Data Protection Information

We and our partners employ the latest technical safeguards to protect your data
We take protecting your information very seriously. Your data is therefore processed with great care and in strict compliance with applicable data protection law. Organisational and technical security measures have been taken to protect all of our websites against the risks present in processing personal data. Our partners who support us in the provision of this website must comply with these provisions as well.

About us and our website
We, BSH Home Appliances Limited of Grand Union House, Old Wolverton Road, Wolverton, Milton Keynes, MK12 5PT, United Kingdom, operate this website. Please use the contact information provided on the Contact Us page to contact us.
If you get in touch with us, we will store and process the information you provide for the purpose of handling your enquiry and any follow-up questions. We are permitted to process data in this context by law (article 6(1b) of Regulation (EU) 2016/679). We will delete your information once your enquiry has been handled.

1. Introduction and general information

What we log as standard
You can use all the areas of our website that are not access-protected without disclosing your identity. We log every use of our website as standard in order to remedy faults and clarify security incidents. You can find more about our log data in the section "How we process your data".

Which permissions do we have to process your data

We only process your data when we are permitted to do so
We respect your privacy. Consequently, we only process your data when we are permitted to do so. It goes without saying that you can also give us permission to process your data by opting in to data processing on our website. In other cases, we process your data because we are permitted to do so by law. If, for example, you place an order through our website, we are permitted to process your data in order to fulfil that contract. The same applies when you make use of other services on our website that require your data to be processed. We are also permitted to process your data when we have a legitimate interest in doing so. One example of this is the log data that we collect in order to ensure that our website can be operated without defects, amongst other things. In any case, we will inform you if any relevant processing of your data takes place, and your interests are taken into consideration each time that data is processed as a matter of course. In the event that you have cause for complaint, you can find your rights regarding the processing of your data in the latter section of this Data Protection Information.
The permissions we make use of, and when, are outlined in the following section. You can find more detailed information on how your data is collected, processed and used on our website (i.e. the type, scope and purpose of data processing) in the same section.

What else you should know:
Users below the age of 16 should only transmit personal data to us with the consent of their parent or legal guardian. The data protection law that applies may result in different age limits in this regard. Our website may contain links to other websites. We have no influence over how your data is processed on these websites or their compliance with provisions on data protection. Please note any Data Protection Information they provide.

2. Data processing on the website

How we process your data (logs, cookies, tracking, etc.)

We use log data to remedy faults or to clarify security incidents

Log data
For technical reasons, each time your internet browser accesses our website it automatically sends information to our web server (i.e. log data). We store some of this information in log files, such as:
• The date of the access
• The time of the access
• The URL of the linking website
• The files accessed
• The volume of data transferred
• The browser type and version
• The operating system
• The IP address (anonymised)

Log data does not contain personal data. As a general rule, we only analyse log data in order to remedy faults in the operation of our website or clarify security incidents. We store this log data indefinitely.
It is sometimes necessary for us to collect additional personal information as well as log data in order
to remedy faults or preserve evidence relating to security incidents. In these cases, we are permitted to process the log data by law (article 6(1f) of Regulation (EU) 2016/679). We delete this data once the fault has been remedied or the security incident has been clarified in full, or if the original purpose of the processing no longer exists due to other factors. In the event of a security incident, we will transmit log data to the investigating authorities on a case-by-case basis, to the extent permitted.
We always store log data separately from other data collected that relates to the use of our website.

Registering on our website

Registered users can access additional services and offers
You can register as a user on our website. Registration is required if you wish to access additional services. We collect and process the following details as part of the registration process:

Required details:
• Title
• First and last name
• Full postal address
• Telephone number
• E-mail address
• Password

Optional details:
• Mobile phone number
• Date of birth
• What made you find us
• Consent to receiving advertising.

We are permitted to process your personal information in order to provide personalised services by law (article 6(1b) of Regulation (EU) 2016/679). We store registered users' data until the user deletes their account. Users with the relevant authorisation can delete their account at any time through their user account. The user account also allows users to change or delete specific information provided at the time of registration at any time.
It goes without saying that we will provide you with information about the data we hold about you on request. We will also be happy to correct inaccurate information or delete information we hold about you on request, provided that said deletion is not prohibited under the terms of our legal obligations to retain certain information. To request this, please use the contact information provided at the end of this Data Protection Information.

