HOMEWHIZ PRIVACY POLICY

This Privacy Policy describes how Arcelik A.S. acting as data controller (as identified in Section 14 of this Privacy Policy) (hereinafter referred to as “the Company” or “We”, or “Us”) collects, shares, protects and otherwise processes your Personal Data (as defined below) that we collect when you download and use the HomeWhiz application (the “HomeWhiz Application” / “Application”) and the functions provided by the HomeWhiz Application (the “Services”).  The Company processes your Personal Data in accordance with this Privacy Policy.  This Privacy Policy has been drafted in light of the EU’s General Data Protection Regulation (“GDPR”) and the applicable national legislations.  We are committed to follow the GDPR in all data processing operations in the European Economic Area, the UK and where it otherwise applies. We are also committed to follow the rules and principles of the applicable local personal data protection legislations.

This Privacy Policy also applies to obtaining data from IoT devices that will be paired with the HomeWhiz Application.

The HomeWhiz Application is available in Google Play / Apple Appstore.

The Application is provided by Arçelik A.Ş. More information can be found on Arçelik’s website here. If you want to contact us – see section below.

If you are using the HomeWhiz Application in connection with an appliance that is not sold under one of the brand names belonging to the Arcelik A.S. group, owner company of the non-Arçelik branded appliance will also be acting as a data controller of your Personal Data (as identified in section 14 of this Privacy Policy). In those circumstances, reference “We” includes such company.

This Privacy Policy is an integral part of the HomeWhiz Terms of Service (available on the Application).  All terms used in this Privacy Policy that are not otherwise defined shall be construed as defined in the HomeWhiz Terms of Service.  Any matter not contained in this Privacy Policy shall be subject to the HomeWhiz Terms of Service as provided to and accepted by you.

Any Personal Data collected and processed by the devices (such as smart TV, smartphone or tablet) on which the HomeWhiz Application is running, or by the third-party software that is installed on such devices, shall not be subject to this Privacy Policy.  The providers of such devices and software may process your Personal Data in accordance with their own privacy policies and the Company shall not be held liable for any Personal Data processed in this manner.

1. What Personal Data We Collect

“Personal Data” refers to any information that may be used, alone or in combination with other information, to identify you.  For purposes of this Privacy Policy, we consider all of the below information we collect about you “Personal Data”.

When you use the HomeWhiz Application and the Services, we may – as detailed further below in this Privacy Policy and only to the extent permitted by applicable law – collect certain Personal Data relating to you, including your name, surname, e-mail address, user name and password, phone number, identity authentication information (password, token), IP address, the country where you live and your location, your appliances supporting the HomeWhiz Application and the Services, the software used together with the HomeWhiz Application, the operating data about the appliance in connection with which the HomeWhiz Application is used, such as when and how long the appliance is used, the appliance’s sensor data such as water hardness levels, power mains data, the appliance’s temperature levels, the operating data about the components of the appliance, any appliance error information such as errors and alerts displayed and when such errors and alerts are displayed, information about the devices such as smart TV, smartphone or tablet on which you run the HomeWhiz Application and the identification details of such devices like MAC number and serial number, and updates to the HomeWhiz Application and other related software.

If you pair an IoT device with the Application, data from this device regarding its use (e.g. regarding energy consumption) will be sent to us (our cloud servers) regularly (time to time – depending on the device) for the purposes of providing the service (purposes indicated in point 2 below), unless this device does not have access to the Internet (e.g. WiFi) or you disconnect them from the Application. You can disconnect IoT device either on the Application or on the device itself. Thanks to this, you can display information about your IoT device on the Application even if you connect to this device outside your home or office network.

Paired IoT device can send data to us either directly via an Internet connection or by connecting the device to the Application (e.g. via Bluetooth).

