本版隐私政策生效日期：2024年12月25日
本版隐私政策发布日期：2024年12月25日
NASA中文（简称“我们”或“网站”）深知个人信息对您而言的重要性，并始终尊重并保护您的隐私，为此我们制定了本《NASA中文隐私政策》（简称“本政策”），以期更好地向您说明我们会如何收集、存储、保护、使用及对外提供相关个人信息，并帮助您了解您所享有的权利。
本政策适用于您访问、浏览、使用我们的网站，申请或使用我们的服务，参加我们的活动，接受我们的赞助或捐赠，以及通过其他方式与我们互动时涉及的您及相关方的个人信息（包括敏感个人信息）。本政策与您使用我们的服务和/或联络我们关系紧密，我们建议您仔细阅读并理解本政策的全部内容。如您未完全理解或接受本政策的全部内容，请勿使用我们的服务或联络我们。
我们可能就特定渠道、产品、服务、业务、活动制定专项隐私政策，如有该等专项隐私政策，则在其确定的范围内适用该专项隐私政策。另外，我们还可能在部分场景另行向您提供针对特定事项的告知函，以进一步披露我们如何进行特定的个人信息处理活动，该等告知函是对本政策和相关的专项隐私政策内容的补充，并与本政策和相关的专项隐私政策共同组成我们处理您的个人信息的完整规则。
如果您有任何疑问、意见或建议，请通过以下联系方式与我们联系：
本政策将帮助您了解以下内容：
一、 我们如何收集和使用您的个人信息
二、 Cookie和同类技术
三、 我们如何委托处理、共享、转让、公开披露您的个人信息
四、 征得授权同意例外
五、 我们如何存储您的个人信息
六、 我们如何保护您的个人信息
七、 您如何管理您的个人信息
八、 我们如何保护未成年人的个人信息
九、 本政策如何更新
十、 如何联系我们
十一、 其他条款
一、我们如何收集和使用您的个人信息
个人信息是指以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息，不包括匿名化处理后的信息。
敏感个人信息是指一旦泄露或者非法使用，容易导致自然人的人格尊严受到侵害或者人身、财产安全受到危害的个人信息，包括生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息，以及不满十四周岁未成年人的个人信息。我们只在具有特定的目的和充分的必要性，并采取严格保护措施的情形下，才会处理您的敏感个人信息。
（一）我们如何收集您的个人信息
在我们开展业务的过程中，为了向您和/或相关方提供产品和服务，开展联络和沟通，维护业务正常、安全运行并防范、控制风险，提升和改善用户体验，以及履行各项法律义务等目的，我们会收集和使用您和/或相关方的个人信息。我们在下方说明了我们在不同业务场景中可能收集和使用的个人信息的情况。
在为向您作为个人客户提供如下产品或服务的过程中，我们可能收集和使用的个人信息包括但不限于您的姓名、性别、出生年月日、身份证号码、电话号码、电子邮箱、地址、支付宝账号及相关附加信息（如您所在的省份和城市、邮政编码等）。这些个人信息是为了向您提供产品或服务，并使我们能够履行我们的法律义务所必需；如您拒绝提供相关个人信息（或提供的信息不完整、不准确或不真实），我们可能无法为您或相关方提供相应的产品或服务。
在您作为访客或我们的客户访问、浏览、使用我们的网站、移动应用程序时，我们可能会通过小型数据文件（Cookie）自动从您的设备收集特定信息。（相关信息请见本政策第二部分“Cookie和同类技术”。）
由于我们的业务是不断更新和发展的。如您向我们申请办理前述内容中尚未涵盖的其他业务，且基于该业务我们需要收集您或相关方的个人信息，我们会通过提示、通知、交互流程、申请书、协议约定或其他适当方式另行向您说明个人信息收集、使用和披露的目的、方式与范围。
（二）我们如何使用您的个人信息
为了实现上述第（一）部分“我们如何收集您的个人信息”中所述之目的，我们将在下述情形中使用您的个人信息：
- 为保障服务的稳定性与安全性，将个人信息用于身份验证、安全防范、诈骗监测、预防或禁止非法活动、降低风险、存档和备份用途；
- 基于您的事先同意，邀请您参与同我们服务、产品或功能有关的客户调研；
- 为提供更加准确、个性、流畅及便捷的服务，或帮助我们评估、改善或设计产品、服务及运营活动等，而对个人信息进行去标识化或脱敏处理，并进行综合统计、分析加工；
- 确保我们能够提供和维持网站服务的日常运作，如关联公司向我们提供的信息存储或其他外包服务，以及印刷品承包商等；
- 基于您的事先同意，推广相关产品，包括但不限于以传单、电话、短信、传真、邮件等方式向您及/或相关方进行推广。
