Privancy Statement
Enacted: April 1st, 2024
1. Purpose of enactment of this Notice
In the event that Shanghai Sunworld Automation Technology Co.,Ltd. and its group companies ("SUNWORLD®") collect personal data concerning an individual ("Data Subject"), SUNWORLD®shall handle personal data as set out below. The handling of personal data about officers and employees of SUNWORLD® shall be determined separately in accordance with privacy notice implemented within SUNWORLD®.
2. Lawfulness of processing
SUNWORLD® processes personal data when the law allows it to and it has the Data Subject's consent and usually when SUNWORLD® has one of the following legal bases:
(1)where it is necessary for SUNWORLD®'s legitimate interests for processing of personal data;
(2)where it is necessary for the performance of a contract into which SUNWORLD® has entered with the Data Subject; and
(3)where SUNWORLD® needs to comply with any legal obligations.
3. Types of personal data collected
3.1. SUNWORLD® collects the following types of personal data
3.1.1. Types of personal data collected from customers, business partners, shareholders and investors：
(a)Basic information used to identify the Data Subject (e.g., name, date of birth, gender);
(b)information needed to contact the Data Subject (e.g., telephone number, mobile number, email address); and
(c)technical information that could be used to identify the Data Subject (e.g., IP address, type and version of browser used).
3.1.2. Types of personal data collected from job applicants, those wishing to visit the company or its exhibition center and those who access the SUNWORLD® website：
(a)personal information on the CV (e.g., name, qualifications, work experience, salary expectation, notice period);
(b)visitors’ information that could be used to control access to the site and ensure site security (e.g., image, vehicle registration, company name); and
(c)technical information that could be used to identify the Data Subject (e.g., IP address, type and version of browser used).
3.2. SUNWORLD® does not collect the following personal data without the prior explicit consent of the Data Subject:
(a)data about political opinions or religious beliefs; and
(b)data concerning health.
4. Purpose of collection and use
SUNWORLD® generally uses the personal data it collects for the purposes shown below.
4.1. Personal data collected from customers and business partners (includes potential customers and business partners):
(a)to provide the products and services handled by SUNWORLD®, to provide information about these products and services and to process invoices for payment;
(b)to plan, research and develop products and services;
(c)to deal with inquiries;
(d)to conduct negotiations and meetings, to contact customers and business partners and to execute business operations relating thereto; and
(e)to conduct accounting audits.
4.2. Personal data collected from shareholders and investors (includes potential shareholders and investors):
(a)to manage shareholders, investors and shares;
(b)to allow shareholders to exercise their rights and to fulfil obligations;
(c)to prepare documents and create records and data in accordance with applicable national laws;
(d)to provide data to shareholders; and
(e)to otherwise take action in accordance with the provisions of laws or directives, guidance, etc. issued by the authorities.
4.3. Personal data collected from job applicants, those wishing to visit the company or its exhibition center and those accessing the SUNWORLD® website:
(a)to conduct recruitment activities and business operations related thereto;
(b)to provide information, refreshments, etc. to visitors to SUNWORLD's offices or its exhibition center; and
(c)to control access to the site and ensure site security.
5. Rights of the Data Subject
5.1 Protected rights of the Data Subject
With respect to personal data managed by SUNWORLD®, you have certain rights pursuant to the applicable personal data protection laws, which may include the following rights of the Data Subject:
(1) the right to be informed (the right to be informed about the details such as the identity of the controller, the purposes of the processing, legitimate interests pursued by the controller, and when the controller collects personal data);
(2)the right of access (the right to obtain from the controller confirmation as to whether or not personal data is held concerning him or her);
(3)the right to rectification (the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her);
(4)the right to erasure (the right to obtain from the controller the erasure of personal data concerning him or her);
(5)the right to restrict processing (the right to obtain from the controller restriction of processing);
(6)the right to data portability (the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and the right to transmit to another controller without hindrance from the controller);
(7)the right to object (the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her);
(8)the rights in relation to automated decision-making and profiling (the right not to be subject to a decision based solely on automated processing, including profiling); or
(9)the rights to withdraw the consent to process personal data.
5.2 Point of contact for exercise of the above rights
If you have any questions about the processing of your personal data or wish to exercise any of the above rights, please contact the person in charge of Privacy Notice from the link here.
You can find the relevant entity from the link here.
If you would like to contact us by mail, please send it to the following address.
Information Asset Management Promotion Department
Shanghai Sunworld Automation Technology Co.,Ltd.
Area A,1F,Block5,
No.3588,Rongwei Highway ,
Zhangyan Town,Jinshan District,
Shanghai,201514
China
6. Provision to a third party
To fulfil the purposes set out in “4. Purpose of collection and use” above, SUNWORLD® may provide personal data to group companies of SUNWORLD® specified in the list here.
Besides, SUNWORLD® may entrust the processing of personal data to a third party. In this case, SUNWORLD® shall enter into an agreement with the processor stipulating that the processor:
(1)processes the personal data only on documented instructions from SUNWORLD®;
(2)commits to confidentiality;
(3)takes all measures required to ensure data security;
(4)assists the exercise of the Data Subject's rights; and
(5)returns all the personal data (including copies) to SUNWORLD® once the purpose of processing ceases to exist.
7. Records of data processing
As the controller of the personal data, SUNWORLD® manages records of the processing of personal data in its possession. SUNWORLD® also periodically updates records of the processing of this personal data.
8. Retention period
SUNWORLD® retains personal data for the minimum period necessary to achieve the abovementioned purposes of collection of personal data and only for the amount of time required by law or for accounting purposes or similar reporting requirements.
9. Data security
SUNWORLD® properly implements organizational security management measures, including developing and applying regulations such as the Information Security Basic Policy, as well as technical security management measures such as the anonymization and encryption of personal data, and the establishment of a periodic inspection process.
In processing sensitive personal data, SUNWORLD® takes appropriate security measures to ensure that the rights and interests of individuals are not affected.
10. Notification of personal data breaches
In case of a data leak or other breach of security, SUNWORLD® has put in place a framework for reporting to the supervisory authorities responsible for protecting personal data within the required timeframe, and also engages in appropriate communication with the Data Subject.
11. Transfer to a third country
SUNWORLD® may transfer personal data to a company located in the third countries outside your country of residence. Such third countries may not have personal data protection laws as comprehensive as those that exist in your country of residence, and the same level of protection as that set forth in the personal data protection laws in your country may not necessarily be guaranteed. In such case, SUNWORLD® shall implement necessary safety management measures pursuant to the requirements of any and all the applicable laws.
12. Revisions and updates to this Statement
SUNWORLD® may revise or update this Privacy Statement from time to time. Any revisions or updates to this Privacy Statement will become effective upon posting of the revised or updated Privacy Statement on SUNWORLD's website.
(End)
