4. Categories of Sources from which Personal Data is Collected
a. Directly from You
When you contact us, submit orders for products or BSH service technician visits, submit product registrations, submit online user account registration (other than for Home Connect), register for newsletters or other marketing communications, participate in sweepstakes, contests, or surveys, visit our showrooms, submit for rebate programs, request product brochures, participate in a pre-purchase package offerings (e.g., our kitchen planning tool), provide product reviews and product questions and answers (Q&As) on our Websites, or apply for job opportunities with us, we collect one or more categories of Personal Data about you.
b. Indirectly from You and from Third-Party Sources
Software on our Websites collects Internet or electronic network activity information that may, alone or in combination with other information, constitute Personal Data.
i. Cookies, Analytics, Marketing and Tracking
a. Analytics
Analytics refers to the process of collecting, processing, and analyzing data to gain insights and make decisions. For us, it's like examining patterns and trends to better understand how you use our products and services. This insight allows us to make our products and services more user-friendly. It also enables us to identify areas for improvement and innovation in our products and services. Our Websites integrate with analytics platforms (e.g., Adobe Analytics). These platforms provide JavaScript code that is added to the Website. This code interacts with cookies or similar technologies to collect data when users interact with our Website. As users navigate the Website, the analytics code collects data from the cookies/pixels. This data we collect includes information on page views, clicks, time spent on pages, and other relevant metrics.
Analytics platforms aggregate the collected data, providing us with insights into user behavior and website performance. This aggregated data is used for understanding audience demographics, popular content, and areas that may need improvement.
b. Marketing and Tracking (including Re-Marketing)
We may collect and use your personal data to send you marketing communications, including product updates, promotional offers, and newsletters. We also carry out digital marketing activities including retargeting. Retargeting, also known as remarketing, means showing targeting ads to users who have previously interacted with our Website or digital content but did not complete a desired action, such as making a purchase.
When a user visits our Website and takes specific actions (e.g., views a product, adds an item to the cart), a tracking pixel or cookie is placed on their device. This allows us to show targeted ads to these users as they browse other websites or social media platforms, encouraging them to return to our Website.
Additional information on third-party service providers, including information about the specific usage and provider-specific data protection aspects, is provided in below.
c. Cookies and Similar Technologies
When you visit our Website, we use cookies, or a so-called pixel-code/web beacon and similar technologies, that allow us to interact with your browsing device as follows:
- Cookies are small text files that are stored in a special memory area of your browser which enable us to identify you when you revisit our Website.
- Web beacons are tiny graphic files that contain a unique identifier that allows us to recognize user activity such as how often you have visited our Website.
- We may use direct server-side solutions and similar technologies to measure the usage of our Websites as well as the reach of our advertisements.
- Cookies and similar technology may be used for a variety of reasons such as making the Website work or show you personalized content and advertisements.
We use the following types of cookies on our Websites:
- Functional Cookies and Technologies (which are necessary to make the Website available, secure, and work properly)
- Analytics Cookies/Similar Technologies
- Marketing Cookies/Similar Technologies
- Third Party Cookies/Similar Technologies
When you first visit our Websites, you are presented with a cookie banner that gives you the option to consent to all cookies by clicking an “Accept All” button or customize your cookie preferences by clicking “Customize Cookies.”
Your cookie setting selections only apply to the specific browser and device you were using at the time you made the cookie setting selection for each specific Website. If you access our Websites from other browsers or devices, you will need to make the cookie setting selections on each browser and device for each specific Website.
For more information on specific cookies and similar technology we use on a specific Website, please see the cookie banner/notice. Functional Cookies will be used by us even you decline other types of cookies, as these are necessary for the use of the Websites. All other Cookies, as well as similar technologies, will only be used if you accept the relevant category of cookie within the cookie banner/notice. You can modify your choice at any time.
Marketing cookies are used to identify your preferences across different websites to permit us, our advertising partners, and third parties to deliver ads more tailored to you and your interests. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website to identify your interests and this information is shared with other organizations such as advertisers and third parties to deliver relevant ads on other websites.
We may use Marketing cookies to run and improve our digital marketing campaigns on our Websites and third parties’ websites, as well as to track the conversation rate of a particular digital marketing campaign. Our Websites may utilize marketing cookies, such as pixels from providers such as Google and Facebook (also known as Meta) to run and improve our digital marketing campaigns and third parties’ digital marketing campaigns and track the conversation rate of such digital marketing campaigns.
