FOLLOW US ON:
The data controller responsible in accordance with the purposes of the General Data Protection Regulation (GDPR) of the European Union and other national data protection laws of the Member States as well as other data protection regulations is:
LEDVANCE GmbH
Parkring 1-5
85748 Garching
Germany
Telephone: +49 89-780673-100
E-mail: contact@ledvance.com
https://www.ledvance.de
The designated data protection officer is:
Mr. Matthias Lindner
bDSB LEDVANCE
c/o intersoft consulting services AG
Beim Strohause 17
20097 Hamburg
Germany
privacy@ledvance.com
The following authorizations are required to implement the functions in the app:
On this page we inform you about the privacy policy of the LEDVANCE SMART+ App for Android and iOS ("App"). The App is offered by LEDVANCE GmbH, Parkring 1-5, 85748 Garching near Munich, Germany ("LEDVANCE GmbH", "we" or "us").
The Smart+ App is a general smart home app for LEDVANCE Smart+ products including the LEDVANCE Bluetooth products and LEDVANCE WiFi products.
With the Smart+ App, users are able to configure both LEDVANCE Smart+ Bluetooth devices and WiFi devices together, manage them, control them and schedule them.
1. Scope of processing personal data
The app is used for technical control of SMART+ devices and provides direct technical support for users. Multi-user access is enabled.
The processing of personal data takes the form of creating a user account. The data is also stored for user support. The following personal data may be collected:
The following data is processed when the app is started:
The servers automatically collect and store information in so-called server log files, which your device automatically transmits when you use the app. The stored information is:
Third parties do not have access to server log files.
This data is not exchanged with other data sources without prejudice to an exchange of data necessary for using other devices like Google Assistant or Amazon Alexa.
2. Purpose of the processing
The processing of personal data allows the users of the App to have technical control of SMART+ devices and direct contact for technical support.
3. Legal basis for the processing of personal data
The processing of the aforementioned data is necessary for the execution of the user contract, which forms the basis for the use of the app and the related services. This includes processing in order to safeguard your data and error detection as well as supporting users. Therefore, legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR.
There may be situations where we do not only use your data to fulfil the contract (e.g., to fulfil obligations to public bodies). The legal basis in those cases is either your consent or, depending on the situation, another legal basis within the meaning of Art. 6 GDPR.
In some cases the processing of technical data serves to safeguard a legitimate interest of our company in providing a functional application for users and is therefore based on Art. 6 para. 1 sentence 1 lit. f GDPR as the legal basis for the processing.
4. Duration of storage
The personal data will be stored until the account is deleted, exclusively for the above-mentioned purpose. With the deletion of the account by the user all data will be removed.
5. Right to withdraw your consent
In case you granted consent to us regarding processing your personal data, you are entitled to withdraw your data protection consent at any time with future effect. The withdrawal of the consent shall not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
In order to do so, please send an email to: privacy@ledvance.com
6. Objection and erasure
Pursuant to Article 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 para. 1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. Whether or not the objection is successful, shall be determined through the balancing of interests.
The user is given the opportunity to object to the processing by e-mail request.
In order to do so, please send an email to: privacy@ledvance.com
By deleting the account all data will be removed.
1. Description and scope of data processing
Each time our app is accessed, our system automatically collects data and relevant information from the computer system of the calling device.
The following data is collected:
This data is stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary for the delivery of the app to the device of the user. For this purpose, the user’s IP address must be kept for the duration of the session.
The storage in logfiles is done to ensure the functionality of the app. The data is also used to optimise the app and to ensure the security of our IT systems. An analysis of the data for marketing purposes does not take place.
3. Legal basis for data processing
The processing of the aforementioned data is necessary for the execution of the user contract, which forms the basis for the use of the app and the related services. Hence the legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR. In addition for the aforementioned purposes, our legitimate interest lies in the processing of data in compliance with Art. 6 para. 1 s. 1 lit. f GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The session is complete when the collection of data for the provision of the app is accomplished.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is not possible.
5. Objection and erasure
Pursuant to Article 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 para. 1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. Whether or not the objection is successful, shall be determined through the balancing of interests.
The user is given the opportunity to object to the processing by e-mail request.
In order to do so, please send an email to: privacy@ledvance.com
1. Description and scope of data processing
Our app uses cookies. Cookies are text files that are stored in the internet browser or the internet browser on the user’s device. If a user calls up the app, a cookie can be stored on the user’s operation system. These cookies contain a string of characters that allows the browser to be uniquely identified when the app is reopened.
