DATA PROTECTION POLICY

1. Who processes your personal data?

The controllers of your personal data are:

Company: ConnectLife, data technologies, LLC

Address: Partizanska cesta 12, 3320 Velenje, Slovenia

e-mail: privacy@connectlife.io

Company: Hisense Gorenje Europe, d.o.o.

Address: Hrvaška ulica 4, 1000 Ljubljana, Slovenija

Phone: +386 (0) 3 899 10 00

A company ConnectLife, data technologies, LLC Partizanska cesta 12, 3320 Velenje, Slovenia, (hereinafter: Company), is acting as core data controller of companies producing and/or trading appliances of the brands within companies of Hisense Europe Group (Hisense, Gorenje and Asko, ATAG, Pelgrim, Etna, Körting, Mora, Upo).

A company Hisense Gorenje Europe, d.o.o. is a company that locally offers products and appliances produced by companies of Hisense Europe Group.

Other companies within Hisense Europe Group may be processors of your personal data. As such the companies of Hisense Europe Group and distributors are collecting and in other way processing your personal data and their means of data processing (e.g. websites, CRM programs, online tools, etc) are for the purpose of this policy stated as our means. The list of other companies of Hisense Europe Group, distributors and their external contractors is available here.

2. Method of obtaining data

We obtain your personal data based on using our websites or applications, through cookies and other online tools, by filling out forms on our website or in physical form, through telephone and electronic communication, through other written communication and/or through social networks.

3. Which of your personal data do we process and for what purpose?

In this section, we explain which data we process and for what purpose, depending on the individual activity:

3.1. Purchase on the Company's website or collection of the products ordered online

In order to purchase products via the Company's website or to collect products ordered online, we must collect and process some of your personal data (e.g. delivery address), as this is the only way we will be able to process your order.

To enable a purchase on the Company's website or collection of products ordered online, we will process the following data:

• customer ID,
• title (Mr / Mrs),
• first name and last name,
• language of communication,
• invoicing address and delivery address (if the delivery option is selected),
• e-mail address,
• phone number,
• order number, value,
• method of payment,
• bank account number and/or credit card number,
• product number,
• serial number of the product,
• purchase history.

The purpose and basis of the processing of the above data is to ensure the possibility of delivery or acceptance of the order, payment of the order, information about the status of your order and issuing an invoice for the completed purchase. By placing an order, you have made a purchase, which legally means that you have entered a sales contract, and to fulfil our part of the obligations arising from the sales contract, we must process your personal data (processing is necessary for the performance of a contract), and at the same time, we are obliged by law to issue an invoice for the completed purchase (processing is necessary for compliance with a legal obligation).

Processing period: Data related to the purchase itself is stored as long as you can exercise certain rights in connection with your purchase according to the competent law (period set forth in the law in which it is possible to lodge the claim with a competent court). In accordance with tax and accounting regulations, data for issuing invoices are kept for the period according to local legislation. 

What happens if you do not provide personal data? In the case of online shopping or collecting the products ordered online, we cannot carry out your purchase or collection of the products without obtaining above listed personal data. Still, you can buy and collect the products directly in our physical store or in the stores of contractual partners that enable the latter.

3.2. Customer support in troubleshooting and warranty claims

In order to provide customer support for troubleshooting and warranty claims, we need to collect and process some of your personal data, as this is the only way we can meet our legal obligations in this regard.

In order to provide customer support for troubleshooting and warranty claims, we will process the following data:

• name and surname,
• e-mail address,
• phone number,
• order number,
• details of purchased products,
• date of purchase,
• address,
• language of communication,
• date of claim,
• service history,
• duration of warranty and extended warranty,
• type of warranty,
• warranty related only to specific parts of the product,
• e-mail communication,
• chat transcript,
• video conference recording (in case of video conference),
• pictures (in case user sends us pictures of the product),
• in the case of a call to the call centre, a recording of the telephone call.

In case of acquiring your consent for use of Visual Remote Assistant we may also process data about session date and time, location and video received.

In case of acquiring your additional consent for data analysis related to the use of products through the Connectlife applications (as defined within this privacy policy) we may also process those data for the purpose of customer support for troubleshooting and warranty claims, where those data may be forwarded also to service organizations.