2. How We Use Personal Data

To the extent permitted by applicable law, we use your Personal Data for the following purposes and based on the following legal bases:

Contractual necessity

We may process your Personal Data where it is necessary to enter into a contract with you for the provision of our products or services or to perform our obligations under that contract.  For example, we may need to process your Personal Data:

1. To register you and to enable you to use the HomeWhiz Application and the Services which include:

• Viewing the account by the User.
• Managing (including changing) data provided in the user’s account.
• Blocking access to the account/terminating the agreement on using The Application.
• Pairing the HomeWhiz Application with an IoT device (like a smart dishwasher) and then monitoring and controlling this device through the Application.
• Installing updates / upgrades (IoT device and HomeWhizz Application).

1. To send you important notices such as correspondence on changes to our HomeWhiz Terms of Service and this Privacy Policy (via email or push notifications); and

• To keep internal records on software updates, technical services and other transactions to the extent necessary for the provision of the HomeWhiz Application and the Services.

If you do not provide us with certain Personal Data for processing as described above, we may not be able to provide the service or product requested.

Legal obligation

We may be required by law to collect and process certain Personal Data about you. For example, we may need to process and disclose your Personal Data when we have a good faith believe that doing so is necessary to comply with applicable law or to respond to a valid legal process, including from law enforcement or other government agencies.

Our legitimate interests

We may process your Personal Data where it is necessary for our legitimate interests as a company, including to manage, promote and improve our business and manage our and our users’ risk.  For example, we may process your Personal Data:

1. To inform you of any new product or service of the Company and its affiliates and subsidiaries, by sending notices, advertisements or pictures through e-mail, SMS and other similar electronic communication means or via the HomeWhiz Application and the Services, unless your consent is required for such communications (see below). If you would prefer not to receive these communications, simply follow the unsubscribe instructions in the promotional communications that you receive or contact us as described below;
2. To enable us to analyse and improve the HomeWhiz Application and the Services and our other products and services, contents and advertisements;

• To enforce the HomeWhiz Application Terms of Service and this Privacy Policy, including investigating potential violations;

1. To detect, deter or otherwise address any fraud or security issues related to the HomeWhiz Application or the Services; and
2. To provide you additional warranty based on the usage of the Application.

Your consent

Where required by applicable law, we will seek your separate consent to process your Personal Data for specific purposes.  For example, we may seek your separate consent to send you direct marketing messages or to collect location data to offer location-based services.  We may also seek your separate consent to create a profile of you to personalise and improve our appliances and other products, services and advertisements, including providing you with personalised marketing communications and advertisements, as well as content recommendations (e.g., recipe suggestions) and to provide you with improved and better-targeted after-sale services.  We create this profile by combining the Personal Data collected under this Privacy Policy with the data we obtain from other sources, such as data obtained via our sales teams and technical service units, and data obtained via your other devices (e.g., information relating to your home appliances, smart home devices and electronic home devices).

Some appliances are able to be connected to internet prior to your download and use of   HomeWhiz Application. Once you link your internet connected appliance with the HomeWhiz application, we will combine previously collected data (e.g. IP address, Appliance Mac ID, Serial number, Usage history, Error data, Sensor data with your HomeWhiz account, subject to your consent.

If we have sought your consent to process your Personal Data, you may subsequently withdraw it at any time by contacting us using the contact details listed in the section below on How to Contact Us without affecting the lawfulness of processing based on consent before its withdrawal.

3. Retention of Your Personal Data

We will process personal data for the period of using the Application. If you do not complete the account registration in the Application, your data will be deleted immediately.

Simply uninstalling the Application does not delete your data that we obtained (and send to our servers) while providing the service through the Application. Similarly, deleting the Application from your device does not mean deleting your account on our service.

If you do not want information from IoT devices to be sent to us (to our servers), you have to “remove” this device from the Application or disconnect IoT device from the network (information how to do this is available in the IoT device instruction / manual).

The account in the Application can be deleted using functionality of the Application (using option “delete my account”).

If you delete your account on our service – according to the Terms and Conditions – your data (already sent to our servers) will be processed until the limitation period for potential claims related to the provision of the service expires.

If the IoT device is not connected to the Internet, data regarding its use may be stored locally on this IoT device. If this IoT device is connected to the Internet the locally stored data will be sent to our server to display on the Application.

You can delete data stored locally on the IoT device by as instructed in the user’s manual.

