1234568Privacy Notice - DONGFENG APP

隐私政策 - DONGFENG APP

Updated on:

Version：XX

更新日期：202X年XX月
版本：XX

This privacy notice (“Privacy Notice”) describes DONGFENG’s use of your personal data. This document comprehensively addresses information on the processing of personal data while using the DONGFENG application ("the APP"), whereas the data controller is DONGFENG Europe B.V. ( “DONGFENG”, “we” or “our”) a private company with limited liability established under Dutch law, having its statutory seat in Schiedam, The Netherlands.

DONGFENG Europe can be reached via the following contact details:

· Mailing address: 's-Gravelandseweg 256, 3125 BK Schiedam, the Netherlands

· Email address: privacy.eu@DONGFENG.com

本隐私政策（“隐私政策”）描述了DONGFENG对您个人数据的使用情况。本文档全面涵盖了在使用DONGFENG应用程序（“APP”）及满足产品运营管理过程中对个人数据的处理信息，其中欧盟 General Data Protection Regulation(“GDPR”)所指的数据控制者为东风柳州汽车有限公司（“东风柳汽”、“我们”或“我们的”），这是一家历史悠久、技术领先、积极创新的企业，法定注册地址为中国广西柳州。

您可以通过以下联系方式与东风柳汽取得联系：
· 邮寄地址：中国广西柳州市屏山大道286号
· 电子邮件地址：privacy.eu@DONGFENG.com

We would like to emphasize that we take the protection of your privacy and your personal data very seriously and that we process your data in accordance with applicable data protection laws. We would like to explain to you below in more detail which personal data we collect in connection with your use of the APP and how we use this personal data. In this Privacy Notice, we will explain:

1. What data we collect

2. How we use your personal data

3. With whom we will share this personal data with

4. To which third countries we will transfer your personal data

5. What rights you have in relation to your personal data

6. How long we will retain your personal data

7. How we protect your personal data

8. How you can raise questions about your personal data

9. How we will update this Privacy Notice

Please note that not all data/information processed under this Privacy Notice may qualify as personal data. To inform you as completely as possible about the processing activities we carry out, we have also included information on the processing of data that does not usually qualify as personal data.

我们想要强调，我们非常重视您隐私和个人数据的保护，并且我们会根据适用的数据保护法律来处理您的数据。以下我们将更详细地解释在您使用APP时我们会收集哪些个人数据以及我们如何使用这些个人数据。在本隐私政策中，我们将解释：

1.我们收集哪些数据

2.我们如何使用您的个人数据

3.我们将与谁共享这些个人数据

4.我们将把您的个人数据传输到哪些第三方地区或国家

5.您在您的个人数据方面享有哪些权利

6.我们将保留您的个人数据多久

7.我们如何保护您的个人数据

8.您如何就您的个人数据提出问题

9.我们将如何更新本隐私政策

请注意，根据本隐私政策处理的所有数据/信息可能并不都构成个人数据。为了尽可能全面地告知您我们所进行的处理活动，我们还包括了通常不构成个人数据的数据处理信息。

This Privacy Notice may be changed from time to time. This current version applies since XX .

本隐私政策可能会不时变更。当前版本自202X年XX 月起生效。

1. What data we collect

Customers who purchase DONGFENG passenger cars can register a DONGFENG Account, which relates to the APP. The (personal) data/information contained in your account includes:

· your account information: email address, login password and operation password;

· your vehicle information: Vehicle Identification Number (VIN), vehicle identifier, vehicle type;

· your vehicle's conditions: electricity, remaining charging time, charging status, endurance, total mileage, power position, door state, tyre pressure state, window status, seat ventilation and heating state.