Purchasing on our website

Your data is also secured by state-of-the-art encryption techniques when you make a purchase
You can also use our website to access services requiring payment (e.g. orders in the accessories store). We collect and process the following order information when services are ordered:

Required information (unregistered users)
• Title
• First and last name
• Full postal address
• Telephone number
• E-mail address
• Billing information (depending on the payment type allowed by us and chosen by the user)

Optional information (unregistered users):
• Landline phone number
• Mobile phone number

Required information (registered users)
• Billing information (depending on the payment type allowed by us and chosen by the user)
• Date and amount of all purchases (display showing the history of previous purchases in the user account)

We use state-of-the-art encryption techniques (e.g. SSL) via HTTPS to guarantee the security of your data during transmission.
When you place an order, we use your information for the sole purpose of processing that order. We are permitted to do so by law (article 6(1b) of Regulation (EU) 2016/679). We store order information at least until the expiry of the statutory retention periods. We store data provided when registering until the user deletes their account.

Newsletter

We use a double opt-in process to protect your e-mail address against misuse by third parties
Our website provides the option of subscribing to our newsletter. We use a double opt-in process to verify whether the owner of an e-mail address has actually registered to receive the newsletter. The newsletter is only successfully subscribed to if the owner of the e-mail address has expressly confirmed the activation of the newsletter by clicking on the link in the confirmation e-mail. We log the completion of the individual stages of the double opt-in process for evidence purposes.
If you subscribe to receive our newsletter, and therefore consent to it being sent to you, your details are solely used in order to send you the newsletter. We are permitted to process your data in this context with your consent (article 6(1a) of Regulation (EU) 2016/679). You can withdraw this consent at any time. The relevant link is included in each copy of our newsletter. We will make a note of the fact that you have unsubscribed from the newsletter in our database.

Participation in special events

Your details stay in good hands if you participate in one of our exciting events
When you register for an event, we store and use the information you provide in order to run the event and complete any follow-ups. The data we collect for this purpose depends on the registration form on the event page in question.
Upon request, registered participants can receive information about the data they provided when registering or have any incorrect details corrected. To request this, please use the contact information provided at the end of this Data Protection Information.
We are permitted to process your data to run the event and complete any follow-ups by law (article 6(1b) of Regulation (EU) 2016/679). Your information is deleted once it is no longer required to run the event or complete any follow-ups.

Cookies

Our website uses cookies to provide you with certain functionalities
We use cookies. Cookies are small text files which we store on your device when you visit our website. These cookies are sent back to us every time you access our website subsequently. This allows us to recognise you, for example, or makes navigating our website easier for you thanks to the information stored in the cookies.
Cookies cannot be used to run programs or transfer viruses to a computer. Cookies can only be read by the web server they originate from.
We do not share the information stored in the cookies with third parties without your express permission.
You can also view our website without cookies. Internet browsers are often configured to accept cookies. To prevent your internet browser from using cookies, you can (1) opt out of the use of cookies when you access our website using the cookie layer (if available) or (2) disable cookie use via the settings in your internet browser. The help functions in your browser can show you how to disable and/or delete cookies in your internet browser. Please note that disabling/deleting cookies may result in individual functions on our website no longer working as expected. Cookies that may be required for certain functions on our website are set out below. In addition, disabling/deleting cookies will only affect the internet browser used to do so. Disabling/deleting cookies must therefore be repeated for any other internet browsers accordingly.

Cookies that we use for specific functions, without references to individuals:
• Cookies that store certain user preferences (e.g. search or language settings)
• Cookies that store information in order to guarantee flawless playback of video or audio content
• Cookies that temporarily store certain user entries (e.g. the contents of a shopping basket or online form)

Cookies that we use for specific functions, with references to individuals:
• Cookies that serve to identify or authenticate our users

We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). We store this data until the cookie in question expires or until you delete it.
Any further processing of personal data using cookies is outlined in the relevant sections within this information.

Web analytics using pseudonymised user profiles

Your visit can tell us a lot about how appealing our website is ‒ this is why we use web analytics tools to continuously improve our website
We use web analytics tools for various purposes on our website. You can find information on the web analytics tools we use below, including a description of the data processing in question, the purposes of that processing and how you can prevent the web analytics tool from collecting and processing your data. Please note that placing opt-out cookies can only prevent the collection and processing of your data by web analytics tools to a limited extent. You can find more information about this in the section on cookies.

Web analytics tool: Adobe Analytics (Omniture)

In order to carry out marketing and market research and tailor our website (and potentially newsletter) appropriately, we use analytics cookies and/or JavaScript to collect and process usage data relating to your visit to our website and your use of links in the newsletter (if applicable). Your usage data is collected and a usage profile is generated from this data on a pseudonymised basis, using a cookie ID. Your IP address is either not recorded or is anonymised immediately after recording as part of this.
We use the Adobe Analytics service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland ("Adobe") to collect the usage data and generate the usage profiles. The information relating to your use of our website is transferred to Adobe servers, analysed and solely returned to us as cumulative data. This data allows us to identify trends in how the website is generally used.
We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address. We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected.

