European Data Act (EDA)

Product Listing Guidelines

From 12 September onwards, you will need to provide the information outlined below.

  • Interconnected product or product-related service
    • ID: Product.ConnectedDevice
    • Label: EDA: Interconnected product
    • Mandatory field, choose “yes” or “no”
    • N.B: The term “product-related” service refers to any product-connected or product-embedded service required for product functionality (e.g. CCTV cameras using a cloud link, the OS of a smartphone or a fitness tracker, apps used to operate a product, etc). Mandatory disclosure of data use applies to product and service alike. 
  • Data use disclosure
    • ID: Product.ConnectedDeviceInfoURL
    • Label: EDA: Information URL
    • Mandatory field, if the product is an interconnected product  
    • Please provide a valid manufacturer/service provider URL that explains how the collected data are being used. The URL needs to point to a page that applies globally and contains the content in languages spoken in the EU. Example: Apple Regulatory Information
    • If a manufacturer or service provider does not yet provide a page with the relevant information, we recommend linking to either the manufacturer’s home page, or their respective product page.

 

Related assortments

Relevant categories include all those that list products that might be interconnected, or might come with product-embedded services. For instance, these products include Smart Home systems, smart watches, vacuum cleaners, alarm systems and security equipment, consumer electronics, active network components, and many others.

You can find a current list of relevant items here. (Please note that this is a snapshot. If there is the need to have further product groups added, please contact your Conrad Marketplace representative).


The data use disclosure URL that you provide will need to point to a page containing at least the following information:

  • Type, extent and purpose of data use: What types of data are collected/generated by the product or service (e.g. operating hours, temperature)? Are these data being used by the manufacturer/service or by third parties? Why are the data being collected?
  • Data generation and collection: Are the data being collected continuously in real time, or sporadically/at certain intervals?
  • Data user identity: This includes heir full name, address and a way to contact them (e.g. by email). According to law, the term “data user” refers to any natural or juridical person who has the right, duty and capability of deciding how the collected data will be used. Which usually means either the manufacturer of the product, or the provider of the product-related service.
  • Data storage: The page needs to state whether the data are stored in the product itself, or on a remote server. Also, the page needs to clarify how long the data are being held for.
  • Consumer rights disclaimer: The page needs to explain in sufficient detail how consumers can request access, deletion or transfer of their data to another company.
  • Right to make a complaint: The page needs to point out that consumers have the right to make a complaint to the respective regulator.
  • Confidential information disclaimer: The page needs to disclose whether data users will obtain sensitive information when collecting the data.
  • Contract term: The page needs to provide the expiry date of the contract entered by consumer and data user, governing how the product or product-related service is being used.

 

Please keep in mind that simply providing a general data protection policy does not meet the new legal requirements.