INFORMATION ON THE PROCESSING OF PERSONAL DATA
Melisono AB
1. INTRODUCTION
Melisono AB, reg. no. 559321-7952 (“Melisono”, “we”, or “us” ) processes personal data about you when you use the Auwli earbuds and the connected app, when you visit our website, or when you otherwise have contact or interact with us. Melisono is committed to protecting your personal data and all processing of personal data occurs in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) and other applicable privacy protection law.
Your privacy is important to us, and you are therefore encouraged to read the information that concerns you about the processing of your personal data.
2. WHO IS THE DATA CONTROLLER FOR THE PROCESSING OF YOUR PERSONAL DATA?
Melisono is the data controller for the processing of your personal data as described in this privacy notice.
If you have any questions regarding the processing of your personal data, please contact Melisono on the contact details set forth below.
Melisono AB
Email: info@melisono.com
Phone: +46708 27 80 86
Address: Kyrkogatan 17, 222 22 Lund, Sweden
3. WHAT IS PERSONAL DATA AND WHAT IS PROCESSING OF PERSONAL DATA?
Personal data is any information that can be directly, or indirectly together with other data, linked to you as an individual. Processing of personal data means any activity performed on your personal data, such as the collection, management, storage, use, transfer, or erasure of your personal data.
The personal data processed about you is primarily information that you provide us with, such as your name and contact details or data that is generated by your use of the Auwli earbuds, our app or website.
4. WHAT PERSONAL DATA IS PROCESSED ABOUT YOU, FOR WHAT PURPOSES AND FOR HOW LONG?
4.1 Maintain, protect and develop our website and app
When you are browsing our website, we will process your IP address and user agent string to help spam detection. In addition, your personal data may be processed to administrate and improve our website and app, for our internal records and for statistical analysis.
| Categories of personal data | Legal basis |
| IP address Browser user agent string (UA) Device type Website (page viewed, content consumed, etc.) | Legitimate interest. The processing is necessary to satisfy our legitimate interest to ensure that our website and app are continuously maintained and updated and protected against malicious attacks. |
| Retention period: Your personal data will be processed for as long as necessary for the purposes described herein. For example, when processing your personal data for the purpose for maintaining the website or app, we will anonymise your data as soon as practicably possible and then use the anonymised data for further website development. |
4.2 Communicate with you and respond to your questions or feedback
Where we offer you a possibility to communicate with us by asking questions or providing feedback regarding our services and our business, we will process your personal data when you submit a question, comment, feedback or any other message. The purpose of the processing is to be able to communicate with you.
| Categories of personal data | Legal basis |
| Name Email address Account information Any other information you provide in relation to the communication with us | Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to communicate with you, e.g. answer your questions or to develop our business. |
| Retention period: One (1) year from the last communication. Communication data can further be stored for ten (10) years if necessary to establish, exercise or defend legal claims. |
4.3 Send newsletter or marketing to you
Where you have registered for receiving newsletters or marketing material from Melisono, we will process your personal data to be able to send the newsletters and marketing to you.
| Categories of personal data | Legal basis |
| Name Email address | Legitimate interest. The processing is necessary to satisfy our legitimate interest to provide you with requested newsletters and to market our business. |
| Retention period: Your personal data will be processed for this purpose until you opt-out from receiving newsletter or marketing material. |
4.4 Administrate your purchase of Auwli earbuds
When you purchase the Auwli earbuds from us, we will process your personal data to be able to facilitate your order, payment transaction and delivery of the Auwli earbuds.
| Categories of personal data | Legal basis |
| Name Telephone number Email address Address Country Payment method, card and payment information Time of purchase | Agreement. The processing is necessary in order to be able to fulfil our agreement with you. |
| Retention period: The personal data will be processed until all obligations related to the purchase have been completed. |
4.5 Administrate your registration for a user account and keeping your account up to date
When you download our app and register a user account or update your account, we will process your personal data to manage and administrate your user account, e.g. give you access to use our services related to your Auwli earbuds and keep your account profile active and secure.
| Categories of personal data | Legal basis |
| Email address Password Country [Data provided through third-party authentication services (e.g. Google, Apple, Meta)] | Legitimate Interest. The processing is necessary to manage and administer the user accounts as we have a legitimate interest to fulfil our obligations towards our users by providing our user app to enable use of the Auwli earbuds. |
| Retention period: Until your user account is deleted or has been inactive for two (2) years. |
4.6 Administrate and execute your hearing test and set up your audio profile to your user account and Auwli earbuds
In order to configure and set up your individual audio profile for your Auwli earbuds you must conduct a hearing test. We will process your personal data when you perform and complete the hearing test by storing your audio profile on your account and produce your tailor-made audio profile. Your individual audio profile, resulting from the hearing test, is also stored and will be accessed by your Auwli earbuds when you use them.