4. Direct Marketing

Subject to the following paragraph, and as already mentioned above, we may use your Personal Data for marketing purposes, in particular to display to you or present you with advertisements and promotional materials, to conduct free prize draws and prize competitions, or to provide you information about our new products and other such information which we believe may be of interest to you based on your use of and your interests in our Services, always provided that such use complies with applicable law.

Depending on the jurisdiction you reside in and in accordance with applicable law in your country, we will ask you to expressly consent to receiving marketing material or product information before we send you any marketing or promotional material.

You can change your mind about your preferences in respect of direct marketing at any time by using the unsubscribe button on every marketing communication, by updating your user profile or account data or by contacting us at as detailed in the section below on How to Contact Us.  If you do so, note that we will not remove your Personal Data from our databases to the extent that this Personal Data is still required by us under the terms of this Privacy Policy or otherwise to continue to provide our Services to you.

5. Location-Based Services

The Company may collect the location of your device through the HomeWhiz Application and the Services in order to provide location-based services, such as automatic operation of HVAC devices while you are arriving at or leaving home. Your location can be determined based on the public IP address of the device or GPS.  Where required by applicable law, we will seek your separate consent to collect and otherwise process such location data.

Location data may be collected only if the user gives permission to transfer this data to the HomeWhiz application at the level of his mobile device operating system (such data is not transferred from the IoT device itself)

6. Data Processed by Third-Party Applications, Software or Services

When you use the HomeWhiz Application and the Services, you may also use several applications, software and services provided by various third parties (such as the provider of the device on which the HomeWhiz Application runs or the providers of other software running on the same device).  Such applications, software or services may process your Personal Data and they are subject to their own terms of use and privacy policies for which the Company does not assume any responsibility.

If you choose to use the third-party applications, software or services, the providers of such third-party applications, software and services will have access to a minimum amount of Personal Data about you that is necessary to connect the HomeWhiz Application and the Services to that third-party application, software or service.  For example, if you choose to connect your HomeWhiz Application with your Amazon account, Amazon will have access to your account information (i.e., email address) and device ID information.  Similarly, if you choose to use advanced after-sales services, certain Personal Data, such as information about the appliance on which the HomeWhiz Application is installed (e.g., type of appliance, your usage of the appliance and performance of the appliance) is shared with third-parties for purposes of providing the customized after-sales services.

7. Sharing of Your Personal Data with Third Parties

We may share your Personal Data in accordance with applicable law in the following cases:

1. Other Arcelik group companies. We may share your Personal Data with other companies belonging to the Arcelik group who may use your Personal Data for the purposes set out in this Privacy Policy.

1. Business partners. We may disclose your Personal Data to third parties, such as business partners and suppliers where this is necessary in order to provide the Services to you.  For example, we may disclose your Personal Data to third parties to be able to provide you with advanced after-sale services and repair services.  For more information, see above section on Data Processed by Third-Party Applications, Software or Services.

• Third parties where required by law. We may disclose your Personal Data to a third party if it is necessary to comply with a legal obligation or the decision of a judicial authority, public authority or a government body, or if disclosure is necessary for national security, law enforcement or important public interest.

1. Service providers. We may disclose your Personal Data to companies that provide services to us, such as companies that provide cloud computing services.  The service providers are required to keep your Personal Data confidential and are not permitted to use your Personal Data for any other purpose than to carry out the services they are performing for us.

1. Third parties in connection with a business sale. If we make a sale or transfer of assets, or are otherwise involved in a merger or transfer, we may transfer your Personal Data to one or more third parties as part of that transaction.

1. Other third parties with your consent. We may also share your Personal Data with other third parties when you consent to such sharing.

8. International Transfers of Your Personal Data

Your Personal Data will be processed by Arcelik A.S. who is located in Türkiye.  In addition, when we share your Personal Data with other companies belonging to the Arcelik group or other companies with whom we contract (as described in the section above on Sharing of Your Personal Data with Third Parties), such companies may also be located outside the European Economic Area (“EEA”), the UK, and Switzerland in countries with different laws for the protection of Personal Data than the laws in your country of residence.