The purpose and basis of processing the above data is compliance with the legal provisions regarding the seller's warranty for the purchased products (processing is necessary for compliance with a legal obligation) and the fulfilment of the purchase agreement regarding the purchased products (processing is necessary for the performance of a contract). As defined above processing of personal data for use of Visual Remote Assistant and for data analysis may be performed only based on your consent.

Processing period: Data is kept for the duration of the possibility of asserting claims from the contract and from the warranty according to the competent law (period set forth in the law in which it is possible to lodge the claim with a competent court). Phone call recordings are kept for the period according to local legislation. Personal data for use of Visual Remote Assistant and for data analysis are stored until the consent is revoked where you can withdraw your consent at any time. The data will cease to be stored within 1 month of receiving the revocation of the consent.

What happens if you do not provide personal data? Non-providing the above listed personal data may affect provision and quality of customer support regarding the use of our products, or the way of resolving warranty claims. However, depending on the channel and reason of communication we may not need all above listed data. 

3.3. Notification related to products back in stock

In the event when certain product is out of stock individual can insert his or her email in order to be notified when the product is back in stock. 

In order to notify individual about the availability of the product we will process the following data:

• e-mail address.

The purpose and basis of the processing of your personal data is to notify you about the availability of the product. The processing of personal data is carried out only based on your consent.

Processing period: Until the consent is revoked where you can withdraw your consent at any time. The data will cease to be stored within 1 month of receiving the revocation of the consent or within 1 month after the notification about the availability of the product is sent to the individual.

What happens if you do not provide personal data? In case of non-providing your e-mail address we cannot notify you about product back in stock, however for the same purpose you may check our website regularly.

3.4. User account on the Company's website or Connectlife mobile app

Any individual can create a user account on the website that is intended to monitor the progress of the order, view the purchase history or give an opinion about the product. Within the settings of the user account, it is also possible to express the will to receive marketing messages or to cancel receiving them. Same access data as for user account on a website can be used for a user account within Connectlife mobile app.

In order to create a user account, we will process the following data:

• user ID,
• e-mail address,
• name and surname,
• phone number,
• address,
• language of communication,
• password,
• food preferences,
• service ticket and service history,
• social network login (in case of establishing user account with social media account: e-mail address, first name, last name, language of communication, photo URL, provider, provider ID),
• account information (login enabled, log, profile update, login location, account created, account access log)
• password (last login, disable login).

The purpose and basis of the processing of your personal data is to ensure access to your account and user authentication. With the request to create a user account, a contractual relationship has been established, and in order to fulfil our part of the contractual obligations, we will process your personal data (processing is necessary for the performance of a contract). Some of the personal data (food preferences) are processed only in case you provide those data, based on your consent and are processed in order to notify you about our proposal for a meal. Some of the personal data (service ticket and service history) are processed in order to fulfil our obligations arising from the purchase agreement regarding the purchased products (processing is necessary for the performance of a contract).

Processing period: We keep your personal data until you delete your account or up to 3 years after the last login to the account. Data processed based on the contract are kept for the duration of the possibility of asserting claims from the contract according to the competent law (period set forth in the law in which it is possible to lodge the claim with a competent court). Personal data that are processed based on your consent are kept until the consent is revoked and you can withdraw your consent at any time. Those data will cease to be stored within 1 month of receiving the revocation of the consent, where in that time period you may still be recipient of our communication.

What happens if you do not provide personal data? It is not possible to create a user account without the above determined personal data. Still, you are not obliged to create a user account (i.e. to provide personal data for such a purpose) to purchase or use our products.

3.5. Registration of the product at our website and Connectlife mobile app

Any individual that bought any of our product can register the product at our website or through Connectlife mobile app within his or her user account. Based on registration the individual acquires simplified access to the instructions for use, our proposals for using the product, information related to warranty, for certain products additionally extended period of warranty and notifications about updates related to Connectlife appliances. For certain products and in limited period of time we occasionally offer also partially refund of the purchase price in case of registration of the product at our website or Connectlife mobile app.

