1. Information that SONY collects

When you use the Services, SONY collects information listed below 1.1 - 1.7 (“Collected Data") from you.
The Collected Data may be linked and processed in conjunction with the information received from third parties including Sony Group Companies.

SONY provides a fingerprint authentication function on the Device. When you use the function, the Device will collect and read the fingerprint information with the purpose of fingerprint verification only. Your fingerprint information is stored only in the Device and is not sent off from your Device. It’s never stored in SONY’s server or collected by SONY.

1.1 Information about the Device

• Information about the Device’s hardware (e.g., model name, device IDs such as IMEI)
• Information about the Device’s software(e.g., OS and firmware information)
• Mobile carrier information (e.g., mobile carrier name, code identifying the carrier, service providing country/region)

• <Collection method>
  • SONY collects the above information automatically when you use the Device (e.g., when you perform the first startup, when you update the software, when you connect the Device to the network).
  • SONY collects the above information directly from the Device when you receive repair services.

1.2 IP address

• <Collection method>
  • SONY collects the above information automatically when you use the Device (e.g., when you perform the first startup, when you update the software, when you connect the Device to the network).

1.3 Information of the network to which the Device is connected

• Information about usage and quality of your network (mobile networks, Wi-Fi and Bluetooth) connections
• Location estimated from the cell tower information of mobile networks

• <Collection method>
  • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), SONY collects the above information automatically when you connect the Device to the network.

1.4 The Device’s usage status

• Settings Information
• Battery level
• System activity
• Information regarding products which are connected to the Device (e.g., type, number, model name of connected devices and connection method such as USB or Bluetooth)
• Information about crashes, errors and other problems
• Whether or not you have a Google account signed in on the Device

• <Collection method>
  • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), SONY collects information automatically when you use the Device. These collections may occur periodically or when you use certain the Device features. This timing depends on which data is collected.
  • SONY collects the above information directly from the Device when you receive repair services.

1.5 Usage status of applications

• Name of the application installed on the Device (including the Application), number of usage, start time and end time of use, usage duration, power consumption information, data transmission volume and information about crashes, errors and other problems
• Specific usage of the Applications (e.g., logs regarding the operation of each function of the Applications)
• Artist name, the number of music and albums registered on the Application “Music”, start time of music listening and duration of music listening

• <Collection method>
  • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), Sony collects the above information automatically when you use applications.

1.6 Call information

• Call environment and sound volume
• Start time and end time of a call and duration of a call
• Whether or not the call was terminated due to a malfunction

• <Collection method>
  • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), Sony collects the above information automatically when you make a call with the Device.

1.7 Responses to the survey

• <Collection method>
  • SONY may ask you through each of the Services whether you would like to participate in the survey. If you can answer the survey, SONY collects your response information.

2. How Sony uses the Collected Data?

We use the Collected Data for the following purposes:

2.1 Keeping the Services running

SONY collects and uses the following information to provide the Services. This includes making necessary notifications and providing software updates.

<Information used for this purpose>
Information listed in 1.1 and 1.2

2.2 Improving Sony products and services

If you give us a separate consent on the Device’s setting page, SONY collects and analyses the following information to understand your use of the Services to improve and develop SONY products and services. SONY may analyse such information in conjunction with the information collected through other SONY products and services if you use one of those.

<Information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5, 1.6 and 1.7

You can withdraw your consent at any time by [Settings] > [About phone] > [Detailed Diagnostics]

2.3 Marketing and advertisement

If you reside in Hong Kong, Macao,Taiwan, Malaysia, Singapore, Thailand or Vietnam,If you give us a separate consent on the Device’s setting page, SONY will collect and share with namely Sony Corporation of Hong Kong Ltd., Sony Taiwan Ltd., Sony (Malaysia) Sdn. Bhd., Sony Electronics (Singapore) Pte. Ltd., Sony Thai co., Ltd.
Sony Electronics Vietnam Ltd. (collectively referred to as the “Sony Affiliates”) your information below. SONY and Sony Affiliates will be able to evaluate and better understand your preferences and interests and Sony Affiliates will be able to provide you with relevant offers, recommendations, news and updates via email, apps, and websites. For the details of Sony Affiliates’ data processing, please refer to:
Sony Corporation of Hong Kong Ltd.
Sony Taiwan Ltd.
Sony (Malaysia) Sdn. Bhd.
Sony Electronics (Singapore) Pte. Ltd.
Sony Thai co., Ltd.
Sony Electronics Vietnam Ltd.
<Information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5 and 1.7

