PRIVACY POLICY FOR DAIKIN AIR SELECT

Last modified: 8 September 2026

Daikin Industries (Thailand) Ltd. (hereinafter, "DIT", "we", "us", “ur”) develops and operates an application with dedicated services and support features which are designed to streamline communication between users and the application that connect directly with its devices (e.g., air conditioners and air purifiers), which aims to deliver a seamless, user-centric experience in device management and support (hereinafter the “DAIKIN AIR SELECT”).

We and our affiliate companies (“Daikin Group”) are sincerely committed to the protection of your Personal Data in all aspects, including its collection, use, disclosure, transfer, and any other form of processing (“Process,” “Processing” or “Processed”) of your Personal Data. To uphold this commitment, we implement a comprehensive range of appropriate measures designed to safeguard your Personal Data. These measures ensure that all Personal Data collected from Data Subjects (hereinafter “User”, “Customer”, “you”, “your”) specifically through the DAIKIN AIR SELECT is handled and processed securely, confidentially, and in strict accordance with the applicable data protection laws of the jurisdictions to which we are subject (hereinafter “Applicable Data Protection Laws”). For the avoidance of doubt, the term “Personal Data” refers to any information that identifies or can be used to identify a living individual, or any equivalent term as defined under the Applicable Data Protection Laws.

This Privacy Policy consists of:

A. this front section, which sets out the general principles applied by DIT when Processing Personal Data through the DAIKIN AIR SELECT; and

B. an addendum for Personal Data that (i) originates from; or (ii) is Processed in certain countries, including Indonesia, Malaysia, the Philippines, Vietnam, Singapore, Australia, New Zealand and Taiwan (hereinafter "Country Specific Addendum").

If you reside in one of the above countries, we encourage you to read the Country Specific Addendum, which is relevant to the country of your jurisdiction, as it contains important additional information about the Processing by us of Personal Data originating from or Processed in those countries. In the case of conflict between the terms of this Privacy Policy and the terms of the applicable Country Specific Addendum, such terms of the Country Specific Addendum shall prevail.

Unless otherwise defined herein, the capitalized terms shall have the same meaning as specified under the Applicable Data Protection Laws.

Please note that this Privacy Policy applies only to Processing activities related to the DAIKIN AIR SELECT. Your Personal Data may be Processed for other purposes outside the scope of this Privacy Policy, such as during sales or distribution activities. For those purposes, please refer to the separate privacy policies of the relevant selling entity with whom you have a contractual relationship.

In addition to the above, please note that specific campaigns, promotions, programs, applications, or websites created by DIT may be governed by their own additional privacy terms or policies, which may differ from this Privacy Policy. We encourage you to carefully read these additional terms or policies before participating in or utilizing these campaigns, promotions, programs, applications, or websites, as the Processing of your Personal Data in those circumstances will be governed by those additional privacy terms and/or policies, which may include different practices regarding Processing of your Personal Data.

If there is a conflict between the English version of this Privacy Policy and any other language versions, the English version shall prevail.

1. DATA CONTROLLERS AND DATA PROCESSORS

DATA CONTROLLERS

DIT is subject to the Applicable Data Protection Laws and may act in the capacity of a Data Controller or a Data Processor, depending on the Processing activity involved.

We inform you that any Personal Data you submit through the DAIKIN AIR SELECT will be used for the purposes described below by DIT, acting independently as a Data Controller, Data User, or any other similar designation as defined by the Applicable Data Protection Laws, meaning they are responsible for determining how and why your Personal Data is processed in accordance with those laws.

DATA PROCESSORS

In certain cases, we may act as Data Processor on behalf of other companies within Daikin Group, that are considered as Data Controller, for any online or offline Processing of Personal Data.

In all circumstances, the Data Controller entity of Daikin Group shall ensure that appropriate privacy measures such as having data processing agreements are in place.

2. PERSONAL DATA WE COLLECT AND PURPOSES

DIT, to the extent necessary, processes your Personal Data provided through the DAIKIN AIR SELECT.

We can further Process your Personal Data only:

• if the purpose of the further Processing is compatible with the purpose of the initial collection of your Personal Data;
• if you provide your consent to further Processing for a purpose which is new and not compatible with the purpose of the initial collection of your Personal Data; and
• Where otherwise required or authorized by the Applicable Data Protection Laws

Depending on the specific purpose of each Processing activity and only to the extent necessary, you may be asked to provide us with various types of Personal Data. Personal Data may be collected directly from you (for example, when you register an account or configure settings) or indirectly through automated means when you use the DAIKIN AIR SELECT (for example, through location tracking or usage analytics tools). This may include but is not limited to the following.

