{"id":36951,"date":"2025-10-27T16:27:16","date_gmt":"2025-10-27T15:27:16","guid":{"rendered":"https:\/\/www.krupps.com\/?page_id=36951"},"modified":"2026-10-26T10:49:16","modified_gmt":"2026-10-26T09:49:16","slug":"app-user-information","status":"publish","type":"page","link":"https:\/\/www.krupps.com\/en\/app-user-information\/","title":{"rendered":"APP USER INFORMATION"},"content":{"rendered":"\n

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA<\/h2>\n\n\n\n

IKLOUD, MYKRUPPS, KRUPPS REMOTE CONTROL
<\/strong>(Articles 13 and 14 of Regulation (EU) 2016\/679 and Italian Legislative Decree 196\/2003 as amended)<\/em><\/p>\n\n\n\n

<\/p>\n\n\n\n

Dear User,<\/p>\n\n\n\n

below we provide some information that we are required to bring to your attention, not only to comply with our legal obligations, but also because transparency and fairness towards data subjects are fundamental to our business.<\/p>\n\n\n\n

This notice is addressed to Users who use the MyKrupps<\/strong> and Krupps Remote Control<\/strong> apps or access iKloud via ikloud.krupps.com<\/strong>.<\/p>\n\n\n\n

Who is the controller?<\/strong><\/p>\n\n\n\n

The controller of your personal data is Krupps S.r.l.<\/strong> (VAT No. IT04251180289), with registered office at Via Austria 19, 35127 Padova (PD), Italy, which is responsible to you for the lawful and proper use of your personal data and which you may contact for any information or request at the following contact details: +39 049 7625156, privacy@krupps.com, krupps@pec.it<\/p>\n\n\n\n

How can I contact the Data Protection Officer?<\/strong><\/p>\n\n\n\n

The Data Protection Officer (DPO) can be contacted at: dpo@krupps.com<\/a><\/p>\n\n\n\n

From which sources is the data collected?<\/strong><\/strong><\/p>\n\n\n\n

The data processed is provided by the user, or by other users associated with the user, and\/or collected automatically during use of the applications and services.<\/p>\n\n\n\n

What processing of data is carried out?<\/strong><\/p>\n\n\n\n

Your personal data is collected and processed, by automated and non-automated means, as specified below.<\/p>\n\n\n\n

Use of the Krupps platform<\/strong><\/p>\n\n\n\n

Purposes and legal basis<\/td>– to enable user registration and authentication and the use of services reserved for registered users, on the basis of: performance of a contract and\/or pre-contractual measures – to provide support, including technical support, on the basis of: performance of a contract and\/or pre-contractual measures – to enable remote management of the connected dishwasher, and the viewing and downloading of technical usage reports, on the basis of: performance of a contract and\/or pre-contractual measures – to acquire the location in order to enable the location feature of the connected dishwasher, on the basis of the data subject’s consent** – to enable full use of the platform’s features, on the basis of: performance of a contract and\/or pre-contractual measures<\/td><\/tr>
Categories of data<\/td>Personal details, contact details, address details, data relating to purchases or use of services, access and identification data, technical and usage data of the application, including activity logs, data relating to the provision of an electronic communications service, diagnostic data of the connected dishwasher associated with the relevant user ID, geolocation data (if shared when configuring the dishwasher, in order to record the location where the dishwasher is installed; no continuous geolocation takes place), any other data the user decides to share voluntarily<\/td><\/tr>
Retention period*<\/td>Common data: for as long as the account remains valid. If the account is deleted or the user unsubscribes from the application, personal data is deleted within 60 days of confirmation of the request.
Location data: until the next detection, which replaces the previous one, and in any case deleted within 60 days of the account being deleted or the user unsubscribing from the application.<\/td><\/tr>
Recipients of the data<\/td>Persons authorised to process the data, appointed pursuant to Art. 29 of Regulation (EU) 2016\/679; processors appointed pursuant to Art. 28 of Regulation (EU) 2016\/679 (see register of processors); other parties to whom disclosure of the data is necessary to fulfil the purposes stated by the controller, including, for example, providers of third-party services used in the app\/platform, app store operators, public authorities and bodies to which disclosure is required by law<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

**Giving consent is always optional and consent may be withdrawn at any time (including independently via the application settings); you may contact the controller using the contact details above. Refusal does not affect the use of the platform’s other features.<\/p>\n\n\n\n

Management and maintenance of IT systems<\/strong><\/p>\n\n\n\n

Purposes and legal basis<\/td>– Management and maintenance of the network and IT systems, on the basis of: legitimate interest, legal obligation<\/td><\/tr>
Categories of data<\/td>Access and identification data<\/td><\/tr>
Retention period*<\/td>Access data and logs: for as long as the account remains valid, with deletion within 60 days of the account being deleted or the user unsubscribing; system administrators’ logs are retained for 18 months, in accordance with the decision of the Italian Data Protection Authority (Garante) of 27 November 2008.<\/td><\/tr>
Recipients of the data<\/td>Persons authorised to process the data, appointed pursuant to Art. 29 of Regulation (EU) 2016\/679; processors appointed pursuant to Art. 28 of Regulation (EU) 2016\/679 (see register of processors); other parties to whom disclosure of the data is necessary to fulfil the purposes stated by the controller, public authorities and bodies to which disclosure is required by law<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Customer management<\/strong><\/p>\n\n\n\n