当您作为访客或我们的客户访问、浏览、使用我们的网站和/或移动应用程序时，我们将在下述情形中使用您的个人信息：
- 回复、响应您的询问和要求；
- 提供您希望获得的或可能感兴趣的信息、产品或服务（在取得同意的前提下）；
- 履行您与我们之间的协议；
- 使您能够使用网站和/或移动应用程序的互动功能；
- 通知您有关网站和/或移动应用程序的任何变更；
- 改善您的用户体验；
- 维护网站/移动应用程序服务的正常、安全运行，防范、控制风险，发现、阻止对我们的网站/移动应用程序、产品或服务的不当使用行为；
- 履行我们的法律义务、合规责任、遵守或执行任何适用法律法规；
- 对我们的业务、产品、服务、功能使用情况进行统计分析。
如因业务所需，我们需要将基于特定目的收集而来的信息用于其他目的时，会在适用法律法规要求时事先向您告知并征求您的同意。
二、Cookie和同类技术
在您访问、浏览、使用我们的网站、移动应用程序时，我们可能会通过小型数据文件（Cookie）自动从您的设备收集特定信息。我们将该等信息用于内部分析、解决服务器故障、提升内容的质量、以及判断您的账户安全状态。我们同时也需要留存相应的日志来记录网站和移动应用程序的运行状态以符合中国法律法规的规定。Cookie仅存储不记名统计信息，不会涉及姓名、地址、电话、邮箱地址等个人联络信息。您可随时使用浏览器中的“清除浏览数据”功能，选择清除浏览器上保存的所有Cookie。
三、我们如何委托处理、共享、转让、公开披露您的个人信息
（一）委托处理
我们会委托我们的关联公司和为我们提供产品和/或服务的第三方服务商以及合作伙伴代表我们处理您的个人信息，例如：
- 将信息披露给第三方服务提供人员、代理人或为了支持我们业务而提供服务的独立合同员工。
- 我们的其他供应商、服务提供商和其他合作伙伴。
对我们委托处理个人信息的第三方，我们会与其签署书面协议，要求其按照我们的要求、本政策以及法律法规的要求来处理个人信息。
（二）共享
我们仅在以下情况下，与NASA中文以外的公司、组织和个人共享您的个人信息：
- 在获取单独同意的情况下共享：获得您的单独同意后，我们会与其他方共享您的个人信息。
- 为与您签订、履行合同所必需的情况。
- 我们可能会根据法律法规规定，或按政府主管部门、法院、监管机构、税务机关、或任何其他当局（包括调查犯罪的任何当局）的强制性要求，对外共享您的个人信息。
- 您死亡或丧失民事行为能力时，向您的法定监护人或您的继承人共享您的个人信息。
- 与授权合作伙伴共享：仅为实现本政策中声明的目的，为了履行与您之间的协议，我们的某些服务将由授权合作伙伴提供，或您的个人信息须向我们的合作伙伴提供方能实现您的交易目的。就此，我们仅会出于合法、正当、必要、特定、明确的目的共享您的个人信息，并且只会共享提供服务所必要的个人信息。我们的合作伙伴无权将共享的个人信息用于任何其他用途。
当适用的法律法规要求时，我们会向您告知我们向第三方提供您个人信息的有关事项，包括个人信息接收方的身份、联系方式、处理目的、处理方式和个人信息的种类（若涉及跨境数据传输，还包括您向境外个人信息接收方行使有关权利的方式和程序等），例如通过相关的专项隐私政策、授权函。
（三）转让
我们不会将您的个人信息转让给任何公司、组织和个人，但以下情况除外：
- 获得您的单独同意后，我们会向其他方转让您的个人信息。
- 在涉及合并、收购或破产清算、资产转让等类似交易时，如涉及到个人信息转让，我们会要求新的持有您个人信息的公司、组织继续受本政策的约束，否则该公司、组织将在适用法律法规要求时事先向您告知并征求您的同意。
（四）公开披露
我们仅会在以下情况下，公开披露您的个人信息：
- 获得您单独同意后。
- 在法律、法规、司法、法律程序、政府主管部门强制性的行政执法要求必须提供您的个人信息的情况下，我们可能会依据必须提供的范围和方式公开披露您的个人信息。在这种情况下，我们会请求提出要求的相关部门出具合理的文件，以确保该等要求具备合法的依据，并且相关部门具有合法的权力和合理目的获取您的个人信息。
四、征得授权同意例外
根据相关法律法规、监管要求及国家标准，在以下情形中，我们可能会收集、使用、披露您的相关个人信息而无需另行征求您的授权同意：
- 为与您签订、履行合同所必需的；
- 为履行法定职责或者法定义务所必需的；
- 为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需的；
- 为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理个人信息；