1. Profile and account information: account name and log-in details, email address and profile picture
2. Contact information: Telephone number
3. Location information: home’s location (GPS), and the following information from the user’s device or devices of Permitted Users: precise mobile device location, country, time zone, including background location information when location-based automation features are enabled by the user. Individuals other than the account holder who have been permitted by the user to access DAIKIN AIR SELECT pursuant to the Terms of Use are “Permitted Users.”
   
   The DAIKIN AIR SELECT may provide location-based services and automation functions associated with connected devices and services. When such functions are enabled by you, the DAIKIN AIR SELECT may use your mobile device/Permitted Users’ devices location information, including background location information, to detect when you enter or leave registered locations and to support automation functions and operation of connected devices. Certain functions may not be available if related permissions or settings are disabled.


4. Device information: A/C information, APU (SSID, Mac address), operations, network public IP
5. Usage data: electrical usage information
6. Analytics and behavioural data: information about how you access and use the DAIKIN AIR SELECT, including in-app events and interactions, session and diagnostic data, online identifiers (such as device identifiers and application instance identifiers), IP address and approximate (city/area-level) location, collected through analytics tools such as Google Analytics.
7. Cookies and other technologies: cookies, identifiers for mobile devices (e.g., Android Advertising Identifier or Advertising Identifier for iOS), tracking pixels, or similar technology to collect data. This includes the use of Google Analytics, whereby the information on how it collects and processes data can be seen on Google’s website at “How Google uses information from sites or apps that use our services”, located at www.google.com/policies/privacy/partners. If, after providing your consent to us, you no longer wish for Google Analytics to collect your personal data, you may opt out of Google Analytics by adjusting your device’s native advertising and privacy settings. Please note that opting out or disabling certain cookies may affect the functionality of the DAIKIN AIR SELECT.
8. Other information: Any other information that you provided via DAIKIN AIR SELECT

The exact types of Personal Data requested will vary based on the particular service or function you are accessing within the DAIKIN AIR SELECT.

Once collected, we use such Personal Data mentioned above for a variety of purposes. Please find them listed below:

Purposes	Legal Basis
To provide services through the DAIKIN AIR SELECT We use your profile and account information, contact information, location information, device information and usage data, and relevant location, device and usage information of Permitted Users, if any, to fulfil our obligations under the Terms of Use of the DAIKIN AIR SELECT and to carry out all necessary processes, including to: Create and manage user accounts on the DAIKIN AIR SELECT, ensuring secure and accurate user identification Manage and control your access to the DAIKIN AIR SELECT, including authentication, authorization, and user permissions Perform any other activities required under the DAIKIN AIR SELECT Terms of Use or any other agreements entered into between us and you, including those you may be associated with from time to time Provide comprehensive technical support and assistance, configure system settings according to your needs, and resolve any issues or problems that may occur with the DAIKIN AIR SELECT to ensure smooth and uninterrupted service	Contractual obligation Consent (if you reside in a jurisdiction where contractual necessity or legitimate interest cannot be relied upon as legal basis for our processing of Personal Data) Legitimate Interest
To facilitate the communication channels between users and customer service team We Process your Personal Data, as well as any other information you provide through the DAIKIN AIR SELECT when contacting our local customer service teams, in order to facilitate and respond to your communications with them.	Contractual obligation Consent (if you reside in a jurisdiction where contractual necessity is not a legal basis for our processing of Personal Data)
Legal Claims and Disputes We may use Personal Data as evidence and for ascertaining, exercising and safeguarding our rights or the right of those we represent (e.g. in disputes) before any jurisdiction of any country (for example, among others, our right to defend ourselves from acts of unfair competition or our right to solicit the fulfilment of an unpaid invoice).	Legitimate Interest Consent (when legitimate interest cannot be relied upon as a legal basis for data processing in your jurisdiction)
Fraud or Crime Prevention We may also use your Personal Data to prevent, detect and investigate crimes and cyber risks.	Legitimate Interest Legal Obligation Consent (when legitimate interest cannot be relied on as a legal basis for data processing in your jurisdiction)
Corporate Business and Housekeeping We may Process your Personal Data including your profile and account information, contact information, location information, device information, usage data, usage analytics data (including usage analytics data collected via Google Analytics) and other information for any internal business purpose, including but not limited to (i) improving the DAIKIN AIR SELECT, (ii) supporting product development and better meeting user needs, (iii) identifying features that may be relevant or useful to you and communicating with you to promote those features or educate you about the DAIKIN AIR SELECT’s functions, (iv) promoting products, services, warranty registration, or promotional offers that may be relevant to you, (v) producing and sharing aggregated insights derived from the usage statistics or usage data, or (vi) comparing usage and adoption rates of Customer’s and other organizations; provided, however, that DIT will only use such usage statistics and usage data in an anonymized, de-identified or aggregated form that does not identify the Customer or any individual ("De-Identified Data"). We may also transmit to and/or jointly use the Personal Data collected within Daikin Group and/or its business partners only when needed and with a view to elaborating periodic reports on the outcome and business-related aspects, business plans, and corporate strategies.	Legitimate Interest Consent (when legitimate interest cannot be relied on as a legal basis for data processing in your jurisdiction)
To comply with applicable laws We may be required to Process your Personal Data to comply with laws, regulations, orders, notifications, or other rules issued by authorities.	Legal Obligation Consent (when legal obligation cannot be relied on as a legal basis for data processing in your jurisdiction)
To conduct activities for our legitimate purposes We may need to Process your Personal Data for certain legitimate purposes, including business transfers, mergers and acquisitions, application migration or development, and other purposes reasonably anticipated to be conducted for general business operations. We will inform you of specific legitimate business purposes before commencing the Processing of your Personal Data.	Legitimate Interest Consent (in the event other legal basis cannot be relied upon for data processing in your jurisdiction).
To provide location-based services and automation functions When such functions are enabled by you, we may Process your Personal Data, including your mobile device/Permitted Users' devices' location information to detect when you enter or leave registered locations and to support automation functions such as the operation of connected devices. We will inform you of specific legitimate business purposes before commencing the Processing of your Personal Data.	Legitimate Interest Contractual Obligation Consent (in the event other legal basis cannot be relied upon for data processing in your jurisdiction).
To improve and develop DAIKIN AIR SELECT We may use Google Analytics, tracking pixels, and similar analytics tools to analyze how users interact with DAIKIN AIR SELECT, improve application performance, develop new features, troubleshoot issues, generate usage statistics and insights, identify features that may be relevant to users, and provide educational content, recommendations, tips and information regarding application features and functionality. We will inform you of specific legitimate business purposes before commencing the Processing of your Personal Data.	Legitimate Interest Consent (in the event other legal basis cannot be relied upon for data processing in your jurisdiction).
To conduct marketing, product and service promotions, and send marketing communications We may Process your Personal Data to develop and deliver relevant marketing and promotional communications in relation to DAIKIN AIR SELECT and/or other Daikin products and services, including communications based on your use of DAIKIN AIR SELECT and your interactions with its features. For this purpose, we may disclose your Personal Data to third-party analytics and marketing service providers (including providers of analytics tools). You may withdraw your consent to receive marketing communications at any time through the application settings, by using the unsubscribe mechanism included in the communication, or by contacting us.	Legitimate Interest Consent (in the event other legal basis cannot be relied upon for data processing in your jurisdiction).

Where there are Permitted Users, you undertake and represent and warrant that you have obtained the consent of such users and have provided them with the information set out in this Privacy Policy.

There may be certain circumstances where Personal Data is required for the purposes of proceeding with your request to enter into a contract with us, or to perform our obligation under the contract with you. In such case, if you do not provide the required Personal Data, DIT may not be able to proceed with your request, or may not be able to perform our obligation under the contract with you, either in whole or in part.

In addition, for the purposes of compliance with law, if you do not provide us with the required Personal Data, it may result in DIT and/or you, as the case may be, being in violation or non-compliance with such law.

For certain purposes described in this Privacy Policy, including location-based services and automation functions, improvement and development of DAIKIN AIR SELECT, and marketing and promotional activities, we may use Google Analytics to analyze how users interact with DAIKIN AIR SELECT, generate usage statistics and insights, and improve our services. For further information on how Google processes data collected through Google Analytics, please refer to Google's Privacy Policy at Privacy Policy – Privacy & Terms – Google.

3. WILL PERSONAL DATA COLLECTED BE DISCLOSED TO THIRD PARTIES?

For the above purposes, we may need to obtain services, counselling, and/or assistance from third parties. These services may include, but are not limited to, the maintenance of the DAIKIN AIR SELECT and bug fixing, the purchase of the DAIKIN AIR SELECT, data hosting, counselling on compliance with laws and regulations, development of the DAIKIN AIR SELECT, data analytics and usage analytics (including through third-party analytics tools).

In this regard, to the extent necessary for these purposes, we may transmit or disclose the Personal Data we have collected to any natural person or legal entity, including subcontractors and business partners that are third parties, provided they are involved in delivering the aforementioned services to DIT. Whenever we need to transmit or disclose any Personal Data we have collected to third parties, we will ensure that appropriate privacy measures are in place. These measures include, for example, entering into a data processing agreement with the third party in accordance with the provisions of the Applicable Data Protection Laws, requiring the third party to comply with the principles and provisions of the same regulations, and ensuring that they adhere to appropriate security standards to protect your Personal Data.

