Privacy Policy for DMSS Application - How Dahua processes your personal data
2025/07/01
Last modified: Jul., 2025
Dahua Europe B.V., DAHUA TECHNOLOGY (HK) LIMITED and our affiliates ("Dahua", "we" or "us") respects your privacy and are committed to protecting it through our compliance with this Privacy Policy (the "Policy"). This Policy describes how we process your personal data when you use DMSS (the "App"), or use the service(s) as provided by us or our affiliates in connection with the App (the "Service"). For specific usage or service scenarios, we may release a dedicated privacy policy to describe how to process your personal data and exercise your rights.
If you are located in the regions of the European Union and the United Kingdom, Dahua Europe B.V. is responsible for operating the DMSS Services and shall be the data controller when processing your personal data. For data subjects located in other regions apart from the European Union and the United Kingdom, DAHUA TECHNOLOGY (HK) LIMITED is responsible for operating the DMSS Services and shall be the data controller.
Please read this Policy carefully to understand our policies and practices regarding your personal data and how we will treat it. If you have any issues regarding this Policy, please contact us at [email protected].
We may process several types of data from you, including data that identifies you personally, such as personal name, physical address, e-mail address and telephone number, etc. ("Personal Data"). We may also process data that is about you, but individually does not identify you, such as demographic data, data about your internet connection, the equipment you use to access our services and usage details. You have right to choose whether or not to provide the data we requested. However, we may not be able to provide you relevant services if you reject to provide your personal data.
Type of Data: Email address; country or region you choose; nickname you use; password (encrypted); profile photo (if uploaded)
Processing Purposes: To allow us complete your registration, communicate with you and administer your account. Profile photo may be uploaded from local photo album in your mobile phone on a voluntary basis if you desire to have a more personalized account, omission to do so, does not affect the running of DMSS App.
Lawful Basis: Consent
Type of Data: Email address; country or region nickname; password (encrypted); profile photo
Processing Purposes: To allow the changes you have requested for. Refusing to provide such information may only result in your being unable to use this function, but does not affect your normal use other functions of DMSS App.
Lawful Basis: Consent
Type of Data: GPS, mobile device's operating system, unique model and its unique identifier, IP address, MAC address, software version, network access mode & type, latitude & longitude (if necessary), accelerator (gravity-activated device) and operation logs
Processing Purposes: To offer our services to you, maintain our services' normal operations, optimize our services and secure the safety of your account.
Lawful Basis: To perform contract with you and provide you services
Type of Data: Hardware SN; Hardware model; Wi-Fi info; Hardware Name; Hardware password (encrypted); Hardware time zone and DST status
Processing Purposes: To process your request to add a hardware to your account and allow configuration of your hardware. Refusing to provide such information may only result in your being unable to use this function, but does not affect your normal use of DMSS App's other functions.
Lawful Basis: Consent
Type of Data: Hardware SN; Hardware IP; Hardware Port Information; (real time) Video Stream
Processing Purposes: To provide you with the basic services of video display through DMSS App.
Lawful Basis: To perform contract with you and provide you services
Type of Data: Hardware SN, Hardware's Channel ID, Record Files Path, (real time) video stream
Processing Purposes: To store your history record and allow you view it
Lawful Basis: Consent
Type of Data: Mac address; IP address; Hardware SN; Hardware model; Hardware firmware version; Country information (via IP address); Hardware location (via IP); Date of Hardware register; Hardware channel information; Hardware offline/online status; Hardware configuration information
Processing Purposes: To allow activation of your Hardware and its registration with our server
Lawful Basis: Consent
Type of Data: Cover image; Hardware name; Channel information; Hardware model; Hardware SN
Processing Purposes: You can set device name, change cover image, and view channel name, device model and SN. The processing of such information is needed for us to allow the changes you have required for and to inform you about the details of the Hardware added on your DMSS account. Refusing to provide such information may only result in your being unable to use this function, but does not affect your normal use of DMSS App's other functions.
Lawful Basis: Consent
Type of Data: Hardware SN; original password (encrypted), your email address (if you reset password via email)
Processing Purposes: To allow you enhance the security of your Hardware by adding a password or reset your password. Refusing to provide such information may only result in your being unable to use this function, but does not affect your normal use of DMSS APP's other functions.
Lawful Basis: Consent
Type of Data: Hardware SN; Email address
Processing Purposes: To allow you the sharing of your Hardware with another user of DMSS App as requested by you. Refusing to provide such information may only result in your being unable to use this function, but does not affect your normal use of DMSS App's other functions.
Lawful Basis: Consent
Type of Data: Hardware SN; Email and (or) telephone number (only of customers who sign up with DMSS App via their telephone number)
Processing Purposes: To allow the removal of the Hardware from your account on DMSS App and matched accessory as you requested us for. Refusing to provide such information may only result in your being unable to use this function, but does not affect your normal use of DMSS App's other functions.
Lawful Basis: Consent
Type of Data: Hardware SN; Push notice ID/alarm snapshot
Processing Purposes: To send you alarm notifications and provide you the services you have requested us for
Lawful Basis: To perform contract with you and provide you services
Type of Data: Hardware SN; messages and video record; Hardware channel information
Processing Purposes: To allow you use of the cloud service (either free or added value version). Refusing to provide such information may only result in your being unable to use this service, but does not affect your normal use of DMSS App's other functions.
Lawful Basis: To perform contract with you and provide you services
Type of Data: Browsing history & clicking behavior, email address, mac address and your unique identifier. Device ID of the phone, location of the phone, app version number. Live video streaming time, recording streaming time, reasons for streaming failure, device list loading time, favorite list loading time, alarm list loading time, mailbox list loading time, sign in type, alarm filter type.
Processing Purposes: When you enable user experience plan, you give us consent to collect such information and help us improve our products and services and analyse your usage of different functions. Refusing to provide such information may only result in your being unable to use the user experience program, but does not affect your normal use of DMSS App's other functions.
Lawful Basis: Consent
Type of Data:
Processing Purposes: When you enable the Device Experience Program, you consent to our collection of such information to help us improve our products and services and to analyze your use of different features. If you do not provide the above information, it will not affect the use of product features, but you may not be able to obtain relevant faults in DMSS and provide solutions, which may affect your user experience.
Lawful Basis: Consent
Type of Data: Text information and images of your communication with us
Processing Purposes: To communicate with you, provide you with information you request about us, answer your questions or handle your complaints
Lawful Basis: Our legitimate interests to communicate with you and reply your inquiries/comments
Type of Data: Telephone number (only of customers who sign up with DMSS App via their telephone number), email address
Processing Purposes: To allow us to complete your deregistration, and to delete all your personal data collected by us during the period of your use of DMSS App.
Lawful Basis: Provide you services
Type of Data: Email address and your precise geographical location
Processing Purposes: To notify the administrator of hosting service the device and DMSS user, and allow the administrator to confirm the location of DMSS device.
Lawful Basis: Consent
Type of Data: App logs, fault records, technical data and necessary system information
Processing Purposes: To diagnose the abnormal problem in the App
Lawful Basis: Provide you services
Type of Data: User ID, device ID, region, location, app version
Processing Purposes: In order to improve the App features and enhance your user experience of the App
Lawful Basis: Our legitimate interests and provide you services
We may collect and use your product reviews and feedback for the App, as well as your responses to surveys that we might ask you to complete for research purposes. We use the data to provide or improve services provided by us, our partners, or other trusted third-party vendors, such as providing, evaluating, improving, or upgrading services; participating in market research activities related to our services, developing new services, providing customer support, etc.
Lawful Basis: Performance of contract and legitimate interests to keep our services updated and improve them
We collect records and copies of your correspondence (including email addresses), if you contact us. We use your contact details to communicate with you, provide you with information you request about us, answer your questions or when we handle your complaints. We might use these details to send important notifications to you, such as changes in our relevant terms, conditions and policies. Since this information is very important for you to communicate with us, it is suggested that you receive and read such information.
Lawful Basis: Performance of contract and legitimate interests to administer the contractual relationship with you
We may be required by law to collect and share your identifying information and personal data with public or governmental organizations for the purpose of compliance with the law, a court order, or to respond to any government or regulatory request.