- 所涉及的个人信息是您自行向社会公众公开的或者其他已经合法公开的信息中收集个人信息并在合理范围内处理的；
- 法律、行政法规规定的其他情形。
五、我们如何存储您的个人信息
（一）存储地点
我们主要的业务信息系统部署在中国大陆，与客户相关的个人信息也将主要存储在中国大陆。
（二）存储期限
我们会采取一切合理可行的措施，确保未收集无关的个人信息。
除法律法规另有规定外，我们将按如下期间存储您的个人信息：
- 我们会存储您的个人信息以满足我们的正当业务需求（例如向您提供服务或者来满足相应的法律、税务以及财务的要求）。
- 当我们没有这些需要使用到您的个人信息的正当业务需求时，或者是中国法律法规规定的留存时间届满时，我们会删除您的个人信息或者对其进行匿名化处理，或者在删除或者匿名化处理皆不可能实现（例如您的个人信息已经在备份中存储）时，安全地存储这些个人信息并且将这些个人信息与其他的数据处理区隔开来。
六、我们如何保护您的个人信息
（一）我们已使用符合业界标准的安全防护措施保护您提供的个人信息，防止数据遭到未经授权访问、公开披露、使用、修改、损坏或丢失。我们会采取一切合理可行的措施，保护您的个人信息。
（二）我们会采取一切合理可行的措施，确保未收集无关的个人信息。我们只会在达成本政策所述目的所需的期限内保留您的个人信息，除非需要延长保留期或受到法律法规的允许。
（三）互联网并非绝对安全的环境，而且电子邮件、即时通讯、及与其他用户的交流方式并未加密，我们强烈建议您不要通过此类方式发送个人信息。请使用复杂密码，协助我们保证您的账户安全。
（四）我们将定期/不定期评估安全风险、个人信息安全影响。
（五）互联网环境并非百分百安全，我们将尽力确保您向我们所发送信息的安全性。如果我们的物理、技术、或管理防护设施遭到破坏，导致信息被非授权访问、公开披露、篡改、或毁坏，导致您的合法权益受损，我们将承担相应的法律责任。
（六）在不幸发生个人信息安全事件后，我们将按照法律法规的要求，及时向您告知：发生或者可能发生个人信息泄露、篡改、丢失的信息种类、原因和可能造成的危害，我们采取的补救措施和个人可以采取的减轻危害的措施，以及我们的联系方式。我们将及时将事件相关情况以邮件、短信、信函、电话等方式告知您，难以逐一告知个人信息主体时，我们会采取合理、有效的方式发布公告。同时，我们还将按照监管部门要求，主动上报个人信息安全事件的处置情况。
七、您如何管理您的个人信息
按照中国相关的法律、法规、标准，以及其他国家、地区的通行做法，我们保障您对自己的个人信息行使以下权利：
（一）访问及更正您的个人信息
如您为网站注册用户，您可通过登录我们的网站（www.nasachina.cn）查看或更新您的个人信息，法律法规、监管政策另有规定的除外。
您有权并有义务及时更新您的个人信息，确保该等信息准确。当您在我们的网站修改信息时，我们将通过邮件发送提醒，以保证您信息的安全。
如您非网站注册用户，或者无法通过上述方式访问和更正您的个人信息，请通过本政策下方提供的联系方式联系我们。
（二）获取您的个人信息副本
如果您希望获取您的个人信息副本，请通过本政策下方提供的联系方式联系我们。
（三）删除您的个人信息
如您为网站注册用户，对于您在使用中提供的部分个人信息，您可以通过登录网站 https://www.nasachina.cn 等电子渠道进行删除。如您非网站注册用户，或者无法通过上述方式删除您的个人信息，请通过本政策下方提供的联系方式联系我们。
如您发现我们对您个人信息的收集、使用违反了法律法规或违反了与您之间的约定，您可依法向我们提出删除个人信息的请求。我们会在法律法规允许的情况下（例如法定的保存期限届满后）删除您的个人信息。
当您删除信息后，我们可能不会立即在备份系统中删除相应信息，但会在备份更新时删除这些信息。
（四）撤回授权、改变您授权同意的范围
如您为网站注册用户，对于网站等电子渠道，您可通过删除部分信息、关闭设备功能方式改变部分您授权网站继续收集个人信息的范围或撤回您的授权。如您非网站注册用户，或者您无法通过上述方式改变您授权同意的范围或撤回您的授权，请通过本政策下方提供的联系方式联系我们。但请您知悉，您撤回同意的决定不会影响我们此前基于您的授权而开展的个人信息收集和处理活动。
（五）转移您的个人信息
您有权要求我们将您提供给我们的个人信息传输至您选择的第三方。但是这一权利只能在中国法律规定的特定情况下行使。您可以通过本政策下方所述联系方式联系我们，进一步了解您的相关权利。
（六）拒绝获得商业推广信息