We may need to disclose or transfer your Personal Data to third parties located outside Thailand, including but not limited to Japan and Singapore. When transferring Personal Data to countries outside Thailand, we will take measures to ensure that your Personal Data is protected in accordance with standards required under the Applicable Data Protection Laws. In certain cases, you may be entitled to object the transfer of Personal Data in accordance with the Applicable Data Protection Laws, subject to conditions, limitations, and requirements prescribed therein.

4. STORAGE AND CRITERIA

We do not keep your Personal Data forever. We use your Personal Data only with the aim of pursuing the purposes described above. Once the aim no longer exists, we commit to deleting the Personal Data, unless archiving them is required by law, at international or national level.

Depending on the type of Personal Data, the baseline retention period is determined by the statutory retention period or the statutory limitation period under applicable law, commencing after the expiry of a contract or the termination of a business relationship, plus an additional one year. The period can be longer where needed for the exercise of our rights, or as otherwise required or permitted by applicable laws.

If no retention period is stipulated by law, the retention period can be shorter in accordance with, but not limited to, one or more of the following criteria: contract length and legal obligations; business and organizational needs; long-term business relationship; whether the purpose for which the personal data was collected is no longer being served by retention of the personal data.

As has been stated, we commit as much as possible to work with aggregated, anonymized or pseudo-anonymized Personal Data and in all cases, it will cease connections to individuals as quickly as possible.

5. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM

Once your Personal Data is subject to Processing and depending on the country in which you reside or have access or use the DAIKIN AIR SELECT and subject to the conditions and limitations under the Applicable Data Protection Laws, you may have several rights as Data Subject that can be exercised, as listed below.

Be as specific as possible any time you wish to exercise your rights. We can only properly answer queries couched in sufficient detail. We may need to verify your identity in as much detail as possible, in order to avoid someone else trying to exercise your rights.

a) Right to withdraw consent

You may withdraw consent at any time if the Processing of your Personal Data relies on consent.

b) Right to access and obtain a copy

You may access or obtain a copy of your Personal Data, including the right to request the disclosure of the source(s) of your Personal Data which has been obtained without your consent.

c) Right to rectification

You may request that we correct, update, or complete your Personal Data to ensure it is accurate and not misleading.

d) Right to erasure or destruction

You may request that we delete, destroy, or de-identify your Personal Data, such as when your Personal Data is no longer necessary for the purposes for which it was collected.

e) Right to object

You may object to the Processing of your Personal Data in certain circumstances.

f) Right to data portability

You may request to receive your Personal Data from DIT which is arranged to be in the format which is commonly readable or usable by automatic tools or equipment, and can be used or disclosed by automated means, and to request the DIT to send or transfer your Personal Data in said format to other data controllers, including to request to receive the Personal Data in said format to which the data controller transferred to other Data Controllers.

g) Right to restrict the use

You may request that we restrict the use of your Personal Data in certain circumstances.

h) Right to lodge a complaint

You may lodge a complaint with the supervisory authority, if you believe that the Processing of your Personal Data by DIT does not comply with the Applicable Data Protection Laws or other relevant laws. However, we kindly ask that you contact us via contact details provided in Clause 6 Contact Us first if you have any concerns so that we can address your issues effectively and promptly before you file any complaints.

6. CONTACT US

If you have any inquiries about your Personal Data or wish to exercise any rights as the Data Subject, you can contact us at:

• Address: 700/11 Mu 1, Khlong Tamru Sub-district, Mueang Chonburi District, Chonburi Province
• 038-469-700

Alternatively, you may contact our Data Protection Officer (DPO) at:

Email: dpo.privacy@dit.daikin.co.jp

7. MINORS

Through its DAIKIN AIR SELECT, DIT does not Process any Personal Data of natural persons below the legal age of majority in the respective countries where DIT is established, neither does it make commercial offers to or try to contact them, unless their legal representative has consented.

8. SECURITY MEASURES TO PROTECT PERSONAL DATA

DIT has implemented adequate security measures in order to maintain integrity and security and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed, in line with the Applicable Data Protection Laws.

9. FURTHER CHANGES TO THIS PRIVACY POLICY

DIT regularly seeks to improve their efforts in protecting Personal Data. This Privacy Policy can be changed or updated in light of upcoming legislations, both at international and national level. We will inform you of all substantive changes in this Privacy Policy and obtain your consent, where required by law, through the DAIKIN AIR SELECT.

