Privacy Policy (North America Supplement: USA & Canada)

Status: July 2026

1. Scope and Relationship to the General Privacy Policy

This North American Privacy Policy Supplement ("Supplement") supplements the general JUWEL Aquarium Privacy Policy and applies exclusively to users of the MyJUWEL App who reside in the United States of America or Canada. In the event of any direct conflict or ambiguity between the provisions of our general Privacy Policy and this Supplement, the terms of this Supplement shall strictly govern with respect to users located in the United States and Canada.

2. Controller and Contact Information

The data controller responsible for the processing of your personal information within the meaning of applicable data protection laws is:

JUWEL Aquarium AG & Co. KG

Karl-Göx-Str. 1

27356 Rotenburg (Wümme), Germany

Email: privacy@juwel-aquarium.de

Our designated Data Protection Officer can be contacted directly at:

Datect UG (haftungsbeschränkt)

Tangstedter Weg 18a

22851 Hamburg, Germany

Email: surmann@pjm-partner.de

3. Categories of Personal Information Collected, Sources, and Business Purposes

In connection with your download, installation, and use of the MyJUWEL App, we collect and process information that identifies, relates to, describes, references, or is reasonably capable of being associated with you ("Personal Information"). Consistent with the requirements of the California Consumer Privacy Act (CCPA) and other applicable regional frameworks, we collect the following categories of Personal Information:

● Identifiers: Such as your real name, account username, postal address, email address, and unique device identifiers (serial numbers, product IDs, and IP addresses).

● Commercial Information: Records of products purchased, owned, or considered, including connected aquarium devices, timer settings, feeding histories, and configuration logs.

● Internet or Electronic Network Activity Information: App usage data, interaction logs with our backend servers, operating system details, and system diagnostic logs.

● Geolocation Data: Please note: We do not collect, track, or permanently store precise GPS or geolocation data from your mobile device. Local Wi-Fi and Bluetooth permissions are requested solely for local device discovery and setup.

Business and Commercial Purposes: We use these categories of personal information exclusively for the business and commercial purposes described in Section 10 of our general Privacy Policy (including provision of functions, error analysis, optimization, and proper operation of the app).

4. Third-Party Service Providers and Cross-Border Data Transfers

To operate, host, and maintain the MyJUWEL App, we utilize specialized third-party service providers. Because our infrastructure is primarily hosted in Germany, data collected via the app is transferred to and processed in the European Union. We ensure rigorous data protection standards through appropriate legal mechanisms, including the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses:

● Amazon Web Services (AWS): Hosting, backend infrastructure, and secure database storage in Frankfurt am Main, Germany. AWS participates in the EU-U.S. Data Privacy Framework.

● OneSignal: Management and transmission of opt-in push notifications to mobile devices.

● Amazon Alexa & Google Assistant: Voice-control integrations, activated solely upon the user's explicit link and authorization.

● Sentry: Anonymous technical stability monitoring and crash reporting.

● Brevo (Sendinblue GmbH): Management of transactional emails, registration confirmations, and customer service correspondence.

Notice of Right to Opt-Out & Data Sales: We do NOT "sell" or "share" Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA and other applicable U.S. state privacy laws.

5. Specific Privacy Disclosures for United States Residents (CCPA / CPRA & State Laws)

If you are a resident of the United States, you are afforded specific rights regarding your Personal Information under applicable state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

● Right to Know and Access: You have the right to request that we disclose what Personal Information we collect, use, disclose, and sell (if applicable) over the preceding 12 months.

● Right to Deletion: You have the right to request the deletion of your Personal Information that we have collected, subject to certain legal exceptions.

● Right to Correction: You have the right to request the correction of inaccurate Personal Information we maintain about you.

● Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA privacy rights.

6. Specific Privacy Disclosures for Canadian Residents (PIPEDA)

If you reside in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation:

● Consent: We collect, use, and disclose your personal information with your knowledge and consent, except where otherwise authorized or required by law. By downloading the app, creating an account, or opting into notifications, you consent to our data practices as outlined herein. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us.

● Accountability and Cross-Border Protection: JUWEL Aquarium AG & Co. KG remains responsible for personal information under our control. Where personal information is transferred across borders to our primary servers and service providers in Germany/EU, we ensure comparable levels of protection through appropriate contractual and technical safeguards, including Standard Contractual Clauses and certified frameworks. You have the right to access your personal information in our custody, verify its accuracy, and request amendments where appropriate.

7. Children's Privacy (COPPA Compliance)

The MyJUWEL App is not directed to children under the age of 13 (or 16 where applicable by local law), and we do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a child under the legal age threshold, we will take prompt steps to delete such data from our servers.

8. Exercising Your Rights and Designated Request Mechanisms

To submit a privacy request, exercise your statutory rights, or pose questions regarding our North American data practices, you may utilize our dedicated electronic request channels within the app settings or contact us directly via email at privacy@juwel-aquarium.de or by mail to our headquarters in Rotenburg, Germany, marked to the attention of the Data Protection Officer.