We, BSH Hausgeräte GmbH, Carl-Wery-Strasse 34, 81739 Munich, operate this website. Please use the contact information provided on the Company Information page to contact us.

If you get in touch with us, we will store and process the information you provide for the purpose of handling your enquiry and any follow-up questions. We are permitted to process data in this context by law (article 6(1b) of Regulation (EU) 2016/679). We will delete your information once your enquiry has been handled.

We take protecting your information very seriously. Your data is therefore processed with great care and in strict compliance with applicable data protection law. Organisational and technical security measures have been taken to protect all of our websites against the risks present in processing personal data. Our partners who support us in the provision of this website must comply with these provisions as well.

You can use all the areas of our website that are not access-protected without disclosing your identity. We log every use of our website as standard in order to remedy faults and clarify security incidents. You can find more about our log data in the section "How we process your data".

We respect your privacy. Consequently, we only process your data when we are permitted to do so. It goes without saying that you can also give us permission to process your data by opting in to data processing on our website. In other cases, we process your data because we are permitted to do so by law. If, for example, you place an order through our website, we are permitted to process your data in order to fulfil that contract. The same applies when you make use of other services on our website that require your data to be processed. We are also permitted to process your data when we have a legitimate interest in doing so. One example of this is the log data that we collect in order to ensure that our website can be operated without defects, amongst other things. In any case, we will inform you if any relevant processing of your data takes place, and your interests are taken into consideration each time that data is processed as a matter of course. In the event that you have cause for complaint, you can find your rights regarding the processing of your data in the latter section of this Data Protection Information.

The permissions we make use of, and when, are outlined in the following section. You can find more detailed information on how your data is collected, processed and used on our website (i.e. the type, scope and purpose of data processing) in the same section.

What else you should know:

Users below the age of 16 should only transmit personal data to us with the consent of their parent or legal guardian. The data protection law that applies may result in different age limits in this regard.

Our website may contain links to other websites. We have no influence over how your data is processed on these websites or their compliance with provisions on data protection. Please note any Data Protection Information they provide.

For technical reasons, each time your internet browser accesses our website it automatically sends information to our web server (i.e. log data). We store some of this information in log files, such as:

• The date of the access
• The time of the access
• The URL of the linking website
• The files accessed
• The volume of data transferred
• The browser type and version
• The operating system
• The IP address (anonymised)

Log data does not contain personal data. As a general rule, we only analyse log data in order to remedy faults in the operation of our website or clarify security incidents. We store this log data indefinitely.

It is sometimes necessary for us to collect additional personal information as well as log data in order to remedy faults or preserve evidence relating to security incidents. In these cases, we are permitted to process the log data by law (article 6(1f) of Regulation (EU) 2016/679). We delete this data once the fault has been remedied or the security incident has been clarified in full, or if the original purpose of the processing no longer exists due to other factors. In the event of a security incident, we will transmit log data to the investigating authorities on a case-by-case basis, to the extent permitted.

We always store log data separately from other data collected that relates to the use of our website.

Our website provides the option of subscribing to our newsletter. We use a double opt-in process to verify whether the owner of an e-mail address has actually registered to receive the newsletter. The newsletter is only successfully subscribed to if the owner of the e-mail address has expressly confirmed the activation of the newsletter by clicking on the link in the confirmation e-mail. We log the completion of the individual stages of the double opt-in process for evidence purposes.

If you subscribe to receive our newsletter, and therefore consent to it being sent to you, your details are solely used in order to send you the newsletter. We are permitted to process your data in this context with your consent (article 6(1a) of Regulation (EU) 2016/679). You can withdraw this consent at any time. The relevant link is included in each copy of our newsletter. We will make a note of the fact that you have unsubscribed from the newsletter in our database.

When you register for a raffle/contest, we store and use the information you provide in order to run the raffle/contest and complete any follow-ups. The data we collect for this purpose depends on the registration form on the event page in question.

Upon request, registered participants can receive information about the data they provided when registering or have any incorrect details corrected. To request this, please use the contact information provided at the end of this Data Protection Information.