In order to perform registration of the product, we will (besides the data stated in point 3.4.) process the following data:

• product number,
• serial number of the product,
• date of purchase,
• copy of the purchase invoice,
• IBAN number (only for the purpose of partial refund of the purchase price).

The purpose and basis of the processing of your personal data is to enable extended warranty (only related to certain products), grant access to the instructions for use and, our proposals for using the product. By registration of the product, you accept the rules of the registration that is legally treated as contractual relationship and in order to fulfil our part of the contractual obligations, we will process your personal data (processing is necessary for the performance of a contract).

Processing period: We keep your personal data until you delete your registration of the product, while we keep data related to the extended warranty for the duration of the possibility of asserting claims from the contract according to the competent law (period set forth in the law in which it is possible to lodge the claim with a competent court).

What happens if you do not provide personal data? Without above stated data you cannot register the product at our website or Connectlife mobile app. However, each product has at the time of the purchase attached instructions for use and information related to warranty.

3.6. Providing user’s reviews on the website and users feedback related to our product and services

In order to enable the possibility of providing user’s reviews (evaluations, opinions, ratings and comments) on the website, we must collect and process some of your personal data, as we want to share the experiences of actual customers and users with potential customers and users. We may share experiences of actual customers and users of certain product or service from one market also with potential customers and users in other market. 

In order to receive users feedback related to our product and services we may contact you after the product was delivered to you or the service was performed, where providing your feedback is voluntarily.

In order to provide user’s reviews (opinions, ratings and comments) or to acquire users feedback, we will process the following data:

• name or chosen name or review as a guest,
• e-mail address,
• details of purchased products or service performed,
• copy of the purchase invoice
• rating or comment
• review language
• our response
• sentiment analytics of user product reviews.

The purpose and basis of the processing of your personal data is to ensure that the user review of the individual product was given by the person who actually purchased or uses the individual product. The processing of personal data may be carried out based on your consent, while acquiring users feedback related to our product and services within 30 days after the delivery of the product or service performed is based on our legitimate interest which is in this case product improvement, quality assurance and customer satisfaction evaluation.

Processing period: Your personal data will be automatically deleted after 5 years after publishing the user’s review or acquiring user’s feedback. Your opinions, ratings and comments are visible on the website for 5 years after publishing on the website. However, your user review or user feedback will be deleted earlier in case of request for erasure or withdrawal of your consent to such data processing, where in those cases the data will cease to be stored within 1 month of receiving the revocation of the consent.

What happens if you do not provide personal data? You may provide user’s review also anonymously (without providing your personal data). However, without your personal data we may not ensure that opinions, ratings and comments are given only from actual purchasers and users.

3.7. Notifications, personalized offers via digital channels, Marketing and related services

For the purpose of marketing activities and providing information about our products (e.g. sending newsletters, personalized offers, invitations to participate in prize games etc), we need your express consent (divided to specific purpose) and without the latter we will not contact you for the purpose above. As a channel of communication, we can in case of your consent use e-mail, social media or other instant messaging application. For personalized offer (where we can recommend content through ads and notifications) we may based on your consent for personalized offers also use profiling as described within this privacy policy. You can always revoke your given consent in your user account settings, by unsubscribing from receiving messages, by blocking us on social media or within instant messaging applications, by changing cookie settings, or by sending us a request to privacy@connectlife.io.

For the purpose of sending notifications, personalized offers via digital channels and related services, we may process the following data:

• name and surname,
• e-mail address,
• phone number,
• data related to prize games (model, serial number, purchase date, invoice)
• location data of the user obtained from the user's mobile device (anonymously),
• the individual's interests regarding viewing products on websites (anonymously),
• contact information via instant messaging applications,
• purchase history,
• postal code,
• data related to delivery, opening, clicking and unsubscriptions of our messages, (anonymously)
• sentiment analytics of user product reviews.

The purpose and basis of the processing of your personal data is to enable the sending of marketing messages or to present a personalized offer based on your interests or to improve your user’s experience. The processing of personal data is carried out only based on your consent.

Processing period: Until the consent is revoked where you can withdraw your consent at any time. The data will cease to be stored within 1 month of receiving the revocation of the consent where in those time period you may still be recipient of our communication.

