SONY

Privacy Policy for the “Sony’s TV” Action Application

Last Updated and Effective Date: 5/1/2022

This privacy policy (“Privacy Policy”) applies to the “Sony’s TV” Action Application (“Application”). This Application enables your Google Assistant-compatible device to control your BRAVIA TV. It will enable you to link your Google Assistant-compatible device with the “TV Control with Smart Speakers” application on your BRAVIA TV.

In this Privacy Policy, when we say “Sony”, “we”, “us” and “our”, we mean Sony Corporation, with an address of 7-1 Konan 1-chome, Minato-ku, Tokyo 108-0075, Japan. Sony acts as data controller (as this term is defined under the General Data Protection Regulation ((EU) 2016/679) or any other applicable local legislation or regulation) and may collect and consolidate certain information about you, this Application, and/or your TV. This is explained in detail in this Privacy Policy.

In this Privacy Policy, “Sony group company” shall mean the parent company of Sony and any legal entities controlled by such parent company (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity).

This Privacy Policy only applies to the Application and is in addition to any other privacy policy that may apply to your interactions with any Sony group companies or any third party, regarding their product, software or service.

PLEASE NOTE: In order to use this Application, you will need to set up a Sony’s Cloud Service for Home Entertainment & Sound Products Account which has a separate privacy policy.

1. SUMMARY OF KEY POINTS

2. What Collected Data does Sony obtain about you?

Sony may receive the following data (collectively, the “Collected Data”) from you or automatically from third parties when you use the Application. If you wish to stop automatic data collection, you should disable this Application. Some of the Collected Data may be considered personal information under applicable law in your jurisdiction.

The UUID issued by Sony’s cloud service is a unique number assigned to your Application in order to send Voice command from Google Assistant-compatible devices to your BRAVIA. Access token and Authorization Code of Sony’s cloud service are issued to your Application as a result of the authentication by Sony’s cloud service.

3. How does Sony use the Collected Data?

(i) To provide you with the services you have requested

We use the Access token and Authorization code of Sony’s cloud service to link your Google Assistant-compatible device and your TV.

Sony uses Voice command information to process your request via a Google Assistant-compatible device, to do things like turning on/off your TV, channel switching, volume control and turning on/off installed application, and send the request to your TV.

It is necessary for Sony to use the Collected Data to provide you with these services.

Please note that the legal basis under EU law for this processing is the necessity of performing our obligations in connection with the end user license agreement Sony has with you for your use of the Application.

(ii) Legitimate Interests

Sony also processes the Collected Data where it is necessary for Sony to enable its business or to pursue our legitimate interest of the efficient and effective provision of support to our customers. In particular, the Collected Data may be disclosed for information security purposes; to help content owners prevent copyright infringement. If our business is sold or integrated with another business, the Collected Data may be disclosed to our advisers and any prospective purchaser’s advisers and may be passed to the new owners of the business.

(iii) Required by Law

Collected Data may be shared with government authorities, law enforcement officials and content owners if mandated by law.

4. Who else has access to the Collected Data?

The Collected Data that is communicated to and stored by Sony will be made available to other Sony group companies and to third party service providers as follows:

(i) Sony group companies

The Collected Data will be sent and stored in Sony’s server which is managed by Sony Electronics Inc., established in the United States, for the purposes of pursuing the activities outlined in Sections 2 and 3 above Sony has implemented appropriate safeguards to ensure these data transfers are made in compliance with applicable local laws.

If you contact your local Sony group company in relation to questions about the Application, Sony may need to share the Collected Data with that Sony group company to assist with your request. Sony may otherwise share Collected Data with Sony group companies for other purposes set out in this Privacy Policy.

(ii) Service Providers

Sony and Sony group companies may use third party service providers to store and process the Collected Data on their behalf for the purposes set out in this Privacy Policy. Such third parties include, but are not limited to, IT service providers and data hosting providers.

(iii) Business transfer

In the event that Sony or a Sony group company sell or transfer a portion or all of its business, the Collected Data may be transferred by Sony or such Sony group company to the purchasing or acquiring entity as part of the transaction, including any due diligence process connected to the sale or transfer. Sony will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, Sony will delete the Collected Data as soon as reasonably practicable after such transaction.