With respect to these Marketing cookies, you can exercise your California “Do Not Sell or Share My Personal Information” opt-out right by visiting the “Do Not Sell/Share My Personal Information” link at the bottom of this banner. Other U.S. states grant residents the right to opt-out of targeted advertising, and you can exercise your right to opt-out of targeted advertising by visiting the “Do Not Sell/Share My Personal Information” link at the bottom of this banner for information on how to opt-out.
d. Profiling (Based on Permission)
Profiling involves the automated processing of your Personal Data to analyze and predict your characteristics, preferences, behavior, or interests.
We offer you the option to enable profiling, which allows us to personalize your experience and provide you with tailored content. By enabling profiling, we can better understand your needs and deliver a more customized experience to enhance your experience on our Website. This includes personalizing recommendations, delivering targeted advertisements, and improving our services based on your preferences.
To create your profile, we may collect and analyze various types of data, such as your browsing history, search queries, location information, and demographic details.
Our profiling activities are based on your consent, which you can freely give or withdraw at any time. You have the right to control your data and profiling preferences. You can choose to enable or disable profiling through your account settings or privacy preferences. Additionally, you can exercise your data protection rights, which are described in Section 12 and Section 13 below.
We may share your data with trusted third parties for profiling purposes. We only do so with your consent or when necessary to provide our services. We ensure that appropriate safeguards are in place to protect your data when shared with these parties. Additional information on third-party service providers, including information about the specific usage and provider-specific data protection aspects, is provided below.
e. Cookie Handling, Tools, and Their Providers
Once you have chosen which cookies you accept/decline, you can always revisit the privacy settings by clicking on “Cookie Settings” in the bottom banner of our Website. You also can delete the cookies set manually via the respective setting in your browser.
You can find a list of the marketing and analytics tools we use below, including the tool name and type of data processing conducted by each respective tool or provider.
ii. Third Party Providers and Services We Use
a. Google
Google is providing several services which are used or can be used via our Websites. These services are provided via several brands or tools, which we describe in more detail below. In general, these services are provided by Google LLC (formerly Google Inc.), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
You can find general information on how personal data is processed when Google tools are used at the following link: https://policies.google.com/privacy.
Opt-out: To prevent the collection of usage data, Google offers a plugin for various Internet browsers: http://www.google.com/settings/ads/plugin.
To disable only interest-based ads, you can block the use of third party cookies or cookies from the "www.googleadservices.com" domain or disable interest-based ads using this link: https://support.google.com/ads/answer/2662922?hl=en-GB.
We use Google tools and services in the following specific way:
- YouTube for the presentation of videos on our Websites. If you access a page of our Website, the embedded YouTube player will establish a connection to YouTube so that the video or audio file can be transmitted and played. In the process, Personal Data may be transmitted to YouTube. We are not responsible for the processing of Personal Data by YouTube.
Information concerning the extent and purpose of the collected Personal Data, processing and utilization of Personal Data, your rights, and your data protection options vis-à-vis YouTube can be found in the privacy policy of YouTube.
- YouTube as social media provider, where we present videos on different YouTube Channels. Please see the privacy information above when using such channels.
- Google Fonts for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, the browser you are using connects to the servers of Google. This informs Google that our Website was accessed via your IP address. Your computer will use a standard font if your browser does not support web fonts.
- Google reCAPTCHA: To protect your Website interactions, such as logins or registrations, and perform risk assessments on Website users, we use Google reCAPTCHA. These assessments use cookies and collect personal information. Google may only set cookies and use personal information with users' prior consent, which can be given via the cookie banner/notice.
In certain cases, we use the reCAPTCHA service to ensure appropriate data security for the use of contact forms. This enables us to differentiate between inputs made by a natural person and those made fraudulently by machine or automated processing. The service includes the sending your IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google.
- Google Maps as service for location and mapping services. We use Google Maps to enable the location feature on our “Find your dealer” webpage to locate your nearest dealer. To enable this location feature, you must opt-in by clicking “Allow” when prompted on our “Find your dealer” webpage. Alternatively, you can locate your nearest dealer on our “Find your dealer” webpage by manually entering your address.
Another feature available to you as a user of our Websites is a map showing BSH locations worldwide. We use Google Maps to display this map. For the use of the functions of Google Maps it is necessary to store your IP address.
- Google GA4 Technology is used by us (only if you gave your cookie consent), to implement server-side tracking, a similar technology to cookies. In using that tool, we do not send usage data or similar data to Google but use the tool to send information on website use to our servers. This data is processed by us and does not allow any individual identification of you, your device, or where you use the website/service from.
- Google Tag Manager (GTM) is a tool we use that enables us to manage and deploy marketing tags on websites without code modification. Tags include analytics and tracking codes, providing insights into website performance and user behaviour. While GTM itself doesn't set cookies, tags deployed through it may use cookies for tracking.
- Google Ads & Remarketing
We use online marketing tools from Google. The cookies used in this service generally lose their validity after 30 days and are not intended to identify you personally. Google merely provides us with statistical evaluations. Google processes your information in accordance with Google's data usage policy.
Opt-out: To permanently prevent the collection of usage data, Google offers a plugin for various Internet browsers: http://www.google.com/settings/ads/plugin.
To disable interest-based ads, you can block the use of third party cookies or cookies from the "www.googleadservices.com" domain or disable interest-based ads using this link: https://adssettings.google.com/authenticated?hl=en_GB.
Interest ads can also be deactivated via the link http://www.aboutads.info/choices if the provider has joined the self-regulatory campaign "About Ads".
- Google Ad Manager: We use the online marketing tool Google Ad Manager (formerly DoubleClick). Usage data will be deleted after 540 days from the time of collection. For more information, visit https://support.google.com/admanager/answer/6022000?hl=en.
b. Medallia
Medallia Experience Orchestration is an online (re-)marketing platform provided by Medallia, Inc., 6220 Stoneridge Mall Rd, Floor 2, Pleasanton, CA 9458, USA.
We use this service to understand how visitors interact with our product registration websites (such as registerthermador.com) and on our appliance package websites (such as one-two-free.com). We use this service for our website as a marketing tool to display personalized information to you on our websites, through email campaigns, and on websites of other providers about our products that may have interested you while using our website. Medallia provides us with statistical analysis for this purpose in an anonymized, aggregated manner. This service also provides us with cross-device and cross-context usage profiles (data) to help us learn more about our website users. We do not use this data to identify you personally.
Medallia processes this data on our behalf within the framework of a data protection agreement in which we have agreed that our customers' data may only be processed on our instructions, may not be passed on to third parties and must be sufficiently technically protected. Additional information on Medallia and its data handling can be found with the following link: https://www.medallia.com/privacy-policy/.
c. Adobe
Adobe is providing several services which are used or can be used via our websites. These services are provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland ("Adobe”). You can find additional information about how Adobe Analytics cookies work and the opt-out option via the following link: http://www.adobe.com/privacy/opt-out.html.
We use the following services:
- for web analytics we use Adobe Audience Manager and Adobe Tracking as part of the Adobe Marketing Cloud. Information relating to your use of our Website is transferred to Adobe servers, analysed, and returned to us solely as cumulative data. This data allows us to identify trends in how the Website is used generally. We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address. The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected.
- for marketing and market research and to tailor our Websites and newsletters, we use Adobe Analytics cookies and/or JavaScript to collect and process usage data relating to your visit to our Websites and your use of links in the newsletter. Your usage data is collected, and a usage profile is generated using a cookie ID. The Adobe Experience Platform Launch cookie is needed to launch the Adobe Analytics cookie on our Websites. Without the Adobe Experience Platform Launch cookie, it is not technically feasible to launch the Adobe Analytics cookie. We use Adobe Analytics to collect usage data and generate usage profiles. The information relating to your use of our Websites is transferred to Adobe servers, analyzed, and solely returned to us as aggregated data. This data enables us to identify trends in how the Websites are used. We do not combine the resultant usage profiles with your name or any other Personal Data. You can find additional information about how Adobe Analytics cookies work and the opt-out option via the following link: http://www.adobe.com/privacy/opt-out.html.
- for A/B testing we use Adobe Test & Target, which works on the basis of A/B tests. This means that the person using our website is shown a different version of the website from the original (e.g., with altered design and content). Comparing both versions provides us with information about which version of our Website users prefer. When Adobe Test & Target is used, the only information relating to you that is processed cannot be used to identify you. IP anonymisation is also activated, meaning that your IP address is shortened before Adobe Test & Target carries out any further processing. We do not conflate the usage profiles resulting from this with your name or any other details that could disclose your identity, such as your e-mail address. The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected. You can also use the following link to prevent your usage data being collected: http://bsh.tt.omtrdc.net/optout.
d. Adjust
Our Websites and Home Connect app use the tracking technology “Adjust” provided by Adjust GmbH, Saarbrücker Str. 37A, 10405 Berlin, Germany ("Adjust"). You can find information about Adjust and its privacy policy at https://www.adjust.com/privacy-policy/.
