Effective date: January 1, 2020
The security of your personal information is very important to us. HKUST has always been committed to providing a safer Internet environment for every user. We will be in accordance with the "the People's Republic of China Network Security Law", "Information Security Technology Personal Information Security Code" (GB/T 35273-2017) and other relevant laws, regulations and technical specifications collect and use your personal information to help us provide you with better quality HKUST products and/or services.
The Privacy Policy of HKUST Nengtong Users (hereinafter referred to as "these Guidelines") is an upgrade and revision of the previous version of the Privacy Policy of HKUST Nengtong to more transparently present our collection and use of your personal information and your right to personal information. We promise to keep your personal information and other data strictly confidential and to process your personal information in strict accordance with the contents set out in these guidelines. We collect, use, store, share and transfer your personal information based on your consent and other legal grounds for processing your personal information.
The following are the key points of the Privacy Policy for HKUST Users:
In order to better protect your personal information, we recommend that you read the updated Privacy Policy of HKUST Users. You can also click here to obtain the historical version of the Privacy Policy of HKUST.
These guidelines are applicable to the provision of HKUST's App software, websites (https://www.usteu.com/en/) products and services (collectively referred to as "HKUST") ("we").
[Special Notice]
Please read and fully understand these guidelines before using our products or services. Highlights We have indicated in bold, and we hope you will pay special attention to them. Once you use or continue to use the products/services of HKUST, you agree to our processing of your relevant information in accordance with these guidelines. If you have any questions about these guidelines, you can use the official website of HKUST (https://www.usteu.com/en/)/ App and the contact information/customer service system provided in the "How to contact us" section of this guide.
In order to facilitate your understanding of the relevant concepts in this guide, proper nouns are underlined and described in detail in Section 14, "Explanation of Nouns" of this guide. The "*" mark in the upper right corner of the relevant nouns in this guide represents sensitive information collected by HKUST. We will give you an enhanced reminder.
We may revise the Users' Privacy Policy from time to time. When the "Users' Privacy Policy" changes, we will show you the changed content in the form of pop-up windows after the version is updated.
Please note that only after you confirm your consent to the change, we will collect, use, process and store your personal information in accordance with the updated "Users' Privacy Policy.
If you are a user in mainland the People's Republic of China, we will collect and use your personal information in accordance with the the People's Republic of China Cybersecurity Law, the Personal Information Security Specification for Information Security Technology (GB/T 35273-2017) and other relevant laws and regulations to provide you with HKUST products and/or services.We usually collect your personal information only with your consent.In some cases, we may also collect personal information from you based on legal obligations or contractual requirements, or may need personal information to protect your important interests or the interests of others.
We will follow the principles of justifiability, legality and necessity to collect and use personal information that you actively provide during the use of the Services or that is generated by the use of the products and/or services of HKUST for the following purposes described in these Guidelines. If we want to use your personal information for other purposes not specified in these guidelines, or use the collected information for other purposes based on specific purposes, we will inform you in a reasonable manner and obtain your consent again before using it.
Registered account:
In order to realize the core business functions of HKUST, we may need to collect personal information from you. The following will list in detail the core business functions of HKUST and the personal information that needs to be collected for the realization of this function. If you refuse to collect, you will not be able to use this service.
In order to provide you with better products and services, we may need to collect the following information.If you refuse to provide the following information, it will not affect your normal use of the core business functions described in Item A of 3.2, but we cannot provide you with certain functions and services.
A. When you log in to HKUST with a third-party account (WeChat, Weibo), you can choose to authorize HKUST to read and obtain the public information (including nicknames and avatars) you registered, published and recorded on the third-party platform on the premise of complying with relevant laws and regulations.
B. HKUST requires your authorization to obtain the above information from a third party in order to remember your login identity as a HKUST user in order to provide you with better products and/or services. We will only collect and use your personal information within the scope of your authorization.After you use the third-party account to register or log in, your third-party account will be bound with the HKUST Nengtong account, but you can choose to close in [Account Information] to cancel the account binding.
Before providing any sensitive personal information to HKUST, please consider clearly that such provision is appropriate and agree that your sensitive personal information may be processed in accordance with the purposes and methods described in these guidelines.
After obtaining your consent, we will collect and use your sensitive information to realize the functions related to the business of HKUST, and allow you to make choices that do not agree with the collection and use of such sensitive information, but refusing to use such information will affect your use of relevant functions.
According to the relevant laws and regulations,In the following cases, we can collect and use some necessary personal information without obtaining your authorization and consent:
A. directly related to national security and national defense security;
B. directly related to public security, public health, major public interests;
c. those directly related to the investigation, prosecution, trial and execution of sentences;
d. In order to protect your or other personal life, property and other major legitimate rights and interests, but it is difficult to obtain my consent;
E. the personal information collected is open to the public on your own;
f. collect your personal information from legitimate public disclosure, such as from legitimate news reports, government information disclosure and other channels;
g. necessary for the conclusion and performance of the contract according to your requirements;
h. It is necessary to maintain the safe and stable operation of the products and/or services of HKUST, such as the detection and disposal of product or service failures;
I. Other circumstances stipulated by laws and regulations.
3.6 If you have any questions about the legal basis for our collection and use of your personal information or need further information, please contact us through the contact details provided in the "How to Contact Us" section.
Currently, our authorized partners include the following types:
B. for the purposes set out above, any third party referred to in this section "Sharing Your Personal Information" may be located or use your Personal Information outside of your jurisdiction, including where there may be no personal information protection legislation that is substantially similar to or meets the purposes of the laws of your jurisdiction;
C. Tips on sharing information: Through the functions provided by us or third parties, you can actively share and share information publicly (such as forwarding content to other Internet platforms), in which case the shared information will be widely and instantly transmitted.
However, as long as you do not delete the shared information, the information will always remain in the public domain. In some cases, even if you delete the shared information, the information can still be independently cached, copied or stored by other users or third parties not affiliated with us and not under our control, or kept in the public domain by other users or such third parties. For example, when you forward your answers published on HKUST to other Internet platforms, the platform may independently display, cache or save your forwarded content, and other Internet users may also forward and save your answers, and the corresponding pages will not be controlled by HKUST.
In addition, we will also provide other related functions of HKUST to allow you to share information in the public domain. For example, the public can access certain social media features in Kodcan products by accessing blogs or forums. You should note that any shared information you share may be read, collected and used by any third party. Please consider carefully the content of the messages you post and transmit through HKUST.
We will not transfer your personal information to any company, organization or individual unless we have your explicit consent.
In the event of a merger, acquisition or liquidation, the transfer of personal information may be involved, in which case we will require new companies and organizations holding your personal information to continue to be bound by these guidelines. If there is any change in the collection and processing of personal information agreed in these guidelines, the company and organization will re-seek authorization from you.
Unless we obtain your explicit consent, we will not disclose your personal information publicly.
We may disclose your personal information to the competent authorities based on legal, legal, litigation or mandatory requirements of government authorities. However, we guarantee that when the above situation occurs, we will require the disclosure requesting party to issue valid legal documents corresponding to it, and take security measures that comply with laws and industry standards for the disclosed information.
In accordance with the provisions of relevant laws and regulations, in the following circumstances, we can share, transfer, public disclosure of your personal information without your authorization and consent:
A. related to national security and national defense security;
B. It is related to public safety, public health and major public interests;
C. Related to crime investigation, prosecution, trial and execution of sentences, etc;
D. In order to protect your or other personal life, property and other major legitimate rights and interests, but it is difficult to obtain my consent;
E. personal information that you disclose to the public on your own;
F. Personal information collected from lawful public disclosure of information, such as lawful news reports, government information disclosure and other channels.
G. Other circumstances prescribed by laws and regulations.
In accordance with applicable laws, the sharing or transfer of de-identified personal information, provided that the recipient cannot restore or re-identify the data subject, shall not be deemed an external sharing, transfer, or public disclosure of personal information. Consequently, no separate notice to you or your consent will be required for the storage and processing of such data.
The security of your personal information is very important to us. We will strictly comply with relevant laws and regulations, and take reasonable and feasible measures recognized by the industry to protect your personal information. Prevent information from unauthorized access, disclosure, use, modification, and damage or loss.
We strive to protect your personal information by implementing industry-standard physical, electronic, and administrative security measures. We actively establish a data classification and grading system, data security management practices, and data security development practices to manage and regulate the storage and use of personal information to ensure that no personal information unrelated to the services we provide is collected.
We have comprehensive security controls over data through confidentiality agreements with contacts, monitoring and auditing mechanisms. Protect your personal information from unauthorized access, public disclosure, use, modification, damage or loss.
We have used industry-standard security measures to protect the personal information you provide to prevent unauthorized access, public disclosure, use, and modification to prevent data damage or loss. We will take all reasonable and feasible measures to protect your personal information. For example, when exchanging data (such as credit card information) between your browser and KSTC. SSL encryption protection; we also provide https for websites that appear in the Introduction to this guide We use encryption technology to ensure the confidentiality of data; we use trusted protection mechanisms to prevent malicious attacks on data; we deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we conduct security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.
We will try our best to ensure the security of any information you send to us, but please understand that due to technical limitations and various malicious means that may exist in the Internet industry, it is impossible to always guarantee 100% security of information. You need to understand that your access to the system and communication network used by our service may cause problems due to factors outside our control. In order to prevent the occurrence of safety accidents, we have formulated a proper early warning mechanism and emergency plan. In the event of an unfortunate personal information security incident, we will promptly inform you of the basic situation and possible impact of the security incident, the measures we have taken or will take, and you can independently prevent and reduce risks. Suggestions and remedial measures for you, and immediately initiate emergency plans to minimize losses. We will promptly inform you of the relevant information of the incident by telephone, push notification, etc. When it is difficult to inform users one by one, we will issue an announcement in a reasonable and effective way.
At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with the requirements of the regulatory authorities, and closely cooperate with the work of government agencies.
We take your concerns about your personal information very seriously, and do our best to protect your right to access, correct, delete and withdraw your consent to your personal information, so that you have full ability to protect your privacy and security.Your rights include:
A. Except as required by laws and regulations, you have the right to access and correct your personal information at any time, including:
B if you need to consult other personal information generated during your use of HKUST, we will provide it to you upon reasonable request. If you are unable to access or correct your personal information through the above methods, you can also contact us by sending an email to support@www.usteu.com. We will reply to your visit request on the 10th.
A. We provide the following ways on HKUST Nengtong App to help you delete the information you posted on HKUST Nengtong.
B. You can request us to delete your personal information in the following situations:
Once the above deletion request is responded, we will also notify the third-party entities that have obtained your personal information from HKUST at the same time (such as other Internet platforms that use HKUST's account as a third-party login account), and require them to be deleted in time, unless otherwise stipulated by laws and regulations, or these entities have obtained your independent authorization. When you delete information from our services, we may not immediately delete the corresponding information from the backup system, but will delete the information when the backup is updated.
If you encounter any problems during the deletion process, please contact us through the official account of HKUST Nengtong or send an email to support@www.usteu.com. We will respond to your request on the 10th.
Each business function requires some basic personal information to complete (see Part 3 of this guide). For the collection and use of your personal information, you can give or withdraw your authorization consent at any time through the following methods.
In the process of providing services, we may need you to open some device permissions, such as notifications, photo albums, cameras, mobile phone contacts, Bluetooth and other access rights.You can also choose to turn off some or all permissions at any time in the [Settings] function of the device, thus refusing us to collect your corresponding personal information. In different devices, the permission display mode and closing mode may be different. Please refer to the instructions or guidelines of the device and system developer for details.
If you need to cancel your HKUST Nengtong account, you can send an email to support@www.usteu.com requesting to cancel your HKUST Nengtong account. We will provide you with account cancellation service after verifying your identity and cleaning up the assets in your account (including purchased courses, recharged coins, etc.).
In order to provide you with a more convenient way to log out, we will continue to optimize our products and inform you through the page announcement.After you cancel your account, we will stop providing you with products or services and delete your personal information at your request, unless otherwise provided by laws and regulations.
After your cancellation is successful, we will delete your personal information or make it anonymous as soon as possible in accordance with the requirements of laws and regulations.
You have the right to obtain a copy of your personal information and you can contact us by sending an email to support@www.usteu.com and we will process your request within 10 days.
In some business functions, we may make decisions based solely on non-human automated decision-making mechanisms, including information systems, algorithms, and so on. For example, suggest topics or columns that may interest you. It is also possible to push more accurate advertising information to you based on your location information or user profile.
If you do not want to receive the popular content push of HKUST after automatic decision through algorithm, you can refuse to accept the push through [Settings → Push Settings].
After you refuse to accept the push service, we will delete or anonymize your personal information collected for the targeted push.
To ensure security, we may first require you to verify your identity before processing your request. You may need to provide a written request or otherwise prove your identity. In principle, we will respond to your request within 10 days.
In principle, we do not charge for reasonable requests; however, for repeated requests that exceed a reasonable limit, we may, at our discretion, levy a nominal fee to cover administrative costs. We may reject requests that are unduly repetitive, require excessive technical measures (such as developing new systems or fundamentally altering existing practices), pose risks to the legitimate rights and interests of others, or are otherwise highly impractical.
In the following circumstances, as required by laws and regulations, we will be unable to respond to your request:
When you use the USTC service, we may use your personal information to send push notifications to your device.
You can choose whether to accept our push notifications through [Settings → Push Settings].
We may, from time to time, make service-related announcements to you as we deem necessary (for example, when we suspend the HKUST Nengtong service for maintenance). You may not cancel these service-related, nature does not belong to the promotion of the announcement.
We store information obtained from the People's Republic of China in the People's Republic of China.If cross-border data transmission occurs, we will separately inform you of the purpose and recipient of the data in a pop-up window or email, and obtain your authorization and consent. We will ensure that the data recipient has sufficient data protection capabilities to protect your personal information.
