Data protection information for the Bosch BetterFood app

The company Home Connect GmbH, with its registered office at Carl-Wery-Strasse 34, 81739 Munich, Germany (hereinafter "Bosch BetterFood" or "we") is responsible for the collection, processing and use of your personal data associated with the Bosch BetterFood app (hereinafter "App").
We collect, process and use your personal data, which is either entered by you or otherwise created and processed in the course of using the App, the associated household appliances or services offered by Bosch BetterFoodin accordance with the applicable data privacy laws. The following information explains how we treat such data based on the Terms of Use or on another legal basis.

1. Types of personal data

In terms of App usage, the associated household appliances or services and functions offered by Bosch BetterFood(hereinafter "Services") Bosch BetterFoodcollects, processes and uses the following categories of personal data.

a. User data and usage data
We collect and use the following personal data when setting up the App and during usage:

• Data that you provide in contacting us via the feedback functionality, which opens the local e-mail app at your device:
  • first and last name,
  • email address.
• Information which we collect and store (in the App) during onboarding and while using the App:
  • language setting of your mobile device,
  • consent to and recognition of the terms of use
  • acknowledgement of the data protection information,
  • status of the user account (if a connection with the HomeConnect App is available and used),
  • app tracking setting,
  • consent to push notifications,
  • dietary preferences,
  • bookmarked recipes (favorites).

b. App usage data

App usage data are data generated by your interaction with the App, such as the features you use, click behaviour relevant to App controls, drop-down menu selections, on/off switch settings and error reports of the app.

2. Purpose of use

We use the above-mentioned category of data

• to provide App features as well as the services offered via the App (1.a.-b.),
• to improve the App's user friendliness and for specific or general troubleshooting of the App and the digital services offered through it (1. b..),
• to improve our range of products and services (including those of affiliated companies), especially with regard to programs which are not used and/or which are frequently used, as well as other features of the App and household appliance (including algorithmic learning) (1.b.)

The legal bases for the purposes of processing within the scope of the GDPR (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016) are described in item 11 of this information.

3. General retention periods

Provided there are no statutory provisions to the contrary, the following general retention periods shall apply:

App usage data: Storage in pseudonymised form and provision in personalized form for services/messages provided via the App to the extent that the "Enable usage-data tracking" function is activated. Deactivating the function resets the individual ID used for tracking, so that App usage data already collected can no longer be connected to you.

4. Data processing management for App data

You can delete your locally stored App data, by deleting the App and all locally stored user-related data will be removed.

5. Transmission or disclosure of your data e.g. to third parties

We work together with various service providers to create and run the App and provide the respective services. To the extent that we have bound these service providers to process data in line with strict instructions in their capacity as data processors on our behalf, any data processing activities undertaken by such providers shall not require your consent.
The service providers we have commissioned to create and run the App:

• Service providers for hosting services
• Service providers for programming services
• Service providers for other App services

We only transmit your data to other recipients where necessary to fulfil a contract with you or between you and the third party, where we or the recipient has a legitimate interest in the disclosure of your data, or where you have given your consent to that transmission. These recipients include service providers and other companies within our corporate group. Furthermore, data may be transmitted to other recipients in the event that we are obliged to do so due to legal provisions or enforceable administrative or court orders.
Other recipients of your data are especially such service providers whose offers and services (third-party services) can be used in connection with the App or where the App enables access to such services.
Content, especially recipes, which you have created yourself, may also be transmitted to other BSH companies (also internationally) within the scope of technical processing and provision of the content/services. We base such transmission/processing on data protection agreements between the BSH companies involved, which also include the application of standard contractual clauses, insofar as the transmission includes a country outside the scope of the GDPR and if it’s not a case of Art. 45 GDPR.

6. Data security

We deploy technical and organisational measures to protect your data, for example, from manipulation, loss and unauthorised third-party access. These measures include the use of encoding technologies, certificates and firewalls on the Bosch BetterFood servers. We are constantly reviewing and improving our security measures in accordance with technological advancement.

7. Scope of application of the data protection information

This data protection information shall apply for the functions and services offered by Bosch BetterFood via the App. Insofar as additional functions or services are offered within the App by Bosch BetterFood or a BSH Group company, special information on data protection is provided, insofar as their use is subject to special data protection regulations or information.
However this data protection information shall not apply for third-party services, even if Bosch BetterFood facilitates the use of and/or access to such third-party services in the App (please also see the terms of use with regard to third-party services). The use of such third-party services is governed by the prevailing data protection provisions put in place by the third-party service provider and, if applicable, additional data protection information on our part which outline the distinctive features of these third-party services and shall only be relevant in this regard.
If you are referred to another service provider, Bosch BetterFood shall make reasonable and appropriate efforts to elucidate such referral (e.g. by embedding the service provider's content within the App using inline frames) if such referral is not clear. If you click on a link in the Bosch BetterFood App which calls up an app or website of another service provider, this is considered to be a clear referral.
If you, the user, are located within the scope of application of the GDPR, please note that the use of third-party services may result in your personal data being processed in countries outside the scope of application of the General Data Protection Regulation. Please then refer to the data protection information of the respective third-party service providers.

