In order to comply with applicable data protection laws and regulations and for the company's human resources management related purposes, your personal information is collected, used, disclosed, stored, processed and protected. We hereby use the "Zhonghuan Privacy Policy" (hereinafter referred to as the "Privacy Policy" or "this Privacy Policy") to explain to you how the company collects, uses, discloses, stores, processes and protects your personal information. This policy will help you understand the following: 1. How we collect and use your personal information 2. How we use Cookies and similar technologies 3. How we share, transfer, and publicly disclose your personal information 4. How we store your personal information 5. How we protect your personal information 6. What rights you can exercise to dispose of your personal information we collect 7. How we handle children's personal information 8. Updates to this Privacy Policy 9. How to contact us 1. How we collect and use your personal information Personal information is a variety of information related to an identified or identifiable natural person recorded electronically or otherwise, excluding information after anonymization. The personal information involved in this privacy policy includes: personal identity information (including identity card, passport, driver's license, social security card, residence permit, etc.), personal property information (including bank account, asset proof information, transaction and consumption records, etc.), network identity information (including system account, IP address, email address and passwords, passwords, password protection answers, etc. related to the above), personal biometric information (fingerprint, facial recognition features, etc.), personal commonly used device information (including hardware model, device MAC address, operating system type, software list unique device identification code (such as IMEI/android ID/IDFA/OPENUDID/GUID, SIM card IMSI information, etc., which describes the basic situation of personal commonly used devices)), personal location information (including itinerary information, precise positioning information, accommodation information, latitude and longitude, etc.). Sensitive personal information is personal information that, once leaked or illegally used, is likely to cause infringement of the personal dignity of a natural person or endanger personal and property safety, including biometrics, religious beliefs, specific identities, medical health, financial accounts, whereabouts, etc., as well as personal information of minors under the age of fourteen. We will only collect and use your personal information for the following purposes of this policy. (I) The purposes for which we collect and use personal information from you: 1. Design and provide our services and activities for you 2. Operate our website and provide you with access to and use of our services 3. Customize, measure and improve our services according to your service preferences 4. Provide the services and products you request as described when we collect information 5. Contact you to conduct research on your opinions on current services and products or potential new services and products we may provide 6. Send you communications about our news, activities, new products and events 7. For internal management and background support, to ensure our network security and prevent fraud, share your contact information with branches of our group companies around the world 8. Maintain the integrity and security of our data technology systems that store and process your personal data 9. Share your contact information with our logistics partners, distributors and integrators so that they can assist us in delivering services and products to you 10. Enforce or maintain our policies or contracts with you 11. Discover and investigate data breaches, illegal activities and fraud In addition, we may also collect your personal health and physiological information based on regulatory requirements such as infectious disease prevention and control in workplaces, such as dynamic and real-time health status, temperature monitoring data, and movement trajectory information (such as personal location and itinerary information) during the epidemic prevention and control period. (II) How we collect personal information from you: We will collect your personal information in the following ways: 1. Situations where you authorize us to collect and use your personal information 2. Information collected from our service website or platform: When you use the system operated by Zhonghuan for business, we will automatically collect your Internet Protocol address (IP address), browser type, operating system information, the address of the referral website (if any), the path you visit the website/client, and the date and time of your visit. Our website may use cookies, which are small text files stored on your computer that help us maintain your session or provide other interactive features. You can turn off cookies through your browser. However, turning off cookies may limit certain features of the website, such as changing the layout of personalized content. The website may also use web beacons, which enable us to know whether you have visited a page. This information is generally collected through cookies, web beacons or similar tracking technologies that we use. For details, please see the "How We Use Cookies and Similar Technologies" section below. In addition, when you use the company's equipment, systems and applications, we will collect your information on such company equipment. 3. Information we obtain from any affiliated companies in Zhonghuan: We may collect and use your personal information from any affiliated companies in Zhonghuan, such as subsidiaries, branches, and any company or branch within Zhonghuan where you actually work. In addition, we may collect your personal information through technical equipment (such as monitoring) we use in the company's office areas. For example, for the purpose of ensuring safe operations, we set up cameras and monitoring in the company to help maintain the safety of the office area environment and provide security for customers and employees. (III) Rules for our use of your personal information: 1. Obtaining authorization and consent: 1.1 We will use your authorized personal information in accordance with the purposes and uses specified in this Privacy Policy to achieve the functions of our services. 