We promise that your personal information will always be stored for as long as reasonably necessary.Personal information collected under the browsing-only function, such as browsing history and IP information, will not be stored by us for more than one month. For personal information that exceeds the deadline, we will immediately delete or anonymize it.
If we stop operating due to poor management or other reasons, we will immediately stop collecting your personal information and delete the collected personal information.We will announce this situation on the website or communicate it to each user one by one in other reasonable ways such as in-station letters and emails.
When you use our Services, we store small data files called cookies on your computer or mobile device. Cookies usually contain an identifier, the name of the site, and some numbers and characters. We use this information to determine whether registered users have logged in, to improve service/product quality and optimize user experience. If you do not want your personal information to be stored in Cookies, you can configure your browser and choose to disable cookies. Disabling cookies may affect your access to HKUST or may not be able to fully access the services provided by HKUST.
We will not use cookies for any purpose other than the purposes described in these guidelines. You can manage or delete cookies according to your preferences. You can clear all cookies saved on your computer, and most web browsers have the ability to block cookies.
10.1 The University of Science and Technology can access services mainly for adults. Our products, websites and services are primarily intended for adults. If you are a minor under the age of 18, you should read these guidelines with a guardian before using our products and/or services, and should ensure that you have obtained your guardian's consent to use our services and provide us with your information.We will, in accordance with relevant national laws and regulations, prioritize the protection of personal information pertaining to minors.
10.2, if your guardian does not agree to use our services or provide information to us in accordance with these guidelines, please terminate your use of our services immediately and notify us in a timely manner.
10.3 Where personal information from minors is collected with the consent of a parent or legal guardian, we will only use or disclose this information to the extent permitted by law, with the express consent of the parent or guardian, or as necessary for the protection of the minor.
10.4 If you are the guardian of minors, when you have any questions about the use of our services or the user information provided to us by the minors under your guardianship, please contact us in time. We will safeguard the confidentiality and security of personal information pertaining to minor users in accordance with applicable national laws, regulations, and the provisions of this Guideline. If we discover that we have collected personal information from a minor without prior, verifiable consent from a parent or legal guardian, we will endeavor to delete the relevant data as soon as possible.
"In order to provide you with one-click login service, our products may integrate third-party SDK or other similar applications, such as the Youmeng SDK. The Youmeng SDK needs to collect necessary fields such as your device's International Mobile Equipment Identification Number (IMEI), iOS Advertising Identifier (IDFA), mobile phone number, etc. For the sake of your information security, we have agreed with third-party SDK service providers to strictly abide by our data privacy and security requirements. We will not share your other personal information with you unless we have your consent. In order to better understand the types and uses of data collected by AU and how to protect your personal information, you can visit https://www.umeng.com/policy to understand the friendship of the privacy policy. We understand and respect your choice. If you do not want to participate in the big data calculation of AU, you can also visit the https://outdip.umeng.com/opt_out.html to exercise opt-out rights."
12.1 These guidelines are an important part of the HKUST Nengtong User Agreement. HKUST reserves the right to update or modify these guidelines from time to time.
12.2 Without your express consent, we will not reduce your rights under these guidelines. We will notify you through reasonable means such as the App client pop-up window so that you can keep abreast of any changes made in this guide.
12.3 For major changes, depending on the circumstances, wemay also provide a more prominent noticeExplain the specific changes to these guidelines.Significant changes include, but are not limited:
A. Significant changes in our service model. Such as the purposes for processing personal information, the types of personal information processed, and the manner in which personal information is used;
B. We have undergone significant changes in our ownership structure, organizational structure, etc. Such as changes in ownership resulting from business restructuring, bankruptcy, mergers and acquisitions, and other similar events;
C. changes in the main objects of personal information sharing, transfer or public disclosure;
Significant changes in your rights to participate in the processing of personal information and the manner in which they are exercised;
E. our responsible department responsible for handling personal information security, contact methods and complaint channels change;
F. When the personal information security impact assessment report indicates that there is a high risk.
12.4, if you do not agree with the revised Privacy Protection Guidelines, you have the right and should immediately stop using the services of HKUST. If you continue to use the services of HKUST, you will be deemed to have accepted the changes made by HKUST to the relevant provisions of these guidelines.
When you have any questions about these guidelines, you can send an email to support@www.usteu.com for consultation. We have set up a full-time personal information protection department to solve your problem in time.
Under normal circumstances, we will reply within 10 days.
14.1. You may appeal to the People's Court for any disputes arising from these Guidelines and our handling of your personal information.
14.2, if you believe that our personal information processing has harmed your legitimate rights and interests, you can also report to the relevant government departments.
The terms used in this Privacy Protection Guide have the following definitions in their ordinary sense: