Collection, processing and use of personal data
Processed data categories
Following data categories are processed:
• Communication data (e.g. name, e-mail, telephone, address, contact person ID)
Processing purposes and legal bases
• Global handling of pre-sales phases for initiation and increase of business relationships
(legal basis: legitimate interest on increasing new business relationships, contacting)
• Global customer administration, address management (event management)
(legal basis: fulfillment of contractual obligations, consent, legitimate interest on internal data exchange between legal entities of Bosch Rexroth)
• Global order handling and -tracking
(legal basis: fulfillment of contractual obligations)
• Global After Sales Service
(legal basis: fulfillment of contractual obligations)
• Global customer support (ticketing)
(legal basis: fulfillment of contractual obligations or pre-contractual measures)
Data transfer and storage
No personal data will be transferred to unauthorized third parties.
Your recorded data are processed within the Bosch Rexroth organization. We don´t store your data longer than necessary respectively referred to legal retention periods.
Information on joint controller towards data subjectsaccording to Art. 26 para. 2 sentence 2 GDPR
Bosch Rexroth Thailand
7/426 Moo.6 Amata City Industrial Estate
Mabyangporn
Pluak Daeng
21140 Rayong
P.O. Box: 21140
Thailand
and
the parties
which are the legal entities of Bosch Rexroth Group
(list of the joint controller can be provided on request)
What is the reason for the joint controller?
Within the global customer relationship management, the above-named parties shall cooperate closely. This also applies to the processing of your personal data. The parties have jointly determined the order in which this data will be processed at each stage of the process. They are therefore considered joint controllers for the protection of your personal data within the process stages described below (Art. 26 GDPR).
As a data subject within the meaning of the GDPR, you are entitled to the following information from the parties.
For which process stages is there joint controller?
All controller process data of data subjects or prospects collected on fairs/trade shows or other sources as social media channels, web forms and online events. All controllers share the data to generate leads/opportunities and to enable collaborating business strategies and KPIs.
What did the parties agree upon?
As part of their joint controller under data protection law, the above-mentioned parties have agreed which of them will fulfil the respective obligations under the GDPR. This applies in particular to the exercise of the rights of the data subjects (Art. 15 - 21 GDPR) and the fulfilment of the information duties pursuant to Art. 13 and 14 GDPR.
This agreement is necessary because the global customer relationship management processes personal data in different process sections and systems operated by either Bosch Rexroth Thailand or one of the parties named within the Annex 1 of the Joint Controller Agreement Global Customer Relationship Management.
Processing activity:Global Customer Relationship Management
Fulfilment of duties by:By the party you initially contacted with your request.
What does this mean for you as a data subject?
Even if there is a joint controller, the parties fulfil the data protection obligations according to their respective responsibilities for the individual processing activities as follows:
• Within the joint controller:
All parties according named within the Annex 1 of the Joint Controller Agreement
Global Customer Relationship Management are responsible for the processing of personal data.
• All parties shall make the information required under Articles 13 and 14 GDPR available to the data subjects in a precise, transparent, comprehensible and easily accessible form in clear and simple language and free of charge. Each party shall provide the other party with all necessary information from its sphere of activity.
• The parties shall inform each other immediately of any legal positions asserted by you as a data subject. They shall provide each other with all information necessary to respond to requests for information.
• As a data subject, you will always receive the information from the party that you initially contacted. Irrespective of this internal regulation, you can assert your rights against any party directly.