We use cookies to make our app more user-friendly. Some elements of our app require the calling browser to be identified even after a page break.
The following data is stored and transmitted in the cookies:
The user data collected in this manner is pseudonymised by technical measures. It is therefore not possible to assign the data to the user accessing the site. The data is not stored together with other personal data of the users.
2. Purpose of data processing
The purpose of using technical cookies is to simplify the use of app for users. Some functions of our app cannot be offered without the use of cookies. These require that the device is recognised even after a page change.
We need cookies for the following applications:
The user data collected by technical cookies are not used to create user profiles.
3. Legal basis for data processing
The legal basis for the processing of personal data using technical cookies is Art. 6 Para. 1 S. 1 lit. f GDPR.
4. Duration of storage and possibility of objection and erasure
Cookies are stored on the user's device and transmitted to our server by the user. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our app, it is possible that not all functions of the app can be used to their full extent.
The app is hosted on servers of a service provider commissioned by us.
Our service providers Cloud built on AWS – Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States.
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you use the app. The stored information is:
This data will not be merged with other data sources.
The server of the app is geographically located in Frankfurt, Germany. Nevertheless, we cannot rule out the possibility that your data may also be processed in the USA. The USA currently does not have an adequate level of protection, which may result in security risks.
We make sure that the requirements under the GDPR concerning transfers to third countries are met. Therefore, transfers may only take place if the special requirements of Art. 44 - 49 GDPR are fulfilled.
To protect data, AWS uses, among others, Standard Contractual Clauses (SCC). These were provided by the EU Commission and are intended to ensure that the data transfer complies with the protection standards even if your data is transferred to and stored in third countries such as the USA.
The data is collected on the basis of Art. 6 para. 1 lit. f GDPR.
The apps operator has a legitimate interest in the technically error-free presentation and optimization of his app - for this the server log files must be recorded.
We use the IP address and other information provided by the user (e.g. the postal code used for registration or ordering) to approach regional target groups (so-called "geotargeting").
The regional target group approach is used, for example, to automatically display regional offers or advertisements that often are more relevant to users. The legal basis for the use of the IP address and any other information provided by the user (e.g. postal code) is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in ensuring a more precise target group approach and thus providing offers and advertising with greater relevance for our users.
Part of the IP address and the additional information provided by the user (e.g. postal code) are merely processed and not stored separately.
You can prevent geotargeting by, for example, using a VPN or proxy server that prevents accurate localization. In addition, depending on the browser you are using, you can also deactivate a location localisation in the corresponding browser settings (as far as this is supported by the respective browser).
We use geotargeting on our app for the following purposes:
1. Description and scope of data processing
We offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is collected as part of the registration process:
2. Purpose of data processing
Registration of the user is required for the provision of certain content and services on our app.
3. Legal basis for data processing
The processing of the aforementioned data is necessary for the execution of the user contract, which forms the basis for the use of the app and the related services. Hence the legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR. In addition for the aforementioned purposes, our legitimate interest lies in the processing of data in compliance with Art. 6 para. 1 s. 1 lit. f GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This is the case for the data collected during the registration process if the registration is cancelled or modified on our app.
5. Objection and erasure
Pursuant to Article 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 para. 1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. Whether or not the objection is successful, shall be determined through the balancing of interests.
The user is given the opportunity to object to the processing by e-mail request.
In order to do so, please send an email to: privacy@ledvance.com
6. Account deletion
As a user you have the possibility to cancel the registration at any time. You can request a change to the data stored about you at any time.
The user can request the deletion of his account within his account via a corresponding button.
Amazon CloudFront
1. Description and scope of data processing
We use functions of the Amazon CloudFront content delivery network of Amazon Web Service Inc, 410 Terry Avenue North, Seattle WA 98109, USA (hereinafter referred to as Amazon CloudFront). A Content Delivery Network (CDN) is a network of regionally distributed servers connected via the Internet to deliver content, especially large media files such as videos. Amazon CloudFront provides web optimization and security services that we use to improve the load times of our app and protect it from misuse. When you use our app, a connection will be established to Amazon CloudFront's servers to retrieve content, for example. This allows personal data to be stored and evaluated in server log files, in particular the user's activity (in particular which pages have been visited) and device and browser information (in particular the IP address and the operating system).
This data can be transferred to servers of AWS Cloudfront in the USA and to AWS. The USA currently does not have an adequate level of protection, which may result in security risks.
We make sure that the requirements under the GDPR concerning transfers to third countries are met. Therefore, transfers may only take place if the special requirements of Art. 44 - 49 GDPR are fulfilled.
