Principles of data processing for the Liebherr SmartDevice app (information requirements)

A. General

I. What does this privacy policy regulate?

Liebherr SmartDevice App

The Liebherr SmartDevice app allows you to view and configure the data of your Liebherr refrigerator and freezer. To use the Liebherr SmartDevice app, you need a WLAN-enabled module (hereinafter referred to as "SmartDeviceBox"), a MyLiebherr Account and an Internet connection. The SmartDeviceBox connects your Liebherr refrigerator and freezer to the Internet via a WLAN-enabled router. The SmartDeviceBox can be retrofitted to SmartDevice-enabled Liebherr refrigerators and freezers. Some Liebherr refrigerators and freezers already have the SmartDeviceBox integrated. In combination with the SmartDeviceBox, the Liebherr SmartDevice app allows you to control various functions of your Liebherr refrigerator and freezer, such as the cooling temperature, while on the move. With the Liebherr SmartDevice app, you can immediately see any important alarm messages, such as a door accidentally left open. The Liebherr SmartDevice app has a notification function that reminds you when the next air filter change is due or when the ventilation grille needs to be cleaned, for instance.

II. What are personal data and what does processing mean?

1. "Personal data" (hereinafter also referred to as "data") are any information that reveal something about a natural person. In addition to information that allows a direct inference about a specific person (such as a person’s name or e-mail address), personal data also include information that can be linked to a certain person with appropriate additional knowledge.

2. "Processing" refers to any action taken on your personal data (such as the collection, recording, organisation, ordering, storage, use or deletion of data).

B. Who is responsible for processing my data?

The Controller responsible for processing your data is Liebherr-Hausgeräte GmbH, Memminger St. 77-79, 88416 Ochsenhausen, Germany, Phone: +4973529280; Fax: +497352928408; E-mail: info.hau@liebherr.com.

C. Data processing in relation to the Liebherr SmartDevice app

I. What data are collected for which purposes?

When calling up the Liebherr SmartDevice app, the following data are processed by our web server and stored in what are known as log files:

- date of access to the Liebherr SmartDevice app

- time of access to the Liebherr SmartDevice app

- Internet address of the website on which you were when you called up the Liebherr SmartDevice app (URL)

- files you access through the Liebherr SmartDevice app

- amount of data transferred to you

- your browser type and version

- your operating system

- the domain name of your Internet access provider (e.g. Telekom, Vodafone, etc.)

- your (external) IP address

When registering and using the Liebehrr SmartDevice app without the use of Social Login, we process the following data in addition to the data mentioned hereinabove:

- registration date

- your unique user ID (UPN)

- date and time of the last successful login

- your e-mail address

For the optimal use of the Liebherr SmartDevice app, we collect the following data on a voluntary basis:

- your preferred language

- your title

- your address

- your phone number

- your Liebherr refrigerator and freezer serial number

- your Liebherr refrigerator and freezer device type

- your SmartDeviceBox serial number

To use the Liebherr SmartDevice app, you need a MyLiebherr Account. In addition to the data, we also collect the following data from you:

- the device data of your Liebherr refrigerator and freezer (serial number, selected name, model and type)

- the sensor data of your Liebherr refrigerator and freezer (temperature status, compressor speed, open door status)

- the device data of your Liebherr SmartDeviceBox (serial number, model, type, connection status)

- the technical configuration of your device (model, manufacturer, operating system used, connection status)

We generally process such data only for the following purposes:

1. To protect our app offering

2. Provision of the functions of the Liebherr SmartDevice app

3. Error analysis and improvement of the app

Note: Please note that a transfer of your personal data to countries outside the EU/EEA is possible if the respective provider of one of your modules is located in such a country. Before transferring to such a provider, we will obtain your express consent.

Processing data for other purposes may only occur in so far as the legal requirements of Article 6 (4) GDPR apply. In this case, we will of course comply with any requirements to provide information according to Art. 13 (3) GDPR and Art. 14 (4) GDPR.

II. On what legal basis do we collect your data?

In principle, the legal basis for processing your data is Art. 6 GDPR, in so far as there are no further specific legal provisions.

Your data is processed based on one or more of the following legal bases:

1. Data processing for the performance of contracts (Article 6 (1) (b) GDPR)

2. Data processing on the basis of a balancing of interests (Article 6 (1) (f) GDPR).

Our legitimate interests are:

Improving the stability, functionality and security of the Liebherr SmartDevice app.

If we process your information based on your consent, you have the right to withdraw your consent at any time with future effect.

We process your data only to the extent necessary for the fulfilment of the above mentioned purposes.

IV. To whom and for what purposes do we transfer which categories of your data?

Where necessary, we will transfer your data:

1. To other companies of the Liebherr Group, if this is necessary for the initiation, execution or termination of a contract or if there is a legitimate interest in the transfer on our part and your predominant legitimate interest is not in conflict with the same;

2. To the service providers we use to achieve the above purposes;

3. To any court, arbitration tribunal, public authorities or legal advisor when required to comply with applicable law, or to assert, exercise or defend legal claims.

IV. Will my data be processed outside the European Union?

Data transfer to Processors in countries outside the European Union (known as third countries) is only permitted (1) if you have given us your consent or (2) if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR). If the Commission has not made such a decision, we may only transfer your data to third parties located in a third country in so far as appropriate safeguards exist (e.g. standard data protection clauses adopted by the Commission or the supervisory authority in a specific procedure) and the enforcement of your rights is ensured.

V. When do we delete or anonymise your data?

We process your data as long as this is necessary for the relevant purpose, unless you have effectively objected to the processing of your data or have effectively revoked your consent.

