Privacy Notice

This Notice covers how we collect and use your data e.g.

• when you visit or use our consumer and customer-directed websites, applications or social media channels;
• purchase and use our products, services, systems or applications;
• subscribe to our newsletters;
• provide to us your goods or services;
• contact our customer support;
• join our business events;

or otherwise interact with us (directly or indirectly) in your capacity as consumer, business customer, partner, (sub) supplier, contractor or other person with a business relationship with us. 

As Signify, we are a global organization leader in the general lighting market with a unique competitive position and recognized expertise in the development, manufacturing and application of innovative lighting products, systems and services. 

When this Notice mentions “we,” “us,” or the “Company,” it refers to the controller of your data under this Notice, namely the Signify affiliate with which you had, have or will have a business relationship or that otherwise decides which of your data are collected and how they are used, as well as Signify Netherlands B.V. (Registration number 17061150 - High Tech Campus 48, 5656 AE, Eindhoven, The Netherlands). Please note that the Signify affiliates include the subsidiary companies in which Signify N.V. has control, either through direct or indirect ownership. You may obtain a list of Signify affiliates by contacting the Signify Privacy Office (you will find the contact details in the below section “what are your choices?”).

Depending on who you are (e.g. customer, consumer, supplier, business partner, etc.) and how you interact with us (e.g. online, offline, over the phone, etc.) we may process different data about you. We may collect your data, for example, when you visit or use our consumer and customer-directed websites, applications or social media channels, purchase and use our products, services, web-based tools, mobile applications, systems, subscribe to our newsletters, install a software update, provide to us your goods or services, contact our customer support, join our business events, participate to our contests, promotions and surveys or otherwise interact with us.

Below you will find an overview of the categories of data that we may collect:

Information you provide to us directly

Lastly, if you visit our premises, for security reasons we might also record your data through video or other electronic, digital or wireless surveillance system or device (e.g. CCTV).

Information we collect automatically

When you visit or use our websites or applications, subscribe to our newsletters or otherwise interact with us through our digital channels, in addition to the information you provide to us directly, we may collect information sent to us by your computer, mobile phone or other access device. For example, we may collect:

Information we may collect from other sources

To the extent permitted by applicable law, in addition to our websites, applications and other digital channels, we may also obtain information about you from other sources, such as public databases, joint marketing partners, social media platforms and other third parties. For example, depending on your social media settings, if you choose to connect your social media account to your Signify account, certain data from your social media account will be shared with us, which may include data that is part of your profile.To the extent permitted by applicable law, in addition to our websites, applications and other digital channels, we may also obtain information about you from other sources, such as public databases, joint marketing partners, social media platforms and other third parties. For example, depending on your social media settings, if you choose to connect your social media account to your Signify account, certain data from your social media account will be shared with us, which may include data that is part of your profile. If you interact with us through Social Network Services (‘SNS’) we might process your personal information in accordance with this Notice. What data we process will depend on what personal information you have provided to the SNS (such as your name, email address and other information you have made publicly available) when creating your account. Note that the data we collect from and through a SNS may depend on the privacy settings you have set with the SNS and the permissions you grant to us in connection with linking your account with our products or services to your account with an SNS. Your interactions with third parties through an SNS or similar features are governed by the respective privacy policies of those third parties and your agreement with the SNS. You acknowledge that you are entitled to use your SNS account for the purposes described herein without breach by you of any of the terms and conditions that govern the SNS.
 

Information we may aggregate from different sources to your profile
 

If you have indicated to us that you wish to receive personalize direct marketing communications, we might aggregate data from different sources (both internally and externally) to have a better understanding of your preference and interests, and be able to serve you with more relevant communications. You can always object to these activities by way of opposing to this. In particular, you can always opt-out from receiving marketing-related emails by following the unsubscribe instructions provided in each email. If you can sign-in to a Signify account, you might be given the option to change your communication preferences under the relevant section of our website or application. You can always contact us (you will find the contact details in the below section “what are your choices?”) to opt-out from receiving marketing-related communications.

We may use your data for different legitimate reasons and business purposes.

Below you will find an overview of the purposes for which we may process your data:

If we ask you to provide us with your data, but you chose not to, in some cases we will not be able to provide you with the full functionality of our products, services, systems or applications. Also, we might not be able to respond to requests you might have.

If you decide to sell or share our products with other individuals, please note that certain products might store personal data relating to you or your use of the product. In such cases, if you intend to share, return, transfer ownership or possession of the device, please make sure

      (1)    you perform a factory reset of the product in question. The instructions on how to perform this factory reset are present in the product manual; and

      (2)    where you provide us with personal data of any other individual as part of your usage, you have obtained consent from that individual prior to providing the information to us.

It is your responsibility to ensure that information you share with us does not violate any third party’s rights.

Signify Netherlands B.V. and other relevant Signify affiliates may send you regular promotional communications about their products, services, events and promotions.

Such promotional communications may use, amongst others, the “PHILIPS”, “HUE”, “SIGNIFY” and/or “INTERACT” brand and may be sent to you via different channels such as: email, phone, SMS text messages, postal mailings, third party social networks. Please find our current list of brands here.