What happens if you do not provide personal data? You are not obliged to provide your personal data for marketing purposes (providing consent for personal data processing for these purposes is voluntarily). Still, in such a case we will not be able to notify you about our marketing activities, our products and create personalized  offers for you.

3.8. Information about your activities on our website

For the purpose of improving the functioning of the website, statistical reviews and personalized offers, we also monitor your activities on our website, whereby this data is in anonymized form.

For the purpose of monitoring the activity on our website, we process the following data:

• user account designation,
• purchase history,
• device operating system,
• used browser,
• web address (URL address) of the initial page that you use to access to our website.

The purpose and basis of the processing is to improve the functioning of the website, statistical reviews. We use cookies and similar tracking technologies to track the activity on our site, where use of cookies is allowed only based on your consent. Based on the use of cookies we can use those data for personalized offers but only in case when we acquire additional consent for latter. You can always revoke your given consent in your user account settings, by changing cookie settings or by sending us a request to privacy@connectlife.io.

Processing period: Your personal data acquired by cookies will be automatically deleted after the duration of specific cookies (as defined in cookie policy), while your data used for personalized offers will be deleted in case of revocation of the consent where in those time period you may still be recipient of our communication.

What happens if you do not provide personal data? In case of non-providing above stated data (by consent to cookie policy) we cannot track your activity on our website improve functionality of our website and prepare personalized offer for you.

3.9. Processing of personal data via social networks, instant messaging applications and chat rooms

The company may have established profiles on social networks (e.g. LinkedIn, Instagram, Facebook, TikTok, Twitter,  etc.) or may use instant messaging applications (e.g. WhatsApp, FB Messenger, Viber, etc.) for communication. Social networks and instant messaging applications allow us to promote our products and services or provide customer support. When doing the latter, we can also select categories of individuals on the social network to which we want our promotionsad to refer (in case of specific consent acquired). As such, the Company may be responsible for the protection of personal data that users share with the Company through the aforementioned media, and at the same time, the provider of the individual media is also responsible for the data processing it performs on such media, so users are advised to familiarize themselves with the privacy policy of the individual media.

In the case of visiting the Company's profile on an individual social network or establishing communication via instant messaging applications, we can process the following data:

• if you like, share a post, mark the Company's profile or comment, we receive access to your public profile and the content of your post,
• if you send us a private message on a social network or through an instant messaging application, we obtain information about your public profile, or your contact information and information about the content of the sent message.

When communicating via social networks, instant messaging applications and chat rooms, we will process the following data about you:

• the public profile of the individual on the social network and the content of the publication,
• contact information of the individual in the instant messaging application,
• other data that you will provide to us during the communication.

The purpose and basis of the processing of your personal data is the promotion of the Company's products and the establishment of communication with users of social networks or instant messaging applications. We may contact you only based on your consent, but we can respond to your inquiry based on our legitimate interest, which is satisfying the needs of customers by providing information related to our products. 

Processing period: Your personal data kept by us will be automatically deleted after 1 year since the communication occurred or earlier in case of withdrawing your consent. In case of withdrawing the consent, the data will cease to be stored within 1 month of receiving the revocation of the consent where in those time period we may still process your personal data.

What happens if you do not provide personal data? Without providing your personal data you cannot communicate with us through the aforementioned media, and we cannot respond to your inquiries. 

3.10. Use of products through the Connectlife applications and Data Analysis

In order to enable all the functions of smart devices to users, to understand the needs of users and to determine the efficiency and usage of the device, we collect and process some of your personal data and data about the operation of each device. Use of products through the Connectlife applications is possible only in case of user registration and conclusion of a license agreement.

For user registration and the conclusion of the license agreement, we will process the following personal data:

• title (mr, mrs),
• name and surname,
• language of communication,
• address,
• phone number,
• e-mail address.

