Privacy Policy
Shenzhen Grid Electric Co., Ltd. (hereinafter referred to as "Grid" or "we") and its affiliates are the operators of the Grid official website (hereinafter also referred to as the "Website").
We attach great importance to the protection of users' (hereinafter also referred to as "you") personal information. In view of this, we have formulated this Privacy Policy (hereinafter referred to as "this Policy") in accordance with relevant laws and regulations. This Policy is intended to explain how we collect, use, and protect your personal information during the operation of this Website.
Please read and understand this Policy carefully before using this Website. If you do not agree with part or all of this Policy, or if you have any questions about the content of this Policy, we recommend that you suspend further operations and contact us (contact details are provided at the end of this document). Your actual use of this Website will be deemed as your having read and agreed to the terms of this Policy.
This Policy uses bold text/underlining and other prominent methods to highlight terms that have or may have a significant relationship with your rights and interests, personal sensitive information that we may collect, and terms that have or may have the effect of exempting or limiting our liability, so as to guide you to focus on and understand the core content of this Policy. Please read and pay attention to them carefully.
Please note that the Grid official website is one of the display windows for Grid's corporate information and product services, and is also an important channel for providing business consultation and communication for visitors from all parties. Given the content and functional attributes of this Website, we do not provide this Website and services to minors. If you are a minor, especially a child under the age of fourteen, please do not register as our user, and do not use our products and services without the consent and guidance of your guardian.
This Policy will help you understand the following:
I. Definitions
II. How We Collect and Use Personal Information
III. How We Use Cookies and Similar Technologies
IV. How We Share, Transfer, and Publicly Disclose Your Personal Information
V. How We Protect Your Personal Information
VI. How You Can Exercise Rights Related to Personal Information
VII. Third-Party Service Providers and Their Services
VIII. Storage of Personal Information
IX. Minor Protection Notice
X. How This Policy Is Updated
XI. How to Contact Us
"Affiliate" means a company related to Grid by common ownership or control. Control means the ability to directly or indirectly influence the management/operation of the controlled object through ownership, voting shares, contracts, actual operational connections, or other legally recognized means.
"Third party" means companies, natural persons, or other organizations other than us, you the user, and our affiliates.
"Personal information" means various types of information recorded electronically or otherwise that can, alone or in combination with other information, identify a specific natural person or reflect the activities of a specific natural person, but does not include anonymized information. The personal information referred to in this Policy is the scope of types listed one by one in the clause "How We Collect and Use Your Personal Information."
"Personal information processor" means an organization or individual that independently determines the processing purpose and processing method in personal information processing activities.
"Personal sensitive information" means personal information that, once leaked or illegally used, is likely to cause harm to the personal dignity of a natural person or endanger the safety of person or property, including information such as biometrics, religious beliefs, specific identity, medical health, financial accounts, and whereabouts, as well as personal information of minors under the age of fourteen.
"De-identification" means the process of technically processing personal information so that the personal information subject cannot be identified or associated without the use of additional information. For example, technical means such as pseudonyms, encryption, and hash functions are used to replace identifiers of personal information.
"Anonymization" means processing personal information so that a specific individual cannot be identified and restoration is impossible.
Please be aware that when you browse various types of information on this Website (such as viewing product and solution materials), we will not collect your personal information. However, in order to realize the basic business functions of this Website (such as message consultation), you must authorize us to collect and use the necessary personal information. If you refuse to allow us to collect and use the necessary personal information, it will affect the completeness of the basic service functions we provide to you. In accordance with the principles of legality, legitimacy, and necessity, we will only collect information necessary to realize product/service functions for clear and reasonable processing purposes. If we intend to use your personal information for other purposes not clearly stated in this Policy, we will obtain your consent again.
When collecting your personal information, we will collect it in the three ways listed in this Policy. These ways include information you actively provide to us when using this Website, information generated during your use of this Website that we collect through automated means, and your personal information that we obtain through indirect means such as lawful sharing, transfer, and collection of publicly available information. For the sake of conciseness and clarity, we will not repeat each of these collection methods one by one in the relevant services and functions in this Policy.
