Privacy Policy of the Amica Smart Application

Download PDF

Amica S.A. pays attention to the security of Users' personal data. Amica S.A. is the personal data administrator of personal data processed within the Amica Smart Application. Using the Application and processing personal data requires entering into an agreement; therefore, the provisions of the Agreement for the provision of services by Amica S.A. also apply, particularly concerning the definitions provided in this document.

Please read this document, and if you have any questions, contact us.

1. Who is the controller of your personal data?

The administrator of personal data is “Amica Spółka Akcyjna” with its registered office in Wronki (Poland), Mickiewicza Street 52 (64-510 Wronki), registered in the Register of Entrepreneurs of the National Court Register number 0000017514, Tax number 763-000-34-98 and REGON number 570107305, with a share capital of PLN 15,550,546.00 (fully paid), BDO number 000008067.

2. Data Protection Officer

The administrator has appointed a Data Protection Officer.

3. Contact with the DPO

Regarding matters related to personal data protection, you can contact our Data Protection Officer via email at info.dane@amica.com.pl or by sending a letter to "Amica Spółka Akcyjna" Bułgarska 17 Street, 60-320 Poznań (Poland) with the note "Personal data."

4. Purpose, scope, and legal basis of personal data processing

Information about IoT (Internet of Things) devices may include various sets of Amica brand household appliances ("IoT Devices"). The User independently decides which household appliances will be visible in the application, and depending on this, the scope and purpose of personal data processing will vary.

Scope and purpose of data processing	Legal basis
Your personal data in the form of your first and last name, email address, and phone number will be processed to provide our services electronically under the terms described in the Application Regulations and the Agreement for the provision of services. Providing our services is inextricably linked with the processing of personal data, and without performing these activities, we would not be able to deliver our services to you, and the Application would not function properly.	The basis for data processing is the performance of the contract (Article 6 (1)(b) of the GDPR).
To properly provide services, particularly appropriate control of IoT Devices, the Application collects and processes data such as: model of the IoT device, name of the device given by the User, location of the Device and its settings, network connection information (including SSID and password), network environment information, country code of the device, network operator name of the device, operating system version, IP address and IMEI number, sensor data and configuration data, crash log information, device identifiers (such as ICCID number), and automation name.	The basis for data processing is the performance of the contract (Article 6(1)(b) of the GDPR).
If you use devices that record sound or images, if you choose to share such data, we will process data in the form of images, video files, or audio.	The basis for data processing is the User's consent (Article 6(1)(a) of the GDPR).
If you use voice commands to control the Application, we will process data in the form of conversations and voice commands, to process them further.	The basis for data processing is the User's consent (Article 6(1)(a) of the GDPR).
Your personal data will also be processed to deliver personalized marketing communications. We will conduct marketing activities using electronic communication such as email or push messages. Such activities will be performed exclusively based on your voluntary consent.	The basis for data processing is the User's consent (Article 6(1)(a) of the GDPR).
While using the Amica Smart application, you may be asked to enable the location service. Consent to location and enabled access to location is necessary for: displaying the list of available WiFi networks; automation and detection of Devices; checking and downloading information about the network - to which we are connected/network in range; displaying weather data; creating your own scenarios and activating functions related to weather/location.	The basis for data processing is the User's consent (Article 6(1)(a) of the GDPR).
In justified legal cases, we will process your personal data to comply with applicable regulations, particularly fulfilling orders issued by administrative bodies or common courts.	The basis for data processing is the fulfillment of a legal obligation incumbent on the controller (Article 6(1)(c) of the GDPR).
We will process personal data to pursue our legitimate interests. Our legitimate interest includes: complaint processes, determining, pursuing, and enforcing claims, or defending against claims, preventing abuse and fraud, detecting cases of unauthorized use of services, ensuring IT security of the application, conducting marketing activities, responding to inquiries and messages from Users, conducting statistics, and performing analytical research and tests to better tailor services to User needs or optimize processes, profiling to best match the information sent to User needs and interests, storing data for archival purposes and ensuring accountability.	The basis for data processing is our legitimate interest (Article 6(1)(f) of the GDPR).

5. Recipients of personal data

We may share personal data with the following categories of entities: entities providing services to us to perform the Smart service, such as data storage service providers, IT service providers, hosting service providers, marketing service providers, and entities providing analysis services for the company's operation (audit).

External entities are provided only with personal data directly related to the service provided to us in connection with the Amica Smart application. These entities are obliged to protect personal data and cannot use them for any purpose other than providing services to us.

Personal data may also be transferred to other companies within the Amica Capital Group. Personal data will not be processed outside the European Economic Area.

6. Period of personal data storage

Your personal data will be stored as long as there is a basis for this action, i.e.:

- in the case of processing personal data based on consent, until it is withdrawn;

- in the case of the necessity of processing personal data to perform the contract, for the duration of its performance, and until the limitation period for claims related to the subject of the contract expires, taking into account the limitation periods specified in generally applicable legal regulations;

- in the case where the basis for processing data is the legitimate interest of the controller, until you raise an objection or the interest ceases to exist.

Although our goal is to store the User's data for the period described above, in some situations, these data may be stored for a longer period, particularly if required by applicable legal regulations. Personal data may be processed for a longer period under applicable legal regulations.

The User's data will be subject to appropriate security measures throughout the processing period.

7. Withdrawal of consent

Your consent for personal data processing can be withdrawn at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8. Rights regarding personal data processing

You have the right to access your personal data, rectify them, and request their deletion or restriction of processing. In legally specified cases, you have the right to data portability.

9. Right to object

In the case of processing personal data based on a legitimate interest, you have the right to object to the processing at any time.

10. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

11. Consequences of not providing data

Providing personal data is necessary to create an account. For some methods of connecting with the IoT creating an account is essential for the correct functioning of the Amica Smart application.

12. Automated decision-making

We do not conduct operations within the Amica Smart application that could be classified as automated decision-making.

13. Security

We apply appropriate technical and organizational measures to ensure the protection of processed data, particularly securing data from unauthorized disclosure, processing in violation of the law, and alteration, loss, damage, or destruction.

14. Contact

For matters related to personal data protection, you can contact our Data Protection Officer via email at info.dane@amica.com.pl or by sending a letter to "Amica Spółka Akcyjna" Bułgarska 17 Street, 60-320 Poznań, Poland with the note "Personal data."

15. Changes to the Privacy Policy

We may update the Privacy Policy. In particular, along with the development of the Amica Smart application. The change is made by posting the new content of the Privacy Policy in the Application and displaying information about the change of policy by updating the last update information in the document (update information is displayed in the title part of the policy). Additionally, we will inform you of changes by sending an email.

16. Final provisions

The User acknowledges that during processing, their personal data may be transmitted via the Internet or other remote transmission systems.

Promocja Wielorabaty

Privacy Policy of the Amica Smart Application