Lawful Basis: Compliance with a legal obligation
The App allows you to access and view surveillance data captured or recorded by Compatible Hardware (as defined in the Terms of Use). "Surveillance Data" comprises (1) video (and in some cases audio) recordings or live feeds or streams and still photographic images; (2) readings or data from physical or virtual sensors (to the extent offered by or included with Compatible Hardware and supported by the App), including motion detection sensors, event sensors, temperature sensors, window/door sensors, passive infrared sensors, water sensors, carbon dioxide sensors and ambient light sensors.
Apart from the detail activities specified above, we may process your personal data which is permitted or required by applicable laws:
We may share, assign or disclose your personal data in the following circumstances. You shall be fully responsible and liable for the personal data you collect or obtain from other resources or from other data subjects.
We may share, assign or disclose your personal data with certain trusted third parties such as our subsidiaries and affiliates; or contractors, service providers, and other third parties in order to perform contract with you or provide you services. The third parties are bound by contractual obligations to keep your personal data confidential and use it only for the purposes instructed by us or permitted by applicable laws.
We may share, assign or disclose your personal data when it is permitted by applicable laws, or to comply with applicable legal requirements such as court order, legal process, including to respond to any government or regulatory authority's request or for investigations (e.g. disclosure to prevent crime or fraud, or to comply with a court order or legislation).
We may share, assign or disclose your personal data where there is a merger, acquisition or bankruptcy procedure. We will require the successor who holds your personal data to continue to perform the obligations in accordance with this Policy.
We may share, assign or disclose your personal data for public interest purpose, such as to deal with public health emergencies, or, in case of emergency, to protect the health of natural persons and the safety of their property.
We attach great importance to the security of your personal data. We have taken appropriate physical, technical and management security measures to prevent your personal data from accidental losses and from unauthorized access, use, alteration and disclosure. For instance, we use encryption technology to improve the security of personal data and trusted protection mechanisms to prevent personal data from being maliciously attacked.
We will retain your personal data for no longer than it is necessary for the purposes stated in this Policy, unless otherwise extending the retention period is required or permitted by law. To determine the appropriate retention period for personal data, we may consider the amount, nature and sensitivity of the personal data, the potential risk from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other channels. If you want to learn more about the retention period of your personal data, you may directly contact us at [email protected].
Our Apps are not designed for children under 16 years of age, or equivalent minimum age in the relevant jurisdiction (refer to "Child" or "Children" below). If we become aware of any personal data related to Children, we will delete that Children's personal data unilaterally, unless otherwise the processing is permitted by applicable law, explicitly consented by the Children's parents or guardians, or deemed necessary for the protection of the Children.
Since we have affiliates around the world to offer you services and we may store your personal data on our servers located in different countries, including United States, Germany, and Singapore. In light of this, your personal data may be transferred outside the region or country where you use the App or Service, which may have different legal rules and level of protection on personal data. In such circumstances, we will take necessary measures to ensure that your personal data is processed in conformity with the applicable laws, including obtaining your consent to the cross-border transfer of your personal data, signing standard contractual clauses approved by the EU Commission when necessary, and taking appropriate technical security measures to safeguard your personal data.
You can send us an email at [email protected] to request exercising your rights in relation to your personal data. You may also object to or request us to restrict the processing of your personal data. If we process your personal data based on consent, you may withdraw your consent at any time by contacting us at [email protected]. A summary of your legal rights is set out below:
Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data by entering into【Account – Delete Account】where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your data unlawfully or where we are required to erase your personal data to comply with local law. However, for specific legal reasons, such as it is mandatory for us to retain your personal data as required by laws, we may not be able to comply with your request of erasure but we will notify you at the time of your request in such circumstance, if applicable.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated data which you initially provided consent for us to use or where we used the data to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain Apps or services to you. We will advise you if this is the case at the time you withdraw your consent.
For security reasons, we will take steps to authenticate your identity before providing access to your personal data. You also have the right to lodge a complaint with the relevant Data Protection Authority.
We keep this Privacy Policy under review and may modify this Privacy Policy from time to time. If we make major changes to this Policy, we will notify you through different channels, for example, by posting a pop-out notice on the App to notify the major changes.
If you have any questions or comment on this Privacy Policy or our privacy practices, please contact us through email at [email protected].