Privacy Policy for TEIC

Introduction

Zhuzhou Times Electric UK Innovation Center complies with our legal obligations under the Data Protection Act 2018 (the ‘2018 Act’) and the General Data Protection Regulation (EU) 2016/679 (‘GDPR’) in respect of data privacy and security.

We take the privacy of your personal data seriously and are committed to take every effort to protect your personal data.

This Privacy Policy informs you of who we are, how we store and utilise your personal data, your right as a data subject, with whom your information is shared, and whether it may be transferred outside the European Economic Area (‘EEA’).

WHO IS THE DATA CONTROLLER?

For the purposes of this privacy Policy and all personal data, you are the Data Subject and ZHUZHOU CRRC TIMES ELECTRIC UK INNOVATION CENTER is the Data Controller.

WHO ARE WE?

ZHUZHOU CRRC TIMES ELECTRIC UK INNOVATION CENTER (‘TEIC’) is a UK Establishment in the United Kingdom, and determines what data is collected, how this data is going to be used and how this data is protected.

It includes personal data that is collected through our websites, by telephone and through any related social media applications.

WHAT YOUR DATA IS USED FOR?

We process the data you give to us to meet the requests you make of us, including but not limited to:

• To provide you with information that you have requested or which we think may be relevant to a subject in which you have demonstrated an interest;
• To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services;
• To fulfil a contract that we have entered into with you or with the entity that you represent;
• To ensure the security and safe operation of our websites and underlying business infrastructure, and
• To manage any communication between you and us.
• To respond to customer service requests and to provide support in order to meet your requirements
• To benefit the user experience by understanding how users interact with Zhuzhou Times Electric UK Innovation Center
• To use feedback, you provide to improve our products and services
• To send marketing emails in relation to our products, services, company updates and distributor information to those who have voluntary subscribed to our emailing list
• To respond to enquiries, questions, and/or other requests, and notify customers of new or existing products and services that can enhance their project/ application requirements
• To contact all those that apply for a job vacancy, either to invite to interview or to inform of unsuccessful application

We do not use your information for profiling or automated decision making.

Where did we get your data from?

You provided us with the personal data we hold.

WHAT IS THE LAWFUL BASIS FOR US TO PROCESS YOUR PERSONAL DATA?

Your data is processed using one or more lawful bases, including:

• You have given consent to the processing of your personal data for one or more specific purposes.
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

We regularly audit our records to check our lawful basis for holding your data, and where we find we have no longer have a lawful basis for holding your data we will automatically delete it from our systems. We will endeavour to contact you before deletion in case such a deletion is against your wishes.

If we collect your information on the basis of your consent, you have the right to withdraw your consent at any time by sending your request to info@teic.crrczic.cc

Six Data Protection Principles

Personal data must be processed in accordance with six ‘Data Protection Principles.’ It must:

• Be processed fairly, lawfully and transparently
• Be collected and processed only for specified, explicit and legitimate purposes;
• Be adequate, relevant and limited to what is necessary for the purposes for which it is processed
• Be accurate and kept up to date. Any inaccurate data must be deleted or rectified without delay
• Not be kept for longer than is necessary for the purposes for which it is processed; and
• Be processed securely

Zhuzhou Times Electric UK Innovation Center collect personal data (e.g., names, addresses, telephone numbers, or e-mail addresses) in connection with the operation of our websites when an individual has voluntarily provided such data to us or granted permission to use the data (e.g., through registration, contact inquiries, job applications, email marketing newsletter sign ups).

We use the data that we collect for the purpose for which you divulged the data to us, such as to answer your inquiries, process your job application, or provide you information in our email marketing updates.

If you have agreed to receive marketing updates you can opt out at any time by clicking the ‘opt out’ button at the bottom of our email newsletter or by emailing info@teic.crrczic.cc

If you wish Zhuzhou Times Electric UK Innovation Center to safely and securely remove any data we hold on you please contact us and this will be actioned as soon as possible.

Data is shared only in connection with and in compliance with applicable laws and regulations. We do not sell or otherwise market your personal data to third parties.

We may collect non-personal identification information about Users whenever they interact with us online. This information may include the technical information about the user’s means of connecting with our website, information on the way users interact with and use our website, or non-personal audience related information which help us market our products and services better.

Third Party Websites

• Our website includes hyperlinks to, and details of, third party websites.
• We have no control over, and are not responsible for, the privacy policies and practices of third parties.

The Zhuzhou Times Electric UK Innovation Center website commissions a third-party company, HubSpot, to collate user data. HubSpot is software that reveals the identity of anonymous website traffic and turns them into actionable leads within a business to business environment. At any time, you may request all data HubSpot hold on you, you also have the right to object to your data being used again. Read full privacy notice here https://legal.hubspot.com/privacy-policy

Marketing

Zhuzhou Times Electric UK Innovation Center use a third-party company to collate email contacts that have willingly signed up via a Zhuzhou Times Electric UK Innovation Center platform (website, email, social media) to receive marketing emails. The Mail Chimp platform is also used to send out marketing emails to subscribers. To unsubscribe from emails, press the ‘opt-out’ button at the bottom of a Zhuzhou Times Electric UK Innovation Center email or contact us via info@teic.crrczic.cc. Mail Chimp and Zhuzhou Times Electric UK Innovation Center have taken the relevant steps to ensure privacy and security of contact details. Read Mail Chimp’s full privacy policy here, https://mailchimp.com/legal/privacy/#1._The_Basics

Cookie Policy

Zhuzhou Times Electric UK Innovation Center understands that your privacy is important to you and we are committed to being transparent about the technology we use. This policy explains how and why we use cookies and other similar technologies.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse or use our website, you agree that we can store and access Cookies and other tracking methods as described in this Cookie Policy.

A cookie is a small piece of data made up of letters and numbers that we store on your browser and the hard drive of your computer.

We use the following cookies and other tracking methods:

1. 1. Persistent Cookies are used to improve your experience of using our site.
   2. Session Cookies are temporary and deleted from your machine when your web browser closes.
   3. Web Beacons are graphic images (also referred to as “tracking pixels”) which may be placed on a website or in an email that alone or in conjunction with cookies compile information about your usage of or your interaction with Zhuzhou Times Electric UK Innovation Center website or email.

Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

Examples of purposes for which a cookie may be used:

1. 1. Estimate audience size or usage pattern
   2. Store information about your preferences
   3. Recognise you when you return to our site
   4. Allow you to use our site in a way that makes your browsing experience more pleasant.

Please note that third party services, over which we have no control, may also use cookies.

Managing cookies

Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:

1. 1. https://support.google.com/chrome/answer/95647?hl=en (Chrome);
   2. https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
   3. http://www.opera.com/help/tutorials/security/cookies/ (Opera);
   4. https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
   5. https://support.apple.com/kb/PH21411 (Safari);
   6. https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

Blocking all cookies will have a negative impact upon the usability of ours and many other websites.

If you block cookies, you will not be able to use all the features on our websites. You can find more information about the individual cookies we use and the purposes for which we use them below:

Google Analytics:

_ga – used to distinguish users
_utma – Used to distinguish users and sessions
_utmb – Used to determine new sessions/visits
_utmz – Stores the topic source or campaign that explains how the user reached our site
_utmv – used to store visitor-level custom variable data

For more information visit
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

DNN:

DotNetNuke uses a number of cookies, the most important of which are the forms authentication cookie (created when a user logs in) and the portal roles cookie, which stores what roles a user has access to in the current portal.

For more information visit
http://www.dnnsoftware.com/wiki/page/dotnetnuke-cookie-usage

PROCESSING PERSONAL DATA & DATA RETENTION

1. 2. To facilitate our business operation, we need to pass personal information between us and our clients and suppliers for the purpose of facilitating the business in relation to projects, support and other services, this information only includes
      • Name
      • Company Name and Role
      • Business email address
      • Business phone number

INTERNATIONAL TRANSFERS

Some of our Third-party providers are businesses outside of the EEA in countries, which do not always offer the same levels of protection for your personal data. We do our best to ensure a similar degree of security by ensuring that contracts, code of conduct or certification are in place, which give your personal data the same protection it has within Europe and this privacy Policy. If we are not able to do so, we will request your explicit consent to the transfer and you can withdraw this consent at any time.

In particular, any transfer of your personal data made by us to a location outside of the EEA will be governed by the relevant set of model contract clauses approved by the European Commission, or Corporate Binding Rule authorised by the ICO in the UK, which we will make available to you on request.

All information you provide to us is stored on secure servers.

DATA SHARING

We may have to share your personal data with (i) service providers who provide IT and system administration support, (ii) professional advisors including lawyers, bankers, auditors and insurers (iii) HMRC and other regulatory authorities.

We require all of these third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. They are only allowed to process your personal data on our instructions.

DATA SECURITY

We have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breaches and will notify you and any applicable regulator where we are legally required to do so.

We adopt appropriate data collection, storage, processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information and data.

We do not sell, trade, or rent personal identification information to others. We may use third party service providers to help us operate our business and administer activities, such as sending out newsletters or performing marketing activities. We may share your information with these third parties for those limited purposes. We may share you details with our shipping company to enable us to arrange delivery to the customer of products purchased.

YOUR RIGHTS AS A DATA SUBJECT

THE RIGHT TO BE INFORMED

We are obliged to provide clear and transparent information about our data processing activities. This information is provided within this privacy Policy.

THE RIGHT OF ACCESS

You may request a copy of the personal data we hold about you, free of charge. Once we have verified your identity, and if relevant any authority or third-party requester, we will provide access to the personal data we hold about you.

THE RIGHT TO ACCURATE DATA

When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.

THE RIGHT TO BE FORGOTTEN (ERASURE)

If there is no legal basis or legitimate reason continues to exist for processing your personal data, you may request that we delete the personal data.

THE RIGHT TO OBJECT

You have the right to object to our processing of your data.

• Based on our legitimate interests. If you ask us to stop processing your personal data on this basis, we will stop processing your personal data unless we can demonstrate compelling grounds as to why the processing should continue in accordance with data protection laws; and
• For direct marketing purposes. If you ask us to stop processing your personal data on this basis, we will stop

RIGHT TO RECTIFICATION

Individuals have the right to require us to rectify any inaccurate personal data we hold about them. Individuals also have the right to have incomplete personal data we hold about them completed, by providing a supplementary statement to us.

THE RIGHT TO RESTRICT PROCESSING

You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:

• The accuracy of the personal data is contested
• Processing of the personal data is unlawful
• We no longer need the personal data for processing but the personal data is required for part of a legal process
• The right to object has been exercised and processing is restricted pending a decision on the status of the processing

CHANGES TO THIS PRIVACY POLICY

Any changes we make to our privacy Policy in the future will be posted on this page, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy Policy.

CONTACT US

Any comments, suggestions about this privacy Policy should be emailed to: dataprotection@teic.crrczic.cc. Our Operations Manager is monitoring this email.

Alternatively, you can contact us on the below details: Address: Operations Manager 2650 Kings Court, Birmingham Business Park Solihull, United Kingdom B37 7YE Telephone: 0121 809 0011

COMPLAINTS

Should you wish to discuss a complaint, please feel free to contact us using the ‘contact us’ information above. All complaints will be treated with the upmost confidentiality. Should you feel your complaint or the processing of your data is unsatisfactory you may escalate the issue to the supervisory body within the United Kingdom. For more information, please visit https://ico.org.uk/global/contact-us/