Purposes and legal basis<\/td>– Customer management, on the basis of: performance of a contract and\/or pre-contractual measures – Responding to requests from customers or prospective customers and handling pre-contractual or contractual obligations, on the basis of: performance of a contract and\/or pre-contractual measures<\/td><\/tr>
Categories of data<\/td>Personal details, contact details, address details, data relating to purchases or use of services<\/td><\/tr>
Retention period*<\/td>10 years from the year of the contract or from the end of the last contact<\/td><\/tr>
Recipients of the data<\/td>Persons authorised to process the data, appointed pursuant to Art. 29 of Regulation (EU) 2016\/679; processors appointed pursuant to Art. 28 of Regulation (EU) 2016\/679 (see register of processors); other parties to whom disclosure of the data is necessary to fulfil the purposes stated by the controller, banks, credit insurers, public authorities and bodies to which disclosure is required by law<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Sales and pre-sales commercial activities<\/strong><\/p>\n\n\n\n

Purposes and legal basis<\/td>– Promotional activities, on the basis of the performance of a contract and\/or pre-contractual measures and the controller’s legitimate interest in promoting its activities – Offering goods and services, on the basis of the performance of a contract and\/or pre-contractual measures and the controller’s legitimate interest in offering goods and services – Facilitating commercial follow-up and the provision of information on the products and services requested, on the basis of the controller’s legitimate interest in handling contact requests and in the commercial promotion of its products, including through its distributor network<\/td><\/tr>
Categories of data<\/td>Personal details, contact details, address details, data relating to purchases or use of services<\/td><\/tr>
Retention period*<\/td>10 years from the relevant financial year<\/td><\/tr>
Recipients of the data<\/td>Persons authorised to process the data, appointed pursuant to Art. 29 of Regulation (EU) 2016\/679; processors appointed pursuant to Art. 28 of Regulation (EU) 2016\/679 (see register of processors); other parties to whom disclosure of the data is necessary to fulfil the purposes stated by the controller, local dealers, public authorities and bodies to which disclosure is required by law<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Marketing and communication activities<\/strong><\/p>\n\n\n\n

Purposes and legal basis<\/td>– Receiving invitations to market research and surveys, and informational and\/or advertising communications, on the basis of the data subject’s consent** – Transferring or disclosing your personal data to business partners for their own promotional and marketing purposes, on the basis of the data subject’s specific and separate consent**<\/td><\/tr>
Categories of data<\/td>Personal details, contact details, address details, data relating to purchases or use of services<\/td><\/tr>
Retention period*<\/td>Until consent is withdrawn. Thereafter, processing will be limited to mere storage for 10 years from the year in which consent was withdrawn.<\/td><\/tr>
Recipients of the data<\/td>Persons authorised to process the data, appointed pursuant to Art. 29 of Regulation (EU) 2016\/679; processors appointed pursuant to Art. 28 of Regulation (EU) 2016\/679 (see register of processors); other parties to whom disclosure of the data is necessary to fulfil the purposes stated by the controller, public authorities and bodies to which disclosure is required by law, business partners<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

**Giving consent is always optional and consent may be withdrawn at any time; you may contact the controller using the contact details above.<\/p>\n\n\n\n

* In addition to the time needed for the limitation periods relating to mutual rights to expire, and the backup retention period.<\/p>\n\n\n\n

In addition to the above, as part of the activities needed for the proper management of the organisation, your personal data will also be processed by duly authorised internal or external staff in order to:<\/p>\n\n\n\n

    \n
  1. manage compliance activities, including personal data protection obligations, as required by law, in accordance with the retention periods set for the related main processing;<\/li>\n\n\n\n
  2. prevent and detect abuse and defend the rights and interests of the controller, retaining the data until the limitation periods expire, unless there is a dispute (in which case the data will be retained until the dispute is finally settled), on the basis of the controller’s legitimate interest in protecting its rights and interests.<\/li>\n<\/ol>\n\n\n\n

    Is there any automated decision-making?<\/strong><\/strong><\/p>\n\n\n\n

    The processing is not based on automated decision-making.<\/p>\n\n\n\n

    Is providing the data mandatory?<\/strong><\/strong><\/p>\n\n\n\n

    Except for any purposes based on consent, providing your data is a necessary requirement: failure to provide the data indicated as mandatory may have legal and contractual consequences. Therefore, if you do not provide it, you may not obtain the expected result, or obtain it only in part.<\/p>\n\n\n\n

    Is the data transferred outside the European Union?<\/strong><\/p>\n\n\n\n

    The processing of personal data (e.g. storage, archiving and retention of data on our own servers or in the cloud) will be confined to the countries of the European Economic Area, with an express prohibition on transferring it to non-EU countries that do not guarantee an adequate level of protection, or in the absence of the safeguards provided for by Regulation (EU) 2016\/679 (third country deemed adequate by the European Commission, group binding corporate rules (BCR), standard contractual clauses, consent of the data subjects, etc.).<\/p>\n\n\n\n

    What are your rights?<\/strong><\/p>\n\n\n\n