When you use our products and/or services, the personal information we need to collect and use includes the following two types:
To realize the basic functions of providing our products and/or services to you, you must authorize us to collect and use the necessary information. The business functions we provide depend on this necessary information to operate. If you refuse to provide the corresponding personal information, you may not be able to enjoy the basic business functions of the Grid official website;
To realize the extended functions of providing our products and/or services to you, you may choose whether to authorize us to collect and use your information. If you refuse to provide it, you will not be able to normally use the relevant extended business functions or achieve the expected effects of using the relevant services, but it will not affect your use of the basic business functions.
Your consent to this Privacy Policy only represents your consent to the personal information necessary for the use of basic functions, and does not mean that you have agreed that we may collect non-necessary personal information. Non-necessary personal information will be separately subject to your consent based on the authorization situation during your use.
We will collect and use the following personal information related to you based on the following purposes, methods, and scope. If we change the processing purpose, processing method, or types of personal information processed, we will obtain your consent again:
(1) Basic Business Functions
The basic business functions we provide to you are as follows:
Message consultation: You may use the message consultation function to consult us about various types of questions regarding products, solutions, etc. For this purpose, we need to collect and use information related to providing you with message consultation, including: name (or form of address by surname), contact information (telephone or email), your province and city, your demand type, and the specific content of your demand description. The above information is all necessary for us to provide you with message consultation. If you refuse to provide the above information to us, we may not be able to provide you with message consultation services. In order to facilitate us in matching you with the corresponding service personnel, you may also choose to provide us with your company name so that we can match you with the corresponding service personnel. This information is optional, and failure to provide it will not affect your use of the message consultation function. For more information on the collection and use of information for this function, please refer to the "Privacy Protection Statement" on the Message Consultation page of this Website.
(2) Extended Business Functions
At present, the Grid official website does not provide extended business functions. If we subsequently add such functions, we will inform you of the relevant personal information processing rules through page prompts (such as pop-ups, explanatory text, etc.) and obtain your consent.
(3) Personal Information Collected and Used with Exemption from Consent in Accordance with Law
You understand and agree that, in accordance with relevant laws and regulations, we do not need to obtain your authorization or consent to collect and use personal information in the following circumstances:
1. Necessary for concluding or performing a contract to which you are a party, or necessary for implementing human resource management in accordance with legally formulated labor rules and regulations and legally concluded collective contracts;
2. Necessary for performing statutory duties or legal obligations;
3. Necessary for responding to public health emergencies, or in emergency situations to protect the life, health, and property safety of natural persons;
4. Processing personal information within a reasonable scope for public interest activities such as news reporting and public opinion supervision;
5. Processing personal information that you have made public yourself or that has otherwise been lawfully made public within a reasonable scope in accordance with relevant legal provisions, except where it has a major impact on your personal rights and interests or you have explicitly refused;
6. Other circumstances provided by laws and administrative regulations.
Before or during the collection of personal information, we may also provide other information about our personal information incidents through product descriptions, supplementary privacy statements, or notices. Some of our websites or functions may have separate privacy statements specifically explaining how these websites or functions process personal information. If the notice provided at the time of information collection or the privacy statement of a specific website or function conflicts with this Policy, the specific notice or supplementary privacy statement shall prevail.
(1) What Are Cookies
Cookies are text files that are usually generated when you visit certain websites and stored in your browser or device. Cookies have multiple functions, such as recording information about some visitors, improving your website browsing experience, remembering visitor preferences, and analyzing certain visitor behaviors in order to optimize website content and provide more targeted services.
(2) Cookies We Use
We use anonymized Cookies from Baidu Statistics to statistically analyze user behavior (such as visits, browser types, popular pages, and source channels), in order to optimize website content presentation, improve product functions, troubleshoot faults, and enhance the overall user experience. All data is anonymized and does not involve personal identity identification.