As far as statutory retention obligations exist - e.g. in commercial law or tax law - we will have to save the relevant data for the duration of the retention obligation. After the expiry of the retention period, we check whether there is any further need for processing. If there is no such further necessity, your data will be deleted.

VI. Liebherr SmartDevice App Skill for Amazon Alexa

Amazon Echo is Amazon hardware for voice input and output. Amazon Echo devices allow Amazon to analyse, evaluate and execute voice commands. Amazon Echo devices require an Amazon user account to function and can be extended to include additional features by adding so-called "skills". The Liebherr SmartDevice app skill allows you to control some functions of the Liebherr SmartDevice app via your Amazon Echo device through voice commands. This requires you to activate the Liebherr SmartDevice app skill in your Amazon account and link your MyLiebherr Account to this skill. Through this link, voice commands given by you can be interpreted by Amazon and sent to the Liebherr SmartDevice app for execution via an anonymous digital signature. Except for the data indicating that you have an Amazon account and a MyLiebherr Account, no personal data will be sent by us to Amazon or by Amazon to us.

VII. Liebherr SmartDevice App functions for Conrad Connect

Conrad Connect is a service of Conrad Connect GmbH that allows you to link the functions of the Liebherr SmartDevice app with various smart devices and apps supported by Conrad Connect. This makes it possible for a certain event (e.g. time) to trigger an action (e.g. activate SuperCool function). The use of Conrad Connect requires a Conrad Connect user account and can be extended with interfaces for additional functions by adding the manufacturer or brand. This connection enables you to control some functions of the Liebherr SmartDevice app via Conrad Connect. For this purpose you need to activate the Liebherr SmartDevice app in your Conrad Connect user account and link it to your MyLiebherr account. With the exception of the date and that you have a Conrad Connect user account and a MyLiebherr account, no personal data will be transmitted by us to Conrad Connect or by Conrad Connect to us.

VIII. Liebherr SmartDevice App Trigger for IFTTT

IFTTT is a service of IFTTT Inc., which allows you to combine the functions of the Liebherr SmartDevice app with various applications supported by IFTTT. In this way, a particular event (e.g. entering your home) can trigger a specific action (e.g. activating the Supercool feature). To use IFTTT, you will need to activate the Liebherr SmartDevice App Trigger in your IFTTT account and link your MyLiebherr Account to the Liebherr SmartDevice App Trigger. Except for the data indicating that you have an IFTTT account and a MyLiebherr Account, no personal information will be sent by us to IFTTT Inc. or sent by IFTTT Inc. to us.

IX. Liebherr SmartDevice app functions for HomeConnect Plus

HomeConnect Plus is an app that allows you to link the functions of the Liebherr SmartDevice app with various smart devices supported by HomeConnect Plus. In this way, a particular event (e.g. entering the home) can trigger an action (e.g. activate SuperCool function). The use of HomeConnect Plus requires a HomeConnect Plus user account and can be extended with interfaces for additional functions by adding the manufacturer or brand. This connection allows you to control some functions of the Liebherr SmartDevice app via HomeConnect Plus. For this purpose you need to activate the Liebherr SmartDevice app in your HomeConnect Plus user account and link your MyLiebherr account. With the exception of the date that you have a HomeConnect Plus user account and a MyLiebherr account, no personal data will be transmitted from us to HomeConnect Plus or by HomeConnect Plus to us.

X. Liebherr SmartDevice App Actions for Google Home

The Google Home Smart Speaker is Google hardware for voice input and output. With the Google Home Smart Speaker voice commands can be analysed, evaluated and executed by Google. The Google Home Smart Speaker devices require a Google user account to function and can be extended with interfaces for additional features by adding so-called “actions". The Liebherr SmartDevice app actions allow you to control some functions of the Liebherr SmartDevice app via your Google Home Smart Speaker device through voice commands. This requires you to activate Liebherr SmartDevice app actions in your Google account and link your MyLiebherr Account to these actions. Through this link, voice commands given by you can be interpreted by Google and sent to the Liebherr SmartDevice app for execution via an anonymous digital signature. Except for the data indicating that you have a Google account and a MyLiebherr Account, no personal data will be sent by us to Google or by Google to us.

D. How are my personal data secured against unauthorised access and loss?

We use technical and organisational security measures in order to secure your data against loss, incorrect modification and unauthorised access by third parties. Moreover, on our part, only authorised persons will ever have access to your data and they can only access it to the extent required within the framework of the purposes named above. All data is transferred in encrypted form.

E. Cookies and other technologies

We use cookies and other technologies in connection with the provision of our website. For further details about our cookie usage, please see our cookie information.

F. Data Subject Rights and Right of Appeal

Within the legal framework, you have the right to

1. information about your data;

2. the correction of incorrect data and completion of incomplete data;

3. the deletion of your data, in particular, if (1) they are no longer necessary for the purposes stated in this privacy policy, (2) you withdraw your consent and there is no further legal basis for processing, (3) your data have been unlawfully processed or (4) you have objected to the processing and there are no legitimate reasons for processing.

4. Limitation of the processing of your data, especially should you dispute the accuracy of the data or the processing of your data is illegal and you demand limitation of use in place of deletion.

5. The right to receive your data in a structured, standard and machine-readable form and to demand that we transfer your data directly to another responsible party.

Please note that the lawfulness of processing based on consent prior to your withdrawal of such is not affected by your withdrawal of consent.

We ask for your understanding that, where the above rights are not asserted in writing, we may require you to provide evidence proving that you are the person you claim to be. You also have a right of appeal with the responsible supervisory authority.

G. How do I contact the Data Protection Officer?

Should you have any questions regarding data protection please contact:

Data Protection

Liebherr-IT Services GmbH

St. Vitus 1

88457 Oberopfingen, Germany

datenschutz@liebherr.com

Last updated: March 2021