Privacy Policy

The Automated Driving Alliance of Robert Bosch GmbH and CARIAD SE (hereinafter referred to as “cooperation partners” or “we” or “us”) is pleased that you are visiting our website (“online offer”) and that you are interested in our company and our products.

We respect your privacy

The protection of your privacy when processing personal data and the security of all business data are important concerns that we take into account in our business processes. We process personal data that is collected when you visit our online offer confidentially and only in accordance with the applicable statutory provisions.

Data protection and information security are part of our corporate policy.

Responsible Parties:

The cooperation partners are jointly responsible for the operation of this website in accordance with Art. 26 Para. 1 GDPR. For these specific data processing activities, the legally required agreement on joint controllership was concluded between the cooperation partners.

Further information can be found on this page under "Information on joint controllership according to Art. 26 GDPR".

Our contact details are as follows:

Robert Bosch GmbH
Robert-Bosch-Platz 1
70839 Gerlingen-Schillerhöhe
Germany

and

CARIAD SE
Berliner Ring 2
38440 Wolfsburg
Germany

Collection, processing and use of personal data

Data Categories

The following categories of data are processed:

• Communication data (e.g. name, telephone, e-mail, address, IP address)

Log files

Every time you use the Internet, certain information is automatically transmitted by your Internet browser and stored by us in so-called log files.

We store the log files for a maximum of 7 days to identify disruptions and security reasons (e.g. to investigate attempted attacks) and then delete them. Log files, which must be kept for evidence purposes, are excluded from deletion until the respective incident has been finally clarified and can be passed on to investigative authorities in individual cases.

The following information is stored in the log files:

• IP address (Internet Protocol address) of the end device from which the online offer is accessed;
• Internet address of the website from which the online offer was accessed (so-called source or referrer URL);
• Name of the retrieved files or information;
• Date, time and duration of retrieval;
• Amount of data transferred;
• Operating system and information on the Internet browser used, including installed add-ons (e.g. for Flash Player);
• http status code (e.g. "request successful" or "requested file not found").

Principles

Personal data is all information that relates to an identified or identifiable natural person, such as names, addresses, telephone numbers, email addresses, contract, booking and billing data that express the identity of a person.

We collect, process and use personal data (including IP addresses) only if there is a legal basis for this or if you have given us permission to do so, e.g. B. as part of a registration, have given your consent.

Processing purposes and legal bases

The cooperation partners and service providers commissioned by them, process your personal data for the following purposes:

• Provision of this online offer (legal basis: legitimate interest on our part)
• To determine disruptions and for security reasons (legal basis: fulfillment of our legal obligations in the area of data security and legitimate interest in eliminating disruptions and the security of our offers).
• Protection and defense of our rights (legal basis: legitimate interest on our part in asserting and defending our rights).

Transfer of data to other responsible parties

We only transfer your personal data to other responsible parties if this is necessary to fulfill the contract, if we or the third party have a legitimate interest in the transfer or if the data subject has freely consented to such a transfer. Details on the legal bases and the recipients or categories of recipients can be found in the "Processing purposes and legal bases" section. In addition, data can be transmitted to other responsible parties if we are obliged to do so by law or by an enforceable official or court order.

Service providers (general)

We commission external service providers with tasks such as data hosting. We have carefully selected these service providers and monitor them regularly, in particular their careful handling and protection of the data stored with them. We oblige all service providers to maintain confidentiality and to comply with legal requirements. Service providers can also be other companies in the Bosch Group and the Volkswagen Group.

Disclosure to recipients outside the EEA

We may also pass on personal data to recipients who are based outside the EEA in so-called third countries. In this case, before passing it on, we ensure that the recipient either has an appropriate level of data protection or that you have freely consented into the transfer.

You can get an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure an appropriate level of data protection from us. Please use the information in the Contact section.

Duration of storage; Retention periods

In principle, we store your data for as long as this is necessary to provide our online offer and the associated services or we have a legitimate interest in further storage (e.g. after the fulfillment of a contract, we can still have a legitimate interest in postal marketing). We then delete your personal data, with the exception of data that we must continue to store to fulfill legal obligations (e.g. due to tax and commercial law retention periods, we are obliged to keep documents such as contracts and invoices for a certain period of time).