We are permitted to process your data to run the raffle/contest and complete any follow-ups by law (article 6(1b) of Regulation (EU) 2016/679). Your information is deleted once it is no longer required to run the raffle/contest or complete any follow-ups.

(1) Analytics

Analytics refers to the process of collecting, processing, and analysing data to gain insights and make decisions. For us, it's like examining patterns and trends to better understand how our products and services are used by you. This insight allow us to make our products and services more user-friendly. It also enables us to identify areas for improvement and innovation in our products and services. Our websites integrate with analytics platforms (e.g., Adobe Analytics). These platforms provide JavaScript code that is added to the website. This code interacts with cookies or similar technologies to collect data when users interact with our website. As users navigate the website, the analytics code collects data from the cookies/pixels. This data we collect includes information on page views, clicks, time spent on pages, and other relevant metrics.

Analytics platforms aggregate the collected data, providing us with insights into user behaviour and website performance. This aggregated data is used for understanding audience demographics, popular content, and areas that may need improvement.

(2) Marketing and Tracking (including Re-Marketing)

We may collect and use your personal data to send you relevant marketing communications. These communications could include product updates, promotional offers, and newsletters. You can easily manage your communication preferences and opt out if desired.

We also carry out digital marketing activities including retargeting. Retargeting, also known as remarketing, means showing targeting ads to users who have previously interacted with Our website or digital content but did not complete a desired action, such as making a purchase.

When a user visits our website and takes specific actions (e.g., views a product, adds an item to the cart), a tracking pixel or cookie is placed on their device. This allows us to show targeted ads to these users as they browse other websites or social media platforms, encouraging them to return to our website.

Please see Section (6) for more information on the providers including information about the specific usage and additional information on provider-specific data protection aspects.

(3) Cookies and similar Technologies

When you visit our website cookies or a so-called pixel-code/web beacon as well as similar technologies can be used by us. These technologies will allow us to interact with your browsing device as follows:

• Cookies are small text files that are stored in a special memory area of your browser which enable us to identify you when you revisit our website.

• Web beacons are tiny graphic files that contain a unique identifier that allows us to recognize user activity such as how often you have visited our website.

• We may also use direct server side solutions and similar technologies to measure the usage of our websites as well as the reach of our advertisements.

• Cookies and similar technology may be used for a variety of reasons such as making the website work or show you personalized content and advertisement.

(4) Profiling (based on Permission)

We offer you the option to enable profiling, which allows us to personalize your experience and provide you with tailored content. We want to ensure transparency and give you control over how your personal data is used. Profiling involves the automated processing of your personal data to analyse and predict your characteristics, preferences, behaviour, or interests.

By enabling profiling, we can better understand your needs and deliver a more customized experience based on such information and to enhance your experience on our website. This includes personalizing recommendations, delivering targeted advertisements, and improving our services based on your preferences.

To create your profile, we may collect and analyse various types of data, such as your browsing history, search queries, location information, and demographic details. You can find a comprehensive list of the data categories we utilize if you agreed in profiling in Section XIV, located at the end of this document. Rest assured that we handle your data with utmost care and in accordance with applicable data protection laws.

Our profiling activities are based on your consent, which you can freely give or withdraw at any time. We also rely on our legitimate interests in providing you with a tailored and relevant experience. You have the right to control your data and profiling preferences. You can choose to enable or disable profiling through your account settings or privacy preferences. Additionally, you can exercise your data protection rights, including the right to access, rectify, or delete your personal data at any time.

We may share your data with trusted third parties for profiling purposes. However, we only do so with your explicit consent or when necessary to provide our services. We ensure that appropriate safeguards are in place to protect your data when shared with these parties.

Please see Section (6) for more information on the providers including information about the specific usage and additional information on provider-specific data protection aspects.

(5) Cookie Handling, Tools and their providers

You can find a comprehensive list of the marketing and analytics tools we utilize in Section (6), located at the end of this document. This section not only provides the names of the tools but also describes the type of data processing conducted by each respective tool or provider.

