PRIVACY POLICY

What is this document about?

We, FiveFive SAS, a French corporation doing business as Holi, are strongly committed to respect your privacy.

This privacy statement explains what information we receive and collect from and about you when you purchase or use our products and services, and what we do to protect your personal data.

This policy is effective on May 25th, 2018.

Any changes to this policy will be published on this website and sent to you if you have provided us your email.

 

What data do we collect about you?

We collect your personal data for the sole purpose for which the data are processed.

The mandatory information is marked with an asterisk (*) in our forms.

The required and optional data that you can share with us are:

  • Identity data, like your last name, first name, photo and birthdate.
  • Contact data, like your postal address, your phone number, and your email.
  • Profile data, like your username to connect to our services, and identification tokens used to access external third-parties services you have subscribed.
  • Personal life data, that you share with us when you use our product our services (genre, size, age, weight, food, routine, mood, etc.).
  • Transaction data, like you’re the date of your payments, and their success or failure.
  • Exchange data, that you share when contact us (phone or video calls, emails, social network private messaging, mail, etc.).

 

The data we automatically collect are:

  • Usage data, that describe how you use our website (cookies) and mobile applications.
  • Personal life data, recorded by our sensors when you use our connected devices (physical data, movements, environmental data, sound, etc.).
  • Technical data, like your IP address, mobile device information (device type, manufacturer, model and operating system), device id, application version, and data transfer logs.
  • Location data, only when you have provided us your postal address, and for the sole purpose of customizing our services to your position (weather forecast).

NB: our Android applications use the Bluetooth protocol to connect to our devices, which requires the location permission to be enabled. This is enforced by the operating system Android, started from version 6.0. We do not use or collect any location data in that case.

What purpose do we use your personal data for?

Holi uses your information as follows:

  • Customer Relationship Management to process your purchases, and answer to your inquiries for customer service or any questions you have about our products and services.
  • Service delivery, that we customize according the information you have shared with us or collected automatically.
  • Targeted Marketing, to send you general or customized information and promotions about our products and services.
  • User experience improvement, by customizing our contents and recommendations on our websites, products and services.
  • Technical control and improvement of the operational efficiency of our products and services.
  • Security management to protect your personal information, our products and services, and detect any unauthorized attempts to access these data.

 

Channel

Collected data

Purpose

CONTACT BY PHONE, EMAIL,

SOCIAL NETWORK MESSAGING,

MAIL, ETC.

·       Identity data

·       Contact data

·       Exchange data

·       Customer Relationship Management
HOLI.IO WEBSITE ·       Identity data

·       Contact data

·       Technical data

·       Usage data

·       Exchange data

·       Transaction data

·       Customer Relationship Management

·       Service delivery (custom webforms)

·       Targeted Marketing

·       User experience improvement

·       Technical control and improvement

·       Security management

PARTNER E-COMMERCE WEBSITES ·       Identity data

·       Contact data

·       Exchange data

·       Transaction data

·       Customer Relationship Management
SLEEPSENSOR

(+ application mobile SLEEP360)

·       Contact data

·       Profile data

·       Personal life data

·       Technical data

·       Customer Relationship Management

·       Service delivery

·       Targeted Marketing

·       Technical control and improvement

·       User experience improvement

·       Security management

SLEEPCOMPANION

(+ application mobile)

·       Contact data

·       Profile data

·       Personal life data

·       Technical data

·       Customer Relationship Management

·       Service delivery

·       Targeted Marketing

·       Technical control and improvement

·       User experience improvement

·       Security management

SMARTLAMP

(+ application mobile)

·       Contact data

·       Profile data

·       Personal life data

·       Technical data

·       Customer Relationship Management

·       Technical control and improvement

·       User experience improvement

·       Security management

BONJOUR

(+ application mobile)

·       Identity data

·       Contact data

·       Profile data

·       Personal life data

·       Technical data

·       Customer Relationship Management

·       Service delivery

·       Targeted Marketing

·       Technical control and improvement

·       User experience improvement

·       Security management

Application mobile RONFLOMETRE ·       Contact data

·       Personal life data

·       Technical data

·       Service delivery

·       Targeted Marketing

·       Technical control and improvement

·       User experience improvement

·       Security management

 

Whom do we share your personal data with?

We do not rent, sell or share your individual personal information with third parties, except as follows:

  • With your consent, for example to connect with a third-party app or service.
  • We use service providers to help us deliver our service and run our business. They are subject to confidentiality agreements. For example, we use third-party data analytics platforms to help us understand, among other things, server load and app behavior.
  • We may share your personal information for the purposes of a business deal (or negotiation of a business deal) involving sale or transfer of all or a part of our business or assets. These deals can include a merger, financing, acquisition.
  • We may disclose your personal information to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process.

We also share aggregated usage statistics that cannot be used to identify you individually, for example through data stories on our blog or through the media.

Your data are collected and processed on servers that are hosted in the European Union (France and Belgium), and in the United-States with providers that comply with the EU-US data privacy shield and the EU General Data Protection Regulation (GDPR).

 

How do we secure your personal data?

Holi strive to do all actions to ensure the security of your data:

  • We apply organizational measures to limit access to your information to persons with a need to know for the sole purpose for which the data are processed.
  • We also implement technical measures to prevent unauthorized access to your personal data and ensure data integrity.

 

How long will we use your data?

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. Ultimately, your data are automatically deleted after five years of unused service.

We may longer retain some data, after anonymization or aggregation only:

  • For our Research & Development projects.
  • For statistical purpose to improve our products and services.

 

What are your legal rights?

The French law n°78-17 of January 6th, 1978 on information technology, data files and civil liberties, and the European General Data Protection Regulation provides you the rights of access, to rectification, to erasure, to restriction of processing, to data portability, to object to automated processing and to be forgotten.

Use of some rights may imply the termination of service delivery.

You can opt-out of promotional emails from us by following the unsubscribe instructions provided in the e-mail you receive, or by contacting us directly. If you opt-out, we may still send you non-marketing e-mails including e-mails about your accounts and our business dealings with you.

If you wish to exercise any of the rights set out above, please send your requests at privacy@holi.io, with your proof of identity, the services and rights you want to exercise, and the username and email used on these services.

You have the right to fill a complaint to the CNIL, French authority in charge of data protection.