Responsible for the internet pages of Robert Bosch Korea Limited Company

HQ & Technical Center
567, Shinsu-ro, Giheung-gu, Yongin-si, Gyeonggi-do, Korea
16923

Daejeon Plant
(Shinil-dong) 5, Sinilseo-ro, Daedeok-gu, Daejeon, Korea
34325

Names of authorized representatives
Frank Schaefers

Telephone number
+82-2-1599-3567

Email address
Contact@kr.bosch.com

Court of Record
Daejeon district court

VAT ID No
314-81-70874

Legal Note Robert Bosch Korea Limited Company

© Copyright

All rights reserved. Text, images, graphics, sound, animations, and videos as well as the arrangement of the same on Bosch websites are protected by copyright and other commercial protective rights. The content of these websites may not be copied, disseminated, altered, or made accessible to third parties for commercial purposes. In addition, some Bosch websites contain images that are subject to third-party copyrights.

Trademark information

Unless specified otherwise, all trademarks on Bosch websites are protected by trademark law. This applies in particular to Bosch brands, nameplates, company logos, and emblems. The brands and design elements used on our pages are the intellectual property of Robert Bosch GmbH, Germany, and Robert Bosch Korea Limited Company.

Warranty information

This website was compiled with the utmost care. Nonetheless, the accuracy or correctness of the information contained cannot be guaranteed. Any liability for damage resulting directly or indirectly from use of this website is precluded, unless caused intentionally or in gross negligence by Bosch.

Licence information

The intellectual property contained in the Bosch website such as patents, marks, and copyrights is protected. This website does not grant a licence for utilising the intellectual property of companies of the Bosch Group (Bosch) or third parties.

1 General provisions

Robert Bosch Korea Limited Company (hereinafter “the Company”) establish, implement and comply with the Privacy Policy (hereinafter “this Privacy Policy”) in an effort to proactively protect the personal information of the principal of information (hereinafter “Principal”) processed by the Company and to protect the information and the rights of the Principal and to smoothly address the grievance suffered by the Principal related to the personal information pursuant to the Personal Information Protection Act (hereinafter “PIPA”). This Privacy Policy is subject to change pursuant to relevant laws, regulations and rules and the Company’s internal operation policies, in which case the changes made to this Privacy Policy will be disclosed in accordance with the methods stipulated by relevant laws and regulations.

This Privacy Policy is put into force from July 31, 2017.

2 Purposes of processing personal information and items of personal information to be processed

Purposes of processing Items of personal information	Items of personal information
Execution and performance of contract Identification of the contracting party; determination of whether to execute a contract; receipt of credit rating information; performance of contract including supply of product and receipt of payment; payment and reimbursement of the sales incentive; countermeasures against defaults including sending content-certified letter, filing petition for preliminary attachment and institution of lawsuit; valuation of the security	Name, gender, date of birth, address, home telephone number, mobile phone number, fax number, e-mail address, name of company, business type, title, purchase history Matters concerning payment of prices; Account number at financial institutions such as banks and securities companies
Performance of legal and administrative obligation of the company Performance of legal and administrative obligations imposed on the Company, including the followings: report and payment of all sorts of taxes including corporate income tax and value added tax; issuance and delivery of receipts, tax invoices Computerized management of contract terms, transaction status, descriptions of product supply and payment	Name, gender, address, home telephone number, mobile phone number, fax number, e-mail address, name of company, business type, title, purchase history Name, gender, address, home telephone number, mobile phone number, fax number, e-mail address, name of company, business type, title, purchase history
Promotion of the Company’s products via sending mail (including e-mail), transmitting SMS, telephone	Name, address, mobile phone number, e-mail address, name of company, purchase history
Management of education history and recommendation of education program; provision of information on event, sale and giveaway event	Name, mobile phone number, e-mail address, name of company, purchase history
Customer relation management (CRM); provision of response to the inquiries of discontent customers; provision of after-sales service	Name, address, mobile phone number, e-mail address, purchase history
Reservation of transportation means and accommodation facilities and payment of fees for event winners	Name, address, home telephone number, mobile phone number, e-mail address, name of company
Implementation of due diligence in preparation for the possible transfer, merger and division of Company‘s business in whole or in part (incl. the transfer of the corporate group which the Company is affiliated to)	Name, address, home telephone number, mobile phone number, fax number, e-mail address, name of company, business type, title, bank account number

3 Period of processing and retention of personal information and destruction of personal information

The Company will immediately destroy personal information when the purposes of processing such personal information are attained and the personal information becomes unnecessary.

