DEVIALETPrivacy Policy

Last updated: March 2026

Cette politique de confidentialité régit la manière dont la société Devialet (« Devialet » ou « nous ») recueille, utilise, conserve et divulgue les renseignements recueillis auprès des utilisateurs ( « l’utilisateur » ou « vous ») du site Web de devialet.com (« le Site »). Cette politique de confidentialité s’applique au Site et à tous les produits et services (incluant les applications développées par Devialet) offerts par Devialet.

Annex I – Summary

1. Category / Processing Activity : Creation & Management of User Account

  • Data Concerned (examples) : Name, surname, email, encrypted password, country, product serial number
  • Purpose(s) : Linking products, activation of connected features, software updates, user support
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
  • Retention Period : Duration of the contractual relationship + 5 years (legal archiving)

 

2. Category / Processing Activity : Order Management & After-Sales Service

  • Data Concerned (examples) : Contact details, delivery address, purchase history, order ID, product serial number
  • Purpose(s) : Billing, delivery, statutory warranties, after-sales service
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
  • Retention Period : 10 years (accounting obligations) / in accordance with general policy

 

3. Category / Processing Activity : Responding to Customer Requests

  • Data Concerned (examples) : Message content, account ID, contact metadata
  • Purpose(s) : Support, complaint handling, ticket follow-up
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
  • Retention Period : Ticket duration + 3 years


4. Category / Processing Activity : Recording of Customer Service Calls

  • Data Concerned (examples) : Voice, caller number, ticket ID
  • Purpose(s) : Quality improvement & proof of exchanges
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract + Art. 6(1)(f) – Legitimate interest (service quality)
  • Retention Period : 6 months (unless in litigation)


5. Category / Processing Activity : Software Updates & Improvement Suggestions

  • Data Concerned (examples) : Firmware version, product settings, anonymous logs, product serial number
  • Purpose(s) : Propose updates, optimize devices
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
  • Retention Period : Product lifetime + 5 years

 

6. Category / Processing Activity : Technical Data Collection & Bug Reports

  • Data Concerned (examples) : Audio sources, sound levels, error logs and actions, network performance, product serial number
  • Purpose(s) : Diagnostics, bug fixing, performance improvement
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract + Art. 6(1)(f) – Legitimate interest
  • Retention Period : 12 rolling months (then anonymized)

 

7. Category / Processing Activity : Personalization of User Experience

  • Data Concerned (examples) : App usage history, sound preferences, settings
  • Purpose(s) : Customize interface, product recommendations
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(f) – Legitimate interest (UX optimization)
  • Retention Period : Session duration + 3 years


8. Category / Processing Activity : Marketing & Commercial Communications

  • Data Concerned (examples) : Email, purchase history, newsletter interactions
  • Purpose(s) : Sending Devialet or partner offers
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(a) – Explicit consent
  • Retention Period : Until consent withdrawal or 3 years of inactivity

 

9. Category / Processing Activity : App Usage Statistics (via third-party SDKs)

  • Data Concerned (examples) : Advertising ID, app events, OS version
  • Purpose(s) : Audience measurement, app optimization (aggregated statistics)
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(f) – Legitimate interest → Consent required if non-anonymous identifiers (Art. 82 French Data Protection Act)
  • Retention Period : 13 months (CNIL recommendation)

 

10. Category / Processing Activity : Protection of Vital Interests & Security

  • Data Concerned (examples) : Security logs, attempted fraudulent logins Purpose(s) : Fraud prevention, user security
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(d) – Vital interests + Art. 6(1)(f) – Legitimate interest
  • Retention Period : 12 months (logs) unless incident continues

 

11. Category / Processing Activity : Dispute Resolution & Legal Compliance

  • Data Concerned (examples) : Any relevant client file data
  • Purpose(s) : Pre-litigation, litigation management, legal obligations
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(c) – Legal obligation + Art. 6(1)(f) – Legitimate
    interest
  • Retention Period : Duration of procedure + statutory limitation (5 years)

 

12. Category / Processing Activity : Events and Demonstrations

  • Data Concerned (examples) : Name, surname, email, phone number, product serial number, country, postal address
  • Purpose(s) : Organization and monitoring of events and demonstrations
  • Legal Basis (Art. 6 GDPR) : Art. 6(1)(b) – Performance of a contract
  • Retention Period : Until consent withdrawal or 3 years of inactivity