Privacy Policy

　　CRRC Electric Vehicles Co., LTD. (registered address: No. 268 Longxing Road, Tianyuan District, Zhuzhou City, Hunan Province, hereinafter referred to as "We") understands the importance of personal information and privacy to the user (hereinafter referred to as "you"), and will do its best to protect your personal information and privacy security. We are committed to maintaining your trust in us, abiding by the principles of personal information, and protecting your personal information. At the same time, we promise that we will take appropriate security measures to protect your personal information according to the industry's mature security standards.

　　The following privacy policy describes how CRRC Electric Vehicles Co., Ltd. collects, uses and processes your information. When you use the official website of CRRC Electric Vehicles Co., LTD. (the "Website"), you should agree to the following privacy policy.

　　This Privacy policy will help you understand:

　　How we collect, use, store, share, disclose, protect your personal information, and how you can manage your personal information. Therefore, before using our products or services, please be sure to carefully read and fully understand the content of this policy. In particular, you should focus on reading our terms marked in bold, please ensure that you fully understand and agree before starting to use. Once you begin to use our services or provide us with your personal data information, you fully understand and agree to this policy. You are not required to provide us with personal information, but if you choose not to, we may not be able to provide you with relevant products or services.

　　If you have any questions, comments or suggestions about the contents of this policy, you can contact us through the various contact details we provide.

　　By reading this policy, you can learn the following:

　　a. How do we collect and use your Personal information

　　b. How do we use cookies and similar technologies

　　c. How do we share, transfer and publicly disclose your personal information

　　d. How do we store your personal information

　　e. How do we protect your personal information

　　f. How do you manage your personal information

　　g. How do we protect minors' personal information

　　h. Updates to this policy

　　i. How can I contact us

　　1、How do we collect and use your Personal information

　　Personal information refers to all kinds of information recorded electronically or by other means that can be used alone or in combination with other information to identify a specific natural person or reflect the activities of a specific natural person.

　　Sensitive personal information is personal information that, once leaked or illegally used, is likely to cause the personal dignity of natural persons to be infringed or the personal and property safety to be jeopardized. We have marked specific sensitive personal information in bold in this Privacy Policy. We may collect sensitive personal information from you as necessary to provide related services to you. In the actual collection of sensitive personal information, we will remind you again and obtain your authorization by means of enhanced notification or instant prompt (such as pop-up reminder), or ask you to click confirm separately to obtain your separate consent.

　　In addition, we collect your sensitive personal information may have a certain impact on you. Due to the complexity of Internet security, we cannot guarantee that our systems and information are foolproof. Although we will take all appropriate organizational, managerial and technical measures to protect the security of your personal information and avoid any impact on your personal rights and interests. However, once your sensitive personal information is leaked, it may still cause your personal dignity to be infringed, or your personal and property safety to be jeopardized.

　　(1) Scenarios for collecting and using personal information on the official website

　　In the process of your use of the various business functions of our website, we need to collect some information from you, and all the collected personal information about you will be used to provide you with services, optimize our services, protect the security of your account and comply with national laws, regulations and regulatory provisions. If we want to use your personal information for purposes not specified in this policy, we will obtain your prior consent to collect and use your personal information:

　　(2) Principles for handling personal information

　　We will, and will only, process your data on an appropriate basis of legality, subject to applicable legal requirements, including:

　　1. Respond to your service requests and process your personal information;

　　2, based on your consent and authorization, to process your personal information to the extent reasonably necessary to achieve the purpose of your consent and authorization;

　　3. Processing your personal information based on the implementation of legal obligations and compliance with legal requirements.

　　(3) Exemption of personal information collected and used with consent according to law

　　Please understand that in the following circumstances, according to laws and regulations and relevant national standards, we do not need to obtain your authorization to collect and use your personal information:

　　(1) necessary for the conclusion and performance of a contract to which you are a party;

　　(2) necessary for the performance of statutory duties or statutory obligations;

　　(3) necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in emergency situations;

　　(4) conduct news reporting, public opinion supervision and other acts in the public interest, and process personal information within a reasonable scope;

　　(5) Processing, within a reasonable range, personal information disclosed by the individual or other legally disclosed personal information;

　　(6) Other circumstances provided for by laws and administrative regulations.

　　2.How do we use cookies and similar technologies

　　To ensure the proper functioning of the website, we store small data files called cookies on your computer or mobile device. These files are created by your web browser software and stored on your hard drive or device to save information about the website you are currently viewing. Cookies typically contain an identifier, a site name, and some numbers and characters. With the help of cookies, websites can store data such as your preferences or the items in your shopping basket.

　　We enable cookies for the same purpose that most websites or Internet service providers enable cookies for, namely to enhance our information channels, improve the user experience and provide you with personalized services. Use cookies to help us optimize our website and your experience. These cookies will remain on your computer or device until you clear them. Examples include language, font size, and other browsing preferences of your computer or mobile device. This means that users do not need to reconfigure user preferences on each visit. If a website does not use cookies, it treats users as new visitors every time they open a page. For example, if you log on to a website and go to another page, the website will not recognize you and you will be logged off again. We do not use cookies for any purpose other than those described in this Policy.

　　You can manage or delete cookies according to your preferences, see AboutCookkies.org for more information. You can also clear all cookies saved on your computer, and most web browsers have a feature to block cookies. However, if you do this, you will need to personally change the user Settings each time you visit our website.

　　In addition to cookies, we also use other similar technologies such as website beacons and pixel tags on our website. For example, the email we send to you may contain a click URL that links to the content of CRRC Electric's official website. If you click on the link, we track the click to help us understand your product and service preferences and improve customer service.

　　A website beacon is usually a transparent image embedded in a website or email. With the help of the pixel tags in the email, we can tell if the email has been opened. If you do not want your activity to be tracked in this way, you can unsubscribe from our mailing list at any time.

　　Many browser networks have a Do Not Track feature that posts Do Not Track requests to websites. Currently, major Internet standards organizations have not established policies governing how websites should respond to such requests. If your browser has Do Not Track enabled, all of our sites will respect your choice.

　　3.How do we share, transfer and publicly disclose your personal information

　　(1) Sharing

　　In order to ensure the stable operation of the application or to achieve the corresponding functions, we will share your information with third parties. We will enter into data security agreements with third parties and take appropriate measures to require the sharing of your personal information by third parties to strictly protect your personal information.

　　1) Share with our affiliates

　　If your personal information needs to be transferred to our affiliates (Zhonglian World Automobile Sales Company) due to internal management needs, we will take strict security measures for transmission and transfer.

　　2) Share with dealers

　　We will only share your personal information with dealers for the purposes stated in this Policy, such as: name, phone number, city and vehicle of interest, for the purpose of providing better customer service and user experience.

　　In addition to the above circumstances, if your personal information needs to be shared externally due to other business needs or reasonable reasons, we will inform you of the purpose of sharing personal information, the type of data recipient, and obtain your authorization and consent.

　　(2) Transfer

　　①We will not transfer your personal information to any other third party, except with your separate consent.

　　②With the continuous development of our business, we may conduct mergers, acquisitions, and asset transfers, and your personal information may be transferred accordingly. In the event of such changes, we will require the successor to protect your personal information in accordance with laws and regulations and security standards no lower than those set forth in this Privacy Policy, otherwise we will require the successor to obtain your authorization and consent again.

　　(3) Public disclosure

　　Unless we comply with national laws and regulations or obtain your consent, we will not publicly disclose your information. When we publicly disclose your personal information, we use security measures that meet industry standards.

　　(4) Exemption from sharing, transferring or publicly disclosing personal information with consent according to law

　　Please understand that in the following circumstances, according to laws and regulations and national standards, we do not need to obtain your authorization and consent to share, transfer and publicly disclose your personal information:

　　(1) necessary for the conclusion and performance of a contract to which you are a party;

　　(2) necessary for the performance of statutory duties or statutory obligations;

　　(3) necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in emergency situations;

　　(4) conduct news reporting, public opinion supervision and other acts in the public interest, and process personal information within a reasonable scope;

　　(5) Processing, within a reasonable range, personal information disclosed by the individual or other legally disclosed personal information;

　　(6) Other circumstances provided for by laws and administrative regulations.

　　4. How do we store your Personal Information

　　(1) Storage location

　　We will store your personal information in a protected and secure environment in Hangzhou, China in accordance with laws and regulations, and take security measures such as storage technology encryption and transmission channel encryption to protect your personal information in accordance with state requirements, so that the public cannot access this information. Your personal information will not be transferred across borders outside of China unless your consent is obtained separately.

　　(2) Storage period

　　In general, we only retain your personal information for the period necessary for the purposes described in this Privacy Policy and for the period required by laws and regulations, unless otherwise provided by laws and regulations or otherwise authorized by the personal information subject. After the above personal information storage period, we will delete or anonymize your personal information.

　　The following are the storage periods required by relevant laws and regulations:

　　In accordance with the Cyber Security Law, we will store your web logs for at least 6 months;

　　According to the "Automobile Sales Management Measures", we will keep the information files of automobile sales and users for at least 10 years;

　　According to the Defective Automobile Product Recall Management Regulations, we will keep the owner information records for at least 10 years;

　　Other circumstances provided for by laws and administrative regulations.

　　(3) Cease operation

　　If we stop operating the products and services of the company, we will promptly stop the activities of continuing to collect your personal information, notify you of the notice of stopping operations in the form of one-by-one service or announcement, and delete or anonymize the personal information we hold related to the closed business.

　　5. How do we protect your Personal information

　　We have taken appropriate technology and adopted industry-standard security measures to protect the personal Information you provide from unauthorized access, public disclosure, use, modification, damage or loss. We will take all reasonably practicable measures to protect your personal information. For example, we use encryption technology to ensure the confidentiality of data; We use trusted protection mechanisms to protect data from malicious attacks; We will deploy access control mechanisms to ensure that only authorized personnel have access to personal information; And we regularly conduct security and privacy training courses to enhance employees' awareness of the importance of protecting personal information.

　　Although the above reasonable and effective measures have been taken and the standards required by relevant laws and regulations have been complied with, please understand that due to technical limitations and possible malicious means, in the Internet industry, even if we do our best to strengthen security measures, it is impossible to always ensure 100% security of information. We will do our best to ensure the security of the personal information you provide to us.

　　In the event of an unfortunate personal information security incident, we will inform you in a timely manner in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, the suggestions that you can independently prevent and reduce risks, and the remedial measures for you. We will timely inform you of the relevant information of the incident by email, letter, telephone, push notification, etc. When it is difficult to inform the personal information subject one by one, we will take a reasonable and effective way to release the announcement. At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with the requirements of the regulatory authorities.

　　6. How do you manage your Personal information

　　(1) Access, correction of personal information and withdrawal of consent

　　You have the right to view the personal information you have submitted to us and make necessary corrections, and you also have the right to withdraw your consent by disabling the corresponding business function, we will do our best to respect your personal wishes, but given that the specific business function will require your information or the device permissions you have granted to complete, when you withdraw your consent, We will not be able to continue to provide you with the corresponding service or function, but it will not affect your normal use of other services or functions, and your decision to withdraw your consent will not affect our previous personal information processing activities based on your authorization.

　　(2) Delete personal information

　　In accordance with current laws and regulations and the provisions of this Policy, when we have no reason to continue to use your personal information, you have the right to request us to delete your personal information through the contact information provided in Article 9 of this policy. We will evaluate your request accordingly, and if it meets the requirements, we will deal with it in a timely manner.

　　In the following cases, you can make a request to us to delete personal information:

　　a. If our processing of personal information violates laws and regulations or violates our agreement with you;

　　b. If you withdraw your consent;

　　c. If the processing purpose has been achieved, cannot be achieved or is no longer necessary to achieve the processing purpose;

　　d. If we stop providing products or services, or the retention period has expired.

　　Please understand that due to applicable legal and security technical restrictions, we may not be able to immediately delete the corresponding information from the backup system, and we will securely store your personal information and limit any further processing of it until the backup can be erased or anonymized.

　　(3) Complaints and reports

　　If you believe that your personal information rights may have been infringed, or if you find a clue that your personal information rights have been infringed, you can contact our Customer Service Center (4001755678) to give us feedback. We will timely feedback your complaints and reports after checking.

　　(4) Responding to your above requests

　　To protect the security of your account, when you make the above request to us, we may first ask you to verify your identity (such as asking you to provide authentication information or other means) before processing your request.

　　We will respond to your above requests to us within 15 days. If you are not satisfied with our response, you can also directly complain to us through the Customer Service Center (4001755678).

　　7. How do we protect minors' personal information

　　When you use our services, we assume that you have the corresponding capacity for civil conduct. We attach great importance to the protection of minors' personal information. According to the provisions of relevant laws and regulations, if you are a minor over the age of 14, before using our services, you should read under the supervision and guidance of your parents or other guardians and your parents or guardians decide whether to agree to this policy, and use our services or provide information to us with the consent of your guardians. We do not provide services to children under the age of 14. If you are a child under the age of 14, please stop using our services immediately and notify your guardian.

　　We will protect minors' personal information in accordance with relevant national laws and regulations. If it is proven that a minor has registered to use our products and/or services without the consent of the guardian, we will consult with the guardian concerned and try to delete the relevant personal information as soon as possible.

　　If you are the guardian of a minor and find that we have mistakenly collected personal information about a minor without your knowledge, or if you have questions about personal information about a minor under your custody, please contact us using the contact details mentioned in this Policy.

　　8. Update of this Policy

　　Our Personal Information protection policy is subject to change. In order to provide you with better services and meet the requirements of laws and regulations, we will revise this privacy policy in time, but without your explicit consent, we will not reduce your rights under this Privacy Policy. After this privacy policy is updated, we will push the latest version of the privacy policy to you in the form of pop-up window on the CRRC Electric official website.

　　9. how to contact us

　　If you have any questions, comments or suggestions about this privacy policy, or need to complain and report, you can contact us at any time through our Customer Service center (4001755678), we will respond to your request within 15 days.

　　If you are not satisfied with our response, especially if you believe that our personal information processing has harmed your legitimate rights and interests, you can also seek a solution by filing a lawsuit with the court with jurisdiction in the place where the defendant is domiciled.