Before transferring your Personal Data outside the EEA, the UK, and Switzerland, we will take steps to ensure that such data will be afforded the same level of protection as under applicable data protection laws within the EEA, the UK and Switzerland.  For data transfers outside of the EEA, the UK and Switzerland, the Company uses applicable safeguards, including the standard contractual clauses adopted by the European Commission, where appropriate, and will make available a copy to you upon request.

We will not make your Personal Data available to third parties for any purposes other than as described in this Privacy Policy and we will not sell your Personal Data.

9. Security Measures Taken for Your Personal Data

The Company takes appropriate administrative, technical and physical measures to protect your Personal Data against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

We protect the security of your Personal Data among others by using encryption and limiting access to your Personal Data.

You should also continue to take appropriate steps to keep your Personal Data safe and secure, such as keeping your password and other user identification safe and secure, in particular by avoiding obvious user ID’s or passwords, by changing your password regularly and by ensuring that you do not disclose your password(s) or grant any other person access to your user account.

10. Links to External Content Resources

Our Services may contain some services or links that may direct you to third-party websites, services or external content resources, who may have different and less stringent privacy policies.  These privacy policies are outside of our control and we are not responsible for the processing of your Personal Data by such third-party websites, services or external content resources.  We urge you to read their privacy policies before providing any personally identifiable information to such third parties.

11. Changes to this Privacy Policy

The Company may change and update this Privacy Policy from time to time. The Company will notify you of any material changes or additions to this Privacy Policy and will provide you with a copy of the amended Privacy Policy by use of your email address provided to the Company, or by any other suitable means which ensures that you will be notified of any material changes to this Privacy Policy.

12. Access to the Privacy Policy and Withdrawal of Consent

You can display the content of the latest “HomeWhiz Privacy Policy” on the HomeWhiz Application. If you withdraw your separately declared consent to specific processing operations, you may not be able to use all functions of our Services.

13. Your Rights for Your Personal Data

You have the following rights with respect to your Personal Data we process, subject to conditions set out in applicable law:

1. to learn whether your Personal Data is processed by us and, if processed, to request a copy of your Personal Data and information relating to the processing of your Personal Data, including the purposes of processing your Personal Data and whether such data is used for intended purposes and the third-parties to whom your Personal Data is disclosed;
2. to request the correction of any inaccurate or incomplete Personal Data;
3. to request the erasure of your Personal Data or the restriction of the processing of your Personal Data;
4. to object to any further processing of your Personal Data;
5. to withdraw any consent you have given without affecting the lawfulness of processing based on consent before its withdrawal;
6. under certain circumstances to demand data portability;
7. to lodge a complaint with a supervisory authority; and
8. to contest certain automated decisions we make about you that have legal or otherwise similarly-significant consequences.  We do not typically carry out such automated decision-making but, if we do, we will make it clear where such decisions are being made.

To exercise your rights, you can use the contact details as indicated in Section 14 below.

14. Data Controllers and How to Contact Us

If you have any questions about how we use your personal data or this Privacy Policy in general, please contact us using this form. Similarly, if you want to make the request mentioned above, e.g. access to data.

The controller’s representative (within the meaning of Article 27 of the GDPR) in the EEA is Beko S.A. with its registered office in Warsaw, at 366 Puławska St., (02-819) Warsaw, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Economic Department of the National Court Register, under KRS No. 0000078147, with its tax number (NIP): 525 207 35 73

You can contact the data controller (address stated above) directly or the representative at the e-mail address representativegdpr@arcelik.com.

15. Supervisory Authorities

Supervisory Authorities are independent public authorities that supervise, through investigative and corrective powers, the application of the data protection law. They provide expert advice on data protection issues and handle complaints lodged against violations of the applicable data protection legislation.

Generally speaking, the main contact point for questions on data protection is the Supervisory Authority in the country where company/organization in question is based. However, if that company/organization processes data in different countries or is part of a group of companies established in different countries, that main contact point may be a Supervisory Authority in another country.

For EEA (European Economic Area) countries find your National Supervisory Authority clicking here.

***

This Privacy Policy was last updated on 29.04.2024.