Data protection notice
ETAS GmbH (hereinafter referred to as ETAS or "we" or "us") is pleased that you have visited our website and are interested in our company and our products.
The protection of your privacy when processing personal data and the security of all business data are important concerns for us, which we take into account in our business processes.
Controller
ETAS GmbH is the controller responsible for processing your data; exceptions are explained in this privacy policy.
Our contact details are as follows:
ETAS GmbH
Borsigstrasse 24
70469 Stuttgart, Germany
Phone: +49 711 3423-0
Fax: +49 711 3423-2106
Represented by the Management Board: Dr. Thomas Irawan, Nicolet Eglseder, Mariella Minutolo
Chairman of the Supervisory Board: Dr. Walter Schirm
VAT ID No.: DE811679830
Children
This online offering is not intended for children under the age of 16.
Processed data categories
The following categories of data are processed:
- Communication data (e.g., name, telephone number, email address, postal address, IP address)
- Contract master data (contractual relationship, product or contract interest)
- customer history
Duration of storage; retention periods
We generally store your data for as long as is necessary to provide our offer and the associated services, or as long as we have a legitimate interest in further storage (e.g., we may still have a legitimate interest in postal marketing even after fulfilling a contract). After that, we delete your personal data, with the exception of data that we must continue to store in order to comply with legal obligations (e.g., we are required by tax and commercial law retention periods to retain documents such as contracts and invoices for a certain period of time).
Data transfer to other controllers
We will only transfer your personal data to other responsible parties if this is necessary for the fulfillment of the contract, if we or the third party have a legitimate interest in the transfer, or if you have given your consent.
Details on the legal bases and the recipients or categories of recipients can be found in the section on processing purposes and legal bases.
Furthermore, data may be transferred to other responsible parties if we are required to do so by law or by enforceable official or court orders.
Disclosure to service providers
We commission external service providers with tasks such as marketing services, programming, data hosting, and hotline services. We have carefully selected these service providers and monitor them regularly, in particular with regard to their careful handling and protection of the data stored with them. All service providers are bound by us to confidentiality and compliance with legal requirements. Service providers may also be other companies within the Bosch Group.
Transfer to recipients outside the EEA
We may also transfer personal data to recipients located outside the EEA in so-called third countries.
In this case, before passing on the data, we ensure that the recipient either has an adequate level of data protection (e.g., based on an adequacy decision by the EU Commission for the respective country or the agreement of so-called EU standard contractual clauses of the European Union with the recipient) or that you have given your consent to the transfer.
You can obtain an overview of recipients in third countries and a copy of the specific arrangements agreed to ensure an adequate level of data protection from us. Please use the information in the Contact section for this purpose.
Processing purposes and legal bases
We and our service providers process your personal data for the following purposes:
- Provision of this online offering (legal basis: legitimate interest on our part in direct marketing, as long as this is in accordance with data protection and competition law requirements).
- To respond to user inquiries within the scope of a contact/repair form (legal basis: contract fulfillment or legitimate interest based on improvement of products/services).
- To identify malfunctions and for security reasons (legal basis: fulfillment of our legal obligations in the area of data security and legitimate interest in eliminating malfunctions and ensuring the security of our services).
- Own and third-party advertising, market research, and reach measurement to the extent permitted by law or on the basis of consent (legal basis: consent/legitimate interest on our part in direct marketing, as long as this is in accordance with data protection and competition law requirements).
- Product and customer surveys by post and/or email (legal basis: legitimate interest in improving products/services, provided this is done in accordance with data protection and competition law requirements).
- Product or customer surveys by email and/or telephone, provided you have expressly consented to this (legal basis: consent).
- Sending a newsletter with the recipient's consent by email or SMS/MMS (legal basis: consent).
- Safeguarding and defending our rights (legal basis: our legitimate interest in asserting and defending our rights).
- Administration of licenses for ETAS products (legal basis: fulfillment of contract in connection with the provision of ETAS products).
Registration
If you wish to use services that require the conclusion of a contract, we ask you to register. As part of the registration process, we collect the personal data necessary for the establishment and fulfillment of the contract (e.g., first name, last name, email address, user name) as well as any other data on a voluntary basis. Mandatory fields are marked with an *.
Data processed as joint controllers
ETAS GmbH, headquartered in 70469 Stuttgart, the ETAS national subsidiaries, and some Robert Bosch GmbH national subsidiaries process personal data in shared IT systems.
The following personal data is processed as joint controllers
- Personal details of customer contacts and/or employees (e.g., name, email, phone number).
- Information on the employment and/or training and further education of the companies' employees (e.g., degrees, professional qualifications).
The companies have regulated data processing as joint controllers in a contract (Art. 26 GDPR).