(iv) Government Authorities/Law Enforcement Officials

The Collected Data may be disclosed to government authorities and/or law enforcement officials if required by the applicable laws.

(v) Other Unaffiliated Third Parties

Sony and Sony group companies may disclose Collected Data to auditors or similar external consultants like lawyers or tax advisors, to defend and exercise our legal rights (e.g. enforcing compliance with the terms of use) and as Sony believe necessary to comply with our legal obligations.

5. Data Retention, Managing the Collected Data

Sony will retain the Collected Data described in Section 2 for 6 months after your last access to this Application and Google Assistant-compatible device.

If you would like to delete the Collected Data collected via this Application, please open the TV Control with Smart Speakers application on your BRAVIA TV and then select [Home] > [TV Control with Smart Speakers] > [Settings] > [Privacy Policy] at any time to withdraw your consent to the privacy policy for the TV Control with Smart Speakers application. After you withdraw your consent, Sony will stop using the Collected Data, and the Collected Data will be deleted automatically after 6 months.

Alternatively, please contact us at the address set out below and Sony will respond to you in a reasonable time. Please note that Sony may be required to retain certain Collected Data by law. Where Sony no longer requires the Collected Data, it will be destroyed or de-identified in line with our internal information security policies.

6. Transfer of the Collected Data internationally

The Collected Data will be processed, stored and transferred for the purposes outlined in Sections 3 from your country of residence to Japan, EU (Ireland) and the United States. The Collected Data will be processed by staff operating outside your country of residence who work for us or for one of our service providers and may be seen by such staff in those countries. Please refer to the following URL for an overview of the legal system regarding protection of personal data in the country concerned.

https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku

7. Security

Sony establishes a common policy, which are built upon industry standards and best practices like the International Organization for Standardization (ISO) 27001 family of standards and National Institute of Standards and Technology (NIST) standards and adopts strict security control measures for personal data collected and possessed by Sony. These measures include implementation and periodical review of organizational information security management system, periodical training and awareness program, periodical inventory of information assets, physical security control measures (employee access control, client control, etc.), encrypted communications, strict access control, periodical vulnerability assessment of information systems, etc.

Whenever Sony use service providers (including subcontractors) to process the personal data, Sony confirms that such service providers (including subcontractors) have adopted the necessary and appropriate security control measures. In addition, Sony also expresses its basic policy on handling of personal information in the “Sony Group Japan - Common Corporate Privacy Policy” (https://www.sony.co.jp/privacy-policy/). Please refer to such policy as well.

8. Our Policy Regarding Children

Sony is committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries.

This Application is intended for a general audience; the Application is not directed to and does not knowingly collect personal information from children under the age of 16. Depending on your country/region of residence, this threshold age for a child may differ.

If you are a parent or guardian and are concerned that your child has provided Sony with personal data/ personally identifiable information (as defined by applicable law) without your consent, you should contact us at the address set out below.

9. Privacy Rights (including EU and California Privacy Rights)

In some countries, you have certain rights with respect to personal information Sony holds about you. These include rights to:

These rights may be limited, for example if fulfilling your request would reveal personal information about another individual, or if you ask us to delete Collected Data which Sony is required by law to keep or has compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us at the address as indicated below.

[Notice to EU, EEA and UK residents]

With regard to the Collected Data that Sony process if you are located in the EU EEA or the UK you may have the following rights pursuant to Art. 15-18 and Art. 19-21 GDPR:

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which Sony are required by law to keep or have compelling legitimate interests in keeping.

We would like to assist you with any queries or concerns you may have about our use of the Collected Data. However, you also have the right to complain to a supervisory authority for data protection in the country/region where you live, where you work, or where you consider that a breach of data protection law has occurred.

[Notice to California Residents]

If you reside in California, Sony is required to provide additional information to you about how Sony may use and disclose the Collected Data, and you may have additional rights with regard to how Sony uses the Collected Data. Sony has included this California-specific information below.

CA Personal Information. Consistent with section 2 (What Collected Data does Sony obtain about you?) above, Sony may collect certain categories and specific pieces of information about individuals that may be considered “personal information” (“CA Personal Information”) as defined by the California Consumer Privacy Act (“CCPA”).

