Sfty Privacy Notice
Updated November 30, 2022
sfty (Sfty AS, NO 999 080 197) knows that you care how information about you is used and shared and we appreciate your trust in us to do that carefully and sensibly. This privacy notice describes how sfty and its affiliates (collectively “sfty”) collect and process your personal information through sfty websites, devices, products, services, and applications that reference this Privacy Notice (together “sfty Services”). By using sfty Services, you are consenting to the practices described in this Privacy Notice.
sfty delivers an Internet-based safety and home security solution. As a Norwegian company, we comply with the Norwegian Personal Data Act. As a company who processes personal data of citizens of the EU, we also comply with the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”). Any information which can be used to identify an individual person is herein referred to as “User Data”. Any User Data related to the sfty-Services will always be handled in accordance with this Privacy Notice.
What personal information does sfty collect?
We collect personal information to provide and continually improve the products and services of sfty and its affiliates. Failure to provide requested information may result in the sfty services not functioning properly as a safety or security solution.
sfty collects three types of personal information:
- Information that you give us
We receive and store any information that you provide in relation to the sfty Services. This includes as a minimum your name and phone number but may also include optional information that may be used to provide a better service, e.g., email address for receiving scheduled sfty reports.
If you select to give other people access to your home security solution or invite them to a “Follow me” or “Help me” session, the sfty app will access and display your contact list but will only store the names and phone numbers of the contacts explicitly selected by you. These contacts will be notified that you have added them to your profile at sfty. You may also register any family members who live in your home including your children. If your children are underage, you must provide a date of birth so that emergency responders like an alarm central knows that this is not an adult.
Should you select to use the personal location-based services “Follow me” and “Help me”, then while you are engaged in an active session of either service, we will collect your location data and store it. These data will only be shared with the contacts you invite to the specific session. You may change the period that these location data are retained in the settings section of the sfty app.
We will also collect and store any setting that you change in the app to tailor the service to your wishes, e.g., temperature limits for notification from a device.
If you install a sfty device, we may ask for your current location and store this as the location of the device. The location is used to provide services like weather forecasts for your home area.
If the sfty Services are installed in an apartment building, e.g., in a housing association or cooperative, representatives for the association with administrator access (e.g., a fire coordinator or property owner) will have access to the residents’ contact information, and the status of the network connection and battery capacity of all the Sensor devices within the housing association. This is to enable them to keep track of and ensure the fire safety in the housing association.
If the sfty Services are installed in an apartment building, you may choose to register in the sfty App the fact that you require assistance in the event of fire. This information is available only to the alarm station (if alarm station connectivity is part of the sfty Services), the fire brigade in the event of fire and the fire coordinator in the housing association or cooperative in the event of a confirmed fire.
- Automatic information
We automatically receive and store certain types of information when you use sfty Services, such as information about your use, including your interaction with content and services available through sfty Services. This includes information about interaction with physical devices like, e.g., turning the motion alarm of sfty Sense on or off, or any type of sensor triggered alarm.
Sensor data and data related to functionality and use of the Sensor device(s), for instance smoke, temperature, humidity in the room, the remaining battery capacity of the Sensor, and status for network connectivity is collected and stored as needed to provide the sfty Services.
- Information from other sources
If your safety and home security system is part of a collective solution, i.e., in a contract for a building-wide fire alarm system, we may receive relevant contact information such as name, address, and phone number from, e.g., the housing board. This is done to ensure that the correct resident can be contacted in case of a possible safety event.
Data handling procedures for User data
The User Data collected by sfty is stored on servers located in the European Union. sfty has established and complies with technical and organizational measures relating to confidentiality, integrity, availability, and quality in the processing of User Data that are necessary to ensure satisfactory information security in accordance with the Norwegian Personal Data Act and GDPR.
We may share User Data with our subcontractors to the extent necessary for the functionality of the sfty Services. We currently use the following subcontractors:
- Amazon Web Services ("AWS")
AWS is a cloud platform and web services provider, hosting our complete system including all User Data. All data resides on servers located in the EU. AWS does not have access to User Data.
- Ideas World Ltd ("IW")
IW performs monitoring, maintenance and upgrading of our system, and is located outside of the EU/EEA. To perform its tasks as a subcontractor, IW has access to all data in our system, including User Data.
- Safe4 Security Group AS
Safe 4 provides alarm station services: They receive alarm signals from our system and acts upon these in accordance with agreed procedures, e.g., contacting residents for verification of fire in the event of an alarm, and calling the fire brigade in the event of fire.
- Resideo Technologies Inc
Resideo processes sensor data for sfty's water detector through its Danish subsidiary Satcom1 Integration Services ApS processes. Your use of these sensors is subject to the latest version of Resideo's End User License Agreement, and Resideo processes your personal data as described in their Privacy Policy. Resideo shares data from your water detector (for example, humidity levels in your home and when/where a leak has been detected) with sfty and possibly with the housing association you live in.
All our subcontractors are bound by data processor agreements, including annexes, which ensure compliance with GDPR.
Data retention and deletion
User Data related to the Services will only be used to fulfil our contractual obligations, for provision and improvement of the Services, and to fulfil our obligations according to national law. We may use anonymized and statistical information obtained from User Data stored in our system to optimize, develop, and provide current and new services.
The sensor related data described in the above is stored until a Sensor is deleted from a user or changes owner, at which point all usage data related to that Sensor is deleted.
User Data related to your location will only be stored if you invite one or more people to follow you using the “Follow Me” service or send alerts via the “Help Me” service. This information is stored for as long as you wish, as you can change the duration of this in the sfty App, under "Settings" -- "Location data".
You may at any time send us a written request to support@sfty.com asking to access, rectify, erase, or restrict the processing of personal data which we process in order to provide the sfty Services and/or store in our solution. You may also exercise you right to withdraw any given consent at any time. Such withdrawal shall be sent to us in writing. Please note that restricting our access to certain information about you may impair or reduce the functionality of the sfty Services for you and may in some cases exclude you from the use of the sfty Services altogether. You may also exercise your right to lodge a complaint with the supervisory authority in your country.