You can always find the most recent version of our Privacy Policy available at https://daikinthai.com/product/aircreator/policy/en

Last modified: 8 September 2026

COUNTRY SPECIFIC ADDENDUM

AUSTRALIA ADDENDUM

If you are located in Australia, the references to “Personal Data” in this Privacy Policy also encompass equivalent terms which are used in the Privacy Act 1988 (Cth), such as the term “personal information”.

1. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM (Clause 5 of the main Privacy Notice)

h) Right to lodge a complaint: If you believe that the Processing of your personal information by DIT does not comply with the Privacy Act 1988 (Cth) you may lodge a written complaint via our contact details set out in Clause 6. We take any privacy complaint seriously and will aim to investigate any such complaint in a timely and efficient manner (typically within 30 days of receipt of complaint). If you are not satisfied with our response, you may lodge a complaint with an applicable external body or with the Office of the Australian Information Commissioner.

The following Australia-specific provision applies to our Processing of your Personal Data in lieu of the section 5(h) of the Privacy Policy.

In addition, the following Australia-specific provision applies to our Processing of your Personal Data:

INDONESIA ADDENDUM

If you are a resident of Indonesia, the following Indonesia-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy:

The following definition is deemed inserted, or if there are corresponding definitions, supplement those corresponding definitions in the Privacy Policy.

Applicable Data Protection Laws

refers to the Indonesia Personal Data Protection Law, which primarily is governed under Law No. 27 of 2022 on Personal Data Protection, including any of its amendment and implementing regulations that may be issued from time to time.

1. PERSONAL DATA WE COLLECT AND PURPOSES (Clause 2 of the main Privacy Notice)

We acknowledge that under the Applicable Data Protection Laws and Regulations, there are two types of personal data:

a) General Data: full name, gender, nationality, religion, and marital status.

b)Specific Data: health-related information, biometric data, genetic data, criminal record, data concerning minors, and personal financial information.

By agreeing to this Privacy Policy, you expressly acknowledge and provide your consent for the processing of your personal data in line with the above-described purposes outlined in the table of this section, as well as for marketing/product promotion purposes. In addition to your consent for us to process the personal data according to the aforementioned purposes, we may also process your personal data based on the basis outlined in the table of this section.

2. TRANSFER PERSONAL DATA TO THIRD COUNTRIES

Notwithstanding your consent to this Privacy Policy, in situations where we need to transfer your personal data to countries outside of your jurisdiction, we will take steps to ensure that the country of the recipient provides a level of data protection equivalent to or higher than that required under the PDP Law. If this standard cannot be guaranteed, we will implement adequate and legally binding safeguards to protect your personal data. In cases where neither of these measures can be ensured, we will obtain your consent before transferring your data.

3. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM (Clause 5 of the main Privacy Notice)

Other than what is already listed above, please see specific additions in relation to your rights:

a) Right to withdraw consent: We will cease processing any Personal Data for which consent has been withdrawn within 3 x 24 hours of your request for the consent withdrawal.

b) Right to access and obtain a copy: We will provide you with the access to or a copy of your Personal Data within 3 x 24 hours of your request.

c) Right to rectification: We will take the required action within 3 x 24 hours of your request, and upon which we will notify you of the corrected, updated, or completed Personal Data.

d) Right to erasure or destruction: You may request that we delete, destroy, or de-identify your Personal Data, such as when your Personal Data is no longer necessary for the purposes for which it was collected. We will notify you of the report on the deletion, destruction, or de-identification of your Personal Data.

e) Right to object: you have the right to submit an objection to actions based solely on automated processing, including profiling, which have legal consequences or significant impacts on you.

g) Right to restrict the use: You may request that we restrict the use of your Personal Data. We will restrict the use of your Personal Data within 3 x 24 hours of your request, and upon which we will notify you of the restriction of your Personal Data.

4. MINORS (Clause 7 of the main Privacy Notice)

Through its DAIKIN AIR SELECT DIT does not process any Personal Data of natural persons aged under 18, neither does it make commercial offers to or try to contact them.

MALAYSIA ADDENDUM

If you are located in and are downloading, accessing, or using the DAIKIN AIR SELECT from Malaysia, the following Malaysia-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy:

1. TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES

Some of the third parties to whom DIT may disclose Personal Data may be located outside of Malaysia, including but not limited to Thailand, Japan and Singapore.

2. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM (Clause 5 of the main Privacy Notice)

In addition to your rights specified above, you can restrict our Processing of your Personal Data at any time, including where processed for the purposes of direct marketing.