1.2 When we want to use your personal information for other purposes not specified in this Privacy Policy, we will obtain your consent in advance when required by applicable laws and regulations. 1.3 When we want to use your personal information collected for a specific purpose for other purposes, we will obtain your consent in advance when required by applicable laws and regulations. 2. Exceptions to authorization and consent: In the following circumstances, in accordance with laws, regulations and relevant national standards, we do not need to obtain your authorization and consent to collect and use your personal information: 2.1 Related to our performance of obligations prescribed by laws and regulations 2.2 Directly related to national security and national defense security 2.3 Directly related to public security, public health, and major public interests 2.4 Directly related to criminal investigation, prosecution, trial and execution of judgments, etc. 2.5 For the purpose of safeguarding the major legitimate rights and interests of the subject of personal information or other individuals, such as life and property, but it is difficult to obtain the consent of the person concerned 2.6 The personal information collected is disclosed to the public by you on your own initiative 2.7 Your personal information collected from legally disclosed information, such as legal news reports, government information disclosure and other channels 2.8 Necessary for signing or performing contracts according to your requirements 2.9 Necessary for maintaining the safe and stable operation of software and related services, such as discovering and handling software and related service failures 2.10 Necessary for legal news reporting 2.11 Necessary for academic research institutions to conduct statistical or academic research based on public interests, and when providing the results of academic research or descriptions to the outside world, the personal information contained in the results shall be de-identified 2.12 Other circumstances stipulated by laws and regulations II. How we use Cookies and similar technologies Our website uses analysis tools such as cookies to analyze how you use our website and monitor and analyze the use of our services. The information generated by cookies about your use of this website will be transmitted to and stored by each cookie provider ("Cookie Provider"). Cookie Providers will use this information on our behalf to evaluate your use of the website, compile website activity reports, and provide us with other services related to website activity and Internet usage. III. How we share, transfer, and publicly disclose your personal information (I) Sharing We will not share your personal information with any third-party companies, organizations, or individuals without your authorization or consent, except in the following circumstances: 1. Sharing by you or your own initiative or with your prior authorization and consent: We will share your information in response to your legitimate and reasonable sharing requests or with your prior authorization and consent. You may also take the initiative to share your personal information or other information. However, any information leakage or use caused by your sharing behavior has nothing to do with us, and you will be solely responsible for the corresponding legal liability. 2. Necessary sharing with some business partners: We may need to share some of your information with some business partners for the necessary/reasonable purposes of smoothly conducting our business, meeting your requirements, fulfilling our obligations in the relevant user agreements or this Privacy Policy, exercising our rights, or complying with legal provisions. However, we will add data privacy clauses to the contracts signed with third parties involved in the company's data processing. (II) Transfer We will not transfer your personal information to any company, organization or individual, except in the following circumstances: 1. We transfer your personal information to other parties after obtaining your explicit consent 2. In the event of a merger, acquisition (equity or assets), reorganization, stock sale, bankruptcy liquidation or similar transaction involving us or our affiliates, if personal information transfer is involved, we will inform you of the name or name and contact information of the recipient, and the recipient will continue to be bound by this Privacy Policy. If the recipient changes the original processing purpose and method, it shall obtain your authorization and consent again in accordance with the law (unless otherwise provided by laws and regulations) (III) Public Disclosure We will only publicly disclose your personal information in the following circumstances: 1. We publicly disclose your personal information after obtaining your separate consent 2. When your personal information must be provided as required by laws and regulations, we may publicly disclose your personal information in accordance with the scope and method of personal information that must be provided 3. When we receive a request to disclose your personal information based on the requirements of laws and regulations, we will request the relevant departments making the request to issue reasonable documents to ensure that such requests have a legal basis and that the relevant law enforcement departments have the legal right and reasonable purpose to obtain your personal information. We will not publicly disclose your personal biometric information and genetic information 4. In the following circumstances, we will also share, transfer or publicly disclose your personal information, but please be fully aware that these sharing, transfer or public disclosure do not require your authorization and consent: 4.1 Necessary to sign and perform a contract with you 4.2 Necessary to perform statutory duties or obligations 4.3 Necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in an emergency 4.4 The personal information involved is personal information that you have disclosed to the public on your own or collected from other information that has been legally disclosed and processed within a reasonable range 4.5 Other circumstances stipulated by laws and