1.我们收集哪些数据

· 您的账户信息：电子邮箱地址、登录密码、操作码以及根据自身需求选择完善的个人电话号码、头像、昵称；

· 您的车辆信息：车辆识别码（VIN）、车辆类型、车型代码、车型名称、车型图片、车模图片、车系名称、车辆解绑信息；

· 您的车联网开通信息：车辆识别码（VIN）、品牌名称、品系名称、车型名称、车型代码、东风风行海外TSP运营管理系统开通账号、绑定成功时间、电子邮箱地址；

· 您的车辆状态：剩余电量、剩余充电时间（快、慢充）、充电状态、充电异常故障、充电电压、充电电流、剩余油量、续航里程、总里程、空调状态、空调温度 、车内温度、蓄电池电压、动力位置、车门状态、胎温胎压状态、车窗状态、天窗状态、尾门状态、四门锁状态、汽车车窗顶部距离、车辆点火状态、发动机状态、座椅通风和加热状态、车模图片；

· 您的车辆授权相关信息：授权提醒信息、操作码、被授权人邮箱地址、授权远控范围、授权开始以及结束时间；

· 沟通或互动信息：您通过APP反馈的信息（问题类型、问题描述、上传的问题图片）、电子邮箱地址；

·通过授权读取以下APP状态权限能获取的信息：系统通知、定位、相机、照片、面容和指纹。我们只会调取您的系统验证结果，不会直接收集及处理您的面容及指纹信息；

· 车辆登录信息：车辆识别码（VIN）、登入流水、采集时间、ICCID、可充电储能子系统数、可充电储能系统编码长度、可充电储能系统编码、唤醒短信内容；

· 统计信息：车辆识别码（VIN）、登入时间、登出时间、在线时长 、车系id、时间内运行里程（KM），最后报文上报时间；

· 实时上报的车载终端状态数据：卫星定位状态、经度、纬度、行驶方向、海拔、卫星搜星数量、卫星定位三维位置精度因子、数据网络类型、数据网络信号强度；

· 报文数据信息：采集的CAN 报文数据、上报的补发信息、入侵报警信息、碰撞报警信息、车辆登出报文、及CAN矩阵信号采集配置信息；

· 车型数据信息：车型代码、车型代码Code、车型代码id、颜色id、颜色名称、车辆底盘号、车辆发动机编号、电动机编号、上线时间、下线时间、备注、选装包、车辆品牌id、车辆品牌名称、描述、品系id、代码、说明、车系id、车系名称、车系类型id、车型id、方案号、是否检测车联网功能 true/ false、配置名称、年款；车辆电机编号、入库时间、备注、收车的经销商id、收车的经销商code；

· 发送远控指令信息：车辆识别码（VIN）、操作码、下发参数、指令编码、是否车主账号、设备类型、车主账户id、远控持续时长；

You can access your DONGFENG Account to update the information from or about you in that account at any time.

您可以随时访问您的东风风行账户，以更新该账户中来自您或关于您的信息。

We may collect the following (personal) data based on the requirements for providing services or analyzing and solving problems:

· Operating system information (name and version);

· Equipment brand and model;

· Equipment unique identification information (IMEI);

· Name and version of application (including database version);

· Location;

· Network operator;

· Signal strength (UMTS and LTE);

· Wi-Fi signal strength;

· Vehicle geo-location information and mobile device location information.

· APP usage data include the number of times an app is opened, the duration of each session, specific features or screens accessed within the app, and user engagement metrics such as clicks, taps, or swipes.

基于提供服务的要求或分析和解决问题的需要，我们可能会收集以下（个人）数据：
· 操作系统信息（名称和版本）；

· 设备序列号；

· 设备名称；

· 设备系统版本；

· 设备身份码；    
· 设备品牌和型号；
· 设备唯一识别信息（IMEI）；
· 应用程序的名称和版本（包括数据库版本）；
· 网络运营商；
· 信号强度（UMTS和LTE）；
· Wi-Fi信号强度；

· 在您开启位置权限后从车端收集的车辆地理位置信息：经度、纬度、定位状态、POI地址；

· 在您授权访问在移动设备显示的谷歌地图位置信息：经度、纬度、定位状态。

2. How we use your personal data

We use your personal data to manage and meet service and information requests, to understand the service vehicle and the APP use, and to make our products and services as effective as possible.

Please note that it is unable to identify a specific natural person just by using the information of individual equipment and an operating system, etc. To optimize products, we may analyze and/or combine non-personal data with other information. If we combine these data with other non-personal data or personal data to identify a specific natural person, then the non-personal data will be regarded as personal data. Unless authorized by you or required by the law and regulation of the country where the service is provided, we will anonymize the personal data.