为了向您介绍您可能感兴趣的产品或服务，我们将来可能会适度地通过特定渠道向您发送商业推广信息。对于这些商业推广，您可以通过点击跳过、拒绝、回复退订等方式拒绝接收。您也可以通过本政策下方所述联系方式联系我们，进一步了解您的相关权利。
（七）约束信息系统自动决策
在某些服务中，我们可能仅依据信息系统、算法等在内的非人工自动决策机制做出决定。如果这些决定显著影响您的合法权益，您有权要求我们做出解释，我们也将提供适当的救济方式。
（八）响应您的上述请求
为保障安全，您可能需要提供书面请求，或以其他方式证明您的身份。我们可能会先要求您验证自己的身份，然后再处理您的请求。除法律法规有特别规定，对于您依法根据本政策所述程序就您个人信息的更正、删除或注销您账号事宜所提出的请求，我们原则上将在15个工作日内进行核查及处理：
对于您合理的请求，我们原则上不收取费用，但对多次重复、超出合理限度的请求，我们将视情收取一定成本费用。对于那些无端重复、需要过多技术手段（例如，需要开发新系统或从根本上改变现行惯例）、给他人合法权益带来风险或者非常不切实际的请求，我们可能会予以拒绝。
在以下情形中，按照法律法规要求，我们将无法响应您的请求：
- 与我们履行法律法规规定的义务相关的；
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 与刑事侦查、起诉、审判和执行判决等直接相关的；
- 我们有充分证据表明您存在主观恶意或滥用权利的；
- 出于维护您或其他个人的生命、财产等重大合法权益但又难得到本人同意的；
- 响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的；
- 涉及商业秘密的。
八、我们如何保护未成年人的个人信息
我们期望父母或监护人指导未成年人使用我们的服务。我们将根据国家相关法律法规的规定保护未成年人信息的保密性及安全性。对于14岁以下的未成年人用户，我们将按照法律法规的要求在取得其父母或监护人的同意后处理其个人信息。
如您为未成年人，建议您在父母或监护人的陪同下阅读本政策。对于经父母或监护人同意而收集您的个人信息的情况，我们只会在受到法律允许、父母或监护人明确同意或者保护您所必要的情况下使用此个人信息。如您的父母或监护人不同意按照本政策向我们提供个人信息，请不要向我们提供个人信息，且应当立即停止使用我们的服务。
九、本政策如何更新
本政策可能会发生变更。本政策更新后，我们将会依据这些变更的重要程度采取合适的方式通知您。我们会按照适用数据保护法律的要求在对本政策做出任何重大变更时取得您的同意。
未经您明确同意，我们不会削减您按照本政策所应享有的权利。您可通过访问NASA中文网站 www.nasachina.cn 下方的“隐私政策”处，阅读了解不时更新的本政策。如您不同意本政策的部分或全部条款，请停止使用我们的服务或联系我们。
十、如何联系我们
如果您有任何疑问、意见或建议，特别是个人信息方面或本政策方面的疑问、意见或建议，您可以通过以下方式与我们联系，原则上我们将在收到您联系后的15个工作日予以相应回复处理：
·网站名称：NASA中文
·电子邮箱：nasachina@nasachina.cn
如果您对我们的回复不满意，特别是认为我们的个人信息处理行为损害了您的合法权益，您还可以向履行个人信息保护职责的部门进行投诉或举报，或者向有管辖权的人民法院提起诉讼，或通过法律法规规定的其它外部途径寻求解决方案。
十一、其他条款
（一）如本政策与您在使用我们的服务或与联系我们时与我们之间另行签订的协议或约定的条款、条件有任何冲突，以该等特别约定为准。
（二）如本政策设有中文和英文版本，中文版本仅作参考，英文版本与中文版本如有不一致，以英文版本为准。
Effective Date: 25/12/2024
Issuance Date: 25/12/2024
NASAChina (“we”, “us” or “website”) is fully aware of the importance of personal information to you and strives at all times to respect and protect your privacy. We therefore formulate this NASAChina Privacy Policy (“Policy”) to better explain how we collect, store, protect, use and disclose personal information and to help you understand the rights you have.
