DEVIALETPrivacy Policy

1. Category / Processing Activity : Creation & Management of User Account

• Data Concerned (examples) : Name, surname, email, encrypted password, country, product serial number
• Purpose(s) : Linking products, activation of connected features, software updates, user support
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
• Retention Period : Duration of the contractual relationship + 5 years (legal archiving)

2. Category / Processing Activity : Order Management & After-Sales Service

• Data Concerned (examples) : Contact details, delivery address, purchase history, order ID, product serial number
• Purpose(s) : Billing, delivery, statutory warranties, after-sales service
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
• Retention Period : 10 years (accounting obligations) / in accordance with general policy

3. Category / Processing Activity : Responding to Customer Requests

• Data Concerned (examples) : Message content, account ID, contact metadata
• Purpose(s) : Support, complaint handling, ticket follow-up
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
• Retention Period : Ticket duration + 3 years

4. Category / Processing Activity : Recording of Customer Service Calls

• Data Concerned (examples) : Voice, caller number, ticket ID
• Purpose(s) : Quality improvement & proof of exchanges
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract + Art. 6(1)(f) – Legitimate interest (service quality)
• Retention Period : 6 months (unless in litigation)

5. Category / Processing Activity : Software Updates & Improvement Suggestions

• Data Concerned (examples) : Firmware version, product settings, anonymous logs, product serial number
• Purpose(s) : Propose updates, optimize devices
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
• Retention Period : Product lifetime + 5 years

6. Category / Processing Activity : Technical Data Collection & Bug Reports

• Data Concerned (examples) : Audio sources, sound levels, error logs and actions, network performance, product serial number
• Purpose(s) : Diagnostics, bug fixing, performance improvement
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract + Art. 6(1)(f) – Legitimate interest
• Retention Period : 12 rolling months (then anonymized)

7. Category / Processing Activity : Personalization of User Experience

• Data Concerned (examples) : App usage history, sound preferences, settings
• Purpose(s) : Customize interface, product recommendations
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(f) – Legitimate interest (UX optimization)
• Retention Period : Session duration + 3 years

8. Category / Processing Activity : Marketing & Commercial Communications

• Data Concerned (examples) : Email, purchase history, newsletter interactions
• Purpose(s) : Sending Devialet or partner offers
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(a) – Explicit consent
• Retention Period : Until consent withdrawal or 3 years of inactivity

9. Category / Processing Activity : App Usage Statistics (via third-party SDKs)

• Data Concerned (examples) : Advertising ID, app events, OS version
• Purpose(s) : Audience measurement, app optimization (aggregated statistics)
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(f) – Legitimate interest → Consent required if non-anonymous identifiers (Art. 82 French Data Protection Act)
• Retention Period : 13 months (CNIL recommendation)

10. Category / Processing Activity : Protection of Vital Interests & Security

• Data Concerned (examples) : Security logs, attempted fraudulent logins Purpose(s) : Fraud prevention, user security
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(d) – Vital interests + Art. 6(1)(f) – Legitimate interest
• Retention Period : 12 months (logs) unless incident continues

11. Category / Processing Activity : Dispute Resolution & Legal Compliance

• Data Concerned (examples) : Any relevant client file data
• Purpose(s) : Pre-litigation, litigation management, legal obligations
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(c) – Legal obligation + Art. 6(1)(f) – Legitimate
  interest
• Retention Period : Duration of procedure + statutory limitation (5 years)

12. Category / Processing Activity : Events and Demonstrations

• Data Concerned (examples) : Name, surname, email, phone number, product serial number, country, postal address
• Purpose(s) : Organization and monitoring of events and demonstrations
• Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
• Retention Period : Until consent withdrawal or 3 years of inactivity