Security

Our employees and the service companies commissioned by us are obliged to maintain confidentiality and comply with the provisions of the applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of protection and to protect your data managed by us, in particular against the risks of unintentional or unlawful destruction, manipulation, loss, modification or unauthorized disclosure or unauthorized access. Our security measures are constantly being improved in line with technological developments.

Children

This online offer is not aimed at children under the age of 16.

User rights

Please use the information in the Contact section to assert your rights. Please make sure that we can clearly identify you personally.

Right to information and access

You have the right to receive information from us about the processing of your data. To this end, you can assert a right to information in relation to the personal data that we process from you.

Right to rectification and erasure

You can ask us to correct inaccurate data. If the legal requirements are met, you can request the completion or deletion of your data.

This does not apply to data that is required for billing and accounting purposes or is subject to statutory retention requirements. However, if access to such data is not required, its processing will be restricted (see below).

Restriction of processing

You can demand that we restrict the processing of your data - insofar as the legal requirements are met.

Data Portability

Insofar as the legal requirements are met, you can request that the data you have made available to us be transmitted in a structured, common and machine-readable format or - if technically feasible - that the data be transmitted to a third party.

Objection to data processing with the legal basis "legitimate interest"

You also have the right to object to data processing by us at any time, insofar as this is based on the legal basis of "legitimate interest". We will then stop processing your data unless we can - in accordance with the legal requirements - prove compelling legitimate reasons for further processing which outweigh your rights.

Revocation of consent

If you have given us your consent to the processing of your data, you can revoke this at any time with effect for the future. This does not affect the legality of the processing of your data until you withdraw your consent.

Right of appeal to the supervisory authority

You have the right to lodge a complaint with a data protection authority. You can contact the data protection authority responsible for your place of residence or your federal state or the data protection authority responsible for the cooperation partners. Those are:

For Robert Bosch GmbH:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

Address:
Lautenschlagerstraße 20
70173 Stuttgart
GERMANY

Postal address:
Postfach 10 29 32
70025 Stuttgart
GERMANY

Tel.: +49 (711)/615541-0
FAX: +49 (711)/615541-15
Email: poststelle@lfdi.bwl.de

For CARIAD SE:

Die Landesbeauftragte für den Datenschutz Niedersachsen

Address:
Prinzenstraße 5
30159 Hanover
GERMANY

Postal address:
Postfach 221
30002 Hanover
GERMANY

Tel.: +49 (511)/120 4500
FAX: +49 (511)/120 4599
Email: poststelle@lfd.niedersachsen.de

Change of data protection notice

We reserve the right to change our security and privacy practices. In these cases, we will also adapt our information on data protection accordingly. Therefore, please note the current version of our data protection notice.

Contact

If you would like to get in touch with us, please use the following contact options:

privacy@automated-driving-alliance.com

To assert your data subject rights or to report data protection incidents, please contact our data protection officers:

For Robert Bosch GmbH:

Datenschutzbeauftragter
Abteilung Informationssicherheit und Datenschutz (C/ISP)
Robert Bosch GmbH
Postfach 30 02 20
70442 Stuttgart
GERMANY

Email: DPO@bosch.com

For CARIAD SE:

Datenschutzbeauftragter
CARIAD SE
Berliner Ring 2
Brieffach 1080/2
38440 Wolfsburg
GERMANY

Email: privacy@cariad.technology

Information on joint controllership according to Article 26 GDPR

What is the reason for shared responsibility?

Robert Bosch GmbH and CARIAD SE (hereinafter "Cooperation Partners") work closely together in the development of functions and vehicles as part of the Automated Driving Alliance project. This also applies to the processing of your personal data on this website. The cooperation partners have jointly defined the processing phases of this data in the individual process stages. They are therefore jointly responsible for the protection of your personal data within the process steps described below (Article 26 GDPR).

For which process stages is there joint responsibility?

The joint responsibility of the cooperation partners includes the collection, storage and further processing of your personal data on this website.

Outside the project, the cooperation partners can process data with separate responsibility, provided this is legally permissible.

What did the parties agree on?

As part of their joint responsibility under data protection law, the cooperation partners have also agreed that the collection of data also fulfills the information obligations under Art. 13 and 14 GDPR with regard to the parties joint responsibility.

What does this mean for the data subjects?

Data protection rights can be asserted both at Robert Bosch GmbH and at CARIAD SE. The cooperation partners inform each other immediately about inquiries from data subjects. They will provide each other with all information necessary to respond to requests for information.

Stand: [15.11.2022]