INFORMATIVE STATEMENT ON THE

JOTUL APP

 

Dear User,

This informative statement is provided pursuant to Article 13 of EU Regulation no. 2016/679 (hereinafter referred to as the “GDPR”) on the protection of individuals with regard to personal data processing.

Purposes of processing and legal basis

 

Your personal data will be processed:

A.    Without your clear authorisation for the following purposes (please refer to “Purposes of the Service”):

a.     Downloading and activating the Jotul App ("Jotul APP”);

b.     Diagnosing problems with the APP;

c.     Investigating and replying to any comment or complaint that the User may send us;

d.     Detecting, preventing or otherwise dealing with fraud, technical or security issues, and piracy, by helping to protect the User;

e.     to send the User updates and technical information strictly connected to the functions and services provided as well as advice on how to use the APP;

f.      Exercising the rights of the Data Controller.

For these purposes, data processing is required to provide the requested Services or to fulfil a legal obligation.

B.    Only with your specific and separate consent for the following purposes:

a.     To send information regarding your product or concerning services provided by JOTUL, i.e. informative and/or advertising material (hereinafter referred to as “Marketing Purposes”);

b.     To identify and analyse your behaviour, e.g. analysing and mapping personal preferences, habits, movements, locations (hereinafter referred to as “Profiling Purposes”);

 


 

The processing of your personal data will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.

For the above purposes, JOTUL may process "common" data, including for example:

a.     Data required identifying the User (e.g. name, tax code, addresses, e-mail address, Certified e-mail address, etc.)

b.     Data required to create the User's access profile (e.g. username, password and e-mail address);

c.     Technical details such as the type of device, operating system, update status;

d.     Data required to manage the contract;

e.     Data related to the use of the Services obtained during the period when the User uses the services (e.g. specific functions used);

f.      Data on the geographical area from where the Services are provided,

Period of data retention

 

Your personal data will be processed for the time strictly required to achieve the above purposes, after which they will be deleted or made anonymous.

With specific reference to the purposes described in point B), your personal data will be processed:

-       for 12 months following the last “Profiling” activity;

-       for 24 months following the last communication for as much as regards “Marketing” activities;

unless you withdraw your consent beforehand, which may apply to all, one or several of them.

Data provision and the consequences of failing to provide data

 

Data provision for the purposes referred to in point A) is required in order to provide the service. If you refuse to provide data, you will not be able to access the service or use the APP (“Jotul”).

Data provision for the purposes referred to in point B) is optional. You may therefore decide not to provide any data or to subsequently refuse authorisation to process data already provided: if so, you may not receive invitations to events, newsletters or opinion/satisfaction surveys by e-mail and, above all, you may not receive information on customised initiatives to suit your preferences. You will, however, continue to receive the services referred to in point A).


 

Recipient categories

 

Your data may be communicated to:

-       the Data Controller's employees and collaborators in their capacity as data managers and/or system administrators;

-       third-party companies or other subjects (suppliers, hardware and software support technicians, professional studios, etc.), who, as data managers, perform outsourcing activities on behalf of the Data Controller.

If your data is to be processed on behalf of the Company by third parties, they will be appointed as data managers under an appropriate agreement or other legal deed. Your data will NOT be disclosed under any circumstances.

Data transfer to a non-EU country and/or an international organisation

 

Your personal data will NOT be transferred to non-EU countries.

Rights of data subjects

 

You have the right (see Articles 15 - 22 of the GDPR) to ask our Company for access to your personal data and to amend them if they are incorrect, delete them or limit their processing if the conditions are met, and obtain the portability of the data provided by you only if they are subject to automatic processing based on your consent or on the contract.

You also have the right to withdraw consent given for the purposes of processing that require it, without prejudice to the legitimate grounds for the processing carried out up to the time of withdrawal.

Moreover, you are entitled to lodge a complaint with the relevant supervisory authority, the Data Protection Supervisor.

Data subjects

 

The Data Controller in charge of processing your personal data is Jøtul France S.A.S.

 

Update date: August 2021