This Policy applies to personal information (including sensitive personal information) involved of you and relevant party when you access, browse and use our websites and mobile applications, apply for or use our products or services, attend our events, accept our sponsorship or donations, and otherwise interact with us. This Policy is closely related to your use of our services and/or contact with us. We advise you to carefully read and understand this Policy in full. Please do not use our services or contact us if you do not understand or accept this Policy in full.
We may establish specific privacy policies for specific channels, products, services, businesses, and activities. Where such specific privacy policies exist, such specific privacy policies will apply to the extent determined by them. In addition, we may, in some cases, provide you with separate subject-specific notice letter to further disclose how we process certain personal information. Such notice letter, which supplements this Policy, this Policy and the related specific privacy policies constitute the complete rules for processing your personal information all together.
Should you have any question, comment or suggestion, please contact us at:
E-mail: nasachina@nasachina.cn
This Policy will help you to understand:
I. How we collect and use your personal information
II. Cookies and similar technologies
III. How we entrust the processing of, and share, transfer and publicly disclose your personal information
IV. Exceptions to obtaining consent
V. How we store your personal information
VI. How we protect your personal information
VII. How you could manage your personal information
VIII. How we protect the personal information of minors
IX. How we update this Policy
X. How to contact us
XI. Miscellaneous
I. How we collect and use your personal information
Personal information refers to various information related to an identified or identifiable natural person recorded electronically or by other means, but does not include anonymized information.
Sensitive personal information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used, including such information as biometric identification, religious belief, specific identity, medical health, financial account and whereabouts and tracks, as well as the personal information of minors under the age of fourteen. We will process your sensitive personal information only when there is a specific purpose, when it is of necessity, and under the circumstance where strict protective measures are taken.
(A) How we collect your personal information
In the course of our business, we may collect and use personal information of you and/or relevant party to provide products and services to you and/or relevant party, to contact and communicate, to maintain proper and safe operation of our business and to prevent and control risks, to enhance and improve user experience, and to perform various legal obligations. We have described below the personal information we may collect and use in different business scenarios.
To provide the products or services listed below to you as an individual customer, the personal information we may collect and use includes, but is not limited to, your name, gender, date of birth, identity card number, telephone number, email address, address, Alipay account number and related additional information (such as your province and city, postal code, etc.). These personal information is necessary to provide you with products or services, and to enable us to perform our legal obligations; if you refuse to provide relevant personal information (or provide incomplete, inaccurate or untrue information), we may not be able to provide you or relevant party with the relevant products or services.
When you visit, browse, or use our websites, mobile application as a visitor or as our customer, we may use Cookies to automatically collect certain information from your device. (See section II of this Policy “Cookies and similar technologies” for more information.)
Our products and services are updating and developing constantly. If you choose to use any other service not listed above for which we have to collect your or relevant party’s personal information, we will separately explain to you, the purposes, methods, and scope of personal information we collect, process or disclose by means of reminders, notices, interactive process, application documents, agreements or other appropriate method.
(B) How we use your personal information
To achieve the purposes described in section (A) “How we collect your personal information” above, we will use your personal information in the following circumstances:
- To ensure the stability and security of our services, personal information may be used for verifying identity, safeguarding, monitoring fraud, preventing or prohibiting illegal activities, minimizing risks or for archival and backup purposes;
- To provide with you more accurate, personalized, smooth and easy-to-access services, or to seek for your help with evaluating, improving or designing our products, services and operational activities, to de-identify or desensitize personal information and aggregate them for analysis and processing;
- To ensure that we can provide and maintain regular website services, e.g., the information storage or other outsourcing services provided by related companies to us, debt collection agency or printing vendor, etc.;
- To ensure regular credit check and post-loan management;
To assist other institutions to conduct credit checks and collect debts; - To market relevant products or related products, including but not limited to the marketing to you and/or relevant party via brochure, telephone calls, short messages, fax, and email based on your prior consent。
When you visit, browse, use our website and/or mobile application as our visitor or our customer, we will use your personal information in the following circumstances:
- To respond to and be responsive to your inquiries and requests;
- To provide information, products or services that you wish to obtain or that may be of interest to you as agreed by you;
- To perform our agreements with you;
- To enable you to use the interactive features of the website and/or mobile application;
- To inform you of any changes to the website and/or mobile application;
- To enhance your user experience;
- To maintain the proper and secure operation of the website/mobile application and banking operations and services, to prevent and control risks, and to detect and prevent improper use of our website/mobile application, products or services;
- To perform our legal obligations, compliance responsibilities, and to comply with or enforce any applicable laws and regulations;
- To conduct statistical analysis of our business, products, services, and function usage.
