Ambiente Caribe Eme, S.A.de C.V. Privacy Policy


Current Version Release Date: December 03, 2019

Effective Date: January 07, 2018


Overview

This policy will help you understand the following:

1. Definition of Key Terms in This Policy

2. How We Collect Personal Information

3. How We Use Personal Information

4. How We Disclose Personal Information

5. How We Ensure Information Security

6. Access to Information and User Rights

7. Other Provisions

8. Updates to This Policy

Ambiente Caribe Eme, S.A.de C.V. and its affiliates (registered address: Av. Acanceh Mz 2 LT3 Supermanzana 11 Cancun, Supermanzana 11 - 77504, hereinafter referred to as "Caribe" or "We") respect and protect your privacy. When you use all fragrance products and services provided by our company, we will collect, store, use, and disclose the information you provide to us through the Caribe CaribeAroma APP in accordance with this Privacy Policy (hereinafter referred to as "this Policy").

At the same time, we will explain to you through this Policy how we manage your personal information and privacy details when you use all fragrance products and services provided by Caribe.This Policy is closely related to your use of our services. We recommend that you read and understand the entire content of this Policy and make the choices you deem appropriate. We strive to express ourselves in plain and concise language, and we use bold text to highlight clauses that are of significant importance to your rights and interests.

Definition of Key Terms in This Policy

1. "User Personal Information" in this Policy refers to: All information related to a specific individual, or all data that can directly or indirectly identify the individual when combined with other information about the person that Caribe can access, hereinafter referred to as "Personal Information."

2. "Smart Device" in this Policy refers to: Terminal products produced and manufactured by hardware manufacturers that have internet access functions, data transmission capabilities, and human-computer interaction interfaces, including Caribe fragrance machines and Caribe smart environmental purification devices. This specifically refers to the smart device you purchase and use.

How We Collect Personal Information

In the process of using our services, we require you to provide the personal information necessary for the services. We will collect detailed, explicit, and necessary information through legal means and ensure that such information is processed in accordance with national laws, regulations, and regulatory requirements. If you do not provide personal information, you will not be able to continue using our products or services. If you continue to use our products or services, we will assume that you are willing to provide your personal information. We may collect the following types of information:

l Information you provide or upload to us: We may collect the personal information you provide, such as your name, mobile phone number, email address, Caribe account information (e.g., security-related information, name, date of birth, gender), data or materials synchronized after connecting to Caribe devices, account and related settings created in Caribe, devices you add, messages you send, feedback, etc.

l Handheld device or SIM card-related information: We may collect information related to the handheld device running Caribe, such as IMEI number, IMSI number, system version, device manufacturer information, model name, and network operator. We may also collect information related to devices bound to your account, such as MAC address, DID, device network status (IP/network signal), and firmware version.

l Information we designate as related to you: We may collect and use information such as your Caribe account.

l Location information (only applicable to specific services/functions): Various types of information related to your location, such as region and country code, city code, mobile network code, mobile country code, cell identifier, area name, latitude and longitude information, time zone settings, and language settings.

l Login information: Information related to your use of certain features, mobile applications, and websites, such as cookies and other anonymous identifier technologies, IP address, network request information, temporary message history, standard system logs, and system crash information.

l Account credentials: Information related to your account credentials, such as passwords, password security questions, and answers.

How We Use Personal Information

To comply with national laws, regulations, and regulatory requirements, provide you with services and improve service quality, and ensure the security of your account and funds, we will use your information in the following situations:

1. Provide, process, maintain, improve, and develop our goods and/or services to you, as well as services provided through devices or Caribe.

2. Communicate with you regarding devices, services, or any general inquiries (e.g., updates, device firmware/software upgrades, customer support, related information, notifications).

3. Analyze and develop statistical information related to the use of our products and services to better improve our products and services.

4. Store and maintain information related to you for our business operations or to fulfill legal obligations.

5. Provide local services without communicating with our servers.

For more details on how we use your information (which may include personal information), please see below:

l Create your Caribe account. Used to establish a user's personal account and profile page (personal information collected when creating an account via the web or our mobile device).

l Provide location-based services. When using Caribe and connected smart devices, we may use location information to determine the device's time zone to ensure accurate time display, service region login, and enable the corresponding device in advance based on your selection. You can turn off this feature at any time by entering the device settings or stopping the use of this application.

l Device connection. Devices operated through the CaribeAroma App need to verify their authenticity, so we will confirm the device's legal identity by checking the factory MAC and DID information. In addition, if the device needs to connect to the internet, you need to configure the network settings for the device through the CaribeAroma App. This process requires you to enter the corresponding Wi-Fi name and password (this information is only used for device network configuration). The Wi-Fi and password data you enter will be encrypted and stored locally on the device and will not be uploaded to the server. You can delete this information from the device at any time. At the same time, we need to determine the IP and network signal to select the optimal network connection method for the device to ensure stable network connectivity.

l Device status display. Allows you to remotely view the device status so you can monitor the device's operation at any time.

l Set up automated tasks. The event information reported by your device (the information comes from the devices you add, and the specific configurable information depends on your privacy authorization scope for the device. Each added device will provide the privacy policy terms of the device provider for you to choose whether to agree) can be used to create personalized automated tasks.

l Provide push services. Account and IMEI numbers will also be used to provide CaribeAroma App push services, sending device notifications to users. You can turn off this feature at any time by changing the preference options under "Message Settings."

l Collect user feedback. To track the feedback you provide, Caribe may use the personal information you provide to contact you and keep records. The feedback you provide is extremely valuable in helping Caribe improve its services.

l Send notifications. We may occasionally use your personal information to send important notifications, such as notifications about abnormal device operation, customized device push notifications (depending on the devices you purchase and add), and changes to our terms, conditions, and policies.

How We Disclose Personal Information

1. Sharing

We are committed to keeping your information confidential. Unless otherwise required by laws, regulations, or regulatory authorities, we will only share your information with third parties (as defined below) under the following circumstances. Third parties include our partners.

(1) Business Sharing

We may disclose your personal information to third parties to provide the products or services you require.

l Depending on the specific circumstances, we may provide certain personal information to partners who cooperate with Caribe to provide products and services or assist Caribe in marketing to customers. We will only share personal information with third parties who provide, improve, or advertise products and services; we will not share personal information for the purpose of third-party sales, nor will we sell personal information. We strictly require these partners to comply with confidentiality agreements and personal information protection policies.

l We will periodically provide statistical information about your use of Caribe devices to Caribe's partners. Such statistical information will not include your name, account number, password, phone number, email address, or other personal information.

(2) User Authorization

l If our partners have clearly explained to you the information they collect and the purpose of its use and have obtained your consent, we may disclose your personal information to such third parties based on your authorization. For the security of your personal information, we may anonymize or obscure your personal information before disclosing it to third parties.

2. Public Disclosure

In principle, we will not publicly disclose your information. If public disclosure is necessary, we will inform you of the purpose of the disclosure, the type of information to be disclosed, and any sensitive information that may be involved, and obtain your explicit consent.

3. Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following cases:

(1) We have obtained your explicit consent in advance;

(2) It is required by laws, regulations, or mandatory administrative measures;

(3) In the event of asset transfer, acquisition, merger, reorganization, or bankruptcy liquidation, if personal information is involved in the transfer, we will inform you of the relevant situation and require the new holder of your personal information to continue to be bound by this Policy. If the purpose of using personal information is changed, we will require the company/organization to obtain your explicit consent again.

In the above cases, Caribe will only share your personal information based on your authorization (your authorization to Caribe will include various sub-processors that process your personal information). We ensure that when Caribe shares your personal information with third-party service providers, Caribe will stipulate the practices and obligations of the third party through contracts and require them to comply with the relevant local data protection laws. Caribe will require third-party service providers to comply with the relevant policies of your region and apply privacy standards through contracts.

4. Retention

If there are mandatory legal requirements or legitimate purposes for collecting information, we will retain your personal information. If there is reasonable ground to believe that retaining personal information cannot achieve the purpose of collecting the information, we will no longer retain the personal information. If further processing of the information is for public interest purposes (such as scientific research, historical research, national statistics, etc.), even if the further processing purpose is inconsistent with the original purpose, Caribe will further retain the data.

Data Permissions Required for Business Functions

1. Phone permission (read device identification code): Required for device network configuration; otherwise, the configuration cannot be completed.

2. Location permission: Required for device network configuration; otherwise, the configuration cannot be completed.

3. Read installed application list: Specific to certain mobile phone models.

4. Storage permission: Store passwords and cache data, with passwords stored only locally.

5. Camera permission: Used only for scanning QR codes to add devices.

 

Third-Party SDK Usage and Description

To ensure the functionality of the application, our app integrates certain third-party SDKs. Some SDKs may automatically collect device and user personal information when running in the background or in silent mode. We will make every effort to ensure that such collection is within reasonable limits and with your authorization.

SDK Name Provider Running State Collection Method Information Collected Purpose
Feiyan IoT SDK Alibaba Cloud Computing Co., Ltd. Foreground/Background Automatic Collection Device identifiers (IMEI, OAID, MAC), IP address, location information, etc. Device control, communication, status synchronization, OTA upgrades

Third-Party SDK Background Collection Behavior

To ensure the functionality and stable operation of this app, we may integrate third-party software development kits (SDKs). Some SDKs may automatically collect device or user personal information when running in the background. We promise that such collection is based on user authorization and strictly adheres to the principle of minimum necessity, ensuring that information processing is directly or reasonably related to the service purpose.

Alibaba Long-Link Channel (AliAlink SDK) Collection Description

The Alibaba long-link channel SDK (AliAlink) integrated into this app may collect device network-related information (such as IP address) during background operation to maintain long-link communication between the device and cloud services.

IP Address Collection Description

During your use of this app, we may collect your IP address as part of server access logs for the following purposes:

IP address collection is limited to service operation requirements and will not be used for advertising targeting or user profiling.

Android ID Collection Description

To ensure the secure operation and device identification of this app, we will collect and use your Android ID after obtaining your authorization.

Information Security Assurance

We are committed to ensuring the security of your personal information. To prevent unauthorized access, disclosure, or similar risks, we have implemented reasonable physical, electronic, and managerial measures to protect the information we obtain from your use of the Caribe CaribeAroma APP. We will take all reasonable security measures to protect your personal information.

Your personal information will be stored on secure servers and protected in controlled facilities. We classify your data based on its importance and sensitivity, ensuring that your personal information receives the highest level of security. Employees and third-party service providers who access this information to provide you with products and services are bound by strict contractual confidentiality obligations. Failure to fulfill these obligations will result in disciplinary action or termination of cooperation. Similarly, we implement specialized access controls for cloud-based data storage. In summary, we regularly review our information collection, storage, and processing practices to prevent unauthorized access and use.

We will take all feasible steps to protect your personal information. However, you should be aware that internet use is not always secure, and therefore, we cannot guarantee the security or integrity of any personal information transmitted over the internet.

We will take appropriate measures in response to personal data breaches, such as notifying relevant regulatory authorities or, in certain cases, informing data subjects of the breach as required by law (including local data protection laws).

Access to Information and User Rights

1. Access Other Functions on Your Device

Our application may access certain functions on your device, such as Wi-Fi network status. This information is used to allow the application to run on your device and enable you to interact with it. You can revoke this permission at any time by closing the application on your device or contacting us at 2851761824@QQ.com.

2. Access, Update, Correct, Delete, or Restrict Processing of Your Personal Information

l You have the right to request access to and/or correction of any personal information we hold about you. When updating personal information, we will verify your identity before processing your request. Once we have sufficient information, we will respond to your request within the time required by applicable data protection laws.

l If you wish to request access to the personal data we hold or if you believe that any information we hold about you is incorrect or incomplete, please contact us as soon as possible by sending an email to the address provided below. Email: 2851761824@QQ.com.

l If you are an EU user under the General Data Protection Regulation (GDPR), you have the right to request that we delete your personal information. If the GDPR provides for such a right, we will consider the reasonableness of the deletion request and take reasonable steps, including technical measures.

l If you are an EU user under the GDPR, you have the right to restrict our processing of your personal information, and we will consider the reasonableness of the restriction request. If the GDPR provides for such a right, we will only process your personal information in accordance with the GDPR and notify you before lifting the restriction.

l If you are an EU user under the GDPR, you have the right not to be subject to decisions based solely on automated processing (including profiling) that may have legal effects or similarly significant effects on you.

l If you are an EU user under the GDPR, you have the right to receive your personal information in a structured, commonly used format and transmit it to another data controller.

l For more details about the personal information in your Caribe account, you can access and modify it by logging into your account on your device.

3. Deletion of Information

While using Caribe services, you can delete the following information through "My - Personal Center - Delete Account":

1. User account information

2. User device information

3. Device data information

4. Images/videos captured by the camera

5. Feedback information

6. Device grouping information

7. User scenarios (linkage) information

For users with client versions earlier than 1.4, you can contact our customer service at 2851761824@QQ.com to deactivate your personal account.

Other Provisions

1. Precedence: If you have agreed to a user agreement and there is a conflict between that agreement and this Privacy Policy, the user agreement shall prevail.

2. Governing Law and Jurisdiction

This Policy is formulated in accordance with the laws of the People's Republic of China and shall be governed by such laws.

3. Complaints and Feedback

If you have any questions or concerns about our personal information policy or data processing, please contact us at the following email: 2851761824@QQ.com

Updates to the Privacy Policy

To reflect changes in our information practices, we will periodically review and update this Policy. If we make significant changes to this Privacy Policy, we will notify you via email (sent to the email address specified in your account) or through the Caribe CaribeAroma APP or mobile device notifications, so you can understand what information we collect and how we use it. Such changes to the Privacy Policy will take effect from the date specified in the notice or on the website. We recommend that you regularly review this page for the latest information on our privacy practices. Your continued use of the products, website, mobile, or any other device services will be deemed as acceptance of the updated Privacy Policy. If we collect additional personal information from you or use or disclose your personal information for new purposes, we will obtain your consent again.

If you are an EU user under the General Data Protection Regulation (GDPR), Caribe will provide:

A systematic approach to managing personal data related to our employees, management processes, and information systems using risk management methods. In accordance with the GDPR, Caribe will adopt the following measures: (1) Appoint a Data Protection Officer (DPO) responsible for data protection (the DPO's contact email is 2851761824@QQ.com); (2) Establish processes such as Data Protection Impact Assessments (DPIA).

How to Contact Us

If you have any questions, comments, suggestions, or complaints regarding this Privacy Policy, please contact our customer service from Monday to Friday, 8:30 AM to 5:30 PM. We will actively investigate, process, and respond as soon as possible.

Company Name: Ambiente Caribe Eme, S.A.de C.V.

Company Address: Av. Acanceh Mz 2 LT3 Supermanzana 11 Cancun, Supermanzana 11 - 77504.

Contact Email: 2851761824@qq.com