I. Data Controller
The data controller is the entity operating this platform; it is responsible for overseeing the entire personal data processing workflow and assumes the data protection obligations stipulated by the GDPR. For contact details, please refer to the official contact channels published on the platform.
II. Types of Personal Data Collected
We collect only the data necessary for our services and do not compel the collection of irrelevant information. The data falls primarily into two categories:
- Voluntarily submitted data: Information provided by users during registration, inquiries, or service usage, including names, contact details, email addresses, account information, etc.;
- Automatically collected data: Basic data obtained automatically while users access the platform, including device information, browsing history, access timestamps, IP addresses, and other log data.
III. Purposes and Legal Bases for Data Processing
We strictly adhere to the principle of data minimization when processing personal data, and all operations comply with the legal bases defined by the GDPR:
- Performance of service agreements: To provide, maintain, and optimize platform services, and to handle user inquiries and after-sales requests;
- User consent: For scenarios such as personalized recommendations or the collection of non-essential data, processing occurs only after obtaining the user's explicit consent; users may withdraw their consent at any time;
- Compliance obligations: To comply with EU and Member State laws and regulations, and to fulfill statutory responsibilities such as audits and compliance checks;
- Legitimate interests: To enhance platform security and prevent fraud or violations, provided such actions do not infringe upon the user's core rights.
IV. Data Storage and Security Protection
- Storage period: Personal data is retained only for the minimum period necessary to achieve the collection purposes. Upon service termination, fulfillment of the purpose, or a user's deletion request, we will promptly purge or anonymize the relevant data;
- Security measures: We employ industry-standard technical and administrative safeguards—such as encrypted storage and access controls—to protect user data against risks including leakage, tampering, loss, and unauthorized access. All partner data processors are required to sign compliance agreements and strictly adhere to GDPR requirements regarding data confidentiality and security.
V. Data Sharing and Cross-Border Transfer
- Data sharing: We do not sell or rent user personal data to third parties. We share necessary data to a limited extent only when authorized by the user, required by law, or necessary for service provision (e.g., with technical maintenance service providers), and we require third parties to handle such data in compliance with regulations throughout the process;
- Cross-border transfer: If data needs to be transferred outside the EU/EEA, we ensure the recipient jurisdiction offers equivalent data protection standards or implement compliant safeguards to fully protect user data security.
VI. Statutory Rights of EU Users
Under the GDPR, EU users enjoy the following legal rights, which may be exercised at any time without charge:
- Right to be informed and right of access: Users may inquire about and obtain the personal data we store about them and records of its processing;
- Right to rectification: Users may request the immediate correction or supplementation of inaccurate or incomplete personal data;
- Right to erasure (right to be forgotten): Users may request the deletion of their personal data under statutory circumstances;
- Right to restriction of processing: Users may request a suspension of the processing of their data;
- Right to data portability: Users may obtain their data in a structured, commonly used format to facilitate transfer to another data controller;
- Right to withdraw consent: Users may withdraw previously granted consent for data processing at any time, without affecting the lawfulness of processing prior to such withdrawal;
- Right to lodge a complaint: Users may file a complaint with the local EU data protection supervisory authority regarding any non-compliant data processing activities on our part.
VII. Methods for Exercising User Rights
Users may submit requests regarding their rights via the official email address or customer service channels published on the platform. We will verify and respond to requests within one month of receipt, or within a maximum of two months for complex cases. We will not refuse or delay legitimate requests from users without valid reason.
VIII. Cookies and Tracking Technologies
The platform uses only necessary cookies to ensure the stable operation of basic access functions. For non-essential cookies and tracking technologies, we obtain the user's explicit consent in advance; users may disable or clear cookies at any time via their browser settings.
IX. Policy Updates
We may update this Privacy Policy in response to business adjustments or changes in laws and regulations; updates become effective upon publication on the platform. Users will be notified separately of significant changes, and continued use of the service constitutes acceptance of the updated policy.
X. Dispute Resolution
Matters not covered by this Policy and any related disputes shall be governed by the data protection laws and regulations of the European Union and the relevant Member States.