When the Company destroys personal information, it will implement measures to ensure that the information is not restored or regenerated.

However, when the Company has obtained prior approval from the Principal or when the Company must retain the personal information of the Principal pursuant to other laws and regulations, the Company will store and manage such personal information or personal information file separately from other personal information.

4 Delegation of Personal Information Processing Services

The Company delegates personal information processing services as follows:

Provider of Delegated Services	Contents of Delegated Services
S-Tec Safe	Management of access to the Company
Seong-Soo Chang Judicial Agent	Establishment/cancellation of kun-mortgage rights, other legal measures
Korea Appraisal Board	Appraisal of mortgages
Joongang Credit Information	Request for debt collection
GIG Co., Ltd. S	torage, package and delivery of goods to customers, warehousing related tasks and order processing
Ethan & Alice Marketing Inc. & Call center	Announcement of events and event winners Handling of customers’ inquiries
Creative Nemo	Delivery of DM and event information
With-M Co., Ltd, Jinseong Co., Ltd.	Report and provision of data on consumers who should receive samples to the Bosch headquarters, support dealers’ sales promotion, external demonstration for TT and MP, in-and outbound CCC
Taedong ITC Co., Ltd.	Customer call center (in-and outbound)
Dal-communication	Marketing events on SNS
CDB headquarters in Germany (AA/SEN3)	Management of education history
Bosch Singapore	Input and management of information on attendees at training sessions

5 Limits on processing resident registration numbers

The Company processes resident registration numbers only in following cases:

(1) in case processing resident registration numbers is required or allowed by legal provisions, or

(2) in case there is clear evidence of some urgent need to handle resident registration number, for the sake of the safety or property of the Principal or of a third party, or

(3) in case there exist special provisions under any other laws or ordinance of the Ministry of Government Administration and Home Affairs (hereinafter “MGAHA”).

6 Matters concerning the rights and obligations of principal and method of exercise thereof

6.1 Inspection of personal information

(1) The Principal may request inspection of his/her own personal information processed by the Company.

(2) Within ten (10) days from the receipt of the Principal’s request for inspection of personal information, the Company will allow the Principal to inspect his/her personal information. If the personal information cannot be inspected within the above period due to a justifiable reason, the Company may delay inspection after notifying the Principal of the reason for the delay. When the reason for the delay ceases to exist, the Company will immediately allow inspection of the persona information.

(3) In any of the following cases, the Company may restrict or refuse inspection of personal information after notifying the Principal of the reason for such refusal or restriction:
1) If inspection is prohibited or restricted by law; or
2) If such an act is likely to inflict damages upon another person’s life or body or unfairly infringe upon another person’s property or other rights.

6.2 Correction and deletion of personal information

(1) The Principal who has inspected his/her personal information may request that the Company correct or delete his/her personal information.

(2) the Company will deliver a report on the results of correction or deletion notifying the Principal of (i) the fact that the Company has taken necessary measures such as correction or deletion of such information as requested by the Principal or (ii) the fact that the Company has not complied with the Principal’s request for deletion because the personal information is specified as items subject to collection under other law. However, if specific procedures for correction or deletion of personal information are stipulated by other laws and regulations, the Company will comply with such laws and regulations.

(3) When the Company deletes personal information in accordance with the Principal’s request, it will implement measures to ensure that the information is not restored or regenerated.

6.3 Suspension of processing of personal information

(1) The Principal may request that the Company suspend the processing of his/her own personal information.

(2) In any of the following cases, the Company may refuse the Principal’s request for suspension of processing of personal information:
1) If there is a special provision in law or if denying the request is necessary to comply with legal obligations;
2) If such an act is likely to inflict damages upon another person’s life or body or unfairly infringe upon another person’s property and other rights; or
3) If performing the contract becomes difficult (i.e. unable to provide the agreed services to the Principal) unless the personal information is processed, and the Principal has not expressed a clear intention to terminate such contract.

(3) With regard to the personal information of which processing has been suspended in accordance with the request of the Principal, the Company will immediately take necessary measures such as destruction of the personal information.

6.4 Methods and procedures of exercising rights

Request for inspection, correction or deletion of personal information or suspension of processing of personal information can be made by the Principal, his/her legal representative or delegatee. However, in the event that the Principal is represented by his/her legal representative or delegatee, a power of attorney of the Principal as prescribed by the Decree of the MGAHA should be submitted to the Company.