Please note that the sound calibration feature is for audio personalization and acoustic compensation only to enhance your listening experience based on your unique hearing and auditory perception. It is not intended for medical use, to diagnose, treat, mitigate, cure, or prevent any disease or condition, including hearing loss. It is not a substitute for professional medical advice or a hearing examination by a qualified healthcare professional. Consult a doctor if you have concerns about your hearing.
| Categories of personal data | Legal basis |
| Email address Country Your audio profile for the earbuds The results of the performed hearing test | Agreement. The processing is necessary to process your personal data in order to fulfil our agreement with you. Processing of special categories of personal data Consent. When you conduct the hearing test we will collect information about your health, i.e. your auditory perception. Such personal data will only be processed for the above purposes based on your consent which we will collect before initiating the hearing test. |
| Retention period: Your personal data is stored until your user account is deleted or has been inactive for two (2) years. |
4.7 Develop and improve our products and services
If you consent to it, we will pseudonymise your personal data and use it on an aggregated level to be able to develop our products and services that we provide, and to gain better insights and improve and optimise our services.
| Categories of personal data | Legal basis |
Your audio profile for the earbuds The results of the performed hearing test Information about your usage of the app and Auwli earbuds | Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to develop and improve our services. Processing of special categories of personal data Consent. Information about your auditory perception as a result of your hearing test will only be processed for the above purposes based on your consent which we will collect before initiating the hearing test. |
| Retention period: Your personal data will be processed for as long as necessary for the purposes described herein. For example, when processing your personal data for the purpose for develop and improve our services, we will anonymise your data as soon as practicably possible and then use the anonymised data for further development. |
4.8 Fulfil legal obligations, regardless of why we process your personal data
We will process your personal data where necessary in order to comply with legal obligations, e.g. accounting obligations.
| Categories of personal data | Legal basis |
| Any information necessary to comply with legal obligations | Legal obligation. The processing is necessary to fulfil our legal obligations. |
| Retention period: Your personal data will be processed as long as necessary to fulfil our legal obligations. As for example, accounting information must be stored at least seven (7) years as from the end of the calendar year during which the accounting year ended. |
4.9 Establish, exercise and defend legal claims
For the purposes of establishing, exercising and defending legal claims (for example in connection with a dispute or legal process) we may process your personal data.
| Categories of personal data | Legal basis |
| Any information necessary to establish, exercise and defend legal claims | Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to establish, exercise or defend legal claims, for example in connection with a dispute or legal process. |
| Retention period: As long as necessary to establish, exercise or defend the legal claim. |
5. DISCLOSURE OF PERSONAL DATA
Where necessary in order to achieve the purposes of processing, we share your personal data with other entities, authorities or actors. The categories of recipients mentioned in Section 5.1 process personal data on behalf of Melisono in the capacity as data processors (i.e. such actors will only process your personal data in accordance with Melisono’s instructions).
The categories of recipients mentioned in Section 5.2 process personal data in the capacity as data controllers, i.e. these recipients will determine the purposes and means of the processing without Melisono’s involvement. Please note however that Melisono, regardless of the recipients’ capacity, only shares your personal data with entrusted actors and only to the extent necessary.
Please note that when you choose to log in to the app using third-party authentication services (i.e. Google, Apple and Meta), you are initiating a process managed by these third-party providers. The third parties will process your personal data in accordance with what is described in their privacy notice available on their website.
5.1 Data processors acting on behalf of Melisono
In order to fulfil the purposes of the processing of your personal data and to be able run our business, we transfer personal data to external parties such as third-party service providers that we have engaged, as well as other partners. These external parties act as data processors of Melisono and may only process your personal data in accordance with our instructions and not for their own purposes. Melisono is the data controller for the processing of personal data that these external parties carry out on our behalf. The purposes of the processing activities carried out by Melisono are outlined Section 4.
5.2 Recipients that act as data controllers
| Recipients | Purposes | Legal basis |
| • Courts and arbitration tribunals • Public authorities • External advisers • Counterparties | In order to establish, exercise or defend legal claims, see Section 4.9. | To fulfil our legitimate interest to manage and defend legal claims, e.g. in relation to a dispute. |
6. YOUR RIGHTS
Under applicable data protection laws, you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfil your rights. Please submit requests for exercising your rights by contacting us on the contact details set out in Section 2. 6
When Melisono receives a request to exercise a right, Melisono will investigate your request and assess whether the conditions are fulfilled to grant the request. Melisono will notify you by email if Melisono (i) needs additional information, (ii) if your request is rejected (and why), or (iii) grants your request.
You have, under certain circumstances, the right to exercise the following rights:
Access
You may request confirmation whether or not personal data is processed and, if that is the case, access your personal data and additional information such as the purposes of the processing. You are also entitled to receive a copy of the personal data undergoing processing. If the request is made by electronic means the information will be provided in a commonly used electronic format if you do not request otherwise.
Object to certain processing
You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concerns your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims.
Rectification
You have at any time the right to have inaccurate personal data rectified, as well as, taking into account the purposes of processing, the right to have incomplete personal data completed which relates to you.
Erasure
You may have your personal data erased under certain circumstances, such as when your personal data is no longer needed for the purposes for which it was collected. However, we cannot delete your personal data if we e.g. are obligated under law to keep the data.
Restriction of processing
You may ask us to restrict the processing of your personal data to only comprise storage of your personal data under certain circumstances, such as when the processing is unlawful, but you do not want your personal data erased. If the processing of your personal data has been restricted, we may only, besides storing the data, process your personal data with your consent, in order to establish, exercise and defend legal claims or to defend rights of others.
Withdrawal of consent
When the process of data is based on your consent, you have the right to, at any time, withdraw your consent to processing of personal data.
Data Portability
You may ask to receive a machine-readable copy of the personal data processed on the basis of your consent or on the basis that the processing is necessary in order to perform an agreement with you, and which personal data have been provided to Melisono by you (data portability) and ask for the information to be transferred to another data controller (where possible).
Complaints to the supervisory authority
You acknowledge that you always have the right to lodge complaints pertaining to the processing of your personal data to the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten).
7. UPDATES
Melisono may change or update this privacy notice from time to time. The latest version of the privacy notice is always available on Melisono’s website https://melisono.com. In case of changes that are significant and require your consent, Melisono will inform you of this and ask for your consent.
This privacy notice was last updated: 18th of August 2025.