请注意，仅通过单个设备和操作系统的信息是无法识别出具体自然人的。为了优化产品，我们可能会分析和/或将非个人数据与其他信息相结合。如果我们将这些数据与其他非个人数据或个人数据结合以识别出具体自然人，则这些非个人数据将被视为个人数据。除非得到您的授权或提供服务所在国家的法律法规要求，否则我们将对个人数据进行匿名处理。

我们在向您提供服务过程中所收集的信息可能会用于如下情形：

3. With whom we will share this personal data

We do not sell your personal data to anyone for any purpose, period. We may share your personal data with DONGFENG affiliated companies and non-affiliated companies that provide services on our behalf. The table below illustrates who we may share your personal data with:

3.我们将与谁共享这些个人数据

我们不会出于任何目的、在任何时候向任何人出售您的个人数据。我们可能会与东风风行的关联公司以及代表我们提供服务的非关联公司共享您的个人数据。下表说明了我们可能会与谁共享您的个人数据：

When third parties are given access to your personal data, we will take the required contractual, technical and organizational measures to ensure that your personal data are only processed to the extent that such processing is necessary and in compliance with applicable law.

Your personal data will not be supplied to third parties in other cases, except where required or allowed by law of the country where the service is provided.

当第三方被允许访问您的个人数据时，我们将采取必要的合同、技术和组织措施，以确保仅在必要范围内且符合适用法律的情况下处理您的个人数据。

在其他情况下，您的个人数据不会被提供给第三方，除非提供服务所在国家的法律要求或允许。

4. To which third countries we will transfer your personal data

In principle, all personal data we collect is stored in Paris, France within the European Economic Area (EEA). By making a purchase or otherwise submitting your personal data to us, such personal data may be transferred to DONGFENG in the countries within the EEA other than your place of residence or in which the personal data was originally collected. DONGFENG complies with laws on the transfer of personal data between countries to help ensure your personal data is protected as described in this Privacy Notice, wherever it may be.

For transmitting personal data to recipients outside the European Economic Area or UK, we ensure that your personal data is adequately protected by signing the data transfer agreement adopted by the European Commission (e.g., EU or UK Standard Contractual Clauses (SCC)) with the recipients and (if necessary) adopting other additional appropriate technical measures, organizations and measures (e.g., encrypting your data) or taking other necessary measures).

4.我们将把您的个人数据传输给哪些第三方地区或国家

原则上，我们收集的所有个人数据均存储在位于欧洲经济区（EEA）内的爱尔兰都柏林。当您进行购买或以其他方式向我们提交个人数据时，此类个人数据可能会被传输至东风风行在欧洲经济区内的除您居住地或最初收集个人数据所在地之外的其他国家。东风风行遵守国家间个人数据传输的法律，以确保无论您的个人数据位于何处，都能得到本隐私政策中所述的保护。

对于将个人数据传输给欧洲经济区或英国以外的接收方，我们会根据适用法律与相应的第三方签订欧盟委员会发布的标准合同条款。同时任何数据访问都需要根据需要采取进一步的技术、组织措施和其他必要措施（如加密您的数据）。有关我们如何在这种情况下保护您的个人数据安全的更多信息，您可以通过privacy.eu@DONGFENG.com 与我们联系。

5. What rights you have in relation to your personal data

Unless exceptions provided by applicable law and regulations, you generally have the following rights:

· Right of access. This means that you have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the purposes of such processing.

· Right to rectification. If we are processing inaccurate personal data, you have the right to obtain rectification of such inaccurate personal data.

· Right to erasure (‘right to be forgotten’). You have the right to request the erasure of your personal data, subject to certain conditions.

· Right to data portability. You have the right to request a copy of your personal data in order to transmit such data to another controller.

· Right to restriction of processing. You have the right to request restriction of processing your personal data.

· Right to object. You have the right to object, on grounds relating to your specific situation, to the processing of your personal data by us which is based on art. 6(1)(e) (tasks in the public interest) or 6(1)(f) GDPR (our specified legitimate interests). You also have the right to object to the processing of personal data by us where personal data is processed for direct marketing purposes, unless you want to object to the processing in part.

