Privacy and Data Protection Policy This Privacy Policy and Data Protection Policy describes how the Data Controller, Dahua Technology Italy S.r.l., Via Cesare Cantù, 8 - 20092 Cinisello Balsamo (MI) VAT ID 03437740966 ("we", "us", "our") processes and protects the personal data of users ("you", "your") when using our mobile application (the "App"). This policy is fully compliant with the requirements of the App Store and applicable data protection legislation, including Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR). 1. License, Intended Use and User Scope 1.1 License The App is and remains the exclusive property of Dahua Technology Italy S.r.l., including all associated intellectual property rights, software components, source code, design, and underlying technologies. By installing or using the App, users are granted a temporary, non-exclusive, non-transferable, and revocable licence to use the App solely for the purposes expressly authorised by Dahua Technology Italy S.r.l., and strictly within the context of the existing professional relationship. This limited licence is granted for the exclusive purpose of enabling access to Dahua Technology Italy S.r.l., 's systems in accordance with the terms outlined in this Privacy and Data Protection Policy and any separate agreement in force between the parties. Users do not acquire any ownership rights or intellectual property rights in or to the App, nor may they assert any such rights, either during or after the period of use. This includes, but is not limited to, rights to reproduce, modify, adapt, reverse-engineer, distribute, or create derivative works based on the App or any part thereof. Dahua Technology Italy S.r.l. expressly reserves the right to: • Revoke the licence granted to any user at any time, with immediate effect and without prior notice; • Suspend or permanently discontinue the distribution or availability of the App, in whole or in part, at its sole discretion; • Do so without any liability or obligation to compensate the user, nor shall the user be entitled to lodge complaints, seek indemnity or claim damages resulting from such revocation, suspension, or withdrawal. 1.2 Intended Use Use of the App constitutes full acceptance of the above licensing conditions. Any breach of these provisions may result in immediate termination of access and may expose the user to legal liability. 1.3 User Scope The App is designed and made available exclusively to professional partners of Dahua Technology Italy S.r.l.. It is not intended for general public use, nor is it distributed to consumers or individual users. Access to the App is subject to prior authorisation and an established professional relationship with the Company. 2. Purpose and Functionality of the App The App serves as a secure interface to connect with the Dahua Technology Italy 's website, enabling professional users to: • Download information necessary for professional collaboration, and • Upload information expressly required or initiated by the user. The App operates strictly as a conduit and does not perform any data processing beyond what is necessary to facilitate this functionality. Personal data is processed through our computer systems and accessed only by authorised personnel, in accordance with the stated purposes. 3. Access to Mobile Device Features The App may access certain features of your mobile device strictly to provide its core functionalities. This includes, but is not limited to, access to the device’s camera, location services (GPS), and storage. These features are only accessed with your explicit consent and are used solely to support user-initiated actions within the App, such as scanning documents, capturing photos, or retrieving your location for service-related purposes. No data from these features is stored or transmitted without the user’s knowledge or permission. 4. Technical Information for Authentication, Security Measures, Users’ Duties In order to establish a secure connection and authenticate user access, our servers receive and temporarily store the following technical data: • Username and password (encrypted in transit), • IP address, • Browser or app user-agent string. This information is essential for login procedures, access verification, and service functionality. We adopt and maintain appropriate technical and organisational security measures designed to safeguard the integrity, confidentiality, and availability of the data processed through the App and its associated infrastructure. These measures include, but are not limited to: • Deployment of firewalls and secure network configurations; • Access control systems with individual user credentials and privilege management protocols; • Regular backups and data recovery systems to ensure resilience and continuity of service; • Restricted administrative access and secure server hosting environments located within the European Union. Such measures are implemented in accordance with industry best practices and applicable data protection legislation, with the objective of preventing unauthorised access, accidental loss, or unlawful disclosure of stored information. However, the security of the devices used to