(6) List of the Third party providers and their use

• Facebook and Instagram including WhatsApp and Facebook messenger is provided by the following entities:

• for countries in the European region: Meta Platforms Ireland Limited, Merrion Road Dublin 4 D04 X2K5, Ireland
• for other countries: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025,USA; http://www.facebook.com/policy.php; https://help.instagram.com/519522125107875

• Meta is providing the following services:

• as social media provider
• providing chat functionality via WhatsApp and Facebook Messenger
• Facebook Pixels and Custom Audiences, where For Facebook Pixels and Custom Audiences, Facebook processes your data under a joint responsibility with us, in accordance with the contract we concluded with Facebook on our joint responsibility. We do not have access to your individual tracking data processed by Facebook as Facebook provides us with aggregated data only. We may share this aggregated data with third parties, e.g. cooperation partner for marketing purposes.The essence of this contract is available here: https://www.facebook.com/legal/controller_addendum
• You can find information about Facebook ads and Facebook pixels with the following links: https://www.facebook.com/policy and https://www.facebook.com/business/help/651294705016616
• To permanently prevent the collection of usage data, please use the following link: https://www.facebook.com/policies/cookies/
• As a registered Facebook user, you can also set what types of ads are displayed to you within Facebook, use the following link: https://www.facebook.com/settings/?tab=ads

• Adobe is providing several services which are used or can be used via our websites. These services are provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland ("Adobe”). You can find additional information about how Adobe Analytics cookies work and the opt-out option via the following link: http://www.adobe.com/privacy/opt-out.html We use the following services:

• for web analytics we use Adobe Audience Manager und Adobe Tracking being part of the Adobe Marketing Cloud: The information relating to your use of our website is transferred to Adobe servers, analyzed and solely returned to us as cumulative data. This data allows us to identify trends in how the website is generally used. We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address. The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected.

• for A/B testing we use Adobe Test & Target: Adobe Test & Target works on the basis of A/B tests. This means that the person using our website is shown a different version of the website from the original (e.g. with altered design and content). Comparing both versions provides us with information about which version of our website is preferred by users. When Adobe Test & Target is used, the only information relating to you that is processed cannot be used to identify you. IP anonymisation is also activated, meaning that your IP address is shortened before Adobe Test & Target carries out any further processing. We do not conflate the usage profiles resulting from this with your name or any other details that could disclose your identity, such as your e-mail address. The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected. You can also use the following link if you wish to prevent your usage data being collected: http://bsh.tt.omtrdc.net/optout

Google is providing several services which are used or can be used via our websites. These services are provided via several brands or tools, which we describe in more detail below. In general these services are provided by the following entities:

• for countries of the European Union (EU), the European Economic Area (EEA) and Switzerland: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

• for other countries including UK: Google LLC (formerly Google Inc.), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

You can find general information on how personal data is processed when Google tools are used via the following link https://policies.google.com/privacy. Opt-out: To permanently prevent the collection of usage data, Google offers a plugin for various Internet browsers: http://www.google.com/settings/ads/plugin. To disable only interest-based ads, you can block the use of third party cookies or cookies from the "www.googleadservices.com" domain or disable interest-based ads using this link at https://support.google.com/ads/answer/2662922?hl=en-GB

We are using the following Google tools in the following specific way:

• YouTube for the presentation of videos on our websites. If you declined the use of cookies via the cookie banner, you may be ask to consent separately for consent before the display of such videos on our website. Only if you consented, any possible data transfer will start.

• YouTube as social media provider, where we present videos on different YouTube Channels. Please see the privacy information stated above when using such channels.

• Google reCAPTCHA: In order to protect your website interactions, such as logins or registrations, it performs risk assessments on website users, we use Google reCAPTCHA for these purposes. These assessments use cookies and collect personal information. However, Google may only set cookies and use personal information with users' prior consent, which can be given via the Cookie Layer.

• Google Maps as service for location and mapping services, whereby only such data is used, you provide in using that service. A proximate location is used to show e.g. partners near your location or verify the postal code for service requests.

• Google GA4 Technology is used by us (only if you gave your cookie consent), to implement server side tracking as similar technology to cookies. In using that tool, we do not send usage data or similar data to Google, but use the tool to send information of the website use to our servers. This data is processed by us and does not allow any individual identification of you or your device, you use the website/service from.

• Google Tag Manager (GTM) is a tool used by us enabling us to manage and deploy marketing tags on websites without code modification. Tags include analytics and tracking codes, providing insights into website performance and user behaviour. While GTM itself doesn't set cookies, tags deployed through it may use cookies for tracking.

• We use online marketing tools from Google on our own responsibility. The cookies used in this service generally lose their validity after 30 days and are not intended to identify you personally. Google merely provides us with statistical evaluations. Google processes your information in accordance with Google's data usage policy.
• Opt-out: To permanently prevent the collection of usage data, Google offers a plugin for various Internet browsers: http://www.google.com/settings/ads/plugin. To disable interest-based ads, you can block the use of third party cookies or cookies from the "www.googleadservices.com" domain or disable interest-based ads using this link at https://adssettings.google.com/authenticated?hl=en_GB
• Interest ads can also be deactivated via the link http://www.aboutads.info/choices if the provider has joined the self-regulatory campaign "About Ads".

• Google Ad Server We use online marketing tool (formerly DoubleClick) of Google. The usage data will be deleted after 540 days from the time of collection. For more information about DoubleClick, please visit https://support.google.com/admanager/answer/6022000?hl=en, We use online marketing tools from Google on our own responsibility. To this end, we have agreed with Google in a data protection agreement that our customers' data may only be processed on the basis of our instructions, may not be passed on to third parties and must be sufficiently technically protected.

We use web analytics tools for various purposes on our website. You can find information on the web analytics tools we use below, including a description of the data processing in question, the purposes of that processing and how you can prevent the web analytics tool from collecting and processing your data. Please note that placing opt-out cookies can only prevent the collection and processing of your data by web analytics tools to a limited extent. You can find more information about this in the section on cookies.

Web analytics tool: Adobe Analytics (Omniture)

In order to carry out marketing and market research and tailor our website (and potentially newsletter) appropriately, we use analytics cookies and/or JavaScript to collect and process usage data relating to your visit to our website and your use of links in the newsletter (if applicable). Your usage data is collected and a usage profile is generated from this data on a pseudonymised basis, using a cookie ID. Your IP address is either not recorded or is anonymised immediately after recording as part of this.

We use the Adobe Analytics service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland ("Adobe") to collect the usage data and generate the usage profiles. The information relating to your use of our website is transferred to Adobe servers, analysed and solely returned to us as cumulative data. This data allows us to identify trends in how the website is generally used.

We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address. We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected.

Opt-out: Please use Adobe's opt-out website if you wish to prevent your usage data being collected. You can find information about how Adobe Analytics cookies work and the opt-out option via the following link: http://www.adobe.com/de/privacy/opt-out.html.

Web analytics tool: Adobe Test & Target

In order to tailor our website (and newsletter) appropriately, we collect and process usage data relating to your visit to our website using analytics cookies and/or JavaScript. Your usage data is collected and a usage profile generated from this data on a pseudonymised basis using a cookie ID.

We use the Adobe Test & Target service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland ("Adobe") to collect your usage data and generate the usage profiles.

Adobe Test & Target works on the basis of A/B tests. This means that the person using our website is shown a different version of the website from the original (e.g. with altered design and content). Comparing both versions provides us with information about which version of our website is preferred by users. When Adobe Test & Target is used, the only information relating to you that is processed cannot be used to identify you. IP anonymisation is also activated, meaning that your IP address is shortened before Adobe Test & Target carries out any further processing. We do not conflate the usage profiles resulting from this with your name or any other details that could disclose your identity, such as your e-mail address.

We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). The usage data is stored by the service used for a maximum duration of 37 months from the date on which it was collected.

Opt-out: Please use the following link if you wish to prevent your usage data being collected: http://bsh.tt.omtrdc.net/optout. You can find information about how Adobe Test & Target cookies work and the opt-out option via the following link: http://www.adobe.com/de/privacy/opt-out.html.

Mouseflow

To improve our website and the services it offers, we record the mouse movements and clicks of randomly selected users of our website, whereatyour IP address is anonymised.

We use service provider Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark for the purpose of collecting this usage data.

We do not conflate the resultant usage profiles with your name or any other details that could disclose your identity, such as your e-mail address.. The usage data is deleted three months after the date on which it is collected.

Opt-out: Please use Mouseflow's opt-out website via the following link if you wish to prevent this usage data being collected: https://mouseflow.com/opt-out/

Content from our website can be shared on social networks using integrated social media buttons. All social media buttons that facilitate the sharing of content are integrated using simple hyperlinks rather than social plugins developed by social network providers. This ensures that your details are not automatically transmitted to social network servers as soon as you access our website. In addition, when you share content from our website we only transmit the information to the social network that is required to share the relevant content. We do not transfer personal data in this context.

At the same time, simple links to our websites on social networks can be found as well. If you follow a link from our website to a social network, or if you log in to your social network in order to share content from our website, your data is processed by the provider of the social network in question. For information about the purpose and scope of data collection, further processing and use by the social network provider, as well as your associated rights and settings options for protecting your privacy, please refer to the Data Protection Information made available by the respective provider.

We work together with a number of service providers to implement and operate our website. We have chosen these service providers carefully and concluded a data protection agreement with each individual service provider to keep your information safe.

The service providers we use to implement and operate our website are:

• Service provider for hosting services
• Service provider for programming services
• Service provider for sales and marketing services
• Service provider for hotline services

We only transmit your data to other recipients where necessary to fulfil a contract with you, where we or the recipient has a legitimate interest in the disclosure of your data, or where you have given your consent to that transmission. These recipients include service providers and other companies within our corporate group. Furthermore, data may be transmitted to other recipients in the event that we are obliged to do so due to legal provisions or enforceable administrative or court orders.

Other recipients of your data are:

• Forwarding agents for delivering/collecting products
• Payment processing service providers
• Receivables management service providers

We also transmit personal data to recipients based outside of the EEA, in so-called third countries. In this case, we ensure ‒ before any data is shared ‒ that either an appropriate level of data protection is maintained by the recipient (e.g. on the basis of an adequacy decision made by the EU Commission for the respective country or the agreement of standard EU contractual clauses between the European Union and the recipient) or that you have given your consent to said sharing.

We are happy to provide you with an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure an appropriate level of data protection. To request this, please use the contact information provided at the end of this Data Protection Information.

Should you have cause for complaint, you can find an outline of your rights below. To exercise your rights, please use the contact information provided at the end of this Data Protection Information.

We will provide you with information about the data we hold about you on request.

We will correct inaccurate information about you if you notify us accordingly. We will complete incomplete data if you notify us accordingly, provided this data is necessary for the intended purpose of processing your data.

We will delete the information we hold about you on request. However, some data will only be deleted subject to a defined period of retention, for example because we are required to retain the data by law in some cases, or because we require the data to fulfil our contractual obligations to you.

In certain legally determined cases, we will block your data if you would like us to do so. Blocked data is only further processed to a very limited extent.

You can withdraw consent given for your data to be processed with effect for the future at any time. The legality of processing your data remains unaffected by this up to the point at which your consent is withdrawn.

You can object to the processing of your data with effect for the future at any time, if we are processing your data on the basis of one of the legal justifications set out in article 6(1e or 1f) of Regulation (EU) 2016/679. In the event that you object we will cease processing your data, provided that there are no compelling and legitimate grounds for further processing. The processing of your data for the purposes of direct marketing never constitutes compelling and legitimate grounds for us.

At your request, we can make certain information available to you in a structured, commonly used and machine-readable format.

You can lodge an appeal pertaining to data protection with a data protection authority. To do so, contact the data protection authority responsible for your place of residence or the data protection authority under whose jurisdiction we fall (named below).

Bavarian Data Protection Authority (BayLDA), www.baylda.de.

If you have any questions relating to data protection or exercising your rights, you can use the following contact information to get in touch with our data protection officer directly:

BSH Hausgeräte GmbH
Data Protection Officer
Carl-Wery-Str. 34
81739 Munich, Germany

Data-Protection-XX@bshg.com

This Data Protection Information reflects the current state of data processing on our website. In the event of changes to data processing, this Data Protection Information will be updated accordingly. We always provide the latest version of this Data Protection Information on our website so that you can find out about the scope of data processing on our website.