7 Measures to ensure safety of personal information

The Company takes the following technical, managerial and physical actions necessary for ensuring safety in order to prevent the loss, theft, unlawful leakage, alteration or damage of personal information.

(1) Establishment and implementation of an internal management plan for the safe processing of personal information

(2) Measures to control access to personal information and to limit access rights

(3) Application of encryption technology or equivalent measures that enable safe storage and transmission of personal information

(4) Maintenance of login history to take measures against the infringement incident of personal information and measures to prevent forgery or alteration

(5) Installation and upgrade of security programs for personal information

(6) Physical measures including preparation of storage facilities and installation of locking system for the safe storage of personal information

8 Collection of opinions and handling of complaints

The Principal may file any complaint regarding protection of personal information to the CPO or the department in charge. The Company will provide a prompt and sufficient response with regard to the complaint of the Principal.

Chief Privacy Officer

Sunah Kim
031-270-4151
Sunah.Kim@kr.bosch.com

Privacy Officer Team Members

Daesic Bae
031-270-4352
Daesic.Bae@kr.bosch.com

Minhee Kim
031-260-9946
Minhee.Kim@kr.bosch.com

Sungun Oh
042-939-7502
Sungun.Oh@kr.bosch.com

In case the incidents of personal information protection breach, the Principals may contact the following government organization under the Ministry of Science, ICT and Future Planning.

Korea Internet & Security Agency (KISA)

- Tel: 82-2-405-5118 (ARS - extension number: 2)

- E-mail: privacyclean@kisa.or.kr

History

Issue	Date	Editor	Description of amendmen
1.0	2012.02.24	RBKR/DSO Mina Kwon	The privacy guideline of Bosch Korea has been established and published.
2.0	2013.08.12	RBKR/DSO Mina Kwon	The legal name of Bosch Korea has been changed. Matters regarding delegation of processing PI have been changed. The organization name of the relevant government ministry has been changed.
3.0	2014.06.26	RBKR/DSO Mina Kwon	The items of processed PI have been changed. Matters regarding transfer of PI to third parties have been changed.
4.0	2015.11.25	RBKR/DSO Bernd Poehlmann	Deletion of a few processed PI items concerning individual career Addition of details on transfer of Company’s Business Change of organization name of relevant government ministry Change of Chief Privacy officer in Bosch Korea
4.1	2016.10.31	RBKR/DSO Sunah Kim	Change of the corporate name: Robert Bosch Korea Ltd. and Robert Bosch Korea Diesel Ltd. -> Robert Bosch Korea Limited Company Change of Chief Privacy officer in Bosch Korea
4.2	2017.07.31	RBKR/DSO Sunah Kim	Deletion of the matters regarding transfer of PI to third parties Partial change of matters regarding deletion of personal information processing services Deletion of unnecessary items

Privacy Statement Bosch Group

The Bosch Group (Bosch) is pleased to have you visit our websites and welcomes your interest in our company and our products.

Bosch respects your privacy

The protection of your privacy in the processing of your personal data is an important concern which we pay special attention to during our business processes. We process personal data collected during your visit to our websites confidentially and solely in compliance with legal provisions.

Data privacy and information security are part of our corporate policy.

Collection and processing of personal data

The following information is collected during visits to our website: website from which you visit us (referrer), pages viewed, files downloaded (downloads), videos viewed/audio tracks listened to, individual links clicked, search words or search phrases (site search), duration of visit, browser used, etc. If the visit is a result of online advertising such as banners, video ads, search engine advertising, etc., we also record which banner, adword, etc. motivated the visit to Bosch websites.

The insights gained enable us to further optimize our websites and tailor them even better to our visitors‘ needs.

Use of cookies

1) Bosch cookies

Bosch uses cookies and active components (e.g. JavaScript) to track visitors‘ preferences and customise the design of the websites.

Cookies are small text files stored on your computer when you visit our website. If you like, you can delete the cookies at any time. However, this can result in some functions no longer being available. For information on deleting the cookies, please consult your browser‘s help function.

2) Third-party cookies

Some Bosch websites incorporate content and services from other providers (e.g. YouTube, Facebook, Google, Twitter) who, in turn, may use cookies and active components. Bosch has no influence on the processing of personal data by these providers.

Use of the Webtrends web analytics tool

Bosch uses the Webtrends web analytics tool to carry out access measurements.

The access data is collected in anonymized form so that it can no longer be traced back to a user. In particular, this is done by anonymizing the IP address.

