Notice at Collection

If you are a consumer in the United States, this Privacy Notice explains how Bosch Thermotechnology Corp. (“Bosch” or “We”) collects, uses, processes, discloses, and retains your personal information, personal data, and personally identifiable information when you visit our websites, mobile applications, and any other applications, products, or services (collectively, the “Services”) that display this Privacy Notice.

Bosch Thermotechnology Corp acts as a controller of your personal information. We determine how and why personal information can be used and provides the specific Service.

Any comments, complaints, or questions regarding the processing of your personal information may be emailed to privacy.policy@us.bosch.com or mailed to the Privacy Notice Administrator 38000 Hills Tech Drive, Farmington Hills, Michigan 48331.

You can obtain more information about how we collect, use, disclose and safeguard your personal information by reviewing our full Privacy Notice below.

BOSCH HOME COMFORT RESIDENTIAL PRIVACY NOTICE

Privacy Notice of Bosch Thermotechnology Corp

Introduction

Bosch thanks you for your interest in our company, products, and/or services. We are dedicated to protecting your personal information and putting you in control of how we collect and process your personal information.

Scope

This Privacy Notice covers our processing of personal information, personally identifiable information, and personal data (for simplicity, referred to as personal information), as required by numerous laws and regulations in the United States.

Personal Information Purpose(s), Collection, and Disclosure

Bosch collects the personal information described below. If any additional personal information is collected by Bosch, we will provide any required notice(s), and where applicable, obtain any required consent(s), in accordance with applicable laws.

Information You Create or Directly Provide to Us

· Communication and Customer Support: We collect personal information when you request information from us, contact our customer service, or sign up for email newsletters or marketing communications. The personal information collected includes your name, email address, phone number, address, Case ID, call recordings when you contact our customer services, and any other information you choose to voluntarily provide to us. Personal information collected from you is used for the purposes of customer support, fulfilling or meeting the reason you provided the information and dispute resolution. We disclose this data to contracted service providers performing work on our behalf such as hosting providers and customer service agencies

· To provide additional services: We collect personal information when you enter your address in our locator tools. The personal information collected includes approximate geolocation. Personal information collected from you is used for the purposes of finding an installer or commercial rep. We disclose this information to contracted service providers performing work on our behalf such as hosting providers and locator services.

Information We Collect Indirectly as You Use Our Services

· Device and Network Information: When accessing our Services, we collect personal information about your device. The personal information collected includes device’s hardware model, browser type, IP address, operating system version, language settings, unique device identifiers, advertising identifiers, serial numbers, device screen size, usage and traffic data, how your device interacts with the Services, network information, and mobile network data. Personal information collected from you is used for the purposes of technical administration of Bosch and Bosch affiliate websites, mobile applications and/or Services and maintaining the safety, security, and integrity of our websites, products and Services, databases and other technology assets, and business. We disclose this information to contracted service providers performing work on our behalf such as hosting providers, marketing providers, and analytic providers.

· Location Information: We collect personal information about your approximate location information based on your IP address. You do not have to grant this permission to use our Services. However, your decision to decline permission may impact the website’s functionality. This may impact functionality such as your ability to interact with certain features of the website. This personal information is used for the purposes of validating your region. We disclose this personal information to contracted service providers performing work on our behalf such as hosting providers and analytics providers.

· Usage Information: We collect personal information about your activity on our website through log files, cookies, web beacons, and other tracking technologies. The personal information collected includes access dates and times, pages or screens viewed, duration you spent on a page or screen, searches you conduct within the Services, information about activity on a page (such as files downloaded and links clicked), other system activity, your use of any external links within our Services, your Internet Service Provider, Mobile Advertising ID, media access control (MAC) address, and identifiers associated with the browser cookies, web beacons, and similar technology we deploy on our Services. See Cookie Section below. This information is used for the purposes of analytics, marketing, and security administration. We disclose this information to contracted service providers performing work on our behalf such as hosting providers, marketing providers, and analytics providers.

In addition to the purposes listed above, personal information collected may be used for:

· Compliance with legal and/or regulatory requirements.

· Evaluating or conducting a merger, sale of assets, consolidation or restructuring, financing or acquisition of all or a portion of any Bosch business, asset or opportunity by, with or into another business, entity or company.

· Technical administration and maintaining the safety, security, and integrity of our websites, products and services, databases and other technology assets, and business.

Sale or Sharing of Personal Information

We do not sell your personal information for monetary or other valuable considerations.

We share your personal information for the purposes of cross-context behavioral advertising, profiling, and targeted advertising with the following third parties:

· Social Networks

· Data Analytics Providers

· Media and Marketing Agencies

To exercise your right to opt-out, submit a request to us via the “Your Privacy Choices” link or via this email privacy.policy@us.bosch.com.

Sensitive Personal Information Collection and Opt-Out

We do not collect sensitive personal information. Therefore, we don’t have an opt-out to Limit the Use of your Sensitive Personal Information.

Retention of Personal Information

We will retain your personal information to accomplish the purpose(s) for which it was collected and to comply with legal obligations.

We will not retain your personal information in an identifiable form when the purpose(s) for collection have been accomplished and there are no business or legal requirements for retaining your personal information. Your personal information will be destroyed, deleted, de-identified, and/or removed from our systems.

Use of Links to Affiliated and External Sites

The website may contain links to other websites. Your use of these websites is not covered by our Privacy Notice. You are encouraged to review the privacy notice(s) of the linked websites for more information about their privacy practices and your privacy rights.

Use of Cookies, Analytics, and Other Similar Technologies

We distinguish between cookies and similar technologies that are required for your convenience and those that are not. Bosch makes it possible to control the use of cookies and other similar technologies that are not technically required.

We use the following services:

· Google Analytics: To track website performance and user engagement. Bosch has enacted Google’s Restricted Data Processing and does not share your personal information with Google.

· Google Tag Manager: Administration of website tags for conversion tracking, site analytics, and remarketing.

· Google Ads: Placement of advertisements, remarketing, and conversion tracking

· Google Maps: This website uses map services from Google Maps. This website uses map services from Google Maps, which may trigger further data processing operations over which we have no control. If you do not want any data transfer to take place, do not use the map services within the website.

· Kameleoon: Evaluate your use of the website and to compile reports on website activities so that we can regularly improve our offering.

· Bing Ads Conversion Tracking Pixel: To track and measure the effectiveness of advertising campaigns on the Bing search engine.

· HotJar: Hotjar is a technology service that helps us better understand our users and this enables us to build and maintain our service with user feedback. Hotjar collects data on our users’ behavior and their devices.

· Facebook Plugin: To create a direct connection to Facebook which provides information on your activity. If you do not want any data transfer to take place between us and the social networks, do not log in via the social registration services.

· LinkedIn Plugin: To create a direct connection to LinkedIn which provides information on your activity. If you do not want any data transfer to take place between us and the social networks, do not log in via the social registration services.

· Pinterest Plugin: When you use the Pinterest content, such as the bookmark button, Pinterest may receive log data containing data of the website you visited.  If you do not want any data transfer to take place between us and the social networks, do not log in via the social registration services and do not use Pinterest content on the website.

· X (formerly Twitter) Plugin: When you use the X content, such as an embedded timeline or X buttons, X may receive log data containing data of the website you visited. If you do not want any data transfer to take place between us and the social networks, do not log in via the social registration services.

· Instagram Plugin: To create a direct connection to Instagram which provides information on your activity. If you do not want any data transfer to take place between us and the social networks, do not log in via the social registration services.

· LinkedIn Insight Tag: Track conversions, retarget website visitors, and learn aggregate insights about categories of members interacting with ads.

· Reddit Pixel: Personalizes content and advertisements based on your use of Reddit.

· Facebook Pixel: Measure website traffic and ad effectiveness, create personalized advertisement and optimize ad campaign performance.

· LinkedIn Pixel: Measure website traffic and ad effectiveness, create personalized advertisement and optimize ad campaign performance.

· Merkury Tag: collect, organize, and activate customer data while respecting privacy regulations. Merkury helps brands recognize users across different devices and platforms without relying on third-party cookies.

Cookies for your convenience will be deleted after a period of 365 days or when you delete your browsing history. Cookies and similar technologies provided by third parties will be retained until the provider’s designated expiration date, which may be retained up to 2 years. You can opt out of third-party cookies by adjusting your browser settings or using tools provided by the third parties. You can opt-out and manage your preferences at any time through “Your Privacy Choices.”

Do Not Track Signals and Universal Opt-Out Mechanisms

When activated in your browser, our website recognizes your Global Privacy Control (GPC) settings. No other browser opt-out tracking settings are recognized.

International Transfer within Bosch

When processing your personal information, we may transfer your personal information to our parent company, Robert Bosch GmbH located in Germany, or to any other Bosch affiliates throughout the world. Accordingly, your personal information may be accessible to courts, law enforcement and national authorities in countries other than the country in which you reside.

Children’s Privacy

Bosch does not knowingly collect or use any personal information from online visitors under the age of 16. Bosch does not knowingly allow visitors under the age of 16 to participate in any promotions or contests made available from time to time.

California “Shine the Light” Privacy Rights

California’s “Shine the Light” law permits Bosch customers who are residents of California to annually request a list of their personal information (if any) that Bosch disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties.

Your Rights

Dependent on the state of your residence * you may be provided the following data subject rights:

Right to Confirm/Know/Disclose - what personal information Bosch has collected about you, the sources from which it is collected, the purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it.

Right to Access/Obtain - a copy of the personal information collected about you, including information about automated decision making.

Right to Data Portability - receive your personal information in a transferable and readily usable format, when technically feasible.

Right to Delete - your personal information, subject to certain exceptions.

Right to Correction - of the personal information we maintain about you.

Right to Opt-Out - of sale or sharing of personal information to third parties, targeted advertising, profiling, automated decision making, collection of sensitive personal information, or collection of personal information through the operation of a voice or facial recognition.

Right to Question the Results of Profiling - and to review your personal information used for profiling, to question the results, to be informed of the reasons of the resulting decision, and to be informed of what actions you can take to secure a different decision.

If a decision was based on inaccurate personal information, you have the right to have the personal information corrected and the profiling decision reevaluated.

Right to Restrict Sensitive Personal Information - to limit the use and disclosure or to opt-out.

Right to Appeal - our decision regarding your submitted request.

Right to not be discriminated against for exercising your privacy rights

* States include California, Colorado, Connecticut, Delaware, Florida, Iowa, Maryland, Minnesota , Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia

How to Exercise Your Rights

We will not discriminate against you for exercising any of your rights. If you choose to exercise your rights, use one of the following options:

· Calling us at (888-43-BOSCH (888-432-6724))

· Sending an email to: privacy.policy@us.bosch.com

To assist Bosch to process your request, the following information is required: your full name, phone number, address, and include any additional information about your previous contact with Bosch (e.g. contact point with Bosch, screenshots, reference to a specific product/newsletter) may help expedite the request. We can only respond if we can verify your identity or authority to make the request.

Depending on your state of residence you may request certain rights through an authorized agent. When an authorized agent submits your request, we may also require that you:

1. Provide us a copy of your written permission for the authorized agent to submit the applicable request; and

2. Verify your own identity directly with us.

When you have provided your authorized agent with a power of attorney pursuant to California Probate Code Sections 4000 to 4465, we may require a copy of such power of attorney before fulfilling any request.

Response Timing and Format

We respond to all verifiable consumer requests within forty-five (45) days or sooner when required by law. In some cases, more time may be needed to provide a response. We will inform you of the reason and extension period in writing. If we cannot comply with a request, a written response explaining the reasons will be provided.

We do not charge a fee to process or respond to your verified consumer request, unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Filing a Complaint

You may file a complaint with the applicable state Attorneys General Office or regulatory agency.

Controller Contact

To obtain more information on our products or Services, you may submit your inquiry using one of the contact methods below:

Email: Bosch.HomeComfort@us.bosch.com

Postal Address: ATTN: Marketing

65 Grove Street

Suite 201

Watertown, MA 02472

You may also contact as follows:

Phone: 1-603-552-1100

Website: General Inquiries

Data Protection Incident

Please use the Data Protection Incident Reporting System to notify us of any data protection incidents.

Changes to Privacy Notice

Bosch reserves the right to revise this privacy notice as required. Published revisions are effective immediately, unless we are required to provide direct notice or obtain your consent pursuant to applicable laws.

The effective date of this privacy notice is 09/14/2026.