8. Changes to the data protection information

As the App and the services provided via the App continues to undergo development – among other things, through the implementation of new technologies or the introduction of new services – this data protection information may need to be adjusted accordingly. Bosch BetterFood shall reserve the right to amend or supplement this information as required. Bosch BetterFood will always update the data protection information in the App; you can therefore familiarise yourself with the latest version at any time.

9. Rights and contact information

If, despite our efforts to only store data which is correct and up-to-date, your personal details are stored incorrectly, we shall correct such information upon your request. After giving us your consent for the collection, processing and use of your personal data, you may withdraw such consent at any time with effect for the future. Consent may generally be withdrawn using the respective App setting or otherwise through the contact information referred to in the App.
Your personal data will be deleted if you withdraw your consent to your data being stored, if your personal data is no longer needed to serve the purpose pursued by such storage or if such storage is inadmissible for other legal reasons. Please bear in mind that, for technical or organisational reasons, there may be an overlap between you withdrawing your consent and your data being used, e.g. in the case of a newsletter which has already been sent out. Data required for billing and accountancy purposes or which are subject to the legal duty to preserve records are not affected by this.

Should you have any questions on the topic of data protection or should you wish to exercise your rights to withdraw consent or to information, rectification, deletion or suspension, please contact us using the contact information provided in the App.

10. Additional information pursuant to the GDPR

a. Legal bases for intended data uses

We base the following data uses on

• the performance of a contract according article 6(1b) GDPR:
  • Provision of App features as well as the services offered via the App by processing the data categories listed in the items 1.a.-b.
  • Transfer of data categories listed in the items 1.a.-b. to service providers of third-party services which can be used in connection with the App (see item 9).
  • Bug fixing by processing the data categories listed in the items 1.a.-b.
• your consent according article 6(1a) GDPR:
  • Direct marketing purposes by processing the data categories listed in the items 1.a.-b.
  • Improving the user friendliness of the App by processing the data categories listed in the item 1.d.

b. Your rights

Your additional rights to item 11 are outlined below. To exercise your rights, please use the contact information provided at the end of this data protection information.

• Your right to information about your data: We will provide you with information about the data we hold about you on request.
• Your right to correct and complete your data: We will correct inaccurate information about you if you notify us accordingly. We will complete incomplete data if you notify us accordingly, provided this data is necessary for the intended purpose of processing your data.
• Your right to delete your data: We will delete the information we hold about you on request. However, some data will only be deleted subject to a defined period of retention, for example because we are required to retain the data by law in some cases, or because we require the data to fulfil our contractual obligations to you.
• Your right to have your data blocked: In certain legally determined cases, we will block your data if you would like us to do so. Blocked data is only further processed to a very limited extent.
• Your right to withdraw consent: You can withdraw consent given for your data to be processed with effect for the future at any time. The legality of processing your data remains unaffected by this up to the point at which your consent is withdrawn.
• Your right to object to the processing of your data: You can object to the processing of your data with effect for the future at any time, if we are processing your data on the basis of one of the legal justifications set out in article 6 (1e or 1f) GDPR. In the event that you object we will cease processing your data, provided that there are no compelling and legitimate grounds for further processing. The processing of your data for the purposes of direct marketing never constitutes compelling and legitimate grounds for us.
• Your right to data portability: At your request, we can make certain information available to you in a structured, commonly used and machine-readable format.
• Your right to appeal to a regulatory authority: You can lodge an appeal pertaining to data protection with a data protection authority. To do so, contact the data protection authority responsible for your place of residence or the data protection authority under whose jurisdiction we fall (named below).
  Bavarian Data Protection Authority (BayLDA), https://www.lda.bayern.de/de/index.html.

c. Transmission to recipients outside the EEA

If necessary, for the provision of App features as well as the services offered via the App, we also transmit personal data to recipients based outside of the EEA, in so-called third countries. In this case, we ensure ‒ before any data is shared ‒ that either an appropriate level of data protection is maintained by the recipient (e.g. on the basis of an adequacy decision made by the EU Commission for the respective country or the agreement of standard EU contractual clauses between the European Union and the recipient) or that you have given your consent to said sharing.
We are happy to provide you with an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure an appropriate level of data protection. To request this, please use the contact information provided at the end of this data protection information.

d. Contact details of the data protection officer

If you have any questions relating to data protection or exercising your rights, you can use the following contact information to get in touch with our data protection officer directly:

As far as you are resident in an EU state (except the United Kingdom):

BSH Hausgeräte GmbH
Data Protection Officer
Carl-Wery-Str. 34
81739 Munich, Germany

Data-Protection-de@bshg.com

As far as you are resident in the United Kingdom:

BSH Home Appliances Limited
Data Protection Officer
Grand Union House, Old Wolverton Road
Wolverton, Milton Keynes, MK12 5PT

Data-Protection-GB@bshg.com

Representative in the United Kingdom (Art 27 UK GDPR):

BSH Home Appliances Limited
UK GDPR Representative Home Connect
Grand Union House, Old Wolverton Road
Wolverton, Milton Keynes, MK12 5PT

The representative in Switzerland:

BSH Hausgeräte AG, Representative for Home Connect GmbH, BSH Hausgeräte AG, Fahrweidstrasse 80, CH-8954 Geroldswil

Date of issue: October 2024