Legal notice for the Home Connect app

In connection with the use of the App, Home Connect mainly collects, processes and uses the following categories of personal data:

a. User master data

Data which we collect and use in connection with the creation of a user account (registration):

• Information you provide when registering, such as:
  • First name and surname
  • E-mail address (user ID)
  • The country in which you operate your home appliance(s)
  • Password as access protection.

The details requested upon registration may vary depending on the country.

• Information which we collect and save in connection with the registration:
  • Language setting of your mobile device
  • Agreement with the validity of the terms of use and confirmation of your acknowledgement of the Data Privacy Policy
  • Status of the user account (activated/deactivated)
  • App tracking presets (subject to the country selected, see 6. below).

b. Appliance master data

Data which we collect and use in conjunction with connecting your home appliance to the user account:

• Brand of the home appliance (e.g. Bosch or Siemens)
• Serial number and, if applicable, date of manufacture of the appliance (E number and FD number – this information is also provided on the type plate of the home appliance)
• The unique identifier of the network adapter used in the home appliance (MAC address).

This data is assigned to your user account in the "connect home appliance" function for each connected home appliance.

c.    Recommending a dryer program for a specific type of textile Appliance usage data

Data which we collect and use in connection with using the home appliance:

• Configured basic settings, program selection and program settings on the home appliance or via the App
• Appliance status data such as environmental conditions, status of components, changes of status for the appliance (e.g. change of operating mode, opening or closing of doors/front panel, changes in temperature, filling levels) and status messages from the home appliance (e.g. appliance is overheated, water container is empty, etc.).

d. App usage data

App usage data is data from your interaction with the App, such as functionalities of the App you use, your click behaviour in relation to the App controls, selection in dropdown menus, settings of on/off switches. For more details, see 6. below.

We use the data categories stated above – and only with your agreement, if this is required – to

• provide the App functionalities and the services offered via the App (1.a.-c.)
• eliminate faults (1.b. and c.)
• make the App more user friendly (1.d.)
• Improve our range of products and services, especially in terms of programs not used or not frequently used and other functions of the App and home appliance (1.c. and d.), and
• for direct marketing purposes (1.a.-c.).

Subject to any deviating legal provisions, the following normal retention periods shall apply:

a. User master data: To be deleted when the user account is deleted.

b. Appliance master data: Assignment to the user account is removed when the home appliance is removed from the user account.

c.    Recommending a dryer program for a specific type of textile Appliance usage data: Saved in a personalised format for a period of 10 days. In the event that you have consented to advertising, data is saved in a personalised format for the duration of the validity of the consent to advertising.

d. App usage data: Saved in an anonymised format insofar as and as long as the "Enable usage data tracking" function is activated.

a. Connectivity of your home appliance

You can control the connectivity of your home appliance via the App:

• You can, if necessary, cancel the connection to the Home Connect server separately for each home appliance (menu item Settings > Connection settings) with the result that
  • the appliance usage data (1.c.) is no longer transmitted to the Home Connect server;
  • certain functionalities of the App are no longer available, in particular it will no longer be possible to operate the home appliance outside the range of the Wi-Fi network, even if there is an existing Internet data connection.

• You can, if necessary, switch off the Wi-Fi connection separately for each home appliance (menu item Settings > Connection settings), with the result that
  • the appliance usage data (1.c.) is no longer transmitted to the Home Connect server;
  • it will only be possible to operate the appliance from the appliance itself but no longer via the App.

b. User accounts and local App data

You can control your user accounts via the App.

• You can delete your user account ("Settings" > "My account" > "Delete user account"). This means that
  • the connection between your home appliance and your user account will be deleted;
  • your home appliance will no longer transmit appliance usage data to the Home Connect server unless other user accounts are connected to the home appliance (see 1.b. above).

• By deleting the App, you will also remove all locally saved user-related data.

c.    Recommending a dryer program for a specific type of textile Factory settings of the home appliance

You can restore your home appliance to its factory settings from the appliance. This means that

• restoring the network settings will cancel the connection between the home appliance and the Home Connect server;
• the connection between the home appliance and the user accounts previously connected will be cancelled (requires the home appliance to have an Internet connection) and your home appliance will also, therefore, no longer be displayed in the App.

To reset your home appliance to the factory settings, please consult the user manual for your home appliance.

In order to access the App and the services it provides, we cooperate with different service providers. Where we have bound these service providers to data processing strictly in accordance with instructions as commissioned data processors, your consent to data processing by these service providers is not required.

In other cases, where your consent is required for the disclosure of your personal data to service providers for reasons of data privacy, we will notify you separately and we will not transmit your data without your prior consent.

The App can collect App usage data (see 1.d. above) and uses the Adobe Analytics service from Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (hereinafter referred to as "Adobe").

