DEVIALETPrivacy Policy

I. Introduction

Last updated: November 2025

We pay the utmost attention to your personal data and take great care of it. Please read this Privacy Policy carefully to understand our practices regarding your information and how we process it. By using our Products and Services, or by providing information through them, you acknowledge that you have been informed of this Privacy Policy and accept it.

This Privacy Policy describes how Devialet, the data controller, its subsidiaries and branches
(“Devialet”, “we”, “us”, “our”) collect, use, store and share information collected from users of its
websites, mobile applications, products, retail outlets, as well as during online or offline interactions with its services (collectively referred to as “Products and Services”).

Our data protection approach is based on a few simple principles:
● use data only to better serve users of our Products and Services,
● collect only the data necessary for this purpose,
● ensure maximum protection for the data collected.

Our Privacy Policy may change over time (see below, “Changes to the Privacy Policy”). We therefore recommend that you check it regularly.

For convenience, our Privacy Policy is available in several languages. In case of any difference in
interpretation, the French version shall prevail.

What Information Do We Collect?

We may collect the following information about you (collectively, “Collected Information”):

Identification Information:

name, surname,

email address,

postal address,

phone number,

country of residence,

language of communication,

age range.

Product Information:

serial number,

product name,

model,

software version,

number and type of products owned,

product registration date.

Usage Information:

browsing data on the website or app,

personalized settings,

interactions with customer service,

daily usage duration for each type of source or music service,

volume level information,

use of stereo mode.

Technical Information:

IP address,

device identifiers,

browser type, operating system,

internet service provider,

device locale (e.g. fr-FR / en-US),

last app login date,

anonymous household IDs,

local network performance data, only upon your explicit action or request (“send technical data / bug report”),

the technical log of the device’s internal status and actions performed.

Information from Third-Party Sources:

data from business partners (distributors, payment platforms, etc.).

Social Media Data:

if you interact with us via Facebook, Instagram, LinkedIn, Twitter or others, we receive the information you agree to share with us.

All Collected Information, its processing, purpose, legal basis and retention period are summarized in the Summary annexed to this Privacy Policy.

Why Do We Collect Information and On What Legal Grounds?

We collect and process Collected Information for the following purposes and only when we have a legal basis:

● creation and management of your user account – legal basis: performance of a contract or pre-contractual measures,

● product delivery and order processing – legal basis: performance of a contract or pre-contractual measures,

● customer service and technical support management – legal basis: performance of a contract or pre-contractual measures,

● marketing operations (newsletters and personalized offers) – legal basis: Devialet’s legitimate interests or your consent,

● improvement of our products and services – legal basis: Devialet’s legitimate interests,

● compliance with our legal, administrative, financial and accounting obligations – legal basis: legal or regulatory obligations,

● protection or defense of our interests – legal basis: Devialet’s legitimate interests,

● organization and follow-up of our events and demonstrations – legal basis: performance of a contract or pre-contractual measures.

For further details, please consult the Summary.

Specifics Regarding Account Creation

The initial setup and continued operation of our Products and Services require the creation of a Devialet account. This registration links your Products to your profile, activates connected features, enables software updates, synchronizes your settings, and provides personalized support if needed.

We only collect the data strictly necessary for these purposes, as listed in the Summary. Your data is retained as long as your account is active. You may exercise your rights of access, rectification, erasure, and objection at any time through the app settings or by writing to privacy@devialet.com.

Specifics Regarding Devialet Mobile Applications

Using our mobile apps may require:
● creating or signing in to a user account to activate products, apply updates, and synchronize settings,
● granting, with your consent, access to certain device features (Bluetooth, location, notifications) to enable specific interactions or services.

The list of data permissions we request, whether mandatory or optional, and their purposes will be presented clearly and intelligibly at the time of request. You can consent specifically to each permission when different purposes are pursued. We will inform you of any potential consequences if information is not provided. We are committed to minimizing data collection and selecting, among the permissions made available by your operating system, only those strictly necessary. You can change your permissions at any time in your device settings.

Cookies
Our website and applications may use cookies or similar technologies such as pixels, tags, or anonymous mobile tracking identifiers (“Cookies”) for operational, analytics, and personalization purposes.

Types of Cookies used:

● Functional: essential for website or app operation,

● Analytics: audience measurement, user experience improvement,

● Marketing: personalization, advertising retargeting (with consent).