For more information on Amazon CloudFront's collection and storage of data, please visit:
https://aws.amazon.com/de/privacy/
2. Purpose of data processing
Amazon CloudFront features are used to deliver and accelerate online applications and content.
3. Legal basis for data processing
The data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The app´s operator has a legitimate interest in the technically error-free and secure presentation and optimization of his app - for this the server log files must be recorded.
4. Duration of storage
Your personal information will be retained for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.
5. Objection and erasure
Information about objection and erasure options regarding Amazon CloudFront can be found at: https://aws.amazon.com/de/privacy/
1. Description and scope of data processing
We collect telemetry data in our app. In the course of telemetry data processing, the behaviour within the app and device information such as
of the user, but no personal data whatsoever.
2. Purpose of data processing
The data are processed for the following purposes:
3. Legal basis for the data processing
These data are recorded on the basis of Art. 6 para. 1 lit. f GDPR. The app operator has a legitimate interest in the technically error-free display and optimisation of his app - for this purpose the server log files must be recorded.
4. Duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.
5. Objection and erasure
Pursuant to Article 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 para. 1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. Whether or not the objection is successful, shall be determined through the balancing of interests.
To make the objection valid, users can write an informal e-mail to privacy@ledvance.com , or remove the data by deleting the account and the app.
1. Description and scope of data processing
We collect telemetry data in our App for error reporting. To do this, we use the Firebase Analytics tool by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google), in particular, Firebase Crashlytics.
Firebase Crashlytics can be used to determine the impact of a crash and investigate its cause. This immediately improves the stability and performance of the application for the users. Therefore, we use Firebase Crashlytics for the security and stability of the App application.These services are an integral part of our offer and cannot be deactivated. Data is transmitted anonymously and not personalized to Google.
The use of Firebase Analytics, in particular Firebase Crashlytics can result in data transmission to US servers. The USA is currently considered an insecure third country under the European data protection law. It is possible that personal data may be subject to access by U.S. authorities for control and monitoring purposes, against which neither effective legal remedies nor data subject rights may be enforceable.
To ensure adequate safeguards for the protection of the transfer and processing of personal data outside the EU, data are transferred to and processed by Google on the basis of appropriate safeguards in accordance with Art. 46 et seq. GDPR, in particular through the conclusion of the so-called standard data protection clauses set out in Art. 46(2)(c) GDPR.
You can find more information on data processing by Firebase Analytics here: https://firebase.google.com/support/privacy
and in the Google Privacy Policy.
Firebase Crashlytics is used for Android and iOS crash reporting und integrated in the firebase tool. Information on data processing by Crashlytics can be viewed here:
https://firebase.google.com/terms/crashlytics-app-distribution-data-processing-terms https://firebase.google.com/terms/crashlytics-app-distribution-mcc https://support.google.com/chromecast/answer/6076570?hl=de
To ensure the App's functionality, the following authorisations are requested or the hardware components of the end device are used:
Camera
Local area network
External memory
2. Purpose of data processing
The purpose of the processing is to ensure the App's functionality and to generate error reports in the event of errors.
3. Legal basis for data processing
The legal basis for the processing of your personal data is Art. 6(1)(1)(f) GDPR. We have a legitimate interest in providing a functional App and continuous improvement in the event of malfunctions.
4. Storage duration
Personal data shall be stored for as long as it is necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g., for tax and accounting purposes.
5. Objection and erasure
Pursuant to Article 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 (1) (f)GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. Whether or not the objection is successful, shall be determined through the balancing of interests.
In order to do so, please send an email to: privacy@ledvance.com
1. Description of the use of SDKs
We use SDKs to provide functional modules. For this purpose, the used code is embedded into the SDKs.
2. Third party libraries used for iOS
3. Third party libraries used for Android
The SDK are used on the basis of Art. 6 para. 1 lit. f GDPR.
We have a legitimate interest in the technically error-free display and optimization of our app - for this purpose the SDK must be used.
You can use backup services to back up settings and data from apps on your device. Backed-up information is transferred to and stored on the server of the backup service you are using and can be restored to the original device or another device. The scope of data collection depends on the backup service used, but in particular, app settings and data, the user name, the email address, the customer number of your account, the time of the backup and the individual device ID can be processed. The processing of this data is carried out exclusively by the provider of the backup service used and is beyond our sphere of influence.
As far as your personal data is processed, you have the following rights as a data subject, provided that the legal requirements are met:
You will find more detailed explanations below.