access the App and the our website remains the sole responsibility of the user. Users must: • Maintain the confidentiality and integrity of their login credentials; • Prevent unauthorised physical or digital access to their devices; • Ensure that their hardware and software are adequately protected against malware, unauthorised surveillance, or other threats, • take all necessary precautions to secure their own access environments, including the use of strong passwords, secure connections, and up-to-date antivirus or endpoint protection software. Access made using valid credentials shall be presumed to have been made by the authorised user, and all legal consequences of such access shall be attributable to the user, including, where applicable, liability for any misuse, breach of confidentiality, or unauthorised disclosure of information. 5. Data Retention and Legal Grounds The aforementioned technical data are stored for a period of thirty (30) days. The purpose of this retention is exclusively: • Troubleshooting login errors or performance issues, • Ensuring the security and integrity of the connection, • Addressing legal claims, including identity theft, unauthorised access, and illicit information sharing. The legal basis for this processing is compliance to laws and regulations, right to defense and intellectual/industrial property protection, legitimate interest in ensuring system integrity, in compliance with Article 6 of the GDPR. 6. Data Storage and International Transfers All data processed through the App and stored on Dahua Technology Italy S.r.l.’s infrastructure are located within the European Union (EU). We do not transfer any personal data outside the EU under any circumstances. We may use a hosting provider which, in this case, will act as a Data Processor under article 28 of the GDPR, under our responsibility as per article 82 of the GDPR. We have no access to or control over the information that users exchange with their network access providers, including DNS queries and IP routing. 7. No Data Sharing with Third Parties Dahua Technology Italy S.r.l. does not share, sell, rent, or disclose any data processed via the App to any third party, with the sole exceptions of: • Competent public authorities or law enforcement agencies, when required by applicable law, • Legal counsel, courts, or forensic experts in the context of extra-judicial or judicial litigation or formal legal proceedings, • A hosting services’ data processor, if present, for troubleshooting and data recovery in the event of an incident. Any such disclosures will be made in full compliance with applicable legal obligations and only to the extent strictly necessary. 8. Data Subject Rights Although the App is not available to the general public and operates within the scope of professional agreements, users retain all rights afforded by the GDPR. These include: • The right of access to your data, • The right to rectification, • The right to erasure ("right to be forgotten"), • The right to restrict or object to processing, • The right to lodge a complaint with a supervisory authority or, alternatively, with the competent judicial authority. To exercise your rights, or for any questions related to data protection, please contact us at web.italy@dahuatech.com. 9. Confidentiality and Intellectual Property Notice All content, data, documentation, and any other form of information accessed, transmitted or downloaded through the App are the exclusive property of Dahua Technology Italy S.r.l. or are lawfully licensed to it. Such materials are protected under applicable intellectual property laws, including but not limited to copyright, trade secrets, and contractual confidentiality obligations. The information made available through the App is intended strictly for internal use by authorised professional partners of Dahua Technology Italy S.r.l., and solely within the scope of their ongoing professional or contractual relationship with us. Any unauthorised disclosure, reproduction, distribution, transmission, or use of the content accessed through the App — including its use outside the professional purposes agreed upon — is strictly prohibited and may result in civil and/or criminal liability. Users are expressly reminded that: • Access to information via the App is conditional upon the existence of a valid professional relationship with Dahua Technology Italy S.r.l.; • Such access must cease upon the termination of that relationship; • Users remain bound by professional confidentiality obligations even after the cessation of such relationship. By using the App, users acknowledge and agree to respect the confidentiality and intellectual property rights of Dahua Technology Italy S.r.l. and to take all necessary measures to protect the integrity and secrecy of any information obtained through the App. 10. Contact and Full Data Protection Notice For further information regarding this Privacy and Data Protection Policy or our data processing practices, you may check the full data processing notice at the following address: https://dahuaservice.it/Privacy_Cookie.aspx Dahua Technology Italy S.r.l. Via Cesare Cantù, 8 20092 Cinisello Balsamo (MI) Italy