During the usage of the device, we will perform data analysis related to the usage, where those data will be processed in anonymous way and without any link to an identified or identifiable natural person. For this purpose, we will anonymously process following data:

• appliance’s data (brand, model, serial number),
• installation date of the device,
• data on pairing the device with our cloud (appliance paired, pairing type and timestamp)
• operation of the appliance (commands sent to appliance, appliance settings, status and statistics, notifications, appliance alarms and errors, service ticket requests, timer and automation)
• data detected by the device's sensors and which are important for the operation of the device (e.g. data regarding technical performance, data related to possible error messages, temperature, humidity, air quality, etc.),
• booking log (for public laundry)
• food images from appliance and time-lapse videos
• user behaviour analytics,
• device booking,
• resource (water, electricity) consumption,
• food and drink storage and preferences.

Only in case when we will acquire your explicit consent, we may link data acquired by data analysis to identified natural person. Such data may be forwarded to service providers for the purpose of customer support for troubleshooting and warranty claims. In case of acquiring your additional consent, we may use those data also for personalized offer where we can recommend content through ads and notifications.

In order to connect the appliance to the cloud via local WIFI users have to insert also data about Service Set IDentifier (SSID) and a password. However, those data are used only for pairing the appliance with Wi-Fi module and are not collected, stored or in any other way processed by us.

The purpose and basis of the processing of your personal data is to ensure the possibility of using all the functions of smart devices and to analyse usage of our appliances. By the request for user registration and the conclusion of the license agreement the contractual relationship is established and in order to fulfil our part of the contractual obligations, we must process your personal data for contractual purposes, while processing your personal data related to usage of our appliance and processing your personal data for personalized offer is based on your consent. You can always revoke your given consent in your user account settings, or by sending us a request to privacy@connectlife.io.

Processing period: Data related to user registration and the conclusion of the license agreement are stored as long as you can exercise certain rights in connection with our contractual obligations (period set forth in the law in which it is possible to lodge the claim with a competent court after the expiry of the license agreement). Data related to the usage of our appliance are stored until the consent is revoked where you can withdraw your consent at any time or until you delete your account where you can delete it at any time. The data will cease to be stored within 1 month of receiving the revocation of the consent or within 1 month since account deletion (as the case may be), where in those time period you may still be recipient of our communication. 

What happens if you do not provide personal data? It is not possible to register a user of the Connectlife application and conclude a license agreement without above stated personal data.

3.11. Cookies and other online tools

If you visit our web page, we may store cookies on your device. For more information on cookies used on our webpage, please see the Cookie Policy.

In addition to cookies, we also use other online tools from the following providers:

Google, namely:

• Google Marketing Platform for the purpose of obtaining data related to website traffic (e.g. number of visitors, pages visited by visitors, time spent by visitors on the website);
• Google Maps for the purpose of using the mapping service Google Maps via API in order to facilitate the location of places specified by the individual on the website;
• Google Tag Manager for the purpose of managing website tags through the user interface and integration of program codes on our websites;
• Google Ads for the purpose of placing advertisements, remarketing and tracking conversions;
• Google Optimize for the purpose of A/B testing and website testing;
• Site Kit for the purpose of improving and monetizing our content on the web page;
• Youtube for the purpose of establishing a connection with YouTube servers, where the use of plugins from YouTube is required;
• Google Analytics for the purpose of collecting data from websites and apps to create reports that provide business insights;
• Google Search Console in order to show the performance of websites on Google Search and how Google sees our website;
• Looker Studio for the purpose of turning data into informative, easy to read, easy to share, and fully customizable dashboards and reports.

The listed online tools are operated by Google Ireland Limited, whereby certain information about an individual's use of the website may also be transferred to a server in the USA, so we suggest that you also familiarize with their privacy policy, which is available here. If you are a Google Account holder and have consented to the customization of ads, we may also obtain reports on the effectiveness of our advertising measures (including cross-device reports), demographic information and interests of individuals, as well as cross-device online advertising functions.

Meta, namely:

• Meta business suite as a social media management tool for Facebook and Instagram for the purpose of creating and scheduling content to responding to engagement to analyzing insights
• Meta pixel for the purpose of placing advertisements, remarketing and tracking conversions.