Right to object
You can object to the use of your data for advertising using electronic mail at any time without incurring any costs other than the transmission costs according to the basic rates.
What right do you have in the event of data processing for legitimate or public interest?
Pursuant to Article 21 para. 1 GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 para.1 lit. e GDPR (data processing in the public interest) or Article 6 para.1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision.
In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
What right do you have in the event of data processing for direct marketing?
If we process your personal data for direct marketing purposes, you have the right pursuant to Art. 21 para. 2 GDPR to object at any time to the processing of personal data concerning you for the purpose of such advertising, this also applies to profiling insofar as it is associated with such direct marketing.
In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Revocation of consent
You can revoke your consent to the processing of your personal data at any time. Please note that the revocation is only valid for the future.
Right to information
You may request information as to whether we have stored personal data about you. If you wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what further rights you are entitled to with regard to this data.
Further rights
In addition, you have the right to have your data corrected or deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You may also request that we provide all personal information that you have provided to us in a structured, current and machine-readable format either to you or to a person or company of your choice.
In addition, there is a right to lodge a complaint to the responsible data protection supervisory authority (Article 77 GDPR).
Assertion of your rights
To exercise your rights, you can contact the controller or the data protection officer using the contact details above. We will process your enquiries immediately and in accordance with legal requirements and inform you of the measures we have taken.
If the purpose or manner of processing your personal data changes significantly, we will update this information in time and inform you about the changes.
The Promotion of Access to Information Act, 2000 (Act No. 2 of 2000) or as amended, has been implemented in the Republic of South Africa to effectively protect the personal information of all citizens domiciled within the Republic.
1) This Act applies to the processing of personal information—
a) Entered in a record by or for a responsible party by making use of automated or non-automated means: Provided that when the recorded personal information is processed by non-automated means, it forms part of a filing system or is intended to form part thereof; and
b) where the responsible party is—
i) Domiciled in the Republic; or
ii) Not domiciled in the Republic, but makes use of automated or non-automated means in the Republic, unless those means are used only to forward personal information through the Republic.
2)
a) This Act applies, subject to paragraph (b), to the exclusion of any provision of any other legislation that regulates the processing of personal information and that is materially inconsistent with an object, or a specific provision, of this Act.
b) If any other legislation provides for conditions for the lawful processing of personal information that are more extensive than those set out in the Act, the extensive conditions prevail.
3) This Act must be interpreted in a manner that—
a) gives effect to the purpose of the Act; and
b) does not prevent any public or private body from exercising or performing its powers, duties and functions in terms of the law as far as such powers, duties and functions relate to the processing of personal information and such processing is in accordance with this Act or any other legislation, as referred to in subsection (2), that regulates the processing of personal information.
4) ‘‘Automated means’’, for the purposes of this section, means any equipment capable of operating automatically in response to instructions given for the purpose of processing information
Transfers of personal information outside Republic
1) A responsible party in the Republic may not transfer personal information(‘‘personal information’’ means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to—
(a) information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
(b) information relating to the education or the medical, financial, criminal or employment history of the person;
(c) any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
(d) the biometric information of the person;
(e) the personal opinions, views or preferences of the person;
(f) correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
(g) the views or opinions of another individual about the person; and
(h) the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person); about a data subject ( ‘data subject’’ means the person to whom personal information relates);to a third party who is in a foreign country unless—
a) the third party who is the recipient of the information is subject to a law, binding corporate rules or binding agreement which provide an adequate level of protection that—
i) effectively upholds principles for reasonable processing of the information that are substantially similar to the conditions for the lawful processing of personal information relating to a data subject who is a natural person and, where applicable, a juristic person; and
ii) includes provisions, that are substantially similar to this section, relating to the further transfer of personal information from the recipient to third parties who are in a foreign country;
b) the data subject consents to the transfer;
c) the transfer is necessary for the performance of a contract between the data subject and the responsible party, or for the implementation of pre-contractual measures taken in response to the data subject’s request;
d) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the responsible party and a third party; or
e) the transfer is for the benefit of the data subject, and—
i) it is not reasonably practicable to obtain the consent of the data subject to that transfer; and
ii) if it were reasonably practicable to obtain such consent, the data subject would be likely to give it.
2) For the purpose of this section—
a) ‘‘binding corporate rules’’ means personal information processing policies, within a group of undertakings, which are adhered to by a responsible party or operator within that group of undertakings when transferring personal information to a responsible party or operator within that same group of undertakings in a foreign country; and
b) ‘‘group of undertakings’’ means a controlling undertaking and its controlled undertakings.
FOLLOW US ON: