SUNGROW Official Website User Privacy Protection Guide
SUNGROW always holds the attitude of being responsible for users and attaches great importance to users' privacy rights and interests. In order to let every user clearly understand how we collect, use, store and protect your personal information, this Privacy Policy is hereby formulated. This clause will describe in detail the matters related to personal privacy in the process of using the official website of SUNGROW and related services, which is an important basis for you to understand your own rights and interests as well as our privacy protection work.
This clause describes：
1、Information Collection Guidelines
2、Specification of Information Use
3、Information Sharing Boundaries
4、User Rights Protection
5、Information Security Defense
6、Retention Period of Personal Data
7、Protection of Special Groups
8、International Transmission Standards
9、Mechanism for updating the terms and conditions
10、Cookies & Similar Technologies
11、Contact and Feedback
Information Collection Guidelines
(I) Active provision of information
When you carry out account registration, service inquiries, online activities, after-sales feedback and other operations on SUNGROW's website, we will collect relevant personal information based on your explicitly authorized consent (such as participation in marketing activities) and contractual obligations with you (such as user registration, service delivery, etc.) in accordance with the law.
The types of information collected and their uses include:
·Basic identity information: name, valid contact information (cell phone/email), postal address, etc., used for account creation, service delivery and fulfillment of legal obligations.
·Identity verification information: identity card number (only for real-name authentication scenarios), etc., which is used for identity verification in financial transactions, entitlement collection and other legally required scenarios.
·Enterprise-related information: company name, department and position, etc., used for enterprise customer qualification audit, business cooperation and personalized service provision.
·Business-related data: product consultation records, service request contents, etc., for accurate demand response and service improvement.
The information you provide helps us to improve the efficiency and effectiveness of our services, provide customized product solutions and technical documentation and implement the operation of after-sales service system, complete statutory tax declarations and compliance audits, and carry out the necessary system security testing and risk prevention and control in a timely manner.
We promise that the collection of working information is limited to enterprise-level service scenarios, and that sensitive information such as biometrics will not be collected in principle, and separate authorization will be obtained when collection is necessary. All information is processed in accordance with the principle of minimum necessity, and the storage period does not exceed the legal time limit for business requirements.
If you refuse to provide some of the key information, you may not be able to use some of the website functions or enjoy the related services.
(II) Automatic Collection of Information
During your visit to the official website of SUNGROW, we will use some technical means to collect relevant information automatically. For example, through cookies technology, we can collect your browsing records, including the pages you visited, the time you stayed on each page, etc. We can also obtain your device information, such as device model, operating system type, browser version and your IP address, etc. This information can help us better understand the website functions or enjoy the related services. Also, this information helps us to better understand your browsing habits and needs, and optimize the layout and functionality of our website to enhance your experience. For example, according to your browsing preferences, we can recommend products or contents that you are more interested in; by analyzing the access situation of different devices, we can ensure that the website can run stably and smoothly on all kinds of devices.
Specification of Information Use
(I) Core Business Use
The primary purpose of SUNGROW's use of your personal information is to ensure the smooth and efficient realization of the core functions of our products and services. In order processing, we will utilize the name, contact information, address and other information provided by you to accurately arrange for the shipment and delivery of products to ensure that you can receive your preferred products within the expected time. For example, when you place an order for solar panels, we will rely on this information to quickly connect with our logistics partners to plan the best delivery route to ensure the safe delivery of the products. In terms of providing technical support, if you encounter problems in the process of using energy products, our professional team will take advantage of your feedback on equipment information, usage, etc., to quickly locate the root cause of the problem and provide you with accurate and effective solutions. For example, if you feedback that your solar power generation system has unstable power generation, the technicians will analyze the information you provide, such as equipment model, installation location, operation data, etc., and will be able to determine whether it is an equipment failure or a problem caused by external environmental factors, so as to solve the problem in a timely manner.
(II) Personalized service
In order to bring you a unique experience, we will deeply analyze your browsing history, purchase preferences, consultation records and other information. Through these analyses, we can accurately understand your needs and interests, and customize personalized product recommendations and content display for you. For example, if you often browse the home solar energy storage equipment related pages, we will then push the new product information, promotional activities, as well as related tips and maintenance knowledge for you. At the same time, we will also optimize the display of the website interface according to your preferences, such as adjusting the order of products and recommending related products that may be of interest to you, so that you can find the content that meets your needs more conveniently when browsing the official website, which will greatly enhance your shopping efficiency and satisfaction.
(III) Legal and Compliance Usage
Under the framework of legal requirements, SUNGROW will use your personal information in strict accordance with the regulations. When it comes to tax declaration, audit and other legal procedures, we will provide the necessary information to fulfill our legal obligations. For example, in the annual tax declaration, we will provide accurate information related to your transactions according to the requirements of the tax authorities to ensure the compliance and accuracy of the tax declaration. In addition, in order to protect your legitimate rights and interests and the legitimate interests of SUNGROW, we may use your information to investigate, prevent and respond to legal disputes, potential risks or security threats. For example, if abnormal account login behavior is found, we will contact you through your reserved information to verify the situation and protect your account security.
Information Sharing Boundaries
(I) Internal Sharing Rules
Within SUNGROW Group, in order to realize efficient collaborative work and provide you with better and comprehensive services, we will share your personal information among all affiliated companies and departments. When the sales department and the after-sales service department collaborate within the Group, the sales department will share your purchase information, such as the model, quantity, and time of purchase, etc., to the after-sales department, so that the after-sales department will be able to quickly understand the situation of your products and provide accurate and efficient services when you need repairs, maintenance and other services. In the process of sharing, we will strictly follow the strict information security management system formulated within the Group to clarify the access rights and scope of use of each department to ensure that your information is only used for reasonable business-related purposes. For example, the finance department can only access necessary information related to transaction amounts and payment methods for financial accounting and report production, and is strictly prohibited from using such information for other unrelated purposes.
(II) Third-party cooperation and sharing
In certain specific business cases, SUNGROW will follow the principle of minimum necessary to provide information to third party partners based on the Personal Information Protection Law and other regulations, and will protect personal information appropriately. The following are common types of third-party business:
·Logistics and distribution services: Sharing information such as name, precise delivery address, and contact phone number for the purpose of fulfilling contractual obligations for the delivery of goods, and the information will be automatically deleted 30 days after the logistics sign-off.
·Payment settlement processing: sharing information such as order number, transaction amount, etc., which is used to fulfill the statutory obligations of financial regulation, and the information storage period is the statutory accounting document retention period
·Enterprise-level equipment installation and commissioning: sharing information such as enterprise name, project contact person, construction address, etc., which is used to fulfill the requirements of the service contract, and the information storage period is 6 months after the end of the project maintenance period.
(Other third-party business types we will inform users of relevant information separately according to order requirements.)
For the management of third parties, all third parties must be ISO 27001 certified and have signed legally binding data protection agreements. All user information is only allowed to use the data for the completion of the agreed services, and is prohibited to be used for derivative purposes such as user profiling, secondary marketing, etc., and to supervise the completion of data destruction within 30 days after the termination of the service and retain the certificate
For the management of third parties, all third parties must be ISO 27001 certified and sign a legally binding data protection agreement. All user information is only allowed to be used to fulfill the agreed services, and is prohibited to be used for derivative purposes such as user profiling and secondary marketing. Third parties are required to carry out data destruction in strict accordance with the requirements of Article 17 of the GDPR and Article 21 of the Data Security Act within 30 days after the termination of the service to ensure the data would not be recovered.
Before the first data sharing, we will clearly inform the name of the third party, the purpose of processing and contact information through the service agreement pop-up window.
You can view the list of third party sharing currently in effect. For non-essential sharing requests (e.g. marketing cooperation), you have the right to contact SUNGROW service team to exercise the right of refusal. If foreign service providers are involved, we will separately obtain your express consent and complete a security assessment for the record. If a third party is found to have violated the agreement, we will immediately terminate the cooperation and take legal measures to protect your rights and interests.
User Rights Protection
（I） access rights
You have the right to visit the official website of SUNGROW at any time to check your personal information collected by us. You only need to log in your personal account, and you can easily find the entrance to view your personal information in the account settings or privacy management related boards. After clicking into it, you can clearly see all the information we have about you, including but not limited to the basic information you filled in when you registered, browsing history, purchase order details, etc. Through this function, you can have a comprehensive understanding of your personal information. Through this function, you can fully understand the traces of information you have left on the official website of SUNGROW, so as to be clear and enhance the sense of control over your privacy.
(II) Right of Correction
If you find that your personal information stored in the official website of SUNGROW is wrong, inaccurate or incomplete, you have the right to correct such information. You can contact us through the customer service channels provided by the official website, such as online customer service, customer service telephone, customer service e-mail and other ways. When communicating with us, please explain in detail the content of the information that needs to be corrected as well as the correct information, and at the same time provide the necessary identity verification information so that we can verify your identity. After receiving your request for correction, we will verify and correct the information as soon as possible to ensure that your personal information is always accurate and complete, and to provide you with more accurate services.
（III) Right to Delete
Under certain circumstances, you have the right to request SUNGROW to delete your personal information. When your personal information is no longer used to fulfill the stated purpose of collection, and there is no other legal basis to continue to retain such information, you may submit a request for deletion. For example, if you decide that you no longer want to use Sunny Energy's products and services and you want us to delete your account and related information, you can submit a request for deletion through the Privacy Settings page on the official website, or you can express your wish for deletion to our customer service staff. After receiving your request for deletion, we will conduct a comprehensive review of the relevant information and delete your personal information in a timely and thorough manner in compliance with the legal provisions and internal processes to ensure that your privacy is fully respected and protected.
(IV) Right to Withdraw Consent
You have the right to withdraw your consent to SUNGROW's collection and use of your personal information at any time. If you change your mind and don't want us to continue to use your information for a specific purpose, you can find the privacy setting module in the setting options of the official website and adjust the relevant settings to withdraw your consent. It is important to note that after withdrawing your consent, we will no longer process your personal information on the basis of that consent, but the legitimacy of the processing that has already been carried out on the basis of your previous consent will not be affected. For example, if we have provided you with a product recommendation service based on your information before you withdrew your consent, the validity of this behavior will not be changed by your withdrawal of consent.
Information Security Defense
(I) Technical Guarantee
SUNGROW adopts a series of advanced technical means to build up the defense line of information security. In terms of data encryption, we use industry-leading encryption algorithms to encrypt your personal information transmitted and stored in the official website to ensure that even if the data is intercepted during transmission, it cannot be read and understood by unauthorized third parties. For example, when you make an online payment, your bank card number, payment password and other sensitive information will be encrypted and transmitted, effectively preventing the risk of information leakage. At the same time, we have deployed a powerful firewall system to monitor the network traffic in real time and strictly filter and screen all network data entering and exiting the official website to prevent unauthorized access and malicious attacks. In addition, the intrusion detection system is also running at all times, once abnormal network behavior or signs of potential attacks are detected, an alarm will be issued immediately and corresponding protective measures will be taken to ensure the safe and stable operation of the official website's network.
(II) Management Measures
At the management level, SUNGROW has established a set of perfect and strict information security management system. We conduct regular information security training for our employees to raise their awareness of security and confidentiality, so that every employee deeply recognizes the importance of protecting user information. The training covers information security regulations, security operation standards, common security risks and countermeasures. For example, we teach employees how to recognize phishing emails and avoid information leakage due to clicking on malicious links. At the same time, we clarify the responsibilities of each department and position in the management of information security, and carry out detailed delineation and strict control on the access rights of employees. Only authorized employees can access specific user information, and their access behavior will be recorded in detail for auditing and tracking. In this way, not only to ensure that employees can work efficiently within the scope of their duties, but also to minimize the risk of information security due to improper operation or violation of internal personnel.
Retention Period of Personal Data
Where you are a customer, we will keep your data for the duration of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this notice in accordance with applicable law.
Where we process personal data with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to process your data so that we can respect your request in future.
Data about your visits to our websites and where we process personal data for website security purposes, we will retain this data for [6/12] months following your last visit to our website.
Laws may require us to store certain data of you for specific legal retention periods (this can be up to ten years in case of invoices). In other cases, we may retain data for an appropriate period after any relationship with you ends to protect us from legal claims (until the end of statutory limitation periods), or to administer our business (e.g. for book keeping and tax obligations).
Protection of Special Groups
(I) Protection of Minors
SUNGROW is well aware of the importance of protecting the privacy of minors, and we always maintain a highly cautious and strict protection attitude towards the personal information of minors. Our official website and related services are mainly for adults, and in principle, we do not actively collect personal information of minors under 18 years old. If, due to special circumstances, we knowingly collect the personal information of minors, we will only use, store and process such information with the express consent of their legal guardians and in accordance with laws and regulations. For example, if a minor participates in an online popularization activity organized by us, we will ask him/her to provide a statement of consent from his/her guardian at the registration stage of the activity, so as to ensure the legality and compliance of the information collected. Once it is found that the information of minors has been collected without the consent of the guardian, we will immediately take measures to delete the relevant information in order to effectively protect the privacy rights of minors.
International Transmission Standards
(I) Transmission Principles
SUNGROW always strictly follows the basic principles of legality, legitimacy and necessity in the cross-border transmission of users' personal information. We will carry out cross-border transfer operations only when it complies with the explicit provisions of laws and regulations and is reasonably required for the realization of business purposes. For example, when we work with partners outside of China to carry out an energy data analysis project for global users, with the aim of improving energy utilization efficiency and providing users with better energy solutions, we will transfer necessary user information outside of China under the premise of compliance with laws and regulations. At the same time, we will fully consider the legitimacy of the transmission behavior to ensure that it will not cause any unreasonable damage to your rights and interests. Moreover, the information transmitted will be limited to the minimum extent necessary to achieve the specific purpose, and excessive transmission will be strictly prohibited.
(II) Safeguards
In order to ensure the security of your personal information during cross-border transmission, we have adopted a series of strict safeguard measures. We will conduct a comprehensive and in-depth assessment of the information security management capability and data protection level of the overseas recipient. Only after confirming that the recipient has a perfect information security management system, advanced technical protection means and a good reputation record, will we carry out information transmission cooperation with them. We will sign a legally binding contract with the offshore recipient, in which the rights and obligations of both parties are clearly defined, especially the responsibility for the protection of your personal information. The agreement will specify in detail how the recipient will use the information, how long it will be stored, the security measures, etc., and will require the recipient to handle your information in strict accordance with the agreement. If the recipient violates the agreement, we will pursue its responsibility according to the law, and make every effort to protect your legitimate rights and interests.
Mechanism for updating the terms and conditions
(I) Update Notice
SUNGROW will pay close attention to the changes in laws and regulations, business development needs and user feedback, and update the privacy policy in due course. Once the terms are updated, we will notify you in a timely manner by means of a prominent announcement on the official website. At the same time, if you provide a valid e-mail address when you register, we will also send you an e-mail notification to inform you of the specifics of the updated terms and conditions and the main content of the update, to ensure that you are able to be the first to know. For example, when there is a significant change in the laws and regulations on the cross-border transfer of personal information, we will immediately update the relevant content of the Privacy Policy and notify you in a timely manner through the abovementioned means.
(II) User Acknowledgment
We attach great importance to your right to know and choose the update of the Privacy Policy. If you continue to use SUNGROW website and related services after the update of the terms, it will be deemed that you agree to and accept the updated Privacy Policy. If you disagree with the updated terms, you have the right to stop using our services. For example, if the updated terms and conditions have adjusted the way of information use, you should read the new terms and conditions carefully before continuing to use the services, and if you continue to operate, it indicates that you recognize these adjustments.
Cookies & Similar Technologies
(I) Cookies
To ensure our website works correctly, we may at times place a small piece of data known as a cookie on your computer or mobile device. A cookie is a text file stored by a web server on a computer or mobile device. The content of a cookie can be retrieved or read only by the server that creates the cookie. The text in a cookie often consists of identifiers, site names, and some numbers and characters. Cookies are unique to the browsers or mobile applications you use, and enable websites to store data such as your preferences or items in your shopping cart.
Like many other websites or Internet service providers, SUNGROW uses cookies to improve user experience. Session cookies are deleted after each visit, while persistent cookies remain in place across multiple visits. Cookies allow websites to remember your settings such as language, font size on your computer or mobile device, or other browser preferences. This means that a user does not need to reset preferences for every visit. On the contrary, if cookies are not used, websites will treat you as a new visitor every time you load a web page. For example, if you are redirected to another web page from a website you are already logged in to and then return to the original website, it will not recognize you and you must log in again.
SUNGROW will not use cookies for any purposes not stated in this policy. For further details on our use of cookies, please see our Cookies Notice.You can manage or delete cookies based on your own preferences. You can clear all the cookies stored on your computer, and most web browsers provide the option of blocking cookies. However, by doing so, you have to change the user settings every time you visit our website. Find out how to manage cookie settings for your browser here:
Internet Explorer
Google Chrome
Mozilla Firefox
Safari
Opera
(II） Web Beacons and Pixel Tags
In addition to cookies, we may also use other similar technologies on our websites such as web beacons and pixel tags. For example, when you receive an email from SUNGROW, it may contain a click-through URL that links to a SUNGROW offcial website. If you click the link, SUNGROW will track your visit to help us learn about your preferences for products and services and improve our customer service. A web beacon is a transparent graphic image embedded in a website or in an email. We use pixel tags in emails to find out whether an email has been opened. You can unsubscribe from the SUNGROW mailing list at any time if you do not want to be tracked in this manner.
By using our website, you consent to the use of cookies, web beacons and pixel tags as described above.
Contact and Feedback
If you have any questions, suggestions or comments about privacy protection, please feel free to contact SUNGROW. You can give feedback in the following ways: log in the official website of SUNGROW, find the special channel for privacy feedback in the “Contact Us” board, and fill in the detailed feedback content; you can also call our customer service hotline, and the customer service personnel will patiently listen to your questions and forward them to the relevant departments for processing in a timely manner; you can also send an e-mail to the special privacy feedback mailbox. You can also send an e-mail to the special privacy feedback mailbox, please clearly state your problem and related claims in the e-mail. We solemnly promise that we will arrange a professional team to handle your feedback in a timely and serious manner and give you a reply in the shortest possible time to fully protect your privacy rights and interests and continuously optimize our privacy protection work.
Contact Us
Sungrow Power Supply Co., Ltd.
No. 1699, Xiyou Road, High-tech Zone, Hefei, Anhui Province, China; postal code: 230088
Email address: mailto:data-protection@sungrow-emea.com
Customer service telephone number: 400 119 7799