You can withdraw your consent at any time by [Settings] > [About phone] > [Xperia service setting]

If you give us a separate consent on the Application “Support”, SONY will collect and use your data to be able to provide you with offers, recommendations, news, updates and survey requests via push notifications generated by “Support” App on behalf of Sony Affiliates. For the detail of Sony Affiliates’ data processing, please refer to its privacy policy.

<Information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5 and 1.7

You can withdraw your consent at any time by tapping [⁝] (three dots menu) > [Settings] > [Privacy settings] on the “Support” app.

2.4 Providing tailored support

SONY offers support services including tailored support on the Application “Support”. If you give us a separate consent on such Application, SONY collects and uses information below to provide you with more enhanced and personalized support services.

<information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5 and 1.6

You can withdraw your consent at any time by [⁝ (three dots menu)] > [setting] > [Privacy settings] on the Application “Support”.

3. Who else has access to the Collected Data?

The Collected Data that is communicated to and stored by SONY may be made available to the following entities:

3.1 Sony Affiliates

The Collected Data may be shared with and used by Sony Affiliates for internal business purposes and for product improvement and development, which may be linked and analyzed in conjunction with the data we collect through other Sony products and applications if you use any of those. SONY may otherwise share Collected Data with Sony Affiliates to provide services on our behalf as set out in this Privacy Policy. Furthermore, if you reside in Hong Kong, Macao,Taiwan, Malaysia, Singapore, Thailand or Vietnam, the Collected Data may be shared with Sony Affiliates for targeted and/or personalized advertisements if you have given consent by opting in to receive such marketing communications “2.3 Marketing and advertisement”. SONY may otherwise share Collected Data with Sony Affiliates for other purposes set out in this Privacy Policy. If you contact Sony Affiliates in relation to queries on the Services, we also may need to share Collected Data with such Sony Affiliates in connection with that your request.

3.2 Service providers

SONY may use third party service providers to process the Collected Data on its behalf for the purposes set out in this Privacy Policy. Such third parties include IT service providers and data hosting providers. Our hosting provider is Amazon Web Services in Ireland, acting as our processor.

3.3 Professional advisers

SONY may disclose Collected Data to auditors or similar external consultants like lawyers or tax advisors, to defend and exercise our legal rights (e.g., enforcing compliance with the terms of use) and to help us fulfil our legal obligations.

3.4 Business transfer

In the event that SONY sells or transfers a portion or all of its business, the Collected Data may be transferred by SONY to the purchasing or acquiring entity as part of the transaction, including any due diligence process connected to the sale or transfer. In this case, we will provide you with the name and contact information of the entity. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable.

3.5 Government Authorities/ Law Enforcement Officials

The Collected Data may be disclosed to government authorities and/or law enforcement officials if required by the laws or if necessary for us to protect our legitimate interests, or the interests of others, in compliance with applicable law.

4. Transfer of the Collected Data internationally and Consent to processing

The Collected Data may be processed, stored and transferred from your country/regions of residence to countries/regions outside your country/region of residence, including in particular Japan and the United States. We use a variety of legal mechanisms, including data sharing agreements, to ensure adequate level of protection of the Collected Data. By using the Services, or providing us with any information, you fully understand and consent to this transfer, processing and storage of your information in the United States, Japan and other jurisdictions, where the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen.
Further, courts, law enforcement, and other authorities in countries/regions outside your residence may be entitled to access Collected Data upon its transfer.
This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, such as an overseas authority.