· Right to withdraw consent. As far as our processing is based on a consent (pursuant to art. 6(1)(a) GDPR), you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on the consent before its withdrawal.

· Right to lodge a complaint. You have the right to lodge a complaint with a competent data protection supervisory authority located in the European Union.

5.您对个人数据享有哪些权利

除非适用法律和法规另有规定，您通常享有以下权利：

· 访问权。这意味着您有权确认是否正在处理与您有关的个人数据，并且在确实存在处理的情况下，有权访问这些个人数据及其处理目的。（GDPR第13条）

· 更正权。如果我们正在处理不准确的个人数据，您有权要求更正这些不准确的个人数据。（GDPR第16条）

· 删除权（“被遗忘权”）。在符合一定条件的情况下，您有权请求删除您的个人数据。（GDPR第17条）

当您在我的-我的车辆选择解绑车辆流程后，解绑车辆的请求提交后有两周的恢复期，恢复期内您的车辆相关数据将会保留，两周之后系统自动清除车主信息及车联网开通信息，如果有疑问请联系privacy.eu@DONGFENG.com。

当您从我们的服务中删除或请求删除个人信息后，因法律法规要求的最低存储期限以及安全技术限制，我们可能不会立即在备份系统中删除相应的车辆数据信息，我们只会做存储不会进行其他用途直至达到法定保存期限时删除，同时，我们不会开展除存储和采取必要的安全保护措施之外的处理。

· 数据可携带权。您有权请求获取您的个人数据副本，以便将这些数据传输给另一个控制者。（GDPR第20条）

· 处理限制权。您有权请求限制处理您的个人数据。（GDPR第18条）

· 反对权。基于与您的具体情况有关的理由，您有权反对我们根据《通用数据保护条例》（GDPR）第6条第1款(e)项（公共利益任务）或第6条第1款(f)项（我们指定的合法利益）处理您的个人数据。届时，我们将不再处理您的个人数据，除非我们能够证明处理具有令人信服的合法理由，这些理由凌驾于您的利益、权利和自由之上，或者处理是为了建立、行使或捍卫合法要求。此外，如果个人数据被用于直接营销目的，您有权随时反对出于此类营销目的处理与您有关的个人数据，届时，我们将不再出于这些目的处理数据。（GDPR第21条）

· 撤销同意权。只要我们的处理是基于您的同意（根据GDPR第6条第1款(a)项），您有权随时撤销同意。 届时，我们将不再处理您的数据。撤销同意不影响在撤销之前基于同意的处理的合法性。例如，我们可能需要保留您的个人数据以履行法律义务。（GDPR第7条第3款）

· 投诉权。您有权向位于欧盟的具有管辖权的数据保护监管机构提出投诉。（GDPR第77条）

如果您对数据保护有任何疑问或希望行使您作为数据主体的权利，请随时使用本隐私政策中提供的联系方式与我们联系。

If you no longer wish us to collect your location information, please disable them in “Individual center--Settings--Use vehicle position” in your app screen. Please note that if you disable this function, we cannot provide with you Vehicle Position service.

We hope that we this Privacy Notice satisfies any queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data you can contact us as described below in the section “If you have any questions about your personal data”.

Finally, please note that where we require personal data to comply with legal or contractual obligations, then provision of such personal data is mandatory: if such personal data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.

如果您不再希望我们收集您的车辆位置信息，请在应用屏幕上的“车辆--车辆设置--车辆位置数据”中禁用它们。请注意，如果您禁用此功能，我们将无法为您提供车辆位置服务。

我们希望本隐私政策能够解答您对我们处理您个人数据方式的所有疑问。如果您对我们处理您个人数据的方式有任何疑虑，您可以按照下方“如果您对个人数据有任何疑问”部分中的描述与我们联系。

最后，请注意，在我们需要个人数据以遵守法律或合同义务的情况下，提供此类个人数据是强制性的：如果不提供此类个人数据，我们将无法管理我们的合同关系或履行我们承担的义务。在所有其他情况下，提供请求的个人数据是可选的。

6. How long we will retain your personal data

For data about your visits to the APP, will keep this data for legal and tax preservation obligations. Where you are a customer, DONGFENG will keep your personal data for the duration of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this Privacy Notice. We retain the personal data we collect from or about you for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. When the personal data is no longer necessary for these purposes, or if you close your account, we will mark your account in our database as “Cancelled”, and we will delete it or keep it in a fully anonymized form that does not identify you.

