PROTECTION OF YOUR PERSONAL DATA QILIVE SMART

Last version: February 21, 2022

By using the Qilive Smart Application, you are required to enter your personal data, and other personal data, resulting from your use of the Application, are also processed.

The provisions below inform you about the processing of your personal data by the OIA through the use of the Qilive Smart Application, and the measures to protect your data in the context of this processing.

These provisions are applicable to the provision and use of the Qilive Smart Application (“Application”) for the benefit of Users (also referred to as “you” herein), through the acceptance of the T&Cs when opening your account. The OIA (subsidiary of Auchan Retail International) is the company that offers you this Application, it may also be referred to by the term or “we”.

What is personal data?

Personal data (or personal data) means any information relating to an identified or identifiable natural person. For example, it may be your name, your first name, your email address, etc.

Who is the controller of your personal data?

The data controller is the OIA(Organization Intra-Groupe des Achats), simplified joint-stock company, registered with the Trade and Companies Register of Lille Métropole under number 421 982 745, located rue du Maréchal de Lattre de Tassigny 59170 Croix (France).

For what purposes do we process your personal data?

We collect and process your personal data to allow you to use the Application and manage your connected objects. Two treatments are implemented:

creating your account;
the management of your connected objects.

What is the legal basis for processing your personal data?

You have accepted the General Terms and Conditions of Use of the Qilive Smart application . These TOS are binding on us and form a contract between you and us. It is therefore on the basis of this contract that we process your personal data collected via Qilive smart and the objects that you decide to connect. On the other hand, in the event that you add the Qilive connected scale, you expressly consent to our processing your health data (see point 5). In case you do not want it or no longer want it, we ask you to uninstall the connected scale from your Qilive smart application.

What personal data do we process?

This data varies depending on the connected object you are using.

Identification data: email address, telephone number, username;
Connection information: MAC address, IP address, wifi connection information, operating system type version, application version number, push notification ID, connection logs, mobile network information;
Data relating to connected objects:

on connected objects: connected object name, ID, online status, activation time, firmware version and update information;
by connected objects: Personal data concerning you is collected by the connected objects that you use. Examples:

By using the Qilive connected scale, the following data is processed:

Username, date of birth, height, gender, target weight (to create your physical profile)
Health data : Water percentage, Skeletal muscle ratio, skeletal muscle, skeletal ratio, skeletal mass, protein ratio, protein, muscle ratio, visceral fat index, subcutaneous fat mass, Weight excluding fat, Basal metabolism, Body Age, Morphology, Health Score, Weight, BMI and timestamps of recorded measurements (In order to follow the evolution of your body and make graphs of weekly, monthly, annual trends)

By using the connected kettle or the connected fan, data concerning the programming of the object is collected.
By using the connected vacuum cleaner, …

Usage data: visits, clicks, downloads, messages sent/received;
Precise geolocation or not in real time when using the Application;

How long are your personal data kept?

We keep your personal data for the time you use the Application, and in the event of prolonged inactivity, for a maximum of 2 years after your last use of the Application.

In the event that you request the uninstallation of the Qilive Smart app, your data will be deleted no later than 7 days after your request.

Who are the recipients of your personal data?

Your data will be processed by the employees of the OIA concerned, and will be transmitted to the subcontractors ( host, publisher, maintenance and support) of the OIA to meet the purposes described above .

Where are your personal data processed?

Your personal data is stored in the European Union. They are also processed outside the European Union, by our subcontractors to carry out maintenance/support operations . In this case of transfer outside the European Union, we ensure the protection and security of your data. We take with our subcontractors adequate protection measures provided for by chapter V of the GDPR: adequacy decision, BCR (binding corporate rules - binding corporate rules), standard contractual clauses of the European Union, etc. These mechanisms aim to secure the transfer of your data outside the European Union as well as possible, and to place a level of protection equivalent to that governing transfers within the European Union.

How to exercise your rights and contact the Data Protection Officer (DPO)?

You benefit:

A right of access: You have the right to obtain the communication of all the information concerning you held by the OIA.

A right of rectification: You have the right to obtain the rectification of inaccurate information concerning you held by the OIA.

A right of opposition: You have the right to object to your data being used by the OIA, for a specific purpose for "reasons relating to your particular situation", except in the case of commercial prospecting, which you can object to without reason.

A right to limit processing: You have the right to ask the OIA to temporarily freeze the use of some of your data, in the event that you believe that your data is inaccurate, that the processing carried out is unlawful, but also in the event that you oppose a processing implemented by SRS or that the data should be kept to allow the recognition, exercise or defense of legal rights.

A right of portability: You have the option of recovering part of your data in an open and machine-readable format when technically possible.

A right to erasure of your data: You have the option of requesting the deletion of your data from the OIA.

A right to lodge a complaint with a competent supervisory authority. In France, this is the National Commission for Computing and Liberties (CNIL).

To exercise your rights, and for any questions or additional requests relating to the processing of your data by Auchan, you can contact Auchan's personal data protection officer by writing to dpo@auchan.com, or to the following address : Auchan Retail International Safety & Security Department , For the attention of the Data Protection Officer , 40 avenue de Flandre - BP 139 , 59964 Croix Cedex.

Other Data Controllers

It is possible that you use connected objects compatible with the Qilive Smart Application, without these being Qilive connected objects.

The OIA does not process personal data resulting from the use of non-Qilive connected objects that are compatible with the Application. Thus, for example, we do not process the data resulting from the addition of this object in the Application, nor from its use. These types of data can be processed by the company that owns the chip present in the connected object (this chip makes it possible to make the object connected). This owner is then Responsible for the processing of your personal data, without the OIA having any role in this processing. You should contact the data protection policy of this Data Controller for information on the processing of your personal data carried out by him.

Management of cookies and other tracers

Update of this Privacy Policy

This policy may be modified by the OIA at any time. If we wish to change the Policy, we will notify you directly on the App through notification of any material changes and the revised version will become effective upon your acceptance through the App.