The companies have contractually agreed that
- in German-speaking countries (Germany, Austria, and Switzerland), ETAS GmbH exercises the rights described in the section "User Rights,"
- in other countries, the respective ETAS national companies or ETAS GmbH, if there is no ETAS national company in the country concerned, which are entrusted with the protection of "user rights,"
- After concluding a contract, the contracting company always assumes the "rights of the users" and the associated tasks.
Regardless of the contractual distribution of tasks between the companies, you are free to contact another company to exercise your rights.
Data processed in joint responsibility with KPMG
The cooperation partners KPMG AG and ETAS GmbH collect personal data arising from surveys, webinars, and similar activities using forms as joint controllers within the meaning of Art. 26 GDPR. This means in particular that all data collected by ETAS using the above-mentioned forms is also passed on to KPMG. All data subject rights under Art. 15 et seq. GDPR can be asserted at any time against all cooperation partners and will be exercised on behalf of the data subjects by the cooperation partner to whom the request is addressed.
Data processed in joint responsibility with Automotive World (Mobex)
The cooperation partners Automotive World Limited and ETAS GmbH collect personal data arising in connection with webinars and similar events using forms as joint controllers within the meaning of Art. 26 GDPR. If the data subjects have consented to the transfer of their data to ETAS, the data collected in the forms will be transferred from Automotive World to ETAS GmbH. All data subject rights under Art. 15 et seq. GDPR can be asserted at any time against all cooperation partners and will be exercised vis-à-vis the data subjects by the cooperation partner to whom the request is addressed.
Security and protection of rights
We may also process your personal data to identify malfunctions and for security reasons, to fulfill our legal obligations in the area of data security, and on the basis of our legitimate interest in eliminating malfunctions and ensuring the security of our services.
We may process your personal data to protect and defend our rights. This purpose also represents our legitimate interest.
Log files
Every time you use the Internet, your Internet browser automatically transmits certain information, which we store in log files.
We store log files for 30 days for the purpose of investigating malfunctions and security reasons (e.g., to investigate attempted attacks) and then delete them. Log files that need to be retained for evidentiary purposes are exempt from deletion until the respective incident has been finally clarified and may be passed on to investigating authorities in individual cases.
The following information is stored in log files:
- IP address (Internet Protocol address) of the device used to access the website;
- Internet address of the website from which this website was accessed (known as the origin or referrer URL);
- Name of the service provider through which access to this website is made;
- Name of the files or information accessed;
- Date and time, as well as duration of the retrieval;
- amount of data transferred;
- Operating system and information about the Internet browser used, including installed add-ons (e.g., for Flash Player);
- HTTP status code (e.g., "Request successful" or "Requested file not found").
Use of cookies and other technologies
Cookies and tracking mechanisms may be used in connection with the provision of our online services.
Cookies are small text files that can be stored on your device when you visit an online site.
Tracking is possible using various technologies. We process information in particular within the scope of pixel technology and log file analysis.
Categories
We distinguish between cookies that are strictly necessary for the technical functions of the online offering and cookies and tracking mechanisms that are not strictly necessary for the technical function of the online offerings.
The online offering can generally be used without cookies that do not serve technical purposes.
Technically necessary cookies
By technically necessary cookies, we mean cookies without which the technical provision of the online offering cannot be guaranteed. These include, for example, cookies that store data to ensure the smooth playback of video or audio content.
These cookies are deleted at the end of your visit.
Mechanisms that are not technically necessary
We only use cookies and tracking mechanisms that are not technically necessary if you have given us your prior consent. The only exception to this is the cookie that stores the current status of your privacy settings (selection cookie).
We use third-party tools to integrate cookies and mechanisms that are not technically necessary. These ensure that cookies and mechanisms that are not technically necessary are only set with your consent.
We use the following tools:
Name: Analytics
- Provider: Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Function: Analyzing user behavior (page views, number of visitors and visits, downloads), creating pseudonymous user profiles based on cross-device information from logged-in users (cross-device tracking), enriching pseudonymous user data with target group-specific information provided by , retargeting, UX testing, conversion tracking, and retargeting in connection with Ads.
Additional information: We use the "anonymize IP" function, which anonymizes your IP address before it is stored. We use the paid version of Analytics, which stores the data collected on our website via Analytics on 's own servers. may not use this data for its own purposes or mix it with other data that collects about you in other ways, such as when you are logged into your account in your browser when visiting our website.
Name: Tag Manager
- Provider: Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Function: Management of website tags via an interface, integration of program codes on our websites
Name: Ads
- Provider: Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Function: Placement of advertisements, remarketing, conversion tracking
Name: Pixel Insight Tag
- Provider: Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
- Function: processes your personal data to create campaign reports, track conversions, click events, and targeted advertising outside our websites (retargeting) based on URL, referrer URL, IP address shortened or hashed (for cross-device retargeting), device and browser properties (user agent), and timestamp. We do not receive any personal data about you from , only anonymized campaign reports about the website target group and ad performance.