(3) Management or Deletion of Cookies
You may manage or delete Cookies according to your preferences. Most browsers provide users with the function of clearing browser cache data. You can set your browser to block Cookies or clear currently generated Cookie records. However, please note that blocking Cookies may cause some websites to be partially or fully inaccessible and affect your browsing experience.
For more information about Cookies on this Website, please refer to our Cookies Policy.
(1) Sharing
We will not share your personal information with any third-party company, organization, or individual, except in the following circumstances:
1. Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties.
2. We may share your personal information externally in accordance with laws and regulations or mandatory requirements of competent government departments.
3. Sharing with our affiliates: Your personal information may be shared with Grid's affiliates. We will only share the necessary personal information and will be bound by the purposes stated in this Policy. If an affiliate intends to change the processing purpose or processing method of personal information, it will seek your authorization and consent again.
4. Sharing with authorized partners: Within the scope permitted by laws and regulations, and only for the purposes stated in this Policy, some of our services will be provided by authorized partners. We may share certain personal information about you with partners to provide better customer service and user experience. We will only share your personal information for lawful, legitimate, necessary, specific, and clear purposes, and will only share the personal information necessary to provide the service. Our partners have no right to use the shared personal information for any other purpose.
At present, our authorized partners include: technical service providers and other partners. We send information to technical service providers and other partners within China that support our business. Such support includes providing technical infrastructure services, analyzing how our services are used, measuring the effectiveness of services, providing customer service, facilitating payments, or conducting academic research and surveys. We will conduct strict security testing on the application programming interfaces (APIs) and software development kits (SDKs) through which authorized partners obtain relevant information, and will agree with authorized partners on strict data protection measures, requiring them to process personal information in accordance with our entrustment purposes, service descriptions, this Policy, and any other relevant confidentiality and security measures.
When we provide products/services to you, because some services or functions cannot be completed by us alone, we may share part of your personal information with third parties such as other partners to ensure the smooth completion of the services or functions.
For companies, organizations, and individuals with whom we share personal information, we will require them to comply with our requirements regarding personal information privacy protection, including but not limited to processing personal information in accordance with data protection agreements, letters of commitment, and any relevant data processing policies.
(2) Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:
1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;
2. Provision necessary under applicable laws and regulations, requirements of legal procedures, or mandatory administrative or judicial requirements;
3. In the event of merger, division, dissolution, or declaration of bankruptcy of the service provider of this Website, if personal information transfer is involved, we will inform you of the name or title and contact information of the recipient, and require the new recipient holding your personal information to continue to be bound by this Policy. If the recipient changes the original processing purpose or processing method, we will require the recipient to seek your authorization and consent again.
(3) Public Disclosure
We will publicly disclose your personal information only in the following circumstances:
1. After obtaining your explicit consent;
2. Within the disclosure purpose and scope otherwise agreed in this Policy;
3. If we determine that you have violated laws and regulations or seriously violated our relevant agreements and rules, or to protect the personal and property safety of third-party users or the public from infringement, we may disclose personal information about you in accordance with laws and regulations.
(4) Exceptions to Prior Authorization and Consent for Sharing, Transferring, and Publicly Disclosing Personal Information
In the following circumstances, sharing, transferring, and publicly disclosing your personal information does not require your prior authorization and consent:
1. Related to national security and national defense security;
2. Related to our performance of obligations stipulated by laws and regulations;
3. Directly related to public security, public health, and major public interests;
4. Directly related to criminal investigation, prosecution, trial, and execution of judgments;
5. For the purpose of safeguarding the major lawful rights and interests of you or other individuals such as life and property, but where it is difficult to obtain the consent of the person concerned;
6. Personal information that you have disclosed to the public yourself;
7. Collecting personal information from lawfully publicly disclosed information, such as lawful news reports and government information disclosure channels;
8. Necessary for concluding and performing a contract according to your request;
9. Necessary for maintaining the safe and stable operation of the products or services provided, such as discovering and handling faults in products or services;