The listed online tools are operated by Facebook Ireland Limited, with registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland; whereby certain information about an individual's use of the website may also be transferred to a server in the USA, so we suggest that you also familiarize with their privacy policy, which is available here. If you are a Facebook or Instagram account holder and have consented to the customization of ads, we may also obtain reports on the effectiveness of our advertising measures (including cross-device reports), demographic information and interests of individuals, as well as cross-device online advertising functions.

3.12. Remarketing, tracking and similar technologies 

We and our third-party service providers use cookies to inform, optimize and serve ads based on your past visits to our web page or our mobile apps in order to advertise on third-party websites to you. For this purpose we use:

- Google Ads, provided by Google and you can opt-out of this by visiting the Google Ads Settings page: https://adssettings.google.com/authenticated, and

- Facebook Retargeting, provided by Meta and you can opt-out this by visiting the Facebook site where you have to log in and go to Settings > Ads > Ad Settings. On the app, go to Setting & Privacy > Settings > Ad > Ad Preferences > Ad Settings. Then choose the Not Allowed   

To see how our web page and mobile app is performing we use conversion beacons, tags, scripts and pixels, that perform a short line of code to tell us when you have clicked on a particular button or reached a particular page. The use of these technologies allows us to record that a particular device, browser, or application has visited a particular webpage. 

If you enable location-based services on your computer or mobile device in connection with your use of the web page or mobile app, you expressly consent to us collecting the geolocation (which may include specific longitude and latitude) of your device. This information will be used as set forth in this Data Protection Policy, including to provide specific advertising content or messages based on your location.

We and our third-party service providers may use the information that we collect about you (information from our web page or mobile app, through your device(s), or from a third party) to help us and our third-party service providers identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.). We, and our third-party service providers also may use the cross-device use and other information we learn about you to serve targeted advertising on your devices and to send you emails. These third-party cookies and other technologies are governed by each third party’s specific privacy policy, not this one.

4. Collection of children’s personal data 

We are committed to protect the personal data of children and recognize that parents or legal guardians may use our services or purchase our products for family use, including by minors. As such, our services and products are not intended for use by individuals under the local adult legal age minimum, and we will not knowingly collect personal data from individuals under such age for any purpose, nor will we accept registration from such individuals. In some cases, particularly where information is collected electronically, we may not be able to determine whether information was collected from children under local legal age, and we treat such information as though it were provided by an adult. If we learn that a child under the local legal age has provided any personal data, we will use commercially reasonable efforts to delete such information immediately. 

5. Profiling

Profiling means any form of automated processing of personal data that involves the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyze or predict the personal taste, interests, behavior or location of that individual.

The company performs profiling if you have given your consent for personalized direct marketing. Profiling is carried out using various methods of statistics, mathematics or predictive analysis, which allows us to predict your needs and prepare suitable offers based on this. As part of profiling, we analyze your demographic data, such as location, and data on purchases and device usage, on the basis of which we place you in an individual profile and only send you offers that we believe match your needs and habits.

6. The existence of automated decision-making

We do not process your personal data using means for automated decision-making that could have legal consequences for you.

7. How do we protect your personal data?

In order to protect your personal data, we have introduced a number of technical and organizational measures, namely:

• Measures for ensuring ongoing confidentiality, integrity, availability and resilience of processing systems and services
• Measures for ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
• Processes for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures in order to ensure the security of the processing
• Measures for user identification and authorisation
• Measures for the protection of data during transmission
• Measures for the protection of data during storage
• Measures for ensuring physical security of locations at which personal data are processed
• Measures for ensuring events logging
• Measures for internal IT and IT security governance and management
• Measures for ensuring data minimisation, data quality and limited data retention
• Measures for allowing data portability and ensuring erasure

5. Profiling

Profiling means any form of automated processing of personal data that involves the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyze or predict the personal taste, interests, behavior or location of that individual.

The company performs profiling if you have given your consent for personalized direct marketing. Profiling is carried out using various methods of statistics, mathematics or predictive analysis, which allows us to predict your needs and prepare suitable offers based on this. As part of profiling, we analyze your demographic data, such as location, and data on purchases and device usage, on the basis of which we place you in an individual profile and only send you offers that we believe match your needs and habits.

6. The existence of automated decision-making

We do not process your personal data using means for automated decision-making that could have legal consequences for you.