Storage period: Pseudonymization after 7 days, final deletion after 180 days
Further information can be found at: https://www..com/legal/privacy-policy
Name: Surveys with Qualtrics
- Provider: Qualtrics LLC, 333 W River Park Drive, Provo, Utah 84604, USA.
- Function: We conduct voluntary surveys on our website regarding our products and services in order to optimize our offerings. These surveys are conducted based on your consent. We use the services of Qualtrics LLC for this purpose. The provider processes data only as a processor in accordance with our instructions and not for its own purposes.
Additional information: We use the "anonymize IP" function, which anonymizes your IP address before it is stored.
Further information can be found at: https://www.qualtrics.com/support/de/survey-platform/getting-started/browser-cookies/
Newsletter
You will receive newsletters via the ETAS website. We send these based on your consent.
To confirm your consent, we use the so-called double opt-in procedure, whereby we will only send you a newsletter by email once you have expressly confirmed the activation of the newsletter service by clicking on a link in a notification.
You can unsubscribe from the newsletter at any time by revoking your consent. For email newsletters, you can revoke your consent by clicking on the link contained in the newsletter. Alternatively, please contact us using the details in the Contact section.
In order to tailor our newsletter to your needs and optimize our offers, we analyze the behavior of our newsletter readers on the basis of their consent. For this analysis, the emails we send contain so-called web beacons, also known as pixels.
When you read the newsletter, we record which links you click on in the newsletter and use this to infer your personal interests. We link this data to technical information about your device (e.g., time of access, browser type, and operating system).
This analysis does not take place if you revoke your consent or have disabled the display of images in your email program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all of its features. As soon as you enable the display of images, the analysis described above will be reactivated.
Plugins
We offer the use of plugins from various social and other networks on our website.
Plugins are extensions provided by social network providers. We therefore have no influence on the further processing of data collected and stored via the plugins by the providers of the respective networks.
For information on the purpose and scope of the collection, further processing, and deletion of data by the respective provider, as well as your rights in this regard and settings options for protecting your privacy, please refer to the data protection information provided by the respective provider.
2-click solution
Plugins are inactive by default.
Plugins are inactive by default.
To increase the protection of your data when visiting our website, the plugins are integrated into the page using the so-called "2-click solution." With this 2-click solution, we protect you from your visit to our websites being recorded and, if necessary, evaluated by the providers of the respective plugins by default.
If you do not want the providers of the respective networks to receive data about your use of this website and, if applicable, to store or reuse it, you should not activate the respective plugins.
Enabling plugins
You can decide for yourself whether you want to interact with the network of the respective provider and whether your data should be transmitted to the respective provider or not. Only when you click on the button provided will the plugins be activated and integrated into the page by transmitting the content of the respective plugin from the server of the associated provider directly to your browser. You can then carry out the desired interaction with the network with another click. If you decide to activate a plugin, we will process your data on the basis of your consent.
Collection of data by providers
When a plugin is activated, your Internet browser establishes a direct connection to the servers of the respective provider. This provides the respective provider with the information that your Internet browser has accessed the corresponding page of our website, even if you do not have a user account with the provider or are not currently logged in.
If you already have a user account with a network provider and you are already logged in while visiting our websites, the operator of the respective network may be able to assign the visit to your personal user account as soon as you activate plugins. This enables the provider to analyze your usage behavior and store it in a profile.
In addition, your IP address and other data about your browser settings are transmitted directly from your Internet browser to a server of the respective provider and may be stored there.
Further processing of data by providers
Disabling the plugin
If you no longer wish to use an activated plugin, you can deactivate it again using the button provided. Please note that this does not affect data that has already been transmitted.
We use plugins from the following providers:
Plugins from Meta
Together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"), we are responsible for processing your personal data in connection with the use of Meta social plugins on our website.
In order to define the respective responsibilities for fulfilling the obligations regarding joint processing, we have concluded a joint responsibility agreement with Meta. You can access the essential contents of the agreement at any time at the following link: https://www..com/legal/terms/page_controller_addendum
In particular, it regulates which security measures Meta must observe and how data subjects' rights can be asserted against Meta.
If you use the Meta plugin, we collect and transmit so-called event data to Meta.
The purposes for collecting and transmitting event data are set out in the Terms of Use for Meta products and include the following:
- Measurements and analyses
- Advertisement targeting
- Delivery of commercial and transaction-related messages
- Improving ad delivery, personalizing features and content, and improving and securing meta products
For more information, please refer to Meta's privacy policy.