Minor - If you are a minor (as defined under the laws of the jurisdiction in which you are domiciled), please do not provide us with any Personal Data unless you have reviewed this Privacy Policy with your parent or legal guardian and both you and your parent or legal guardian understand this Privacy Policy, and your parent or legal guardian has provided their consent to our processing of your Personal Data in accordance with this Privacy Policy. In the event you agree to this Privacy Policy on behalf of a minor, you hereby consent to the provision of Personal Data of the minor to be processed in accordance with this Privacy Policy and you personally accept and agree to be bound by the terms in this Privacy Policy.

3. CONTACT US (Clause 6 of the main Privacy Notice)

If you have any inquiries about your Personal Data or wish to exercise any rights as the Data Subject, you can contact our Data Protection Officer (DPO) at:

• Name: Ms. Patsara Booranapanichakit
• Position: IT Planning Manager
• Business Address: 700/11 Mu 1, Khlong Tamru Sub-district, Mueang Chonburi District, Chonburi Province
• Business Telephone: 038-469-700
• Business Email: dpo.privacy@dit.daikin.co.jp

NEW ZEALAND ADDENDUM

If you are a resident of New Zealand, the following New Zealand-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy. If there is any conflict between this New Zealand Addendum and the Privacy Policy, this New Zealand Addendum shall prevail to the extent of that conflict in connection with the processing of Personal Data.

Where a term used in this Privacy Policy corresponds to a defined term under the Privacy Act 2020 (New Zealand) (“NZ Privacy Act”), it will have the meaning given to that corresponding term in the NZ Privacy Act. For example:

“Personal Data” will have the same meaning as “personal information” in the NZ Privacy Act; and

The terms “Data Controller” (and “Joint Data Controller”), “Data Processor”, and “Data User” will refer to and be used synonymously and interchangeably with the term “agency” as defined in the NZ Privacy Act.

If you do not provide or make available to us any of the personal information we may require or request from you from time to time:

we may not be able to provide you with use of DAIKIN AIR SELECT or to all of the functions and features of DAIKIN AIR SELECT; and

we may also not be able to provide you with the information and/or services you may request of us.

1. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM (Clause 5 of the main Privacy Notice)

• Section 5(c) is replaced with the following:

  c) Right to rectification: You may request that we correct, update or complete your Personal Data at any time to ensure that it is accurate, up to date, complete, and not misleading. You may provide us with a statement of the correction you would like us to make (“statement of correction”), and if we do not make the correction that you have sought, you can request that we attach the statement of correction to the information so that it is read with the information.

• Sections 5(d) to 5(g) do not apply.
• The reference in Section 5(h) to the “supervisory authority” is to be read as a reference to the Privacy Commissioner as defined in the NZ Privacy Act.
• a reference to the Privacy Commissioner as defined in the NZ Privacy Act.

2. COLLECTION OF INFORMATION OF NON-ACCOUNT HOLDERS

• The DAIKIN AIR SELECT is designed so that one account is linked to one or more connected devices (such as air conditioners). Because the same account may be used across multiple devices, and because connected devices operate within a shared household environment, DIT may, in the course of normal operation, collect personal information that relates to individuals who have not registered an account and are not Permitted Users. This may include, for example:
  • household members whose presence, behaviour, or home environment is reflected in device usage data, energy consumption patterns, or location-triggered automation events; and
  • individuals who use a device on which the registered account is logged in, including where background location tracking is active under the GPS Tracking feature.
• DIT requires the account holder to inform any such individuals that their personal information may be collected through DAIKIN AIR SELECT and to direct them to this Privacy Policy (see Section 2 above).
• If you are an individual whose personal information has been collected through another person’s DAIKIN AIR SELECT account, you may contact DIT using the details in Section 6 (Contact Us) to request access to, or correction of, your personal information, or to raise any privacy concern.
• a reference to the Privacy Commissioner as defined in the NZ Privacy Act.

PROMOTIONAL COMMUNICATIONS

• DIT may send promotional messages to you via email, SMS, or any other communication channel where you expressly consent to receiving such messages, or if your consent can be reasonably inferred or deemed.
• You may unsubscribe from receipt of such promotional communications at any time.

SINGAPORE ADDENDUM

If you are a resident of Singapore, the following Singapore-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of this Privacy Policy:

“Data Controller” shall refer to and be used synonymously and interchangeably with “organisation” as defined in Singapore’s Personal Data Protection Act 2012 as may be amended from time to time (“Singapore PDPA”). “Data Processor” shall refer to and be used synonymously and interchangeably with “data intermediary” as defined in the Singapore PDPA. “Personal Data” shall be as defined in the Singapore PDPA.

1. PERSONAL DATA WE COLLECT AND PURPOSES (Clause 2 of the main Privacy Notice)

The following paragraph shall be deleted:

“We can further Process your Personal Data only:

• if the purpose of the further Processing is compatible with the purpose of the initial collection of your Personal Data;
• if you provide your consent to further Processing for a purpose which is new and not compatible with the purpose of the initial collection of your Personal Data; and
• Where otherwise required or authorized by the Applicable Data Protection Laws.”

And the following paragraph shall be substituted therefore:

“We can Process your Personal Data only:

• Where your consent is required, if you have given consent or your consent is deemed to be given in accordance with the Singapore PDPA;
• where required or authorized under the Singapore PDPA or other applicable laws (for avoidance of doubt, we may do so even if you have not given consent or have withdrawn consent in respect of such purpose).”

The following row shall be added to the table in Section 2 of the main body:

Marketing We may Process your Personal Data to develop and deliver relevant marketing and promotional communications in relation to DAIKIN AIR SELECT and/or other Daikin products and services, including communications based on your use of DAIKIN AIR SELECT and your interactions with its features. For this purpose, we may disclose your Personal Data to third-party analytics and marketing service providers (including providers of analytics tools).

Consent (for the sending of direct marketing) Legitimate Interest

For avoidance of doubt, we may process your personal data insofar as lawfully required or authorized under the Singapore PDPA or other applicable laws, and are not limited to processing only on the legal bases set out in the second column of the table in Section 2 of the main body above (and as amended by this Singapore Addendum).

2. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM (Clause 5 of the main Privacy Notice)

The Section shall be replaced with the following:

“Under the PDPA, you have the following rights:

a) Right to withdraw consent: You may withdraw consent at any time if the Processing of your Personal Data relies on consent.

b) Right to access and obtain a copy: You may access or obtain a copy of your Personal Data, including the right to request the disclosure of the source(s) of your Personal Data which has been obtained without your consent.

c) Right to rectification: You may request that we correct, update, or complete your Personal Data to ensure it is accurate and not misleading.”

3. SECURITY MEASURES TO PROTECT PERSONAL DATA (Clause 8 of the main Privacy Notice)

The Section shall be replaced with the following:

“DIT has implemented reasonable security measures in order to maintain integrity and security and prevent accidental or unlawful collection, use, copying, disposal, destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored, or otherwise Processed, and the loss of any storage medium or device on which personal data is stored.”

4. TRANSFER PERSONAL DATA TO THIRD COUNTRIES

The following new paragraph shall be inserted as Section 10:

“In situations where we need to transfer your personal data to countries outside of your jurisdiction, we have ensured an appropriate level of protection by putting into place contractual safeguards for transfers of your Personal Data from Singapore to another jurisdiction outside of Singapore.”

TAIWAN ADDENDUM

If you are a resident of Taiwan, the following Taiwan-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections as described below:

• Your Personal Data will be Processed within and outside of Taiwan.
• If you decide not to provide your Personal Data to DIT or restrict DIT’s use of your Personal Data, you may not be able to use certain functions of DAIKIN AIR SELECT.

THE PHILIPPINES ADDENDUM

The Philippines, the Philippines’ Data Privacy Act of 2012 (“DPA”), its implementing rules (“IRR”) and issuances by the National Privacy Commission (“NPC”) shall be applicable to users of DAIKIN AIR SELECT who are Philippine residents or citizens. If there is any conflict between this Philippines Addendum and the Privacy Policy, this Philippines Addendum shall prevail to the extent of that conflict in connection with the processing of Personal Data.

The following definitions are deemed inserted, or if there are corresponding definitions, supplement those corresponding definitions in the Privacy Policy.

“Personal Data”

refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

“Special Categories of Personal Data”

refers to Personal Data: 1. About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical, or political affiliations; 2. About an individual’s health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such individual, the disposal of such proceedings, or the sentence of any court in such proceedings; 3. Issued by government agencies peculiar to an individual which includes, but is not limited to, social security numbers, previous or current health records, licenses or its denials, suspension or revocation, and tax returns; and 4. Specifically established by an executive order or an act of Congress to be kept classified.

1. PERSONAL DATA WE COLLECT AND PURPOSES (Clause 2 of the main Privacy Notice)

In accordance with the DPA, we will only collect or process Special Categories of Personal Data (such as age, gender, or other information enumerated above) when necessary for the declared purpose and when permitted by law. Where required, we shall obtain your express consent prior to the collection or processing of such data.

2. YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM (Clause 5 of the main Privacy Notice)

In addition to the rights mentioned above, you have the following rights under the DPA and its IRR:

3. You can be indemnified for damages

You also have the right to lodge a complaint before the NPC for any violation of your data privacy rights.