Cookies are used for metrics to enable website usage to be analyzed. In particular, Bosch uses them to improve data quality. The information generated about the use of websites is transmitted anonymized to the statistics server (statse.webtrendslive.com) which is operated by Webtrends Inc, 555 SW Oak Street, Suite 300, Portland, OR 97204, United States (“Webtrends”) in the United States of America.

Only authorized persons have access to this anonymized data.

Use of social plugins as part of social media

1) Facebook

Bosch websites use social plugins ("plugins") from the social network Facebook.com, which is operated by Facebook Inc., Palo Alto, CA, USA ("Facebook"). The plugins are identified with the Facebook logo or the suffix "Facebook", "like", or "share".

If you visit a page on our website that contains such plugins, they are initially disabled. The plugins are not enabled until you click the button that is provided. By enabling the plugins, you establish the connection to Facebook and declare your consent to the transmission of data to Facebook. If you are logged into Facebook, Facebook can associate the visit with your Facebook account. If you press the respective button, the corresponding information is transmitted directly to Facebook by your browser and stored there.

For information about the scope and purpose of data collection, the further processing and use of the data by Facebook, and your rights and the settings you can configure to protect your privacy, please refer to the Facebook Data Protection Notice.

If you do not want Facebook to collect data about you via our website, you have to log out of Facebook before visiting our site.

2) Google+

Bosch websites use social plugins ("plugins") from the social network plus.google.com, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). The plugins are identified with the Google+ logo or the suffix "Google+" or “Google plus”, or "+1".

If you visit a page on our website that contains such plugins, they are initially disabled. The plugins are not enabled until you click the button that is provided. By enabling the plugins, you establish the connection to Google and declare your consent to the transmission of data to Google. If you are logged into Google+, Google can associate the visit with your Google+ account. If you press the respective button, the corresponding information is transmitted directly to Google by your browser and stored there.

For information about the scope and purpose of data collection, the further processing and use of the data by Google+ and your rights and the settings you can configure to protect your privacy, please refer to the Google Data Protection Notice.

If you do not want Google to collect data about you via our website, you have to log out of Google+ before visiting our site.

3) YouTube

Bosch websites use the YouTube video platform operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA. YouTube is a platform that enables playback of audio and video files.

When you load a page on our website, the integrated YouTube player establishes a connection to YouTube in order to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transferred to YouTube.

For information about the scope and purpose of data collection, the further processing and use of the data by YouTube and your rights and the settings you can configure to protect your privacy, please refer to the YouTube Data Protection Notice.

4) Twitter

Bosch websites use social plugins ("plugins") of the social network Twitter, which is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are identified with a Twitter logo or the suffix "tweet".

If you visit a page on our website that contains such plugins, they are initially disabled. The plugins are not enabled until you click the button that is provided. By enabling the plugins, you establish the connection to Twitter and give your consent to the transmission of data to Twitter. If you are logged into Twitter, Twitter can associate the visit with your Twitter account. If you press the respective button, the corresponding information is transmitted directly to Twitter by your browser and stored there.

For information about the scope and purpose of data collection, the further processing and use of the data by Twitter and your rights and the settings you can configure to protect your privacy, please refer to the Twitter Data Protection Notice.

Use of external links

Bosch websites may contain links to third-party websites operated by providers that are not associated with us. After you click the link, we no longer have any influence over the collection, storage, or processing of any personal data transmitted by clicking the link (such as the IP address or URL of the page that contains the link), as the behaviour of third parties is, by nature, beyond our control. Therefore, we cannot assume responsibility for the processing of personal data by third parties.

Security

Bosch takes security precautions to ensure that your data we have under our control is protected against tampering, loss, destruction, access by unauthorised persons, or unauthorised disclosure. Our security measures are being continuously improved in accordance with the state of technological developments.

Advertising

When you provide us with personal data, we use it to inform you about our products and services and, where applicable, to include you in surveys about them, provided you have given us your express consent to use your personal data for advertising purposes. If you have granted your consent for such use, but no longer wish to receive advertising from Bosch, you can revoke your consent at any time. Your data is then deleted, or provided that it is necessary for billing and accounting purposes, blocked accordingly.

Revoking consent

You can also revoke your consent to the collection, processing, and use of your personal data at any time. In this case, your personal data is deleted. Data which is necessary for billing and accounting purposes or which is subject to the legal obligation to preserve is not affected.

Access measurements

We use the WebTrends web analytics tool to carry out access measurements for our websites. Access data is collected in anonymized form so that it can no longer be traced back to a visitor. In particular, this is done by anonymizing the IP address.