For more details or to withdraw your consent, please refer to our Cookie Policy.

Unless a cookie is strictly necessary, you can withdraw your consent at any time. If you refuse functional cookies, some Products and Services may not operate properly.

Social Media
If you participate in our activities on social media such as Twitter, Facebook, or Instagram, it is your responsibility to review their respective privacy and security rules, as well as their terms of use.

V. Cookies

Our website can make use of Cookies or similar technology such as Pixels and Tags (the “Cookies”). A Cookie is a small file that can be placed on your device that allows us to recognize and remember you. We may use Cookies to improve the user experience and make sure that the website functions properly. For more details on what we do with Cookies and if you wish not to allow the use of Cookies, please report to our Cookie Policy. Unless the cookie is strictly necessary, you can withdraw your consent to our cookies at any time even if you have previously consented. However, if you do not consent to our functionality cookies, parts of our Products and Services may not work.

https://business.safety.google/intl/fr/privacy/
https://policies.google.com/privacy?hl=fr#europeanrequirements

VIII. Sharing the Collected Information with Third Parties

We may disclose the Collected Information to third parties, to the extent required by law or by a decision rendered by a judicial/administrative authority. In addition, we may disclose Collected Information to third parties, such as: our authorized dealers, third-party vendors and service providers acting on our behalf, including billing, sales, marketing, IT support, advertising, analytics, research, customer service, product service support, shipping and purchase order fulfillment, data storage, logistics validation, security, fraud prevention, payment processing, and legal services; partners hosting events to which you may wish to participate; music streaming services providers, if it is required to enable delivery of the music content; other third parties subject to your consent. Such third-parties have access to the Collected Information in order to perform the related services but are prohibited from using it for other purposes; Collected Information is generally stored and processed within the European Economic Area (EEA). All transfers are made in compliance with the General Data Protection Regulation (GDPR). In some situations, we need to transfer the Collected Information outside of the EEA. The laws of the countries to which we transfer your personal data may not always offer the same level of personal data protection butsuch transfers are made with the appropriate safeguards, notably contractual, in accordance with the regulations applicable to personal data protection. If we disclose your Collected Information to a third party, we take all reasonable actions to ensure that such third party complies with applicable confidentiality and privacy obligations, and namely that the Collected Information is only processed in accordance with our instructions, applicable law and regulations and for the purpose specified by us and to ensure adequate security measures. The transfers of Collected Information to the Devialet entities located outside of the EU are covered by a data transfer agreement. The transfers of Collected Information to other entities outside of the EEA, such as in the United States, are covered by Standard Contractual Clauses. In situations where we transfer the Collected Information to third party partners, it can be for different purposes, such as: to complete an order and issue an invoice, to deliver products and services, to ensure a high level of service regarding our products and services, to enhance our products and perform software upgrades, if any, to increase the quality of our customer experience, to obtain third party help for the Products and Services and our IT system, to perform surveys, research, advertising, marketing, and analytics, to ensure data storage, to obtain legal services, and other operations in our name. We may also share the Collected Information to comply with laws and/or respond to lawful requests and legal process, to protect our rights and property, and those of our agents, customers, and others (which may include enforcing our agreements, policies, and terms of use); or in an emergency (including protecting the safety of our employees and agents, our community of users, or any person). Unless clearly outlined in the section above, or in such circumstances where you have given your consent, we will not share your Collected Information to third parties. We do not sell or disclose the Collected Information to third parties for their direct marketing purposes.

IX. Retention of Collected Information

We do not retain the Collected Information for longer than necessary needed. For clients, in consideration of the life expectancy of our products, their technical nature, and the need to properly maintain and upgrade the implemented software, we hold the Collected Information for a period of up to ten (10) years from the date of purchase. The only exceptions to the abovementioned period are where: − you consented with receiving personal benefits or customized direct marketing;  − the law requires us to hold your Collected Information for a longer period, or delete it sooner; − where you have raised a legal claim, complaint or concern regarding a product or service offered by us, in which case we will retain your Collected Information for the entire duration of the claim, complaint or query. For prospects and simple users of our Website, the Collected Information in relation to your request for registration to our newsletters, events, demo of products, offers will be retained for a period of three (3) years as of their collection or your last contact with us, unless during that period we form a relationship with you e.g. you purchase or loan one of our products. We hold your Collected Information for this period to give us an opportunity to form a relationship with you. After such period, we may recontact you in order to know whether you wish to continue to receive our communications. The Collected Information we gather through Cookies will be retained for a period of twelve (12) months as of their collection or your last contact with us, unless during that period we form a relationship with you e.g. you purchase or loan one of our products or you have been active in opening our marketing communication or otherwise showing interest in our Products.