Buzzsprout
This online offering uses the Buzzsprout podcast platform, which is operated by Higher Pixels, Inc., 5133 San Jose Blvd, Jacksonville, Florida 32207, USA ("Buzzsprout"). Buzzsprout is a platform that enables the playback of audio files.
When you visit a corresponding page on our website, the embedded Buzzsprout player connects to Buzzsprout so that the audio file can be transferred and played. Data is also transferred to Buzzsprout as the responsible party. We are not responsible for the processing of this data by Buzzsprout.
For more information about the scope and purpose of the data collected, the further processing and use of the data by Buzzsprout, your rights, and the privacy options you can choose, please refer to Buzzsprout's privacy notice: https://www.buzzsprout.com/privacy
This website uses videos from the video platform. is a platform that enables the playback of video files. It is operated by Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its parent company: LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To increase the protection of your data when visiting our website, content is integrated into the page in "extended data protection mode."
This means that a connection to , including the transfer of log data to , is only established when you interact with the player. When you interact with the active player, data is also transferred to as the responsible party and contact is established with the DoubleClick advertising network, which may trigger further data processing operations over which we have no control.
For more information on the scope and purpose of the data collected, the further processing and use of the data by , your rights, and the privacy options available to you, please refer to 's privacy policy.
BoschTube
This online offering uses the BoschTube video platform, which is operated by Robert Bosch GmbH, Robert-Bosch-Platz 1, 70839 Gerlingen-Schillerhöhe ("BoschTube"). BoschTube is a platform that enables the playback of audio and video files.
When you visit a corresponding page on our website, the embedded BoschTube player establishes a connection to BoschTube so that the video or audio file can be transferred and played back. Data is also transferred to BoschTube as the responsible party. We are not responsible for the processing of this data by BoschTube.
Further information on the scope and purpose of the data collected, the further processing and use of the data by BoschTube, your rights, and the data protection options available to you can be found in the BoschTube data protection notice (https://media.video.bosch.com/privacy-statement_en).
Mouseflow
- Provider: Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark
- Function: Collects data about user navigation and interaction to improve our website and optimize the user experience. The data collected includes mouse movements (e.g., clicks, touches, scrolling behavior) and browser information (e.g., browser type). User data is automatically deleted after twelve (12) months.
Fonts/Web fonts
This online offering uses fonts from Monotype (Neo® Sans) and external web fonts from Fonts (Noto Sans SC, Noto Sans JP, Nanum Gothic) to display text with different character sets. To do this, a connection is established to the servers of Monotype or Fonts, and personal data such as IP address and browser data is sent to Monotype (Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA) or Fonts ( Ireland Limited, incorporated and operating under the laws of Ireland, Gordon House, Barrow Street, Dublin 4, Ireland).
- Monotype uses the data solely to record the number of visits.
- Fonts uses the data exclusively to display fonts and analyze their popularity.
External links
Our website may contain links to third-party websites that are not affiliated with us. Once you click on the link, we no longer have any influence on the collection, processing, and use of any personal data (such as the IP address or the URL of the page on which the link is located) that may be transferred to the third party when you click on the link, as the behavior of third parties is naturally beyond our control. We accept no responsibility for the processing of such personal data by third parties.
Rights of affected persons
To assert your rights, please use the information in the Contact section. Please ensure that we are able to clearly identify you.
You have the right to obtain information from us about your personal data, as well as the right to correction, the right to deletion, the right to restriction of processing, and the right to data portability. If you have given us your consent to process your personal data, you can revoke this consent at any time with future effect.
Objection to direct marketing
You can object to the processing of your personal data for advertising purposes at any time ("advertising objection"). Please note that for organizational reasons, there may be an overlap between your objection and the use of your data in the context of an ongoing campaign.
Objection to data processing on the basis of a "legitimate interest"
You also have the right to object to our processing of your data at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of "legitimate interest." The reasons must be stated.
We will then cease processing your data unless we can demonstrate compelling legitimate grounds for further processing in accordance with legal requirements that outweigh your rights.
Right to appeal to the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority.
Contact
If you would like to contact us, you can reach us at the address given in the "Responsible party" section.
To assert your rights and report data protection incidents, please use the following link: https://request.privacy-bosch.com/entity/ETAS
or
https://www.bkms-system.net/bosch-datenschutz
For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our data protection officer:
data protection officer
Information Security and Privacy Department (C/ISP)
Robert Bosch GmbH
P.O. Box 30 02 20
70442 Stuttgart, Germany
or
mailto: DPO[at]bosch.com
Changes to the privacy policy
We reserve the right to change our security and data protection measures. In such cases, we will also amend our data protection information accordingly. Please therefore refer to the current version of our data protection information.
As of: [August 25, 2025]