6.我们将保留您的个人数据多久

对于您访问应用程序的数据，我们将根据法律和税务保存义务保留这些数据。如果您是我们的客户，东风风行将保留您的个人数据，期限为您与我们之间的任何合同关系存续期间，并在允许的范围内，在该关系结束后，保留至实现本隐私政策中所述目的所必需的期限。我们将保留从您处收集或关于您的个人数据，期限为履行本隐私政策中所述目的所必需的期限，除非法律要求或允许更长的保留期限。当个人数据不再为这些目的所必需时，或者如果您注销了帐户，我们将在数据库中将您的帐户信息永久删除。

7. How we protect your personal data

We strive to maintain the strict standards of security and DONGFENG has put in place robust technical and organizational measures for the protection of your personal data in accordance with the current, general state of technology, especially to protect the data against loss, falsification or access by unauthorized third persons. However, the transmission of information via the internet cannot be completely secure. So, whilst we will do our best to protect your personal data, we cannot guarantee the 100% security of your data transmitted via the APP. Once we have received your personal data we will use strict procedures and security features to prevent unauthorized access. In the unfortunate event that a personal data security incident occurs, we will report it promptly and take remedial measures in accordance with the requirements of the law and regulatory authorities.

7.我们如何保护您的个人数据

我们致力于维护严格的安全标准，东风风行已根据当前技术的一般发展水平，采取了强有力的技术和组织措施来保护您的个人数据，特别是防止数据丢失、伪造或未经授权的第三方访问。然而，通过互联网传输信息并不能做到完全安全。因此，尽管我们将竭尽全力保护您的个人数据，但我们无法保证通过应用程序传输的数据的100%安全性。一旦我们收到您的个人数据，我们将采用严格的程序和安全功能来防止未经授权的访问。如果不幸发生个人数据安全事故，我们将根据法律和监管机构的要求及时报告并采取补救措施。

8. How you can raise questions about your personal data

If you have any questions about the processing of your personal data, please read this Privacy Notice first. For additional questions, please feel free to contact DONGFENG's data protection officer at privacy.eu@DONGFENG.com or write to us at DONGFENG Europe B.V., and its registered office at ‘s-Gravelandseweg 256, 3125 BK Schiedam, the Netherlands. Please note that we take your satisfaction very seriously. Should you have a complaint, please also direct it to the same email address and we will respond to you as soon as we can.

You can of course also lodge a complaint with the data protection authority of the country in which you live. Please find a list of data protection authorities in EU via this LINK, and data protection authority in UK via this LINK.

8.如何就您的个人数据提出问题

如果您对您的个人数据的处理有任何疑问，请先阅读本隐私政策。如有其他问题或者您可能会行使在第5项提到的您对个人数据享有的权利，请随时联系东风风行的数据保护官，邮箱为privacy.eu@DONGFENG.com，或致信给东风柳州汽车有限公司，地址为中国广西柳州市屏山大道286号。请注意，我们非常重视您的满意度。如果您有任何投诉，也请发送至同一电子邮箱地址，我们将在法规规定时限内尽快回复您。

当然，您也可以向您所在国家的数据保护机构提出投诉。请通过此链接查找欧盟数据保护机构列表，通过此链接查找英国数据保护机构。

9. How we will update this Privacy Notice

We may update this Privacy Notice according to changes in our business functions and measures concerning the protection of personal data. If we make changes to this Privacy Notice, we will notify you through the APP. Where changes to this Privacy Notice will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you have.

9.我们将如何更新本隐私政策

我们可能会根据业务功能的变化以及有关个人数据保护的措施来更新本隐私政策。如果我们对本隐私政策进行了修改，我们将通过应用程序通知您。如果本隐私政策的变更将对处理的性质产生根本性影响，或以其他方式对您产生重大影响，我们将提前充分通知您，以便您有机会行使您的权利。