VIETNAM ADDENDUM

If you are a Vietnamese citizen or a resident of Vietnam, the following Vietnam-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections as described below:

This Privacy Policy is made in Vietnamese and English. If there is a conflict between the two versions, the version that is more favorable to consumers shall prevail.

1. SPECIAL CATEGORIES OF PERSONAL DATA

Special Categories of Personal Data or Sensitive Personal Data refers to personal data in association with individual privacy which, when being infringed, will directly affect an individual's legal rights and interests. DIT may process the following Special Categories of Personal Data:

• Customer information of credit institutions/foreign bank branches/payment intermediary service providers, or
• Location data identified via location services; or
• App usage history and behaviour

DIT can collect Personal Data, including Special Categories of Personal Data, without the consent of the involved Data Subject if: 1) in the event of emergency in which the data processing is necessary to protect the life and health of the Data Subjects or others; or 2) for the performance of contractual obligations of Data Subject with relevant entities; or 3) in the event of an emergency threatening national defense, national security, social order and safety, major disaster, or dangerous epidemic; 4) in support of the specialized activities of state agencies; or 5) other cases as prescribed by law.

2. PERSONAL DATA WE COLLECT AND PURPOSES

In addition to the purposes set out in Section 2 above, DIT also processes your personal data for the following purpose:

Purposes

Legal Basis

For marketing and promotion purposes: We collect your data regarding your app usage history and usage behaviour through cookies and similar technologies, as well as through third-party analytics and marketing service providers, for marketing and promotional purposes, including: To identify features that are used less frequently and promote such features to improve user awareness and understanding of the app’s functionalities and overall purpose; To develop and deliver to users marketing and promotional material relating to Daikin products and services via email, in-app message, push notification, SMS or telephone calls; and To measure and improve the effectiveness of our marketing activities.

Consent

You acknowledge and agree that we may use automated processing technologies, including artificial intelligence (AI) and data analytics, in accordance with this Privacy Policy. While these technologies are designed to improve efficiency, accuracy, and user experience, they may affect how certain content, features, services, communications, or recommendations are presented to you. You may request to opt-out of or not to participate in certain automated processing activities where permitted by law.

3. PERSONAL DATA WE COLLECT FROM YOU OR FROM THIRD PARTIES (Clause 2 of the main Privacy Notice)

In addition to the terms specified in Section 2 above, the following terms shall apply:

“You acknowledge and agree that we could also use Personal Data you provided to third parties, for example to service providers, or Personal Data that fall within the public domain such as commonly acknowledged Personal Data, Personal Data visible on your own website or blog or posted on your publicly accessible social media profile.

You represent and warrant to DIT that you inform third parties whose personal data that you provided of the details under this Privacy Policy and obtain their prior consent in accordance with the format and procedure required by applicable law, if necessary, or apply other legal bases to ensure that DIT can collect and / or process personal data of the aforementioned third party. You shall indemnify and hold DIT harmless of your failure to comply with the foregoing obligations.

As no method of transmission over the Internet, or method of electronic storage, is totally secure, we cannot guarantee the absolute security of your personal information.”

4. YOUR DATA SUBJECT RIGHTS AND OBLIGATIONS (Clause 5 of the main Privacy Notice)

In addition to the rights detailed in Section 5 above, Data Subjects also have the following rights:

a) You have the right to be informed. You have the right to be informed of your personal data processing, unless otherwise provided for by law.

b) You can give consent. You can complain, denounce to competent authorities or initiate a lawsuit pursuant to relevant laws if you believe that the Processing of your Personal Data is violating or not complying with relevant laws.

c) You can claim damage compensation. You can claim damages arising from violations against laws and regulations on data protection related to your Personal Data, unless otherwise agreed by the parties or otherwise provided by law.

d) You can request the protection of your personal data. You can request competent authorities or relevant agencies, organizations, or individuals involved in the processing of personal data to implement measures and solutions for the protection of your personal data in accordance with applicable laws.

In addition, Data Subjects have the following obligations:

• To protect your own personal data.
• To respect and protect others’ personal data.
  To fully and accurately provide your personal data according to the law, under contractual arrangements, or when you consent to the processing.
  To comply with regulations of law on protection of personal data and participate in the prevention and combating of acts infringing upon personal data.

5. MINORS (Clause 7 of the main Privacy Notice)

Through DAIKIN AIR SELECT DIT does not process any Personal Data of natural persons aged between 7 to 16 years old, neither does it make commercial offers to or try to contact them.

DAIKIN AIR SELECT