5. Security

SONY undertakes reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. Although SONY strives to protect the Collected Data, SONY cannot guarantee or warrant the security of any Collected Data transmitted to SONY through the Services or that SONY stores on its systems or that is stored on SONY’s third party contractors' systems.

6. Data Retention

SONY will retain the Collected Data for the following periods as long as it is necessary for the relationship with you and to pursue the purposes detailed in “2.How SONY uses the Collected Data?” or otherwise permitted or required under applicable law.

・Collected Data listed in 1.1

SONY will apply a maximum of 10 years retention period from the date of the collection of the Collected Data.

・Collected Data listed in 1.2

SONY will apply a maximum of 30 dates retention period from the date of the collection of the Collected Data.

・Collected Data listed in 1.3, 1.4, 1.5, 1.6 and 1.7

SONY will apply a maximum of 5 years retention period from the date of the collection of the Collected Data.

Please note that SONY may retain Collected Data for an appropriate period when it needs to respond to your requests or inquiries, to detect, prevent, address and analyse security or technical issues, or to the extent permitted by applicable law.
If SONY no longer needs to retain the Collected Data, we will either anonymize or delete it in accordance with our information security policy.

7. Policy Regarding Children

SONY is committed to complying with all applicable laws and regulations regarding the collection, storage and use of the Collected Data concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions.The Services is intended for a general audience; the Services is not directed to and does not knowingly collect personal information from children. Depending on your country/region of residence, this threshold age for a child may differ. If you are a parent or guardian and are concerned that your child has provided a Sony with personal information (as defined by applicable law), you should contact us as indicated below.

8. Privacy Rights

In some countries/regions, you have certain rights with respect to the Collected Data SONY or a Sony Affiliates holds about you. To the fullest extent permitted by applicable laws and regulations, you may have the right to access such Collected Data; restrict the usage of such Collected Data; object to or withdraw consent for processing of such Collected Data; rectify such Collected Data where inaccurate or incomplete; request for deletion of such Collected Data, including anonymization of the Collected Data; and/or request us to provide a copy of such Collected Data to you, or another organization nominated by you, in a structured and machine-readable format.
If you would like to exercise any of these rights, please contact us as described in “12. Contact Information”.
If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority and other self-protection rights according to applicable law.
These rights may be limited, for example if fulfilling your request would reveal personal information about another person, or if you ask us to delete the Collected Data which SONY are required by law to keep or have compelling legitimate interests in keeping.
If you withdraw your consent to any or all use of the Collected Data, depending on the nature of your request, we may not be able to continue to provide its products and/or services to you. In addition, there are some circumstances in which we are not required to give you access to the Collected Data.

9. Obligations

When you agree to provide us with your data, you shall ensure that all of it is complete, accurate, true, and correct. If you provide us with any data relating to a third party, you shall represent to us that you have obtained the required consent of the third party to provide us with their data.

10. Changes

This Privacy Policy may be updated from time to time for any reason. We will notify or request your consent (if necessary under applicable law) of any changes to this Privacy Policy. With regard to notification, it may be sent to you through different channels, for example, a notice on our website or notification on the Device”.

11. Additional Notice

[For Residents in Asia & Oceania regions]

By agreeing to this Privacy Policy, you agree that you will not hold SONY or Sony Group Companies liable to any complaints or damages whatsoever relating to the processing of the Collected Data by an acquiring entity in the event “3.4 Business transfer” of this Privacy Policy takes place.

12. Contact Information

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any legal right you may have in respect of the Collected Data, please contact us at www.sony.net/SonyInfo/Support/

FOR RESIDENTS IN OTHER COUNTRIES OR REGIONS:

If you have any concerns about how we process your data, you can find our contact details below or on the website of your local Sony Group Companies at:
For Mexico, Central and South America and the Caribbean:
Regional Latin America Privacy Office at https://www.sony-latin.com/locale-selector
Africa and Middle East: https://www.sony-mea.com/en/locale-selector
Asia & Oceania: http://www.sony-asia.com/countryselector.html