10. Other circumstances provided by laws and administrative regulations.
According to legal provisions, sharing and transferring de-identified personal information, where the recipient of the personal information is ensured to be unable to restore and re-identify or associate the personal information subject, does not constitute external sharing, transfer, or public disclosure of personal information. The storage and processing of such personal information will not require separate notice to you or your consent. We may use the collected personal information for big data analysis after anonymization, such as forming heat maps and insight reports that do not contain any personal information. We may publicly disclose and share with our partners statistically processed information that does not contain identity-identifying content, for the purpose of understanding how users use our services or letting the public understand the overall usage trends of our services.
(1) Technical Protection
To safeguard the security of your information, we strive to adopt various reasonable physical, technical, and managerial security measures that conform to industry standards to protect your information, so that your information will not be leaked, damaged, or lost, including but not limited to SSL, encrypted information storage, de-identification, and access control in data centers. We will use encryption technology to improve the security of personal information; we will use trusted protection mechanisms to prevent personal information from malicious attacks; we will deploy access control mechanisms to make every effort to ensure that only authorized personnel can access personal information; and we will manage your personal information by category.
(2) Security System Assurance
We adopt security protection measures that conform to industry standards, including establishing reasonable institutional norms and security technologies to prevent your personal information from unauthorized access, use, and modification, and to avoid data damage or loss; we have an industry-advanced data security management system centered on data and around the data lifecycle, ensuring the security of the entire system in multiple dimensions such as organizational development, system design, personnel management, product technology, and personal information security impact assessment.
(3) Personnel Security Management
We also exercise strict management over employees or outsourced personnel who may come into contact with your information, including but not limited to adopting different permission controls according to different positions, signing confidentiality agreements with them, and monitoring their operations. We will provide corresponding security measures based on existing technology to protect your information and provide reasonable security assurances. We will make every effort to ensure that your information is not leaked, damaged, or lost. We will hold security and privacy protection training courses, formulate and organize the implementation of emergency plans for personal information security incidents, and regularly organize internal relevant personnel to conduct emergency response training and emergency drills so that they master their job responsibilities and emergency handling strategies and procedures.
(4) Information Security Protection Tips
1. Information disclosure tips and verification code leakage handling: We strongly recommend that you properly safeguard your personal information and other identity elements when using this Website and related services. If you discover that your personal information has been leaked, please contact us immediately so that we can take corresponding measures.
2. Handling of information security incidents. After an unfortunate personal information security incident occurs, we will inform you in accordance with the requirements of laws and regulations of: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will inform you of the relevant circumstances of the incident by email, letter, telephone, push notification, etc. When it is difficult to inform the personal information subjects one by one, we will issue an announcement in a reasonable and effective manner. At the same time, we will also report the handling of the personal information security incident in accordance with the requirements of regulatory authorities.
3. The internet environment is not absolutely secure, and we will make every effort to ensure or guarantee the security of the personal information you send to us. Due to technical limitations and limitations in risk prevention, even if we have strengthened security measures as much as possible, we cannot always guarantee that information is absolutely secure. You need to understand that the system and communication network you use to access our services may encounter problems due to circumstances beyond our control. If our physical, technical, or managerial protective facilities are damaged, causing personal information to be accessed without authorization, publicly disclosed, tampered with, or destroyed, resulting in damage to your lawful rights and interests, we will bear the corresponding legal liability.
We respect your rights to your personal information. The following lists the rights you enjoy in accordance with law and how we will protect these rights. You have the right to request us to explain the personal information processing rules. We will reply to your request to exercise personal information rights within 15 working days. Please note that for security reasons, we may require you to verify your identity before processing your request.
(1) Access and Query Your Personal Information
If you want to access and query your personal information, please contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy. For personal information generated during your use of our products or services, we will provide it to you as long as we do not need to make excessive investment.
(2) Correct Your Personal Information
Regarding your personal information, you may contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy to request that we correct your information. After confirmation, we will correct it.
