Privacy Commissioner of Canada. Depending upon the province where you live, you may also (or instead) have the right to file a complaint with the applicable provincial privacy commissioner/regulator.

Under US state laws: You may file a complaint with the applicable state Attorneys General Office or regulatory agency.

XXIV. Changes to Privacy Notice

Due to the constantly changing nature of Bosch business, Bosch reserves the right to change, update, revise and/or modify this Privacy Notice at any time at Bosch’s sole discretion, and Bosch will post any new or revised Privacy Notice here. Any such change, update, revision and/or modification will be effective immediately upon posting on this website, unless we are required to provide direct notice or obtain your consent pursuant to applicable laws. Use of information that Bosch gathers now will be subject to the Privacy Notice in effect at the time of use. By using or navigating around the PRO360 Services or utilizing any of the Services, you acknowledge that you have read and understood and agree to be bound by this Privacy Notice in and the applicable Terms of Use. If you do not agree to be so bound, do not remain on the PRO360 Services. You are responsible for checking the PRO360 Services frequently to keep apprised of recent changes.

________________________________________________________________________

The effective date of this Privacy Notice is 05.28.2025

XXV. Contact

To obtain more information or to submit suggestions or complaints regarding the processing of your personal information, you can contact the Bosch Privacy Notice Administrator.
If incorrect information has been stored despite Bosch efforts to maintain correct and up-to-date data, Bosch will correct this upon your written request, sent to:

Email: privacy.policy@us.bosch.com

Postal Address:
Robert Bosch LLC
Privacy Policy Administrator
38000 Hills Tech Drive
Farmington Hills, MI 48331

You may also contact as follows:
Phone:(888-43-BOSCH (888-432-6724)).
Website: https://www.boschtools.com/us/en/service/contact-us/