1. Personal data

Personal data refers to information that, when used alone or with other relevant data, can identify an individual. When you use our website, products or services, and when you interact with us, such data will be submitted to us by you, or we will obtain such data by recording how you interact with our website, products or services. For example, we may obtain such data through technologies such as cookies. The data we collect depends on the website you visit or the products and services you use, and may include personal data such as name, address, email, phone number, etc. Our purpose of collecting personal data is to contact you in order to provide corresponding services or send important notifications.

2. Privacy settings

Hunan Huamin Holdings Co., Ltd. and its subsidiaries worldwide (hereinafter referred to as “Huamin Holdings”, “We” and “Our”) are fully aware of the importance of privacy to you and will respect your privacy. Before submitting personal information to Huamin Holdings, please read and understand this Privacy Policy (hereinafter referred to as “this Policy”). This Policy applies to Huamin Holdings’s websites, products, and services that display this Privacy Policy on the same page or are linked to this Privacy Policy. To this end, Huamin Holdings attaches great importance to the protection of personal data of customers and users, and takes a series of measures to ensure that relevant businesses comply with applicable personal data protection requirements (such as GDPR).

2.1 To ensure the effective implementation of personal data protection requirements, Huamin Holdings appoints a Data Protection Officer (DPO).

2.2 Huamin Holdings adopts industry-recognized personal data protection methods and practices. In business scenarios applicable to GDPR, Huamin Holdings uses the Data Protection Impact Assessment (DPIA) method to assess and reduce personal data security risks in products and services.

2.2.1 Huamin Holdings requires a thorough assessment of personal data related to products and services, and projects involving personal data must undergo DPIA;

2.2.2 For projects involving personal data, data lists and data flow diagrams shall be established;

2.2.3 For projects involving personal data, potential risks in the data processing process (including collection, use, storage, sharing, deletion, etc.) must be identified and corresponding measures (including management, physical, and technical measures) must be adopted based on the level of risk.

2.2.4 After the execution of DPIA, the corresponding report must be output and approved by the DPO.

2.3. Huamin Holdings implements intrusion detection, access control, encryption, data leakage prevention, anti-spam, terminal security protection, vulnerability scanning, and other technical means and tests the effectiveness of personal data protection measures through penetration testing.

2.4. Huamin Holdings establishes an emergency response mechanism for personal data leakage. In the event of personal data leakage, Huamin Holdings will immediately initiate emergency response procedures to minimize potential losses caused by personal data leakage, and ensure that affected individuals receive appropriate notifications.

2.5. Huamin Holdings establishes a continuous employee privacy policy training mechanism to ensure that all employees participating in GDPR can accurately understand the legal principles of data protection according to their specific job responsibilities, and strictly implement the company’s applicable systems and processes.

2.6. To ensure compliance, Huamin Holdings implements necessary technical audits and process audits for personal data protection.

Personal data protection is not only a legal requirement, but also a social responsibility of enterprises. Huamin Holdings will continue to optimize its products and services to ensure security and privacy, and reduce the risk of personal data protection for customers and users.

3. Policy updates

Huamin Holdings reserves the right to update or modify this Policy at any time. If there are any changes to this Policy, we will publish the latest version here. If we make significant changes to this Privacy Policy, we may also send you change notifications through different channels, such as posting notifications on our website or notifying you separately.