Opt-out: Please use Adobe's opt-out website if you wish to prevent your usage data being collected. You can find information about how Adobe Analytics cookies work and the opt-out option via the following link: http://www.adobe.com/de/privacy/opt-out.html.

Web analytics tool: Adobe Test & Target
In order to tailor our website (and newsletter) appropriately, we collect and process usage data relating to your visit to our website using analytics cookies and/or JavaScript. Your usage data is collected and a usage profile generated from this data on a pseudonymised basis using a cookie ID.
We use the Adobe Test & Target service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland ("Adobe") to collect your usage data and generate the usage profiles.
Adobe Test & Target works on the basis of A/B tests. This means that the person using our website is shown a different version of the website from the original (e.g. with altered design and content). Comparing both versions provides us with information about which version of our website is preferred by users. When Adobe Test & Target is used, the only information relating to you that is processed cannot be used to identify you. IP anonymisation is also activated, meaning that your IP address is shortened before Adobe Test & Target carries out any further processing. We do not conflate the usage profiles resulting from this with your name or any other details that could disclose your identity, such as your e-mail address.
We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected.

Opt-out: Please use the following link if you wish to prevent your usage data being collected: http://bsh.tt.omtrdc.net/optout. You can find information about how Adobe Test & Target cookies work and the opt-out option via the following link: http://www.adobe.com/de/privacy/opt-out.html.

Web analytics tool: ChannelSight
You can purchase a large number of our products directly via the corresponding hyperlinks to cooperating dealers' online stores ("Go to dealer's website"). We use tracking pixels and cookies (i.e. conversion tracking) to log when you are redirected to the respective product page in the dealer's online store, as well as whether or not you purchase the product in the dealer's online store. The usage data collected in this way is used to gauge the appeal of the "Go to dealer's website" function and, where applicable, for commission settlement purposes with the dealer's online store (i.e. affiliate marketing). Sometimes dealers' online stores pay us a commission when we successfully redirect prospective buyers and customers to them.
We use the service provider ChannelSight Ltd., Suite 3, Anglesea House, Carysfort Ave., Blackrock, Co. Dublin, Ireland (www.channelsight.com) for tracking purposes. The information relating to your use of the "Go to dealer's website" function is transmitted to ChannelSight servers, analysed and solely returned to us as cumulative data, which illustrates trends relating to use of the "Go to dealer's website" function.
Please note that the aforementioned tracking is directly connected to the "Go to dealer's website" function. By using the "Go to dealer's website" button on our website, you give your consent to tracking for the indicated purposes, and in particular to the associated data collection by ChannelSight and the dealer, as well as the transfer of data from ChannelSight and the dealer to us. We are permitted to process your information in this context with your consent (article 6(1a) of Regulation (EU) 2016/679). The usage data is deleted once it is no longer required for commission settlement and analysis.

Opt-out: If you no longer want tracking to take place, delete the cookies placed by our website (via the settings in your internet browser) and do not use the "Go to dealer's website" button again. You can manually visit the respective dealer's online store by entering their address in your browser or by using a search engine.

Web analytics tool: Mouseflow

In order to help us design our website appropriately, we may collect usage data relating to your visit to our website using analytics cookies and other technologies. As part of this, we record the mouse movements and clicks of randomly selected users of our website. Your IP address is anonymised as a matter of course. The resultant log of your use of our website is randomly analysed so that we can derive potential improvements for our website from it.
We use service provider Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark for the purpose of collecting this usage data.
We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address. We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). The usage data is deleted three months after the date on which it is collected.

Opt-out: Please use Mouseflow's opt-out website via the following link if you wish to prevent this usage data being collected: https://mouseflow.de/opt-out.

Sharing content on social networks

Share content from our website on social networks without compromising your data
Content from our website can be shared on social networks using integrated social media buttons. All social media buttons that facilitate the sharing of content are integrated using simple hyperlinks rather than social plugins developed by social network providers. This ensures that your details are not automatically transmitted to social network servers as soon as you access our website. In addition, when you share content from our website we only transmit the information to the social network that is required to share the relevant content. We do not transfer personal data in this context.
At the same time, simple links to our websites on social networks can be found as well. If you follow a link from our website to a social network, or if you log in to your social network in order to share content from our website, your data is processed by the provider of the social network in question. For information about the purpose and scope of data collection, further processing and use by the social network provider, as well as your associated rights and settings options for protecting your privacy, please refer to the Data Protection Information made available by the respective provider.