When you follow links on our Websites and then launch the Home Connect app after downloading it from an app-store, Adjust processes install event data (such as the website you started the download from). This helps us understand how our users are interacting with links to optimize and analyze our app attribution model. For that analysis, Adjust uses your mobile identifier (e.g., IDFA or Google Play Services ID), and your pseudonymized (hashed) IP- and possibly MAC address. Adjust also tracks your usage frequency of the Home Connect app. You can choose at the start of the Home Connect app whether you allow tracking by Adjust or not. If you choose not to be tracked, even if you use a link on our Websites, you will not be tracked.
e. Mouseflow
We use Mouseflow to improve our Website and the services it offers. Mouseflow is provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. On our Websites we record the mouse movements and clicks of randomly selected users, whereby your IP address is anonymized. We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address. The usage data is deleted three months after the date on which it is collected.
Opt-out: Please use Mouseflow's opt-out website via the following link if you wish to prevent this usage data being collected: https://mouseflow.com/opt-out/.
f. Optimizely
To optimize user experience, A/B and multivariate tests are conducted on this Website, meaning a website user is presented with a different version of the Website from the original (e.g., changed design and content). Comparing the test versions lets us know which version of our Website users prefer. The only information relating to you that is processed for this purpose are browser details that do not identify you. We do not combine the usage profiles resulting from this with your name or any other details that could disclose your identity, such as your e-mail address.
We use a service provided by Optimizely Inc., 631 Howard Street, Suite 100, San Francisco, CA 94105, USA (“Optimizely”) for this purpose. When Optimizely is used, Cookies are sent and stored on an Optimizely server.
Opt-out: To deactivate Optimizely, visit https://www.optimizely.com/legal/opt-out/.
g. Kore AI Chat Feature
While you are visiting our Websites, you may learn more about our products and services via a Kore AI chat with one of our BSH customer service representatives and/or via automated means using Kore AI’s artificial intelligence platform. Your interaction with us via the Kore AI chat feature may be collected, recorded, and stored for customer service and quality control purposes. Prior to using the Kore AI chat feature, we will ask for and obtain your consent.
h. X Corp
X Corp, formerly Twitter, as social media provider is provided by 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
i. Pinterest
Pinterest is a social network to visually share, and discover new interests, provided by Pinterest Inc, 651 Brannan Street, San Francisco, CA 94107, USA (“Pinterest”). These cookies allow users to share pictures via Pinterest / the "Pin It" button, and Pinterest can collect statistical information about usage of their service. You will find information on data protection at Pinterest here: https://policy.pinterest.com/en/privacy-policy.
j. LinkedIn
LinkedIn is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. You will find an overview of the plugins from LinkedIn and their appearance here: https://developer.linkedin.com/plugins; you will find information on data protection at LinkedIn here: https://www.linkedin.com/legal/privacy-policy.
k. Meta
Facebook and Instagram including WhatsApp and Facebook messenger are provided by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; http://www.facebook.com/policy.php; https://help.instagram.com/519522125107875.
Meta is providing the following services:
iii. Social Media Plugins
Our Websites use social media plugins (“Plugins”) from social networks like Facebook (also known as Meta), X Corp. (formerly Twitter), LinkedIn, Youtube, Instagram, and Google+. The Plugins are identified by the respective social media logo or respective suffix (the “Button”).
If you visit a page on the website that contains Plugins, they are disabled initially. The Plugins are not enabled until you click the Button. When you enable Plugins, your browser will establish a connection to the social network server. If you are logged into the social network, it can associate your visit to our Website with your social network account. By clicking on a Button, you accept and consent to the transmission of your data to the social network.
If you do not want a social network to collect data about you via our Website, log out of the social network before visiting our site and do not click on Plugins while on our site.
To receive information about what Personal Data is collected by a social media network, how the Personal Data is processed and which data protection rights you have vis-à-vis the respective social media network, refer to the data privacy policy and/or data protection notice of the respective social media provider.
iv. Social Media Platforms
Through the social media account provided to us via a social media platform, the social media platform grants BSH the ability to generate statistical analyses that provide information about the use of our social media account, such as how many times our social media account was viewed or how many comments were posted in response to our postings on our social media account. BSH is not able to view the usage behavior of specific individuals. We can only view aggregated data (e.g., number of likes or followers) about our audience and the use of our social media account. The data of the respective user on which the analyses are based are not transmitted to us.
BSH can also set a target audience to be reached for posts we make on our social media account. The setting is based on general parameters set by the social media platform (e.g., interests) that can be used to align our content with a specific audience. This target audience function does not allow us to address or identify individual users. We use this exclusively to make content on our social media account known to a target audience and to better understand and optimize the use of our social media account.
If you contact us directly via a social media platform or interact with us in any other way and consciously transmit Personal Data to us, we store and process this Personal Data for the purposes for which you transmitted it to us (e.g., requests for assistance).
Note that BSH cannot influence the data processing (for the provision of this data upstream) by the social media provider. Each social media platform operates according to its own terms of use and privacy policy.
|