The measurements are made using what are called cookies. Cookies are small text files stored on your computer that enable website use to be analyzed. In particular, we use them to improve data quality. The information generated about website use is transmitted to our statistics server (wts.bosch.com), which is operated by Bosch in Germany. Only authorised persons have access to the data. It is not forwarded to third parties.

The following information is collected during visits to our website: website from which you visit us (referrer), pages viewed, files downloaded (downloads), videos viewed/audio tracks listened to, individual links clicked, search words or search phrases (site search), duration of visit, browser used, etc. If the visit is a result of online advertising such as banners, video ads, search engine advertising, etc., we also record which banner, adword, etc. motivated the visit to Bosch websites.

The insights gained enable us to further optimise our websites and tailor them even better to our visitors‘ needs.

Technical Requirements

In order for our websites to display optimally on your computer and for you to be able to use all of their functions, please take into account the following technical requirements:

Browser
We recommend using the following browser versions: Internet Explorer 8.x or later, Mozilla Firefox 10.x or later, Google Chrome 18.0.x or later and Safari 5.x or later. When using older browser versions (such as Internet Explorer 6), website functions may be limited in some cases.

Flash® Player
Some Bosch websites contain animations that are implemented using Flash®. To be able to display the animations you will need Flash® Player Version 10 or later, which you can download here:
www.adobe.com

Adobe® Reader
Some Bosch websites contain PDF documents. To be able to view these documents you will need Adobe® Reader, which you can download here:
www.adobe.com

JavaScript
Some functions on the Bosch websites require a browser with JavaScript. We therefore recommend activating JavaScript in your browser.

Cookies
Some functions on the Bosch websites require cookies to be enabled. We therefore recommend enabling cookies in your browser. For additional notes on the use of cookies, refer to the section Data Protection Notice of the Bosch Group.

© Copyright

All rights reserved. Text, images, graphics, sound, animations and videos as well as the arrangement of the same on Bosch web sites are protected by copyright and other commercial protective rights. The content of these web sites may not be copied, disseminated, altered or made accessible to third parties for commercial purposes. Some Bosch web sites also contain pictures subject to third party copyrights.

Adress

115, Geumhosunmal-gil, Bugang-myon, Sejong Self-government city
30077, Korea

Names of authorized representatives

Dongwoo Yim, Creutzburg Joachim

Telephone number

+82 44 279 6777

Email address

Contact@kr.bosch.com

Court of Record

Daejeon district court

VAT ID No

301-81-18907

Trademarks

Unless otherwise specified, all trademarks on Bosch web sites are protected under trademark law. This applies, in particular, to Bosch trademarks, type signets, company logos and emblems. The marks and design elements used on our sites are intellectual property of Robert Bosch and RBKB.

Warranty Note

This web site was compiled with utmost care. Robert Bosch and RBKB can nonetheless not vouch for the accuracy of the information provided. Robert Bosch hereby precludes all liability for damage resulting directly or indirectly from use of this web site, except in the case of wilful misconduct or gross negligence on the part of Bosch.

License Note

The intellectual property contained in the Bosch web site, e.g. patents, marks and copyrights, is protected. This web site does not grant a license for use of intellectual property of Bosch or third parties.

Legal Note

Robert Bosch thanks you for visiting this web site and for your interest in our products. All personal data entered on the Bosch web site will be stored, processed and, if necessary, passed to companies of the Bosch Group exclusively for the purpose of providing a personal service to you, to send you product information or to submit service offers to you. Robert Bosch warrants that your data will be subject to strict confidentiality in accordance with data protection law regulations.

Privacy Statement Bosch Group

Bosch Group (Bosch) appreciates your interest in its products and your visit to this website.

Bosch respects your Privacy

The protection of your privacy in the processing of your personal data is an important concern to which we pay special attention during our business processes. Personal data collected during visits to our websites are processed by us confidentially and according to the legal provisions. Data protection and Information security are part of our company policy. Bosch websites may include links to other websites which are not covered by this privacy statement.

Collection and Processing of Personal Data

When you visit our websites our web server automatically records the name of your internet service provider, the website from which you visit us, the websites you actually visit and the date and length of your visit. Bosch may use cookies and active components (e.g. JavaScript) to follow the preferences of our visitors and optimize our websites accordingly. You can reset your browser either to notify you when you receive a cookie, or to refuse to accept cookies. Please note that certain areas of most sites may not function properly if you reject a cookie. Additional personal data is only stored if volunteered by you, for example in context of a registration, a survey, a contest or in execution of a contract.