Dealer locator using Google Maps

One feature available to you as a user of our website is a map showing cooperating dealers in your area. We use Google Maps to display this map. Google Maps is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find details on how personal data is processed when Google Maps is used via the following link:
http://www.google.de/intl/de/policies/privacy/
If you wish to display cooperating dealers in your area you will need to specify a location, either by entering your location manually or having it determined by the geolocation function on your internet browser automatically. Personal data is not processed if you enter this information manually, provided you do not specify your home address. Automatic location identification using the geolocation function on an internet browser requires your IP address to be processed. We are permitted to process your information in this context with your consent (article 6(1a) of Regulation (EU) 2016/679), which your internet browser requests when you access the map. We do not store your IP address in this context.

Cases where we transmit your data

All service providers who process your data in conjunction with our website are carefully selected and obliged to meet data protection standards
We work together with a number of service providers to implement and operate our website. We have chosen these service providers carefully and concluded a data protection agreement with each individual service provider to keep your information safe.
The service providers we use to implement and operate our website are:
• Service provider for hosting services
• Service provider for programming services
• Service provider for sales and marketing services
• Service provider for hotline services

We only transmit your data to other recipients where necessary to fulfil a contract with you, where we or the recipient has a legitimate interest in the disclosure of your data, or where you have given your consent to that transmission. These recipients include service providers and other companies within our corporate group. Furthermore, data may be transmitted to other recipients in the event that we are obliged to do so due to legal provisions or enforceable administrative or court orders.
Other recipients of your data are:
• Forwarding agents for delivering/collecting products
• Payment processing service providers
• Receivables management service providers

Transmission to recipients outside the EEA

We only transmit your data to recipients outside the EU when data protection is guaranteed
We also transmit personal data to recipients based outside of the EEA, in so-called third countries. In this case, we ensure ‒ before any data is shared ‒ that either an appropriate level of data protection is maintained by the recipient (e.g. on the basis of an adequacy decision made by the EU Commission for the respective country or the agreement of standard EU contractual clauses between the European Union and the recipient) or that you have given your consent to said sharing.
We are happy to provide you with an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure an appropriate level of data protection. To request this, please use the contact information provided at the end of this Data Protection Information.

User rights
To ensure complete control over your information, you have a comprehensive set of rights that you can use to manage how we process your data

3. Your rights
Should you have cause for complaint, you can find an outline of your rights below. To exercise your rights, please use the Customer Data Request Web form on https://datarequest.bsh-group.com

Your right to information about your data
We will provide you with information about the data we hold about you on request.

Your right to correct and complete your data
We will correct inaccurate information about you if you notify us accordingly. We will complete incomplete data if you notify us accordingly, provided this data is necessary for the intended purpose of processing your data.

Your right to delete your data
We will delete the information we hold about you on request. However, some data will only be deleted subject to a defined period of retention, for example because we are required to retain the data by law in some cases, or because we require the data to fulfil our contractual obligations to you.

Your right to have your data blocked
In certain legally determined cases, we will block your data if you would like us to do so. Blocked data is only further processed to a very limited extent.

Your right to withdraw consent
You can withdraw consent given for your data to be processed with effect for the future at any time. The legality of processing your data remains unaffected by this up to the point at which your consent is withdrawn.

Your right to object to the processing of your data
You can object to the processing of your data with effect for the future at any time, if we are processing your data on the basis of one of the legal justifications set out in article 6(1e or 1f) of Regulation (EU) 2016/679. In the event that you object we will cease processing your data, provided that there are no compelling and legitimate grounds for further processing. The processing of your data for the purposes of direct marketing never constitutes compelling and legitimate grounds for us.

Your right to data portability
At your request, we can make certain information available to you in a structured, commonly used and machine-readable format.

Your right to appeal to a regulatory authority
You can lodge an appeal pertaining to data protection with a data protection authority. To do so, contact the data protection authority responsible for your place of residence or the data protection authority under whose jurisdiction we fall (named below).

Bavarian Data Protection Authority (BayLDA), www.baylda.de.

Your point of contact for all questions relating to data protection

Please do not hesitate to contact our data protection officer if you have questions relating to data protection
If you have any questions relating to data protection or exercising your rights, you can use the following contact information to get in touch with our data protection officer directly:
BSH Hausgeräte GmbH
Data Protection Officer
Carl-Wery-Str. 34
81739 Munich, Germany
Data-Protection-GB@bshg.com

Changes to this Data Protection Information
This Data Protection Information reflects the current state of data processing on our website. In the event of changes to data processing, this Data Protection Information will be updated accordingly. We always provide the latest version of this Data Protection Information on our website so that you can find out about the scope of data processing on our website.

Valid from: 26.03.2018
Version: DPI_1.0_1.0