7. How do we protect your personal data?

In order to protect your personal data, we have introduced a number of technical and organizational measures, namely:

• Measures for ensuring ongoing confidentiality, integrity, availability and resilience of processing systems and services

• Measures for ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident

• Processes for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures in order to ensure the security of the processing

• Measures for user identification and authorisation

• Measures for the protection of data during transmission

• Measures for the protection of data during storage

• Measures for ensuring physical security of locations at which personal data are processed

• Measures for ensuring events logging

• Measures for internal IT and IT security governance and management

• Measures for ensuring data minimisation, data quality and limited data retention

• Measures for allowing data portability and ensuring erasure

8. Who processes your personal data and with whom do we share it?

Your data are processed either within internal software programs (e.g. SAG and Hisense CRM) or with use of tools provided by external providers (SAP CDC, Hybris, Salesforce, Mailchimp, SiteKit).

Other related entities of Hisense may have access to your personal data, as individual companies are sellers or manufacturers of the product you purchased, and individual companies provide adequate support for the Company's operations. Related entities of Hisense seated outside of EU/EEA appointed company VERDATA Datenschutz GmbH & Co. KG, Roemerstr. 12, D – 40476 Duesseldorf, Germany as their representative according to Article 27 of GDPR. Access to your personal data may have in particular the following related entities of company Hisense:

 Hisense Gorenje Europe, poslovne storitve, d.o.o., Hrvaška ulica 4, 1000 Ljubljana 

 Gorenje, d.o.o., Partizanska cesta 12, 3320 Velenje

 Hisense Home Appliance Group Co., Ltd. Qingdao Branch, F3, Building 3, Section C, Hisense R&D Centre, 399, Songling Road, Qingdao, Shandong, China.

The Company may also transfer personal data to external contractors (mainly for the purpose of ensuring payments, transportation and other matters related to your order etc.). In such a case the Company undertakes to enter into an agreement with the external contractors that ensures adequate security of your personal data, and the external contractors can process your data only for the purpose for which they were obtained.

Your personal data may also be the subject of transfer to external contractors in third countries. In this case the Company will ensure adequate safeguards if the external contractors are seated or provide services relevant to the protection of personal data in a third country that does not offer the same level of data protection as GDPR and undertake other obligations set forth by the GDPR regarding such kind of transfer.

In particular, we may transfer your personal data to other companies in the Hisense group and our distributors that sell our products and services at certain markets or provide other services in relation to business support, complaints of ordered goods or customer support. List of our companies in certain countries and their external contractors that may have access to the personal data of users from certain market is listed in the Appendix [URL].

We may transfer your personal data acquired based on your consent according to this data protection policy to advertising and social networks, in particular to:

 Google Ireland Limited (registered number: 368047), with registered office at Gordon House, Barrow Street, Dublin 4, Ireland; the company's privacy policy is available here: LINK

 Facebook Ireland Limited, with registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland; the company's privacy policy is available here: LINK

 Pinterest, Inc., with registered office at 505 Brannan Street San Francisco, CA 94107 United States, the company's privacy policy is available here: LINK

 LinkedIn as a tool provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA, LinkedIn's privacy policy is available here: LINK

To process personal data, we also use the services of other external contractors.   External contractors include:

 cloud computing service providers and other technology support providers such as

o Microsoft Azure, provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA, the company's privacy policy is available here: LINK

o SAP Hybris provided by SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf/Germany, the company's privacy policy is available here: LINK 

o Salesforce Marketing Cloud and Salesforce Service Cloud provided by Salesforce, Inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States, the company's privacy policy is available here: LINK

o Cloudera provided by Cloudera, Inc., 5470 Great America Parkway, Santa Clara, CA 95054, USA, the company's privacy policy is available here: LINK

o Tuya IoT platform provided by Tuya Global Inc., 3979 Freedom Circle, Suite 340, Santa Clara, CA 95054, the company's privacy policy is available here: LINK

o DigitalOcean, 101 6th Ave New York, NY 10013, the company's privacy policy is available here: LINK