(3) Delete Your Personal Information
You may contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy to request that we delete your information. After confirmation, we will delete it.
In the following circumstances, you have the right to request that we delete personal information:
1. If you decide to withdraw your consent to our processing of your personal information;
2. If the processing purpose has been realized, cannot be realized, or is no longer necessary for realizing the processing purpose;
3. If our processing of personal information violates laws and regulations;
4. If we collect and use your personal information without obtaining your consent;
5. If our processing of personal information violates the agreement with you;
6. If you no longer use our products or services;
7. If we no longer provide products or services to you, or the storage period has expired.
If we decide to respond to your deletion request, we will also notify the entities from which we obtained your personal information and require them to delete it promptly, unless laws and regulations provide otherwise or these entities have obtained your independent authorization.
After you delete information from our services, we may not immediately delete the corresponding information from backup systems, but we will delete such information when the backup systems are updated. If the storage period stipulated by laws and administrative regulations has not expired, or if deleting personal information is technically difficult, we will stop processing other than storage and taking necessary security protection measures.
(4) Change the Scope of Your Authorization and Consent
You have the right to restrict or refuse the processing of your personal information, and have the right to withdraw your consent to the processing of your personal information, except as otherwise provided by laws and regulations. If you want to change the scope of your authorization and consent, you may contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy. After you withdraw your authorization, we will no longer collect information related to these permissions.
Please understand that each business function requires some basic personal information to be completed. After you withdraw your consent or authorization, we cannot continue to provide you with the services corresponding to the withdrawn consent or authorization, and will no longer process your corresponding personal information. However, your decision to withdraw consent or authorization will not affect the personal information processing carried out previously based on your authorization.
(5) Account Cancellation by Personal Information Subject
At present, the Grid official website does not provide an account registration function, so there is no account cancellation process. If relevant functions are launched in the future, we will simultaneously provide a complete account cancellation channel.
(6) Obtaining a Copy of Personal Information by the Personal Information Subject
You have the right to obtain a copy of your personal information. You may also contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy to request that we provide it. On the premise that it is technically feasible, such as matching data interfaces, we may also, according to your request, directly transmit a copy of your personal information to a third party designated by you.
(7) Constraining Automated Decision-Making
At present, we will not make automated decisions related to you.
(8) Complaints and Reports
We have set up complaint and report channels, and your opinions will be handled promptly. You may contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy to make complaints and reports to us.
(9) Responding to Your Above Requests
To ensure security, you may need to provide a written request or otherwise prove your identity. We may first require you to verify your identity and then process your request.
You may also contact us through the contact information listed in the "XI. How to Contact Us" section of this Policy. For your reasonable requests, we generally do not charge fees in principle, but for requests that are repeated many times or exceed a reasonable limit, we will charge a certain cost fee as appropriate. For requests that are unreasonably repetitive, require excessive technical means (for example, requiring the development of a new system or fundamentally changing current practices), pose risks to the lawful rights and interests of others, or are very impractical (for example, involving information stored on backup tapes), we may refuse them.
In the following circumstances, we will be unable to respond to your request:
1. Related to the personal information processor's performance of obligations stipulated by laws and regulations;
2. Directly related to national security and national defense security;
3. Directly related to public security, public health, and major public interests;
4. Directly related to criminal investigation, prosecution, trial, and execution of judgments;
5. Where the personal information processor has sufficient evidence that the personal information subject has subjective malice or abuses rights;
6. For the purpose of safeguarding the major lawful rights and interests of the personal information subject or other individuals such as life and property, but where it is difficult to obtain the consent of the person concerned, provided that you will be informed promptly after the emergency situation is eliminated;
7. Where responding to the request of the personal information subject will cause serious damage to the lawful rights and interests of the personal information subject or other individuals or organizations;
8. Involving trade secrets.
Please note that this Policy applies only to the services we provide through this Website. During your use of this Website and its services, third-party websites, products, and services may be included, and they may be provided in the form of links to third-party websites or in other different forms such as APIs. When you use these products or services, they may also collect your information. Therefore, we strongly recommend that you carefully read the privacy policy of such third parties and decide whether to visit or accept the websites, products, and services provided by third parties. We will also fulfill our duty of prudent reminder and basic review, requiring third parties providing websites, products, and services to protect your personal information. If you discover risks in the web pages created or products and services provided by these third parties, we recommend that you contact them directly to obtain the details of their privacy policy protection and stop relevant operations to better protect your lawful rights and interests.