Use and Disclosure of Personal Data and Purpose Specification

Bosch will use your personal data for the sole purpose of technical administration of the websites, customer administration, product surveys and marketing, only to the extent necessary in each specific case. Your personal data will not be disclosed to third parties outside the Bosch Group without your consent.

Security

Bosch uses security measures in order to protect the data we have under our control against manipulation, loss, destruction, access by unauthorized persons or against unauthorized disclosure. Our security procedures are continually enhanced as new technology becomes available.

Freedom of choice

We would like to use your data to inform you about our products and services and request your opinion, where applicable. Naturally your participation in such campaigns is voluntary. Should you not consent, you can inform us at any time, so that we can prohibit the use of your data accordingly. For further information we refer you to the local website-services.

Privacy Guideline

1. General provisions

Bosch Electrical drives Co.,Ltd (the “Company”) establishes, implements and complies with the Privacy Policy (this “Privacy Policy”) in an effort to proactively protect the personal information of the principal of information (“Principal”) processed by the Company and to protect the information and the rights of the Principal and to smoothly address the grievance suffered by the Principal related to the personal information pursuant to the Personal Information Protection Act (“PIPA”). This Privacy Policy is subject to change pursuant to relevant laws, regulations and rules and the Company’s internal operation policies, in which case the changes made to this Privacy Policy will be disclosed in accordance with the methods stipulated by relevant laws and regulations.

This Privacy Policy is put into force from September 30, 2011. The contents of this Privacy Policy are as follows:

• General provisions
• Purposes of processing personal information and items of personal information to be processed
• Period of processing and retention of personal information and destruction of personal information
• Transfer of personal information to a third party
• Delegation of personal information processing services
• Matters concerning the rights and obligation of principal and method of exercise thereof
• Measures to ensure safety of personal information
• Collection of opinions and handling of complaints

2. Purposes of processing personal information and items of personal information to be processed

A. Purposes of processing personal information

(1) Execution and performance of contract

- Identification of the contracting party; determination of whether to execute a contract; receipt of credit rating information; performance of contract including supply of product and receipt of payment; payment and reimbursement of the sales incentive; countermeasures against defaults including sending content-certified letter, filing petition for preliminary attachment and institution of lawsuit; valuation of the security, etc.

(2) Performance of legal and administrative obligation of the company

- Performance of legal and administrative obligations imposed on the Company, including the followings: report and payment of all sorts of taxes including corporate income tax and value added tax; issuance and delivery of receipts, tax invoices, etc.

(3) Computerized management of contract terms, transaction status, descriptions of product supply and payment, etc.

(4) Promotion of the Company’s products via sending mail (including e-mail), transmitting SMS, telephone, etc.; management of education history and recommendation of education program; customer relation management (CRM); provision of response to the inquiries of discontent customers; provision of after-sales service; reservation of transportation means and accommodation facilities and payment of fees, etc.

(5) Implementation of due diligence in preparation for the possible transfer of Company’s business in whole or in part

B. Items of personal information to be processed

(1) General personal information

1) Matters concerning personal affairs

- Name, gender, date of birth, business registration number, address, home telephone number, mobile phone number, fax number, e-mail address, name of company, business type, title, purchase history, etc.

2) Matters concerning individual‘s career

- Educational background (name of school, major, year of entrance and year of graduation, graduation status, GPA, etc.), career (company, title, responsible work, service period, etc.)

3) Matters concerning payment of prices, etc.

- Account number at financial institutions such as banks and securities companies, etc.

3. Period of processing and retention of personal information and destruction of personal information

A. Period of processing and retention of personal information

The Company will immediately destroy personal information when the purposes of processing such personal information are attained and the personal information becomes unnecessary.

However, when the Company has obtained prior approval from the Principal or when the Company must retain the personal information of the Principal pursuant to other laws and regulations including the Commercial Code, the Company may retain such personal information.

B. Destruction of personal information.

(1) When the Company destroys personal information, it will implement measures to ensure that the information is not restored or regenerated.

(2) If the Company has to retain personal information instead of destroying it, the Company will store and manage such personal information or personal information file separately from other personal information.

(3) If the personal information that needs to be destroyed is in the form of electronic file, the Company will permanently delete such information in an irrevocable manner. Any other document, printout, letter and other recorded media will be destroyed by incinerating or shredding them into pieces.