We will ask for your prior consent when required by applicable laws and regulations if we need to use any information for any purpose other than the one for which it is collected.
II. Cookies and similar technologies
When you visit, browse, or use our websites, mobile applications, we may use Cookies to automatically collect certain information from your device. We use such information for internal analysis and troubleshooting, to improve the quality of our content, and to determine the security status of your account. We also need to keep appropriate logs to record the status of our websites and mobile applications in order to comply with Chinese laws and regulations. Cookies store anonymous statistics only and do not involve name, address, telephone, email address and other personal contact information. You may choose to erase all Cookies stored on your browser at any time by using the “Clear Browsing Data” function of your browser.
III. How we entrust the processing of, and share, transfer and publicly disclose your personal information
(A) Entrusting the processing
We may entrust our affiliated companies and third-party service providers who provide products and/or services to us and partners to process your personal information on our behalf, for example:
- Disclosure to third-party service providers, agents or independent contract employees who provide services in support of our business.
- Our other supplier, service provider and other partner.
We will sign written agreements with third parties that we entrust the processing of personal information, requiring them to process personal information in accordance with our requirements, this Policy and the requirements of laws and regulations.
(B) Sharing
We will only share your personal information with any company, organization or individual other than SCB China under the following circumstances:
- Sharing with separate consent: we will share your personal information with others upon obtaining your separate consent.
Circumstances necessary for the conclusion and performance of contracts with you. - Circumstances necessary for the conclusion and performance of contracts with you.
- We may disclose your personal information as required under applicable laws and regulations or in accordance with the mandatory requirements of relevant government authorities, courts, regulators, tax authorities, or any other authorities (including any authority that investigates criminal activities).
- Disclosure to your legal guardian or heir upon your death or loss of legal capacity.
- Sharing with our authorized partners: for the sole purpose of serving the purposes stated in this Policy, some of our services will be provided by our authorized partners in the course of performance of our agreement with you, or your personal information has to be provided to our partners in order to fulfill the purpose of your transaction. For such purpose and to such extent, we will only share your personal information for lawful, legitimate, necessary, particular and specific purposes, and we will only share the personal information that is necessary for the provision of services. Our partners have no right to use the personal information we share with them for any other purposes.
We will inform you of the relevant matters regarding the provision of your personal information to third parties when required by applicable laws and regulations, including the identity of the recipient of the personal information, contact information, the purpose of processing, the manner of processing and the type of personal information (and, in the case of cross-border data transfers, the manner and procedures for you to exercise your relevant rights against the foreign recipient of the personal information), for example through the relevant specific privacy policy, authorization letter.
(C) Transfer
We will not transfer your personal information to any company, organization or individual, except:
- We may transfer your personal information to others after obtaining your separate consent.
- In the case of mergers, acquisitions, bankruptcy, liquidation, transfer of assets or other similar transactions where transfer of personal information is required, we will request the succeeding company or organization holding your personal information to be bound by this Policy; otherwise, the company or organization will inform you and seek your consent in advance when required by applicable laws and regulations.
(D) Public Disclosure
We will only disclose your personal information to the public in the following circumstances:
- After obtaining your separate consent.
- We may disclose your personal information publicly to the extent and in the manner required mandatorily by law, regulation, justice, legal proceedings, or mandatory administrative enforcement by government authority. In such cases, we will request reasonable documentation from the relevant authority making the request to ensure that such request has a lawful basis and that the relevant authority has lawful authority and a reasonable purpose to obtain your personal information.