o Cloudflare France SAS, 6 place de la Madeleine, 75008 Paris, the company's privacy policy is available here: LINK

o Amazon Web Services, Inc., 410 Terry Avenue North Seattle, WA 98109 United States, the company's privacy policy is available here: LINK

 marketing tools providers that help us optimize the web and personalize content and offers for you, such as: 

o AV STUDIO d.o.o., Koroška cesta 55, 3320 Velenje, the company's privacy policy is available here: LINK

o Agilcon, d.o.o., Letališka cesta 32, 1000 Ljubljana, the company's privacy policy is available here: LINK

o ZenLab d.o.o., Polule 77C, 3000 Celje, the company's privacy policy is available here: LINK

o Columbus Global Lautrupvang 6, Ballerup, Denmark 2750, the company's privacy policy is available here: LINK

o Sprinklr, Inc. 29 West 35th Street, New York, NY 10001, USA, the company's privacy policy is available here: LINK

o Freshworks Technologies B.V. Stationsplein 32, 3511 ED Utrecht, the company's privacy policy is available here: LINK

o "eXpoint" SIA, rīvības street 76-34, Riga, LV-1001, the company's privacy policy is available here: LINK

o Mailchimp as a tool provided by Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, the company's privacy policy is available here: LINK

o 24TTL B.V., Amsterdam, Noord-Holland, The Netherlands, the company's privacy policy is available here: LINK

o eStoreMedia sp. z o.o., Aleja Komisji Edukacji Narodowej 18, 02-722 Warszawa, Poland, the company's privacy policy is available here: LINK

o SiteOne Landscape Supply, Inc, 300 Colonial Center Parkway Suite 600 Roswell, GA 30076 United States, the company's privacy policy is available here: LINK

o Campaign Monitor Holdings Pty Ltd, 5 STAPLETON AVE SUTHERLAND NSW C3 2232, the company's privacy policy is available here: LINK

o Splunk Inc., 270 BRANNAN STREET SAN FRANCISCO CA 94107, the company's privacy policy is available here: LINK

o Twilio Inc., 101 Spear Street, Ste 500, San Francisco, CA 94105, the company's privacy policy is available here: LINK

 call centres and providers of tools for managing and recording telephone calls, especially:

o Hisense Europe Customer Care Centar, Strahinjića bana 9, 11000 Beograd, Serbia;

o 3CX, 4010 Boy Scout Boulevard, Suite 325, 33607, Tampa, Florida, USA, the company's privacy policy is available here: LINK

o Diabolocom SAS, 20, rue de Paix - 75002 Paris, France, the company's privacy policy is available here: LINK

o Cisco Systems, Inc., 170 West Tasman, Dr.San Jose, CA 95134 USA, the company's privacy policy is available here: LINK.

 external service providers for the maintenance and repair of our devices.

 processors of external communication, especially communication via SMS messages and chat rooms, especially:

o LiveChat, Inc. (101 Arch Street, 8th Floor, Boston MA 02110, United States of America, the company's privacy policy is available here: LINK

o Jivochat as a tool provided by Lucas Loureiro Carvalho Suporte Tecnico ME., the Rua Neves Armond, 140, Sala 301, Praia Do Suá. Vitória, ES/Brazil, the company's privacy policy is available here: LINK

o TargetFirst, 23 rue de la Croix Lormel, 22190 PLERIN, the company's privacy policy is available here: LINK 

o

 companies that prepare surveys for us regarding user satisfaction with our products and services, especially:

o Trustpilot A/S, Pilestraede 58, 5th floor, DK-1112 Copenhagen K, the company's privacy policy is available here: LINK.

o Bazaarvoice, Inc., 10901 Stonelake Blvd, Austin, TX 78759, the company's privacy policy is available here: LINK

o Reevoo, 2nd Floor Walbrook Wharf, 78-83 Upper Thames Street, London EC4R 3TD, the company's privacy policy is available here: LINK

o Momentive Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Rd Ballsbridge, Dublin 4, Ireland, the company's privacy policy is available here: LINK

From time to time, the company organizes prize games and similar promotional campaigns together with third parties, to whom it may also provide individual personal data, whereby you will be informed of this prior to the collection of personal data.