Privacy Statement

Last revised: 27 December 2018

1.General information

ECOVIS Ruide is dedicated to protecting the confidentiality and your privacy. This privacy statement explains what information we gather about you, what we use that information for and whom we give that information to. It also sets out your rights in relation to your information and who you can contact for more information or queries.

2.Collection of your Personal Information

We may collect personal information when you interact with our Website or Mobile Apps (including social networking software), such as if you choose to register or create a user profile on our Website or a Mobile App, or otherwise provide it to us. Such information may consist of your name, current job title, company address, email address, telephone and fax numbers, correspondence with you, which newsletters you subscribe to, and other information you provide to us.

In some cases, there is also information about your computer hardware and software that is automatically collected by us. Such information may include: your IP address, browser type, domain names, access times and location. Such information is used by us to maintain quality of the service, and to provide general statistics regarding use of the out Website.

3.Use of your Personal Information

We collect and use your personal information to operate our Website and deliver the services you have requested. We also use your personally identifiable information to inform you of other services available from us. We may also contact you via surveys for your opinion of current services or potential new services that may be offered.

4.Cookies

Cookies may be placed on your computer or device whenever you visit us online for ECOVIS Ruide Services. Cookies are small text placed on our device that assist us in providing a more customised experience. If you are concerned about cookies, most browsers permit individuals to decline cookies. In most cases, you can refuse a cookie, however some functionality may be impaired. You can always delete cookies if you wish via your browser’s setting.

5.Transfers of personal information

Your personal data may be transferred to, processed by and stored with, the following classes of transferees/categories of recipients for the purposes as described in this Privacy Statement:
- As ECOVIS is a global network with Member Firms around the world, your personal information may be transferred to other ECOVIS Member Firms (and their respective subsidiaries and affiliates). Other ECOVIS Member Firms may process your personal information for the same purposes as set out herein. In addition, each ECOVIS Member Firm whom you share your information may determine jointly with other ECOVIS Member Firms the means of processing of your personal information.
- Your information may also be transferred to service providers that are not members of the ECOVIS network (third party service providers) to process on a ECOVIS Member Firm’s behalf. Third party service providers may include providers of IT services, identity management, website hosting and management, data analysis, data back-up and archiving, security and storage services (including cloud service providers), event management, and other services with respect to the operation of our business.
- We may also disclose your personal information to law enforcement, regulatory and other government agencies and authorities, professional bodies and other third parties, as required by and/or in accordance with applicable law or regulation. This includes disclosures outside the country or region where you are located.

6.Retention of personal information

We will not retain personal data longer than is necessary for the fulfilment of the purposes for which the data are to be used. We will retain personal information on our systems for as long as we need it, given the purposes for which it was collected, or as required to do so by law. Personal data may be held for longer periods where extended retention are agreed or are required by law or regulation or professional standards and in order to establish, exercise or defend our legal rights.

We keep contact information (such as mailing list information) until a user unsubscribes or requests that we delete that information. If you choose to unsubscribe from a mailing list, we may keep certain limited information about you so that we may honor your request.

7.Your rights

You may have certain rights under applicable laws in relation to the personal information we hold about you, including:
- obtain confirmation that we are processing your personal data and request a copy of the personal data we hold about you
- ask that we update the personal data we hold about you, or correct such personal data that you think is incorrect or incomplete
- ask that we delete personal data that we hold about you, or restrict the way in which we use such personal data
- object to our processing of your personal data.

To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us via: info@ecovis.cn.

8.Applicable only to Individuals based in the EEA

This section of the Privacy Statement applies if you are an individual based in the EEA regardless of nationality or your employer or authorised representative is providing your personal data to us from a country in the EEA, and the GDPR is applicable to ECOVIS Ruide in providing services.

1)Legal grounds for processing personal information

We process personal data for the purposes set out in this Privacy Statement, as described above. For the purposes of complying with the GDPR, we do not need to collect your consent in order to process your personal data (except in limited circumstances where we process your special categories of personal data, where we may sometimes require your consent, in which case we will obtain your consent). Instead, we rely on one or more of the following processing conditions:
- Contract performance: where your information is necessary to enter into or perform our contract with you.
- Legal and regulatory obligation: where we need to use your information to comply with our legal and regulatory obligations.
- Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights.
- Legal claims: where your information is necessary for us to defend, prosecute or make a claim against you, us or a third party.
- Employment legal obligations and rights: where our legal duties as employers necessitate the processing.
- Consent: where you have consented to our use of your information.

We justify our use of personal data in the Privacy Statement as follows:
- To provide you with our products/services: contract performance, legitimate interests (to enable us to provide our products/services).
- For communication with you: legitimate interests (to enable us to effectively communicate with you).
- For managing our business: to enable us to provide ongoing information about our products and services; to monitor satisfaction and views of our clients, customers and business partners etc. and help us grow our business; to ensure the smooth operation of our internal management and IT infrastructure processes ;
- legal and regulatory obligations and legal claims (to enable us to cooperate with law enforcement and regulatory authorities).

2)International Transfers of Personal Data

Our business may require us to transfer your personal data to countries outside the EEA, including countries that may not provide the same level of data protection as your home country. Where we collect personal data from within the EEA, transfer outside the EEA will be only:
- to a recipient located in a country which provides an adequate level of protection for your personal information; and/or
- under an agreement which covers the EU requirements.

3)Your rights

Subject to limitations in applicable law, you are entitled to object to or request the restriction of processing of your personal data, and to request access to, rectification, erasure and portability of your own personal data.
Where the use of your personal data is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You may also have the right to object to any processing based on the legitimate interests ground if our reasons for undertaking that processing outweigh any prejudice to your data protection rights.
While a complaint is being investigated, you have the right to restrict how we use your information.
Your exercise of these rights is subject to certain exemptions to safeguard public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege). If you exercise any of these rights, we will check your entitlement and respond in most cases within a month.

9.Changes to this statement

We may modify or amend this privacy statement from time to time.
To let you know when we make changes to this privacy statement, we will amend the revision date at the top of this page. The new modified or amended privacy statement will apply from that revision date. Therefore, we encourage you to periodically review this statement to be informed about how we are protecting your information.