IV. Exceptions to obtaining consent
According to the relevant laws and regulations, regulatory requirements and national standards, we may collect, use or disclose your personal information without otherwise obtaining your authorization and consent in the following circumstances:
- Necessary for the conclusion and performance of contracts with you;
- Necessary for the performance of statutory duties or obligations;
- Necessary for the response to public health emergencies, or for the protection of life, health, and property safety of natural persons in emergencies;
- Where the personal information is reasonably processed for news reporting, media supervision, and other activities conducted in the public interest;
- Where the personal information disclosed by you or other legally disclosed personal information is reasonably processed;
- Other circumstances as provided by laws or administrative regulations.
V. How we store your personal information
(A) Location of Retention
Our primary business information systems are located in mainland China and the personal information related to customers will be stored primarily in mainland China.
(B) Retention Period
We will take all reasonably practical measures to ensure that no irrelevant personal information is collected.
Except as provided otherwise by laws or regulations, we will store your personal information for the following periods:
- We will store your personal information to meet our legitimate business needs (e.g., to provide services to you and financial requirements).
- When we do not have a legitimate business need to use your personal information, or when the retention period stipulated by Chinese laws and regulations expires, we will delete or anonymize your personal information or, if neither deletion nor anonymization is possible (for example, if your personal information is already stored in a backup), store it securely and keep it separate from other data processing.
VI. How we protect your personal information
(A) We have used safety measures up to industry standards to protect the personal information you provide and to prevent the data from unauthorized access, disclosure, use, modification, damage or loss. We will take all reasonably practical measures to protect your personal information.
(B) We will take all reasonably practical measures to ensure that no irrelevant personal information is collected. We will only store and retain your personal information for a period as minimum as necessary to fulfill the purposes stated in this Policy unless we need to extend the retention period or where laws and regulations permit.
(C) The Internet is not an absolutely safe place. E-mails, instant messages, and communications with other users are not encrypted; therefore, we strongly recommend that you do not send any personal information through these ways. Please use complex passwords to help us keep your account safe.
(D) We will regularly/irregularly assess safety risks and personal information safety implications.
(E) The Internet is not absolutely safe, and we will take every effort to guarantee the security of the information you send us. We will take responsibility in accordance with the law if your information suffers from unauthorized access, public disclosure, erasure or damage as a result of any damage to our physical, technical or management protection facilities and your lawful rights and interests are so impaired.
(F) If unfortunately, a personal information security incident occurs, we will, in accordance with the requirements of laws and regulations, promptly inform you of the type of information, cause and possible harm of the personal information leakage, tampering, loss of information that occurs or is likely to occur, the actions and measures we have taken or will take, suggestions on what you can do to prevent and mitigate risks, and our contact information. We will promptly inform you about the incident by email, SMS, letter, call or other means. Where it is difficult to inform each personal information subject, we will give a public notice in a reasonable and effective way. Meanwhile, we will report the handling of such personal information security incident on our initiative in accordance with the requirements of regulatory authorities.
VII. How you could manage your personal information
In accordance with the relevant laws, regulations and standards of the People’s Republic of China as well as the common practices in other countries and regions, we guarantee that you may exercise the following rights in relation to your personal information:
(A) Access and correct your personal information
If you are our registered user, you may view or update your personal information by logging in our website at www.nasachina.cn, unless otherwise provided by laws, regulations or regulatory policies.
You have the right and obligation to update your personal information in a timely manner to ensure that such information is accurate. When you change any of your information through our website, we will send a reminder to the e-mail you register with NASAChina for the safety of your account.
When you change information on our website, we will send reminders via email to keep your information secure.
If you are not our registered user, or are unable to access and correct your personal information in the ways described above, please contact us using the contact information provided at the bottom of this Policy.
(B) Obtaining a copy of your personal information
If you wish to obtain a copy of your personal information, please contact us using the contact information provided at the bottom of this Policy.
(C) Delete your personal information
If you are our registered user, for part of your personal information provided in your use of website and other electronic channels, you can delete it by logging in our website at www.nasachina.cn and other electronic channels. If you are not our registered user, or are unable to access and correct your personal information in the ways described above, please contact us using the contact information provided at the bottom of this Policy.
If you find that our collection or use of your personal information is in violation of laws and regulations or the agreement between you and us, you may request us to delete your personal information in accordance with the law. We will delete your personal information when permitted by laws or regulations (e.g., after the expiration of the legal retention period).
When you delete information, we may not immediately delete the information from our backup system but we will delete such information at the time of next update of our backup.