administrative regulations IV. How we store your personal information (I) Storage location: We store your personal information in the territory of the People's Republic of China in accordance with the provisions of laws and regulations. In the following circumstances, we will provide your personal information to possible overseas entities after fulfilling the obligations required by law: 1. Applicable laws have clear provisions; 2. Obtain your separate consent; 3. Necessary for the conclusion and performance of the contract to which you are a party. In response to the above circumstances, we will protect the security of your personal information in accordance with this policy. (II) Storage period: 1. We will only retain your personal information for the period required to achieve the purposes stated in this policy, unless there is a mandatory retention requirement by law. 2. After the storage period expires, we will delete or anonymize your personal information. V. How we protect your personal information (I) We have used security protection technical measures that meet industry standards to protect the personal information you provide to prevent your personal information from being accessed, disclosed, used, modified, damaged or lost without authorization. (II) We only allow employees and partners who need to know this information to access personal information, and have set up strict access control and monitoring mechanisms for this purpose. We also require all personnel who may have access to your personal information to fulfill the corresponding confidentiality obligations. If you fail to fulfill these obligations, you may be held legally liable or your partnership with us may be terminated. (III) Notification of personal information security incidents: After the unfortunate occurrence of a personal information security incident, we will promptly inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, your suggestions for self-prevention and risk reduction, and your remedial measures. We will also promptly inform you of the relevant circumstances of the incident by email, letter, phone, push notification, etc. When it is difficult to inform the subject of personal information one by one, we will take reasonable and effective measures to issue an announcement. At the same time, we will also proactively report the disposal of personal information security incidents in accordance with the requirements of the regulatory authorities. VI. What rights can you exercise to dispose of your personal information collected by us (I) In compliance with the requirements of laws and regulations, you can access, correct/modify, and delete your personal information, and you can also withdraw the consent authorization previously made to your personal information. (II) The Company reserves the right to reject your request in any of the following circumstances, subject to the permission of Chinese law: 1. The requested information is directly related to the Company's performance of legal obligations; 2. The requested information is directly related to national security or national defense security; 3. The requested information is directly related to public security, public health, or major public interests; 4. The requested information is Directly related to criminal investigation, prosecution, trial and execution of judgments, etc. 5. The company has reasonable evidence that you have subjective malice or abuse of rights 6. Responding to your request will cause damage to the legitimate rights and interests of you or other individuals, entities or organizations 7. For the purpose of safeguarding the major legitimate rights and interests of you or other natural persons such as life and property, but it is difficult to obtain your consent 8. The requested information involves commercial secrets VII. How we handle children's personal information (I) "Children" in this Privacy Policy refers to minors under the age of fourteen. We protect children's personal information in accordance with relevant laws and regulations. (II) For the collection of children's personal information with the consent of their parents or legal guardians, such as children's information filled in when employees join the company, children's personal name, gender, identity certificate, age and other information submitted by employees participating in employee welfare parent-child activities organized by Zhonghuan during their tenure, or personal information submitted for purchasing additional benefits, insurance, etc. for employees' children, we will only use or disclose this information publicly when permitted by law, with the explicit consent of parents or legal guardians, or when necessary to protect minors. (III) If we find that we have collected children’s personal information without the prior verifiable consent of their parents or legal guardians, we will try to delete the relevant data as soon as possible. If you believe that we may have collected information about your children under the age of fourteen or underage guardians without your consent, please contact us in accordance with Section 10 of this Privacy Policy and we will delete the information. VIII. Updates to this Privacy Policy (I) We will revise this Privacy Policy from time to time, and these revisions will constitute a part of this Privacy Policy and have the same effect as this Privacy Policy. Without your explicit consent, we will not reduce your rights under this Privacy Policy currently in effect. (II) After this Privacy Policy is updated, we will issue an updated version and remind you of the updated content in an appropriate manner before the updated terms come into effect, so that you can keep up to date with the latest version of this Privacy Policy. IX. How to Contact Us (I) If you have any comments, questions, suggestions, appeals or complaints about this Privacy Policy or your personal information, you can send an email to the email address of the Personal Information Protection Officer at [datapracy@ihastek.com] (II) If you find that your personal information has been leaked, especially your account and password, please contact us immediately through the above methods so that we can take appropriate measures in a timely manner. Generally, we will respond within fifteen working days after receiving the relevant contact information and verifying your identity.