In order to provide you with the best personalized experience, sometimes these communications may be tailored to your preferences (for example, as you indicate these to us, as we may have inferred from your website visits, or based on the links you click in our emails, or on other information we might infer about you).
 

We may also contact you regarding information, products, services, events and promotions from Signify as well as from other third-parties (‘our trusted partner’) which we believe can be relevant to you because of your usage of our products or in order to expand their functionality; mainly when we find a partner which has specific services or solutions to meet your needs, or to optimize your use of our products and services. We may contact you through electronic marketing communication channels or use other communication channels (such as social channels) to send you personalized ads and special offers. We will not share your registration data with our trusted partner unless we have sufficient grounds to do so.
 

When required by applicable law, we will ask your consent before starting the above activities.

Please note that even if you opt out from receiving marketing communications, you might still receive administrative, service and transaction communications from us, such as technical and/or security updates of our products, order confirmations, notifications about your account activities, and other important notices.

In order to be able to process your data, we may rely on different legal bases, including:

• Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your data, you may withdraw your consent at any time;
• The necessity to establish a contractual relationship with you and to perform our obligations under a contract;
• The necessity for us to comply with legal obligations and to establish, exercise, or defend our self from legal claims;
• The necessity to pursue our legitimate interests, including:

            o To ensure that our networks and information are secure

            o To administer and generally conduct business within the Company

            o To prevent or investigate suspected or actual violations of law, breaches of a business
               customer contract,  or non-compliance with the Signify Integrity code or other Signify
               policies;

            o To optimize or extend our marketing reach and communication relevance;

• The necessity to respond to your requests;
• The necessity to protect the vital interests of any person;
• Any other legal basis anyhow permitted by local laws.

We do not share any of your data except in the limited cases described here.

If it is necessary for the fulfillment of the purposes described in this Notice, we may disclose your data to the following entities:

• Signify affiliates: due to our global nature, your data may be shared with certain Signify affiliates. Access to your data within Signify will be granted on a need-to-know basis;
• Service providers: like many businesses, we may outsource certain data processing activities to trusted third party service providers to perform functions and provide services to us, such as ICT service providers, consulting providers, shipping providers, payment providers, electronic communication service platforms;
• Business partners: we may share your data with trusted business partners so they can provide you with the services you request;
• Public and governmental authorities: when required by law, or as necessary to protect our rights, we may share your data with entities that regulate or have jurisdiction over Signify.
• Professional advisors and others: we may share your data with other parties including professional advisors, such as banks, insurance companies, auditors, lawyers, accountants, other professional advisors.
• Other parties in connection with corporate transactions: we may also, from time to time, share your data in the course of corporate transactions, such as during a sale of a business or a part of a business to another company, or any reorganization, merger, joint venture, or other disposition of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding).

• Upon your request in case of a personal data portability request.

Due to our global nature, data you provide to us may be transferred to or accessed by Signify affiliates and trusted third parties from many countries around the world. As a result, your data may be processed outside the country where you live, if this is necessary for the fulfillment of the purposes described in this Notice.

If you are located in a country member of the European Economic Area, we may transfer your data to countries located outside of the European Economic Area. Some of these countries are recognized by the European Commission as providing an adequate level of protection. With regard to transfers from the European Economic Area to other countries that are not are recognized by the European Commission as providing an adequate level of protection, we have put in place adequate measures to protect your data, such as organizational and legal measures (e.g. binding corporate rules and approved European Commission standard contractual clauses). You may obtain a copy of these measures by contacting the Signify Privacy Office (you will find the contact details in the below section “what are your choices?”).

We keep your data for the period necessary to fulfill the purposes for which it has been collected (for details on these purposes, see above section “How do we use your data?”). Please keep in mind that in certain cases a longer retention period may be required or permitted by law. The criteria used to determine our retention periods include:

• How long is the data needed to provide you with our products or services or to operate our business?
• Do you have an account with us? In this case, we will keep your data while your account is active or for as long as needed to provide the services to you.
• Are we subject to a legal, contractual, or similar obligation to retain your data? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation, or protection against a possible claim.

To protect your data, we will take appropriate measures that are consistent with applicable data protection and data security laws and regulations, including requiring our service providers to use appropriate measures to protect the confidentiality and security of your data.  Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. Depending on the state of the art, the costs of the implementation and the nature of the data to be protected, we put in place technical and organizational measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure of, or access to your data. If you have reason to think that your interaction with us or your Data is no longer processed in a secure manner, please reach out to the Signify Privacy Office immediately in accordance with “WHAT ARE YOUR CHOICES?” as described below.

We would like to remind you that it is your responsibility to ensure, to the best of your knowledge, that the data you provide us with, are accurate, complete and up-to-date. Furthermore, if you share with us data of other people, it is your responsibility to collect such data in compliance with local legal requirements. For instance, you should inform such other people, whose data you provide to us, about the content of this Notice and obtain their prior consent.

We aim to provide you with access to your data. Usually you can autonomously control your data (e.g. by logging in to your account) and update, modify or, if legally possible, delete it.  In this case, we strongly encourage you to take control of your data. 

You can always contact our Privacy Office if you would like to:

• review, change or delete the data you have supplied us with (to the extent Signify is not otherwise permitted or required to keep such data);

• object to certain data processing operations (e.g., opt-out from marketing communications);

• receive a copy of your data (in a common machine readable format, to the extent it is required by applicable law); 

• ask us any other questions related to the protection of your data in Signify

For any questions or reasonable inquiry related to the protection of your data in Signify or regarding this Notice in general, you can contact the Signify Privacy Office:

The contact details of our Privacy Office are:

• Mail: Signify - Attn: Privacy Office – Herikerbergweg 102, 1101CM Amsterdam Zuid Oost, The Netherlands; or

• Online: Signify Privacy Center, “Privacy request” section.

   

Please keep in mind that email communications are not always secure. Therefore, please do not include sensitive information in your emails to us.
 

We will do our best to address your request in time and free of charge, except where it would require a disproportionate effort. In certain cases, we may ask you to verify your identity before we can act on your request. If you are unsatisfied with the reply received, you may then refer your complaint to the relevant regulator in your jurisdiction.

For more information on how we use cookies and other tracking technologies, read our Cookie Notice (which can be found in the website of the Signify Privacy Center, see “Legal information” section).

We do not intentionally collect information from children under the age of 16.

• Special note to Children under the age of 16: if you are under the age of 16, we advise that you speak with and get your parent or guardian’s consent before sharing your data with us;
• Special note to Parents of Children under the age of 16: we recommend you to check and monitor your children's use of our products, systems, services, applications (including websites and other digital channels) in order to make sure that your child does not share personal data with us without asking your permission.

The California Consumer Privacy Act (‘CCPA’) provides California consumer residents with specific rights regarding their personal information. In additional to the above this section describes your CCPA rights and explains how to exercise those rights.

The following is not applicable to de-identified or aggregated personal information or data publicly available.

In the execution of our services and/or when visiting our Website we collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (defined as “data”). In particular, we have collected the following categories of data from our consumers within the last twelve (12) months:

We do not intentionally collect information from children under the age of sixteen (16) years as we do not offer services to them. Parent who set up a profile holding information about children under the age of sixteen (16) years can only do so by granting parental consent which consent choices can be changed by the adults in the family. We do not direct services to children under the age of thirteen (13) years old. As a result, thereof we do not knowingly process data or information from children under thirteen 13 years old.

We do not respond to “Do Not Sell” requests as we do not track your data across third party websites, nor do we sell your data to third parties to provide targeted advertising. Nonetheless, we aim to make your online experience and interaction with our websites as informative, relevant and supportive as possible. One way of achieving this is to use cookies or similar techniques, which store information about your visit to our site on your computer. For more information on how we use cookies and other tracking technologies, read our Cookie Notice (see section “How do we use cookies and other tracking technologies”)
 

Your Rights?

“Right to Know”: You have the right to request that we disclose to you what personal information of yours that we collect, use, and/or disclose.

“Right to Delete:” You have the right to request the deletion of your personal information collected or maintained by us.
 

If you have questions about the foregoing or how to execute your Right to Know and/or Right to Delete in our Privacy Notice or specifically with regard to categories and specific pieces of data processed, categories of sources from which your data is collected by us, categories of third parties with whom we share your data in the preceding 12 months of its collection and the business or commercial purpose for collecting please contact our Privacy Office (see section “What are your choices?”). You may also make a verifiable request to exercise your rights by contacting us via the toll-free telephone 1-800-555-0050.
 

If we cannot verify if you are the California consumer making the request is the consumer about whom we have collected information (or is authorized to act on your behalf) we have the right to deny requests. While verifying your identity we shall generally avoid requesting additional information from you for purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information from you, which shall only be used for the purposes of verifying your identity while you are seeking to exercise your rights under the CCPA, and for security or fraud-prevention purposes. We shall delete any new personal information collected for the purposes of verification as soon as practical after processing your request, except as required to comply with applicable legislation.
 

An “Authorized agent” means a natural person or a business entity registered with the Secretary of State that a consumer has authorized to act on your behalf and conditioned you have
 

1. Provided the authorized agent written permission to do so and we could verify this; and

2, Verified your own identity directly with the business.
 

Subsection 1 does not apply when you have provided the authorized agent with a valid power of attorney.
 

We endeavor to timely respond to a verifiable individual, free of charge and in a portable format unless it is excessive, repetitive or material unfounded. If we require more time, we will inform you of the reason thereof and extension period in writing.
 

Non-Discrimination

We will not discriminate against you for exercising your rights under the CCPA. Unless permitted by applicable regulations, we will not charge different prices or rates, deny products or services, provide different products or services or level of quality and/or suggest you may receive the foregoing mentioned.
 

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

This privacy notice might change from to time. 

The most current version of this Notice will govern our use of your data and can be found in the website of the Signify Privacy Center, see “Legal information” section.

- Signify -