Sources: Sony may collect certain categories of CA Personal Information from you and third party business partners as described in the section 1 (What Information does Sony obtain about you?) above.

CA Personal Information Disclosed For Business Purposes.

California Consumer Rights. Subject to certain exceptions, as a California resident, you may have the following rights to your CA Personal Information: (i) Access. Request access to your CA Personal Information that Sony collect, use, or disclose; (ii) Deletion. Request deletion of your CA Personal Information; provided that to the extent permitted by applicable law, Sony may be required to retain some of your CA Personal Information; and (iii) CA Personal Information Disclosed For Business Purposes. Request information about the CA Personal Information Sony have disclosed for business purposes within the preceding 12 months.

Exercising your California consumer rights. If you are a California resident and wish to exercise any of these rights or if you have questions regarding the CA Personal Information collected or shared with third parties, please: (a) contact us as described in the “Questions” section below with the specific nature of your request, referencing “Your California Privacy Rights – TV Control with Google Assistant”; or (b) call the following toll-free number 1-833-681-9900. When submitting your request, you must include your first and last name, email address, and zip code or mailing address. You may be asked to provide additional proof of identification so that Sony can verify your identity and validate the request. Please note that you are limited by law in the number of requests you may submit per year. Sony will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon you exercising your rights to your CA Personal Information.

Authorized Agents: To the extent that you elect to designate an authorized agent to make a request on your behalf, they must provide appropriate documentation including written signed permission from you, proof of your identity, and verification of their identity; or a valid, designated power of attorney as defined under the California Probate Code.

10. Additional Notice

[For Asia & Oceania Residents]

Please read this Privacy Policy carefully because by using this Application, you will be deemed to have agreed and consented to the terms of this Privacy Policy.

By using this Application, or providing us with any Collected Data, you fully understand and consent to the transfer of the Collected Data internationally, processing and storage of such Collected Data in the United States and other jurisdictions, where the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, such as an overseas authority.

By using this Application, or providing us with any Collected Data, you agree that you will not hold Sony or Sony Affiliates liable for any complaints or damages whatsoever relating to the processing of the Collected Data by an acquiring entity in the event a business transfer, as described in Section 4 of this Privacy Policy, takes place.

11. Changes

This Privacy Policy may be updated from time to time for any reason. Sony will notify or request your consent (whenever necessary under the applicable law) for any changes to our Privacy Policy.

You are advised to consult the posted Privacy Policy regularly for any changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any legal right you may have in respect of your personal information, please contact us at the address as indicated below.

FOR RESIDENTS IN THE EU AND THE EEA:

Sony Corporation, a Japanese company, is the controller for the Collected Data. Our representative in the EU and EEA is Sony Europe BV, a Dutch company, whose business address is Taurusavenue 16, 2132LS Hoofddorp, the Netherlands.

If you have any concerns about how we process your data, you can contact our representative in the EU and EEA:

By email: privacyoffice.seu@sony.com

By post: Sony Europe BV, The Privacy Office, The Heights, Brooklands, Weybridge, Surrey KT13 0XW, United Kingdom

You can also contact your local Sony group companies at https://sony-europe.com.

FOR RESIDENTS IN THE UK:

Sony Corporation, a Japanese company, is the controller for the Information. Our representative in the UK is Sony Europe BV, a Dutch company, whose UK branch has its business address in The Privacy Office, The Heights, Brooklands, Weybridge, Surrey KT13 0XW, The United Kingdom.

If you have any concerns about how we process your data, you can contact our representative in the UK:

By email: privacyoffice.seu@sony.com

By post: Sony Europe BV, The Privacy Office, The Heights, Brooklands, Weybridge, Surrey KT13 0XW, United Kingdom

FOR RESIDENTS IN OTHER COUNTRIES OR REGIONS:

If you have any concerns about how we process your data, you can find our contact details below or on the website of your local Sony Group Companies at:

The US and Canada: privacy@am.Sony.com

For Mexico, Central and South America and the Caribbean:

Regional Latin America Privacy Office at https://www.sony-latin.com/corporate/SOLA/home.html

Africa and Middle East: https://www.Sony-mea.com/en/locale-selector

Asia & Oceania: http://www.Sony-asia.com/countryselector.html

Japan:http://www.sony.jp/support/

Google is a trademark of Google LLC.