(1) Storage Location
We will, in accordance with the requirements of applicable Chinese laws and regulations, store the collected personal information on servers within China using corresponding security measures such as secure encrypted storage. Without your consent, we will not transmit your personal information overseas.
(2) Storage Period
Unless laws and regulations provide otherwise, we will store the personal information you provide during the following periods:
1. We will store the personal information you provide within the shortest period prescribed by law to meet our legitimate business needs (including but not limited to providing services to you or meeting corresponding legal, tax, and financial requirements). For network log information related to network operation status and network security incidents, we will store it for no less than 6 months.
2. When we no longer have the legitimate business need to use the personal information you provide, or when the retention period prescribed by Chinese laws and regulations expires, or when you request deletion of personal information, unless laws and regulations provide otherwise, we will delete your personal information or anonymize it, or when neither anonymization nor deletion is possible (for example, your personal information has been stored in backups), securely store such personal information and isolate it from other data processing.
(3) Termination of Operations
If we terminate services or operations, we will promptly stop activities of continuing to collect your personal information, and will also comply with relevant laws and regulations to notify you in advance, and delete or anonymize your personal information after the period necessary for the purposes described in this Policy and the storage period required by laws, regulations, and regulatory requirements expires, or after termination of services or operations, unless laws, regulations, or regulatory authorities provide otherwise.
We value the protection of minors' personal information. Due to the characteristics of this product and service, we do not provide services to minors. If we discover that we have collected personal information of a minor without prior verifiable consent from the parent or guardian, we will endeavor to delete the relevant information as soon as possible.
In accordance with revisions to laws and administrative regulations and changes in business development, our privacy policy will be updated periodically. Without your explicit consent, we will not reduce the rights you should enjoy under this Policy. We will publish any changes to this Policy on this page.
For major changes, we will also provide more prominent notice. For example, we will, through in-app pop-up reminders when you log in and when the version is updated, explain the specific changes to the privacy policy and obtain your authorization again. Major changes referred to in this Policy include but are not limited to:
(1) Major changes in our service model, such as the purpose of processing personal information, the types of personal information processed, and the methods of using personal information;
(2) Major changes in our ownership structure, organizational structure, etc., such as changes in owners caused by business adjustments, bankruptcy, mergers and acquisitions, etc.;
(3) Changes in the main recipients of personal information sharing, transfer, or public disclosure;
(4) Major changes in your rights in personal information processing and the ways to exercise them;
(5) Changes in the responsible department, contact methods, and complaint channels for handling personal information security;
(6) When the personal information security impact assessment report indicates high risks;
(7) Other changes that may have a major impact on personal information rights and interests.
We have established a personal information protection department and appointed corresponding personal information protection specialists. Regarding questions, opinions, or suggestions about your personal information, you may contact us in the following ways, and we will reply to you promptly in accordance with applicable laws and regulations:
Address: 9th Floor, Building 1, Yingkerui Industrial Park, Baolong 2nd Road, Baolong Street, Longgang District, Shenzhen
We will review the issues involved as soon as possible and reply promptly after verifying your user identity. Under normal circumstances, we will reply to your request and complete processing within 15 working days. If we are unable to respond to your request, we will send you a notice and explain the reason within the time limit prescribed by law. If you are dissatisfied with our reply, especially if our personal information processing activities have harmed your lawful rights and interests, you may also seek solutions through the following external channels: file a lawsuit with the competent court in Nanshan District, Shenzhen, which is the place where this Policy is signed.