1. Personal data
Personal data is information that can identify an individual when used alone or in combination with other information. Such data is submitted to us by you when you use our website, products or services and when you interact with us, or we obtain it by recording how you interact with our website, products or services, for example, through technologies such as cookies. The data we collect depends on the website you visit or the products and services you use, and may include personal data such as name, address, email address, telephone number, etc. The purpose of collecting personal data is to get in touch with you in order to provide appropriate services or to send important notices, etc.
2. Privacy Policy
Shanghai ENP Industrial Co., Ltd. and its subsidiaries around the world (hereinafter referred to as "Shanghai ENP", "we", "us" or "our") are aware of the importance of personal data to our customers and users. We are aware of the importance of personal data to our customers and users. In this regard, Shanghai ENP Industrial Co., Ltd. attaches great importance to the protection of the personal data of its customers and users, and has taken a number of measures to ensure that its business complies with applicable personal data protection requirements (e.g. GDPR).
2.1 In order to ensure the effective implementation of personal data protection requirements, Shanghai ENP Industrial Co., Ltd has appointed a Data Protection Officer (DPO).
2.2 Shanghai ENP Industrial Co., Ltd. has adopted industry-recognised personal data protection methods and practices. In business scenarios where the GDPR applies, Shanghai ENP Industrial Co., Ltd. uses the Data Protection Impact Assessment (DPIA) methodology to assess and mitigate personal data security risks in its products and services.
2.2.1 Shanghai ENP Industrial Co., Ltd. requires that personal data involved in products and services be fully assessed and that DPIAs be conducted for items involving personal data;
2.2.2 Projects involving personal data are required to establish data inventory and data flow diagrams;
2.2.3 Projects involving personal data are required to identify possible risks during data processing (including collection, use, storage, sharing, deletion, etc.) and take appropriate measures (including management, physical and technical measures) according to the risk level
2.2.4 After the execution of the DPIA, the corresponding report shall be output and approved by the DPO.
2.3. Shanghai ENP Industrial Co., Ltd. implements technical measures including intrusion detection, access control, encryption, data leakage prevention, anti-spam, terminal security protection, vulnerability scanning, etc., and tests the effectiveness of personal data protection measures through penetration testing.
2.4. Shanghai ENP Industrial Co., Ltd. has established an emergency response mechanism for personal data leakage. In the event of a personal data breach, Shanghai ENP Industrial Co., Ltd. will immediately activate the emergency response process, endeavouring to minimize the losses that may result from a personal data breach and ensure that affected persons are properly notified.
2.5. Shanghai ENP Industrial Co., Ltd. has established an ongoing employee privacy policy training mechanism to ensure that every employee involved in GDPR can accurately understand the legal principles of data protection based on their specific job responsibilities, and strictly implement the company's applicable systems and processes.
2.6. To ensure compliance, Shanghai ENP Industrial Co., Ltd. has implemented the necessary technical and process audits for personal data protection.
Personal data protection is not only a legal requirement, but also a corporate social responsibility. Shanghai ENP Industrial Co., Ltd. will continue to optimise its products and services to safeguard security and privacy and reduce the risk of personal data protection for customers and users.
3. Policy Updates
Shanghai ENP Industrial Co., Ltd. reserves the right to update or modify this policy from time to time. If this policy changes, we will post the latest version of the policy here. If we make significant changes to our privacy policy, we may also send you a notice of the changes through different channels, for example, by posting a notice on our website or by giving you a separate notice.