(D) Withdraw authorization and change the scope of your authorization and consent
If you are our registered user, for electronic channels such as webstie, you may change the scope of your authorization for us to collect your personal information or withdraw your consent by deleting some information or turning off certain functions on your device. If you are not our registered user, or if you are unable to change the scope of your authorization or withdraw your authorization by the above means, please contact us using the contact information provided at the bottom of this Policy. However, please be aware that your decision to withdraw your consent will not affect any collection of personal information based on your consent prior to such withdrawal.
(E) Transfer your personal information
You have the right to request us to transfer the personal information you provide to us to the third party of your choice. However, this right may only be exercised in certain circumstances as provided by Chinese law. You may contact us by using the contact information at the bottom of this Policy for more information about your relevant rights.
(F) Refuse to receive commercial promotion information
To introduce you the products or services that you may be interested in, we may, in the future, send you commercial promotion information through certain channels on a moderate basis. You may refuse to receive such information by clicking skip, rejecting, or replying unsubscribe. You may also contact us using the contact information provided at the bottom of this Policy to learn more about your relevant rights.
(G) Constraint automated decision making
In some services, we may make decisions based solely on non-human and automated decision-making mechanisms, including information systems, algorithms, etc. If these decisions significantly affect your legal rights, you have the right to request an explanation from us, and we will also provide appropriate remedies.
(H) Response to your requests above
For your security, you may need to submit a written request or identify yourself through other ways. We may ask you to verify your identity before processing your request. Unless otherwise specifically provided in laws and regulations, we will, in principle, review and process your requests for correcting your personal information, deleting or cancelling your account submitted in accordance with the procedures described in this Policy within 15 working days:
In principle, we do not charge a fee for your reasonable requests, but we will charge a cost fee for repeated requests that exceed reasonable limits, as appropriate. We may reject requests that are unwarrantedly repetitive, require excessive technical means (for example, requiring the development of new systems or fundamental changes to current practices), pose a risk to the legal rights of others, or are highly impractical.
According to the requirements of applicable laws and regulations, we will not be able to respond to your request under the following circumstances:
- Where it directly relates to the performance of our obligations under laws and regulations;
- Where it directly relates to national security and national defense security;
- Where it directly relates to public security, public health or major public interest;
- Where it directly relates to criminal investigations, prosecutions, trials or execution of rulings, etc.;
- Where there is sufficient evidence showing that you are intentionally malicious or abuse your rights;
- Where it is required to protect your or others’ life, property or other material legitimate rights and interests while it is difficult to obtain your consent;
- Where responding to your request will cause serious damage to the legitimate rights and interests of yours or of other individuals or organizations;
- Where the request involves any trade secret.
VIII. How we protect the personal information of minors
We expect parents or guardians to guide the minors in their use of our services. We will protect the confidentiality and security of the minors’ information in accordance with applicable laws and regulations of the People’s Republic of China. For minor users under the age of 14, we will process their personal information with the consent of their parents or guardians in accordance with the requirements of laws and regulations.
If you are a minor, we suggest that you read this Policy together with your parents or guardians. For the personal information we collect with the consent of your parents or guardians, we will only use such information to the extent permitted by law, with the express consent of your parents or guardians or necessary for protecting you.
If your parents or guardians do not agree you to provide personal information to us in accordance with this Policy, please do not provide us with personal information and stop using our services immediately.
IX. How we update this Policy
This Policy may be updated from time to time. Once it is updated, we will notify you in a manner appropriate to the significance of those changes. We will obtain your consent for any significant changes to this Policy as required by applicable data protection laws.
We will not reduce your rights under this Policy without your explicit consent. You can read this Policy as updated from time to time at the bottom of the website of NASAChina at www.nasachina.cn. If you do not agree with any or all of the terms of this Policy, please stop using our services or contact us.
X. How to contact us
If you have any question, comment or suggestion, especially those regarding personal information or this Policy, please contact us through the means set forth below and we will in principle respond within 15 working days of receiving your question, comment or suggestion:
-Website Name: NASAChina
-E-mail: nasachina@nasachina.cn
If you are not satisfied with our reply, and in particular consider that our processing of personal information has caused harm to your legitimate rights and interests, you may also file complaints or report to the department performing personal information protection duties, resort to a people’s court of competent jurisdiction, or seek solutions through other means as provided in applicable laws and regulations.
XI. Miscellaneous
(A) In the event that this Policy conflicts in any way with the terms and conditions of separate agreements or engagements that you have entered into with us when using our services or contacting us, such special engagement shall prevail insofar.
(B) If this Policy is available in Chinese and English, the Chinese version is for reference only. The English version of this Policy shall prevail in the case of any inconsistency between the two language versions.