Privacy Notice

Your privacy is important to Signify.

We have drafted this Privacy Notice (also referred to as “Notice”) in an easy and comprehensible way in order to help you understand who we are, what personal data we collect about you, why we collect it, and what we do with it. Keep in mind that personal data (in this Notice also referred to as “data” or “your data”) means any information or set of information from which we are able, directly or indirectly, to personally identify you, in particular by reference to an identifier, e.g. name and surname, email address, phone number, etc.

Please keep in mind that since Signify is an international company, this Notice may be replaced or supplemented in order to fulfill local requirements, as well as in order to provide you with additional information on how we process your data through specific Signify products, services, systems or applications.

We strongly encourage you to take some time to read this Notice in full.

If you do not agree to this privacy notice, please do not provide us with your data.

As Signify, we are a global organization leader in the general lighting market with a unique competitive position and recognized expertise in the development, manufacturing and application of innovative lighting products, systems and services.

When this Notice mentions “we,” “us,” or the “Company,” it refers to the controller of your data under this Notice, namely the Signify affiliate with which you had, have or will have a business relationship or that otherwise decides which of your data are collected and how they are used, as well as Signify Netherlands B.V. (Registration number 17061150 - High Tech Campus 48, 5656 AE, Eindhoven, The Netherlands). Please note that the Signify affiliates include the subsidiary companies in which Signify N.V. has control, either through direct or indirect ownership. You may obtain a list of Signify affiliates by contacting the Signify Privacy Office (you will find the contact details in the below section “what are your choices?”).

Depending on who you are (e.g. customer, consumer, supplier, business partner, etc.) and how you interact with us (e.g. online, offline, over the phone, etc.) we may process different data about you. We may collect your data, for example, when you visit or use our consumer and customer-directed websites, applications or social media channels, purchase and use our products, services, systems or applications, subscribe to our newsletters, download a software update, provide to us your goods or services, contact our customer support, join our business events, participate to our contests, promotions and surveys or otherwise interact with us.

Below you will find an overview of the categories of data that we may collect:

Information you provide to us directly

Lastly, if you visit our premises, for security reasons we might also record your data through video or other electronic, digital or wireless surveillance system or device (e.g. CCTV).

Information we collect automatically

Information we may collect from other sources

To the extent permitted by applicable law, in addition to our websites, applications and other digital channels, we may also obtain information about you from other sources, such as public databases, joint marketing partners, social media platforms and other third parties. For example, depending on your social media settings, if you choose to connect your social media account to your Signify account, certain data from your social media account will be shared with us, which may include data that is part of your profile.

Signify Netherlands B.V. and other relevant Signify affiliates may send you regular promotional communications about their products, services, events and promotions.

Such promotional communications may use the “PHILIPS”, “HUE”, “SIGNIFY” and/or “INTERACT” brand and may be sent to you via different channels such as: email, phone, SMS text messages, postal mailings, third party social networks.

In order to provide you with the best personalized experience, sometimes these communications may be tailored to your preferences (for example, as you indicate these to us, as we may have inferred from your website visits, or based on the links you click in our emails).

When required by applicable law, we will ask your consent before starting the above activities.

In addition, we will give you the opportunity to withdraw your consent (opt-out) at any time.

In particular, you can always opt-out from receiving marketing-related emails by following the unsubscribe instructions provided in each email. If you can sign-in to a Signify account, you might be given the option to change your communication preferences under the relevant section of our website or application. You can always contact us (you will find the contact details in the below section “what are your choices?”) to opt-out from receiving marketing-related communications.

Please note that even if you opt out from receiving marketing communications, you might still receive administrative communications from us, such as technical updates of our products, order confirmations, notifications about your account activities, and other important notices.

In order to be able to process your data, we may rely on different legal bases, including:

• Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your data, you may withdraw your consent at any time;
• The necessity to establish a contractual relationship with you and to perform our obligations under a contract;
• The necessity for us to comply with legal obligations and to establish, exercise, or defend our self from legal claims;
• The necessity to pursue our legitimate interests, including:

• The necessity to respond to your requests;
• The necessity to protect the vital interests of any person;
• Any other legal basis anyhow permitted by local laws.

We do not share any of your data except in the limited cases described here.

If it is necessary for the fulfillment of the purposes described in this Notice, we may disclose your data to the following entities:

• Signify affiliates: due to our global nature, your data may be shared with certain Signify affiliates. Access to your data within Signify will be granted on a need-to-know basis;
• Service providers: like many businesses, we may outsource certain data processing activities to trusted third party service providers to perform functions and provide services to us, such as ICT service providers, consulting providers, shipping providers;
• Business partners: we may share your data with trusted business partners so they can provide you with the services you request;
• Public and governmental authorities: when required by law, or as necessary to protect our rights, we may share your data with entities that regulate or have jurisdiction over Signify.
• Professional advisors and others: we may share your data with other parties including professional advisors, such as banks, insurance companies, auditors, lawyers, accountants, other professional advisors.
• Other parties in connection with corporate transactions: we may also, from time to time, share your data in the course of corporate transactions, such as during a sale of a business or a part of a business to another company, or any reorganization, merger, joint venture, or other disposition of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding).

Due to our global nature, data you provide to us may be transferred to or accessed by Signify affiliates and trusted third parties from many countries around the world. As a result, your data may be processed outside the country where you live, if this is necessary for the fulfillment of the purposes described in this Notice.

If you are located in a country member of the European Economic Area, we may transfer your data to countries located outside of the European Economic Area. Some of these countries are recognized by the European Commission as providing an adequate level of protection. With regard to transfers from the European Economic Area to other countries that are not are recognized by the European Commission as providing an adequate level of protection, we have put in place adequate measures to protect your data, such as organizational and legal measures (e.g. binding corporate rules and approved European Commission standard contractual clauses). You may obtain a copy of these measures by contacting the Signify Privacy Office (you will find the contact details in the below section “what are your choices?”).

We keep your data for the period necessary to fulfill the purposes for which it has been collected (for details on these purposes, see above section “How do we use your data?”). Please keep in mind that in certain cases a longer retention period may be required or permitted by law. The criteria used to determine our retention periods include:

• How long is the data needed to provide you with our products or services or to operate our business?
• Do you have an account with us? In this case, we will keep your data while your account is active or for as long as needed to provide the services to you.
• Are we subject to a legal, contractual, or similar obligation to retain your data? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation.

To protect your data, we will take appropriate measures that are consistent with applicable data protection and data security laws and regulations, including requiring our service providers to use appropriate measures to protect the confidentiality and security of your data. Depending on the state of the art, the costs of the implementation and the nature of the data to be protected, we put in place technical and organizational measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure of, or access to your data.

We would like to remind you that it is your responsibility to ensure, to the best of your knowledge, that the data you provide us with, are accurate, complete and up-to-date. Furthermore, if you share with us data of other people, it is your responsibility to collect such data in compliance with local legal requirements. For instance, you should inform such other people, whose data you provide to us, about the content of this Notice and obtain their consent.

This privacy notice might change from to time.

The most current version of this Notice will govern our use of your data and can be found in the website of the Signify Privacy Center, see “Legal information” section.

- Signify -