Where the "Enable usage data tracking" function is activated, App usage data is sent to and saved on an Adobe server in the UK. The App usage data allows the analysis of your use of the App (see 1.d. above). IP anonymisation was activated for this App, which means that the IP address you used will be truncated in advance. Adobe will use this information on behalf of Home Connect in order to evaluate your use of the App and to compile reports of App activities for Home Connect. The IP address transmitted from your mobile device under Adobe Analytics will not be combined with other Adobe or Home Connect data without your express consent.

You can control the collection of App usage data (incl. your IP address) by Adobe and the processing of such data by Adobe by activating or deactivating the "Enable usage data tracking" function. Depending on the legal situation in your country, the "Enable usage data tracking" function may be activated by default.

We use HockeyApp ( www.hockeyapp.net ) to create and transmit anonymous error reports where the App does not function as intended, especially in the case of a crash. Our service provider and Home Connect will receive error reports only with your explicit prior consent. Your consent will be requested specifically before any error report is transmitted.

In order to protect your data, e.g. from manipulation, loss and unauthorised access by third parties, we take technical and organisational measures. These measures include using the latest encryption technology, certificates, using a firewall at the Home Connect server and password protection of the Home Connect app. Data security of the Home Connect app has been tested and certified by TÜV Trust IT. We review our security measures and improve them continuously in line with technological progress.

This Data Privacy Policy applies to the functions and services provided by Home Connect via the App, but not to the products and services of other service providers (third-party services), even if Home Connect allows the use of these third-party services within the App (in relation to third-party services, see also the Terms of Use). In this case, the use of this third-party service is subject to the relevant data privacy provisions of the service provider and any additional data privacy policies on our part that deal with the special features of this third-party service and are relevant only in this respect.

In the event that data is passed on to another service provider, Home Connect will take reasonable and appropriate action to make known the facts associated with this (e.g. by embedding the content of the service provider within the App using Inline Frames) where the passing on of data is not obvious. This action is deemed obvious, for example, if the user leaves the Home Connect app via a link and the App or website of another service provider is called up.

If you, the user, are located in the application area of the Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ L 281 p. 31, EU Data Protection Directive), please be aware that use of third-party services may lead to your personal data being processed in countries outside of the application area of the EU Data Protection Directive.

In the course of further development of the App, due to the implementation of new technologies or the introduction of new services, for example, it may be necessary to adapt this Data Privacy Policy. Home Connect reserves the right to change or modify this policy as required. Home Connect shall always provide the current version of the Data Privacy Policy in the App to allow you to stay informed at all times about the current version of the Data Privacy Policy.

Should incorrect information relating to you be stored despite our efforts to keep data correct and up-to-date, we will change it at your request. If you have granted your consent to the collection, processing and use of your personal data, you can revoke this consent with effect for the future at any time. Consent can generally be revoked by selecting the relevant setting in the App, otherwise by using the contact options in the App that are specified below.

Your personal data will be deleted if you revoke your consent to your data being saved, if knowledge of it is no longer required in order to fulfil the purpose for which it is saved, or if saving this data is not permitted for other legal reasons. Please note that for technical or organisational reasons, there may be an overlap between your consent and the use of your data, e.g. in a newsletter which has already been sent out. Data which is required for billing and accounting purposes, or which is subject to the statutory retention obligation, is not affected by this.

Should you have any questions about data privacy, or if you wish to exercise your rights under data privacy law to revoke your consent, to information, correction, deletion or blocking, you can contact us using the contact details saved in the App.

a. Pravne osnove za nameravanu upotrebu podataka

Sledeće vrste upotrebe podataka zasnivamo na:

• sprovođenju ugovora u skladu sa članom 6(1b) GDPR:
  – Pružanje funkcija aplikacije kao i usluga koje se nude putem aplikacije obradom kategorija podataka navedenih u stavkama 1.a.-c.
  – Prenos kategorija podataka navedenih u stavkama 1.a.-c. pružaocima nezavisnih usluga koje se mogu koristiti u vezi sa aplikacijom (videti stavku 9).
  – Ispravljanje grešaka obradom kategorija podataka navedenih u stavkama 1.b.-d.

• legitimnim interesima u skladu sa članom 6(1f) GDPR:
  – Poboljšanje prilagođenosti aplikacije korisniku obradom kategorija podataka navedenih u stavci 1.d. (Odnosi se na jurisdikcije koje dozvoljavaju prikupljanje podataka o upotrebi aplikacije na osnovu legitimnih interesa. U ovom slučaju je funkcija „Dozvoli praćenje korisničkih podataka“ aktivna u podrazumevanom podešavanju.)
  – Poboljšanje našeg asortimana proizvoda i usluga, posebno u pogledu programa koji se ne koriste i/ili koji se često koriste, pored ostalih funkcija aplikacije i kućnog aparata, obradom kategorija podataka navedenih u stavkama 1.c. i d.

• vašoj saglasnosti u skladu sa članom 6(1a) GDPR:
  - Svrha direktnog marketinga obradom kategorija podataka navedenih u stavkama 1.a.-c.
  – Poboljšanje prilagođenosti aplikacije korisniku obradom kategorija podataka navedenih u stavci 1.d. (Odnosi se na jurisdikcije koje dozvoljavaju prikupljanje podataka o upotrebi aplikacije samo na osnovu saglasnosti. U ovom slučaju, funkcija „Dozvoli praćenje korisničkih podataka“ aktivira se samo uz pristanak korisnika.)

• zakonskoj dozvoli u skladu sa članom 6 stav 1 podstav c i d GDPR:
  – Obaveštenje u slučaju bezbednosnih uputstava i/ili informacija o povlačenju proizvoda u kontekstu praćenja proizvoda obradom kategorija podataka 1.a.-c.

b. Vaša prava

Vaša dodatna prava na stavku 11 navedena su u nastavku teksta. Da biste ostvarili svoja prava, koristite podatke za kontakt navedene na kraju ovih informacija o zaštiti podataka.

• Vaše pravo da dobijete informacije o svojim podacima: na vaš zahtev, pružićemo vam informacije o podacima koje imamo o vama.

• Vaše pravo da ispravite i dopunite svoje podatke: ispravićemo netačne podatke o vama ako nas o tome obavestite. Dopunićemo nepotpune podatke ako nas o tome obavestite, pod uslovom da su ti podaci neophodni u svrhu obrade vaših podataka.

• Vaše pravo na brisanje vaših podataka: na vaš zahtev, izbrisaćemo podatke o vama koje posedujemo. Međutim, neki podaci će biti izbrisani samo nakon određenog perioda čuvanja, na primer zato što u nekim slučajevima, prema zakonu moramo da ih čuvamo ili zato što su nam podaci potrebni da bismo obavili svoje ugovorne obaveze prema vama.
Takođe pogledajte stavku 11.

• Vaše pravo na blokiranje vaših podataka: u određenim zakonski utvrđenim slučajevima blokiraćemo vaše podatke ako to želite. Blokirani podaci naknadno se obrađuju u veoma ograničenoj meri.

• Vaše pravo na povlačenje saglasnosti: u bilo kom trenutku možete povući saglasnost datu za obradu vaših podataka, što će se odnositi na budući period. To ne utiče na zakonitost obrade vaših podataka do trenutka kada je vaša saglasnost povučena.

Takođe pogledajte stavku 11.

• Vaše pravo da uložite prigovor na obradu vaših podataka: u bilo kom trenutku možete da uložite prigovor na obradu vaših podataka, što će se odnositi na budući period, ako obrađujemo vaše podatke na osnovu jednog od pravnih obrazloženja navedenih u članu 6 ( 1e ili 1f) GDPR. U slučaju da se protivite, prestaćemo sa obradom vaših podataka, pod uslovom da ne postoje nužni i legitimni osnovi za dalju obradu. Obrada vaših podataka u svrhe direktnog marketinga za nas nikada ne predstavlja ubedljiv i legitiman osnov.

• Vaše pravo na prenosivost podataka: na vaš zahtev, možemo vam staviti na raspolaganje određene informacije u strukturisanom, uobičajenom i mašinski čitljivom formatu.

• Vaše pravo na žalbu regulatornom organu: možete uložiti žalbu koja se odnosi na zaštitu podataka kod organa za zaštitu podataka. Da biste to učinili, obratite se organu za zaštitu podataka odgovornom za vaše mesto prebivališta ili organu za zaštitu podataka pod čiju nadležnost spadamo (navedenom dalje u tekstu).

Bavarsko telo za zaštitu podataka (BayLDA), www.baylda.de.

c. Prenos primaocima izvan EEP

Ako je potrebno, za obezbeđivanje funkcija aplikacije, kao i usluga koje se nude putem aplikacije, takođe prenosimo lične podatke primaocima sa sedištem izvan EEP, u takozvanim trećim zemljama. U tom slučaju, uveravamo se – pre nego što dođe do deljenja bilo kog podatka – da primalac održava odgovarajući nivo zaštite podataka (npr. na osnovu odluke o adekvatnosti koju je donela Komisija EU za odgovarajuću zemlju ili sporazuma sa standardnom EU ugovornom klauzulom između Evropske unije i primaoca) ili da ste dali saglasnost za navedeno deljenje podataka.

Rado ćemo vam dostaviti pregled primalaca u trećim zemljama i primerak posebnih odredbi dogovorenih kako bi se osigurao odgovarajući nivo zaštite podataka. Da biste to zatražili, koristite podatke za kontakt navedene na kraju ovih informacija o zaštiti podataka.

Pogledajte stavku 9 za informacije o prenosu ličnih podataka korišćenjem usluga nezavisnih pružalaca.

d. Podaci za kontakt službenika za zaštitu podataka

Ako imate bilo kakvih pitanja u vezi sa zaštitom podataka ili ostvarivanjem vaših prava, možete koristiti sledeće podatke za kontakt da biste direktno stupili u kontakt sa našim službenikom za zaštitu podataka:

BSH Hausgeräte GmbH

Data Protection Officer

Carl-Wery-Str. 34

81739 Munich, Nemačka

Data-Protection-de@bshg.com