4. Transfer of personal information to a third party

The Company does not transfers customer’s personal information to third parties.

5. Delegation of personal information processing services

The Company does not delegates customer’s personal information

processing services.

6. Matters concerning the rights and obligations of principal and method of exercise thereof

A. Inspection of personal information

(1) The Principal may request inspection of his/her own personal information processed by the Company, in which case the Principal should submit to the Company a request for inspection of personal information setting forth (i) the items and contents of the personal information, (ii) purposes of collection and use of the personal information, (iii) period of retention and use of the personal information, (iv) status of transferring personal information to third parties and (v) the fact that the Principal consented to the processing of the personal information and the items he/she wishes to inspect, as prescribed by the Decree of the Ministry of Security and Public Administration (“MOSPA”).

(2) Within ten (10) days from the receipt of the Principal’s request for inspection of personal information, the Company will allow the Principal to inspect his/her personal information. If the personal information cannot be inspected within the above period due to a justifiable reason, the Company may delay inspection after notifying the Principal of the reason for the delay. When the reason for the delay ceases to exist, the Company will immediately allow inspection of the personal information.

(3) In any of the following cases, the Company may restrict or refuse inspection of personal information after notifying the Principal of the reason for such refusal or restriction:

1) If inspection is prohibited or restricted by law; or

2) If such an act is likely to inflict damages upon another person’s life or body or unfairly infringe upon another person’s property or other rights.

B. Correction and deletion of personal information

(1) The Principal who has inspected his/her personal information may request that the Company correct or delete his/her personal information, in which case the Principal should submit to the Company a request for correction or deletion of personal information as prescribed by the Decree of the MOSPA.

(2) Within ten (10) days from the receipt of request for correction or deletion of personal information, the Company will deliver a report on the results of correction or deletion as prescribed by the Decree of the MOSPA to the Principal, notifying the Principal of (i) the fact that the Company has probed into the personal information and has taken necessary measures such as correction or deletion of such information as requested by the Principal or (ii) the fact that the Company has not complied with the Principal’s request for deletion because the personal information is specified as items subject to collection under other laws, the reason therefor and the method of raising an objection. However, if specific procedures for correction or deletion of personal information are stipulated by other laws and regulations, the Company will comply with such laws and regulations.

(3) When the Company deletes personal information in accordance with the Principal’s request, it will implement measures to ensure that the information is not restored or regenerated.

C. Suspension of processing of personal information

(1) When the Principal desires to request that the Company suspend the processing of his/her own personal information, the Principal should submit to the Company a request for suspension of processing of personal information as prescribed by the Decree of the MOSPA.

(2) In any of the following cases, the Company may refuse the Principal’s request for suspension of processing of personal information:

1) If there is a special provision in law or if denying the request is necessary to comply with legal obligations;

2) If such an act is likely to inflict damages upon another person’s life or body or unfairly infringe upon another person’s property and other rights; or

3) If performing the contract becomes difficult (i.e. unable to provide the agreed services to the Principal) unless the personal information is processed, and the Principal has not expressed a clear intention to terminate such contract.

(3) Within ten (10) days from the receipt of request for suspension of processing of personal information, the Company will deliver a report on the results of suspension of processing of personal information to the Principal as prescribed by the Decree the MOSPA, notifying the Principal of (i) the fact that the Company has suspended processing of the personal information in whole or in part, or (ii) the fact that the Company has not complied with the Principal’s request for suspension of processing, the reason therefor and the method of raising an objection.

(4) With regard to the personal information of which processing has been suspended in accordance with the request of the Principal, the Company will immediately take necessary measures such as destruction of the personal information.

D. Methods and procedures of exercising rights

(1) Requests for inspection, correction or deletion of personal information or suspension of processing of personal information can be made by the Principal, his/her legal representative or delegatee. However, in the event that the Principal is represented by his/her legal representative or delegatee, a power of attorney of the Principal as prescribed by the Decree of the MOSPA should be submitted to the Company.

(2) Service fee and postage fee as determined by the Company may be charged to the person(s) who make requests for inspection, correction or deletion of personal information or suspension of processing of personal information, etc.

7. Measures to ensure safety of personal information

The Company takes the following technical, managerial and physical actions necessary for ensuring safety in order to prevent the loss, theft, unlawful leakage, alteration or damage of personal information.

A. Establishment and implementation of an internal management plan for the safe processing of personal information

The Company establishes and implements an internal management plan including the following matters:

(1) Matters concerning designation of the Chief Privacy Officer (“CPO”);

(2) Matters concerning the roles and obligations of the CPO and the Personal Information Processor (“PIP”);

(3) Matters concerning measures necessary for ensuring safety of personal information;

(4) Matters concerning training of the PIP; and

(5) Other matters necessary for protection of personal information.

B. Measures to control access to personal information and to limit access rights

(1) The Company preferentially grants the right to access the personal information processing system to the responsible employee(s) to the minimum possible extent necessary to conduct business. In the event that the PIP is changed due to personnel changes as a result of transfer or retirement, the Company changes or cancels the access right to the personal information processing system. Furthermore, the Company keeps a record of the granting, changing and cancelling of the rights as above and retains such record for at least (3) years.

(2) In issuing user accounts for access to the personal information processing system, the Company issues one (1) account for each PIP and ensures that the account is not shared with any other PIP.

(3) The Company establishes and implements rules for making passwords.

(4) In order to prevent unlawful access through information networks and infringement incidents, the Company establishes and operates a system that includes functions to restrict unauthorized access to the personal information processing system.

(5) In the event that the PIP desires to access the Company’s personal information processing system from outside through information networks, the Company applies safe means of access such as virtual private networks (VPNs) or exclusive cables. The Company also takes measures with regard to the personal information processing system and office computers to ensure that the personal information being handled is not disclosed to unauthorized persons or leaked outside through the internet homepage, P2P and sharing setting, etc.

C. Application of encryption technology or equivalent measures that enable safe storage and transmission of personal information

(1) When transmitting and receiving an individual’s unique identification information, password and biological information through an information network or delivering such information through an auxiliary storage medium, the Company encrypts such information.

(2) The Company encrypts passwords and biological information when storing such information, and uses a one-way encryption method so that such information cannot be decoded.

(3) When storing unique identification information in the internet zone or in the DMZ between the internet zone and the internal network, the Company encrypts such information.

(4) When storing unique identification information in the internal network, the Company determines whether or not to encrypt such information and the scope of encryption depending on the results of the risk analysis.

(5) When encrypting unique identification information, passwords and biological information, the Company encrypts and stores such information using a safe algorithm. When storing and managing unique identification information in office computers, the Company encrypts and stores such information using commercial encryption software or a safe encryption algorithm.

D. Maintenance of login history to take measures against the infringement incident of personal information and measures to prevent forgery or alteration

(1) The Company keeps and manages a login history regarding the PIP’s access to the personal information processing system.

(2) The Company safely stores the login history of the PIP to prevent forgery, alteration, theft or loss of such history.

E. Installation and upgrade of security programs for personal information

The Company installs and operates security programs including vaccination programs that can prevent and cure malicious programs on the personal information processing system or office computers, and complies with the following rules:

(1) The Company uses the automatic update function of the security program or carries out an update more than once per day.

(2) The Company immediately carries out an update when a warning has been issued in relation to a malicious program or when the manufacturer of the application program or the operating system software makes an announcement on security update.

F. Physical measures including preparation of storage facilities and installation of locking system for the safe storage of personal information

(1) The Company has a separate physical storage place to keep personal information, and establishes and operates processes for controlling access to such place.

(2) The Company keeps the documents, auxiliary storage medium, etc. containing personal information in a safe place with locking system.

8. Collection of opinions and handling of complaints

The Principal may file any complaint regarding protection of personal information to the CPO or the department in charge. The Company will provide a prompt and sufficient response with regard to the complaint of the Principal.

Technical Requirements

In order for our websites to display optimally on your computer and for you to be able to use all of their functions, please take into account the following technical requirements:

Browser
We recommend using the following browser versions: Internet Explorer 8.x or later, Mozilla Firefox 10.x or later, Google Chrome 18.0.x or later and Safari 5.x or later. When using older browser versions (such as Internet Explorer 6), website functions may be limited in some cases.

Flash® Player
Some Bosch websites contain animations that are implemented using Flash®. To be able to display the animations you will need Flash® Player Version 10 or later, which you can download here:
www.adobe.com

Adobe® Reader
Some Bosch websites contain PDF documents. To be able to view these documents you will need Adobe® Reader, which you can download here:
www.adobe.com

JavaScript
Some functions on the Bosch websites require a browser with JavaScript. We therefore recommend activating JavaScript in your browser.

Cookies
Some functions on the Bosch websites require cookies to be enabled. We therefore recommend enabling cookies in your browser. For additional notes on the use of cookies, refer to the section Data Protection Notice of the Bosch Group.