PRIVACY STATEMENT
Version update date: [June 15, 2024 ]
Version effective date: [June 22, 2024 ]
The entity responsible for the processing of personal data
referred to below is Chery Commercial Vehicle (Anhui) Co.,
Ltd. (hereinafter referred to as “CCV”, “we” or “us”), a private
company with limited liability established under the law of China,
having its statutory seat in Building 8, Science and Technology
Industrial Park, No. 717, Zhongshan South Road, Yijiang District,
Wuhu City. To ensure compliance with international data protection
legislation, CCV is the data controller of this personal data.
We give top priority to the protection of your personal data, and
we process your data in accordance with applicable data protection
laws. This statement provides comprehensive information about the
processing of personal data when you use our website.
This Privacy Statement does not apply to:
1.The processing of personal data when you use our vehicle;
2.Your use of third-party services in our website. The data
processing of these services is subject to their individual
privacy policies, which we strongly advise you to read carefully;
3.Your use of mobile apps provided by CCV;
4.Our employee personal data or candidate recruiting practices.
In this Privacy Statement, we will explain to you:
1.What personal data we collect and how do we use it?
2.What third-party services do we use?
3.How do we transfer your data outside your region?
4.What rights do you have in relation to your personal data?
5.How long do we retain your data?
6.How do we protect your data?
7.Privacy of children
8.How can you contact us and make a request?
9.How will we update this Privacy Statement?
1.What personal data we collect and how do we use it?
We use the collected personal data when you visit our web
applications to manage and meet with your service and information
requests, to make our products and services as effective as
possible, and to protect our IT systems from attacks and other
illegal activities.
To communicate with you:
Data Processing Purpos
Type of Personal Data
Legal Basis for Processing
To fulfill requests or service appointments you make to us,
including test drives, service and event appointments
Your contact information, including your name, your phone
number, and your email address. (note: we may contact you to
confirm your booking or request)
Performance of a contract with you or necessary in order to take
steps at your request prior to entering into a contract
To respond to any feedback, requests, questions, or complaints
you may have regarding our products and services (in person,
online, telephone, email, etc.)
Your contact information, including your name, your phone
number, and your email address.
Communication and
interactions information, including your request details
Performance of a contract with you or necessary in order to take
steps at your request prior to entering into a contract
Necessary
for our legitimate interests: to administer customers inquiries
and requests
To participate in surveys or our offline event about your
experience with our products and services
Account information
Your contact information, including your name
Survey or feedback details
Necessary for our legitimate interests: to understand, analyze
and improve customer experience
Sign up for marketing communications
Your basic information, including contact information
Order
information
Where you have provided your consent
To ensure information security, and to understand and improve our
products and services.
Data Processing Purpos
Type of Personal Data
Legal Basis for Processing
To detect and defend against unauthorized access to data, and to
enhance information security
Device information
Network activity information
Necessary for our legitimate interests: to protect the
confidentiality, integrity, and availability of IT systems
To upload crash logs for troubleshooting
Account information
Relevant crash logs
Where you have provided your consent
To understand and analyze website UI behavior and usage, so as
to improve our services
Analytics data (aggregated data on UI behavior, usage and
analytics of website.
Necessary for our legitimate interests: to understand, analyze
and improve customer experience
Where you have provided your consent (website cookies)
2.What third-party services do we use?
Google Analytics
·For analytics and to better understand
the usage patterns on our websites, we use Google Analytics, a web
analytics service provided by Google, Inc.
3.How do we transfer your data outside your country or region?
As an international company, the personal data we collect from our
customers around the world is primarily stored in our data center
located in Wuhu, China. However, to facilitate our global
operations, we may share your personal data with our group
companies, subcontractors, and business partners in various
countries.
When we transfer your personal data for purposes such as IT support,
hosting services, maintenance, and customer service, it may be
processed by entities outside of your country or region. These
entities may be situated in places with different data protection
standards than those in your location. Despite this, we are
committed to ensuring the protection of your personal data no matter
where it is processed. We adhere to robust safeguards and apply the
same level of data protection as described in this Statement.
We transfer personal data in compliance with the legal frameworks
and requirements of the respective jurisdictions involved. We
require all recipients of your personal data to uphold the same
level of privacy and data protection that we commit to, in line with
applicable data protection laws. These safeguards include, but are
not limited to:
·International agreements and principles
that provide a legal framework for the transfer of personal data
between countries, ensuring an adequate level of protection.
·Binding corporate rules that allow
multinational companies to transfer personal data internationally
within their corporate group.
·Data transfer agreements that include
privacy clauses recognized by, and compliant with, international
standards.
4.What rights do you have in relation to your personal data?
4.1 Right to withdraw consent
Where you have given consent for the processing of your personal
data, you may withdraw your consent at any moment with effect for
the future.
4.2 Right to access your personal data
You have the right to request information about the personal data we
hold regarding you. Upon request, we will provide you with a copy of
your personal data.
4.3 Right to rectification
You may request from us the rectification of incorrect or incomplete
personal data concerning you. We make reasonable efforts to keep
personal data in our possession or control, which are used on an
ongoing basis, accurate, complete, current and relevant, based on
the most recent information available to us.
4.4 Right to restriction
You may request from us the restriction of processing of your
personal data, if:
·You contest the accuracy of your
personal data, for the period we need to verify the accuracy;
·The processing is unlawful and you
request the restriction of processing rather than erasure of your
personal data;
·We no longer need your personal data
for the processing purpose, but you require them for the
establishment, exercise, or defense of legal claims; or
·You object to the processing while we
verify whether our legitimate grounds override yours.
4.5 Right to portability:
You have the right to receive your personal data provided to us and,
where technically feasible, request its transfer to another
organization. This right applies if we process your personal data
through automated means, based on your consent or for the
performance of a contract you are a party to. Your personal data
must have been provided by you, and this right should not adversely
affect the rights and freedoms of others. You can receive your
personal data in a structured, commonly used, and machine-readable
format. The transmission of your personal data to another
organization is subject to technical feasibility.
4.6 Right to erasure
You have the right to request that we delete the personal data we
process about you. We must comply with this request unless the
processing of your personal data is necessary for:
·Compliance with a legal obligation
requiring processing by laws to which we are subject;
·Archiving purposes in the public
interest, scientific or historical research purposes, or
statistical purposes; or
·The establishment, exercise, or defense
of legal claims.
4.7 Right to object
You have the right to object, at any time, to the processing of your
personal data based on our legitimate interests or the legitimate
interests of a third party, provided that the processing is not
based on your consent. If you exercise this right, we will no longer
process your personal data unless we can demonstrate compelling
legitimate grounds that override your interests, rights, and
freedoms, or if the processing is necessary for legal claims. If you
object to the processing, please let us know if you also wish for
your personal data to be erased.
4.8 Right to be informed
You have the right to be informed about the collection and use of
your personal data. We have prepared this Statement for this
purpose, and you will be informed of any changes to this Statement.
4.9 Right to lodge a complaint
You have the right to lodge a complaint with your local data
protection supervisory authority or with any other data protection
authority in your region. However, we would appreciate it if you
first contact us to try to solve your issue – you can find our
contact details in Section 9.
5.How long do we retain your data?
We have set a retention period of 10 years for the data related to
our provided services in accordance with legal obligations. If you
are a customer, we will keep your data for the duration of any
contractual relationship you have with us, and, where permitted,
beyond the end of that relationship for as long as necessary to
fulfil the purposes set out in this Privacy Statement.
We retain the data we collect from or about you for the period
necessary to fulfil the purposes outlined in this Privacy Statement,
unless a longer retention period is required or permitted by law.
Once the data is no longer necessary for these purposes, we either
delete it or retain it in an anonymized form. In determining the
appropriate retention period, we take into account various criteria,
including the type of services requested by or provided to you, the
nature of our relationship with you, the potential impact on the
services we provide to you if we delete certain data about you, and
the retention periods mandated by law.
6.How do we protect your data?
We strive to maintain high security standards and have implemented
robust technical and organizational measures to protect your data,
in accordance with the current, general state of technology. We
ensure that your personal data is adequately secured against loss,
falsification or unauthorized access. However, please note that the
transmission of information via the internet is not completely
secure. While we do our best to protect your personal data, we
cannot guarantee 100% security of your data transmitted to us.
Once we have received your personal data, we use strict procedures
and security features to prevent unauthorized access. In the
unfortunate event of a personal data incident, we will report it and
take remedial measures in accordance with the requirements of the
law and regulatory authorities.
7. Privacy of children
We do not knowingly collect or use any personal data from children
(we define ‘children’ as minors younger than 16) without prior,
verifiable consent which is given or authorized by the holder of
parental responsibility over the child. We do not knowingly allow
children to order our vehicles, communicate with us, or use any of
our online services.
If you become aware that a child has provided us with personal data,
please contact us: karry@cheryholding.com We will take all
reasonable measures to delete the information as soon as possible
and to not use such information for any purpose, except where
necessary to protect the safety of the child or others as required
by law.
8.How can you contact us and make a request?
If you have any questions about the processing of your personal
data, we recommend reading through this Privacy Statement first.
To make a query, raise a concern, or exercise your data subject
rights, please feel free to contact us via:
E-mail Address:
karry@cheryholding.com
We take your privacy seriously and aim to respond to you within
one month or within the timeline specified by the relevant local
privacy protection law, after confirming your identity. If you
believe that we have not adequately addressed your complaints or
concerns, you have the right to lodge a complaint with a competent
data protection authority.
9. How will we update this Privacy Statement?
We may update this Privacy Statement, for example, to reflect
changes in our business operations and measures for protecting
personal information. If we make changes to this Privacy Statement,
we will notify you. Where changes to this Privacy Statement
significantly impact the nature of our data processing or have a
substantial effect on you, we will provide sufficient advance
notice, allowing you the opportunity to exercise any applicable
rights.