PRIVACY NOTICE

Candy Hoover Group S.r.l. (from now on, for the sake of brevity, “CHG”, or the “Company”, or “us” or “we”) informs you that the personal data of yours that it collects, shall be processed in accordance with data protection law.

With reference to the methods used for the management and processing of your personal data, we are providing the following information pursuant to Article 13 of EU Regulation No. 679/2016:

1. Types of data collected

Data that you supply voluntarily

CHG will collect the following personal data:

2. Purposes and legal basis for the processing operations

The data that you supply to CHG shall be processed in order to:

  1. allow you to use the services related to the HON Service App and to access its database. The legal basis that legitimizes the processing of personal data for this purpose is set out in the circumstances described by Article 6, section 1, letter b) of EU Regulation No. 679/2016 – i.e. processing is necessary for the performance of a request of the data subject;
  2. comply with any legal obligations or regulations, or to requests made by the judicial authorities. The legal basis that legitimises the processing of personal data for this purpose is set out in the circumstances described by Article 6, section 1, letter c) of EU Regulation No. 679/2016 – i.e. processing is necessary for compliance with a legal obligation to which the Data Controller is subject.

3. Period of data storage

The personal data collected and processed for the purpose set out at Point 2 shall be stored for a period equal to the duration of the provision of the services you have requested and for the 10 years after , without prejudice to cases in which storage for a subsequent period is required for any legal actions and, in the case of disputes, requests from the competent authorities or pursuant to applicable regulations.

4. Methods of processing

Any personal data collected shall be processed, retained and analysed using electronic tools and shall be stored both in electronic format and in hard copy, organised into databases, and on any other appropriate type of media.

Specific security measures are implemented to prevent the loss, illegal or unfair use of the data, or unauthorised access to them.

The processing of your personal data carried out by CHG does not involve any automated decision-making.

5. Disclosure of your personal data

The provision of the personal data is required in order to allow you to make use of the services related to the HON SERVICE App and is therefore compulsory for the purposes set out at Point 2 of the privacy notice. Refusal to provide your personal data shall make it impossible for CHG to provide the requested service.

6. Parties to which your personal data may be disclosed

Any personal data of yours that have been collected shall not be disclosed indiscriminately, but may be communicated to those parties that have the right to access your personal data to ensure compliance with legal and secondary and/or EU regulations, and to the Data Controller’s own personnel, and also to companies, associations or professional firms that provide services and operations on behalf of the Data Controller, operating as Data processors, to ensure compliance with legal obligations, and for every other organisational and/or administrative requirement that is necessary to provide the requested services.

The names of the additional parties to which your personal data may be disclosed, operating as Data processors, are shown in an up-to-date list that can be requested from CHG (using the data indicated at Point 10).

7. International transfers

For specific requirements connected to the location of the servers of CHG and/or its providers, for the provision of services CHG also relies on providers - in their capacity as data processors - located in third countries outside the European Union (United States of America, Canada and United Kingdom). Your data may also be communicated between Candy/Haier group companies with registered office in third countries outside the European Union (United Kingdom) or be transferred to our service providers and third-party providers acting on our behalf, as set forth in this disclosure. With regards to the transfer of data to United Kingdom and Canada, they will be performed according to the respective EU Commission Adequacy decisions. In case of transfer to United States of America, CHG undertakes to guarantee adequate levels of protection and safeguards through contractual agreements, including by entering into standard contractual clauses that can be requested by writing to the contact email indicated at point 9 of this privacy notice.

8. Your rights as the Data Subject

In relation to the aforementioned processing operations carried out on your personal data, you are entitled to exercise at all times those rights set out by EU Regulation No. 679/2016 (GDPR), including, for example, the right to be informed as to:

As the Data Subject, you have the right to obtain:

You can also request a copy of your data in a standard format (the so-called “Right to data portability”)

As the Data Subject, you also have the right to object, at any time and at no cost, wholly or partially:

You have the right to withdraw your consent for the processing operations when that consent is based on the circumstances described by Article 6, Paragraph 1, Letter a. (when “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”), or by Article 9, Paragraph 2, Letter a. (when “the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”) of EU Regulation No. 679/2016, at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Should you consider the processing operations to have been carried out in breach of current legislation, you have the right to lodge a complaint with a supervisory authority, specifically in the Member State in which you habitually reside or work, or the Member State where the alleged breach has taken place. The Italian supervisory authority can be contacted using the contact data on its own website.

9. Data Protection Officer

You may contact the DPO of the Haier Europe Group at the following email address data.protection@candy-group.com or by post by writing to:

Candy Hoover Group S.r.l.

Via Privata Eden Fumagalli

20861 Brugherio (MB), Italia

f.a.o. Data Protection Officer.

10. Data Controller

The Data Controller, i.e., the party taking decisions on processing methods and purposes, is CHG S.r.l., with registered office at Via Comolli, 16 - 20861 Brugherio (MB).