X. Access, Rectification, Portability and Erasure of Collected Information

You have right to access the Collected Information, and in some instances, request the portability of the Collected Information, meaning to receive them in a structured and commonly machine-readable format, and have the right to transmit such Collected Information to any third party of your choice. The Collected Information processed by us can be transmitted upon request at privacy@devialet.com (“Contacting us”). You also have the right to rectify the Collected Information, in this respect, we encourage you to update the data you have provided to us any time there are changes in your Collected Information by logging in to your account on our Products and Services or by Contacting us. In order to ensure that the Collected Information is up-to-date, we recommend that you check your Collected Information at least once a year, and if needed update it. You may also contact us to review, update or delete the Collected Information. You can request us to delete your Collected Information by Contacting us, but we may decide to keep and process such information regardless of your consent, to the extent permitted or required under applicable laws and regulation. If we do not decide to keep and process your Collected Information for any of the reasons abovementioned, the Collected Information will be deleted within a maximum period of one (1) month following your request. Please note that prior to accessing and making changes to your account, we will need to verify your identity properly.

XI. Right to restriction of processing and right to object to processing

In such event where you do not want to delete your Collected Information, you may still request to have such Collected Information restricted from being processed, in the conditions of article 18 of the GDPR. Nonetheless, we keep the right to store the Collected Information for the establishment, exercise or defence of legal claims. In accordance with the applicable rules, you may at any time, on grounds relating to your particular situation, object to the processing of the Collected Information by us when such processing is based on our legitimate interests. Furthermore, you have the right to object to processing of your Collected Information for direct marketing purposes. You can do so by unsubscribing from our marketing information by clicking on the unsubscribe link in the bottom of marketing communication from us or by accessing your profile on the Website.

XII. Right to withdraw your consent

Some of our processing activities may be based on your consent. You have the right to withdraw your consent at any time. You can do so using the simple detailed protocol located at the bottom of each e-mail we send. You can also contact us by e-mail at privacy@devialet.com Withdrawal of your consent will not affect the lawfulness of processing based on your given consent before withdrawal. Upon the withdrawal of your consent, we and third parties involved will cease to process your Collected Information within one (1) month as of your withdrawal, unless and to the extent the continued processing or storage is permitted or required according to applicable laws and regulations. Please note that the withdrawal of your consent may result in us not being able to meet your requests or provide you with our services.

XIV. Contact - Right to complain

If you wish to exercise your rights as described above, or if you have a privacy related matter please contact Devialet S.A. by sending your request to Devialet S.A., 35 rue la Boetie, 75008 Paris, France or by sending an e-mail to privacy@devialet.com. We will do our best to respond to requests as quickly as possible and at latest, within one (1) month from the date of receipt of the request. In case a response from us would require more time, then we will inform you of the relevant reason and the estimated timeline. If you consider that the handling or outcome of your request is not satisfactory, you may contact the competent supervisory authority.

JOIN THE REVOLUTION

Devialet will only use the information provided by you for the limited purposes identified in ourPrivacy Policy

DEVIALETPrivacy Policy

I. Introduction

Who does this Privacy Policy apply to?

What Information Do We Collect?

Why Do We Collect Information and On What Legal Grounds?

V. Cookies

VI. Social Networks

VII. How do we protect the Collected Information?

VIII. Sharing the Collected Information with Third Parties

IX. Retention of Collected Information

X. Access, Rectification, Portability and Erasure of Collected Information

XI. Right to restriction of processing and right to object to processing

XII. Right to withdraw your consent

XIII. Right to communicate instructions on your Collected Information

XIV. Contact - Right to complain

XV. Children Under the Age of 13

XVI. Do Not Track

XVII. Modifications to this Privacy Policy

XVIII. Responsible for processing

XIX. Contact us

Devialet for Professionals?

JOIN THE REVOLUTION