CNAUTO Privacy Policy
Update Date:2024/8/29
Effective Date:2024/8/29
Special Notice Clause
CNAUTO(www.cnauto.vip) is developed and operated by a wholly-owned subsidiary of Beijing United Information Technology Co., Ltd. (hereinafter referred to as "IBI"), known as Qingdao Tuduoduo E-commerce Co., Ltd. It is positioned as a cross-border e-commerce service platform for the automotive equipment vertical industry chain. Relying on the "Belt and Road" strategy, it is dedicated to reaching global markets from multiple dimensions. The company establishes overseas service centers to deepen online and offline market services.
We are well aware of the importance of personal information to you, and we will take appropriate security measures in accordance with the requirements of laws and regulations to do our best to protect your personal information. Before you use our products and/or services, please be sure to read and understand the Privacy Policy ("this Privacy Policy") carefully, especially focusing on the terms that we have boldly or boldly underlined, to ensure that you fully understand and agree to it before you start using it. We want this Privacy Policy to explain to you how we collect, use, store, share, and transfer personal information when you use our products or services, and the ways in which we provide you with access to, update, delete, and protect personal information. If you have any questions during the reading process, you can ask us through the contact information in this Privacy Policy. If the Privacy Policy exists in more than one language, in the event of any discrepancy or conflict between the versions, the English version shall prevail.
This Privacy Policy will help you understand the following:
i. how we collect and use your personal information
ii. Exceptions to Authorized Consent
iii. How we use Cookies and similar technologies.
iv. How we provide your personal information to a third party
v. How we protect your personal information
vi. How we store your personal information
vii. How you manage your personal information
viii. Protection of personal information of Minors
ix. Account cancellation
x. Notices and Amendments
xi. How to contact us
This Privacy Policy is closely related to the CNAUTO service you use and the various business functions included in the service (hereinafter collectively referred to as "our products and services"), and we hope that you will read it carefully and make sure that you fully understand the contents of this Privacy Policy before you use our products and services and that you can make choices you think are appropriate in accordance with the guidelines of this Privacy Policy. We hope that you will read this Privacy Policy carefully and make sure that you fully understand it before using our products and services, so that you can make the choices you deem appropriate in accordance with this Privacy Policy. By starting to use, or continuing to use our products and services after we update this Privacy Policy (and we will promptly notify you of such updates), you agree to the content of this Privacy Policy (including any updates) and consent to the collection, use, retention, and sharing of personal information about you in accordance with this Privacy Policy.
If you have any questions about this Privacy Policy or related matters, you can contact us at any time through the website's online customer service, send an email to service@cnauto.vip or call our customer service phone number and other ways.
i. how we collect and use your personal information
personal information refers to all kinds of information recorded electronically or by other means that can, alone or in combination with other information, identify a specific natural person or reflect the activities of a specific natural person.
The following are the types and purposes of the personal information we collect:
1. Necessary Functions for Online Shopping
(1) User Registration
You need to register an account on our platform to become our user. When you register, you must provide your username, password, mobile phone number, and email address for verification. Your username is your default nickname, and you can modify and supplement your nickname, avatar, and other related information. These account information will help us provide you with a better shopping experience, but if you do not provide these supplementary information, it will not affect your basic online shopping functionality.
(2) Enterprise Authentication
Currently, we support both individual and enterprise orders, but enterprise orders require authentication. The authentication content includes enterprise information (company name, unified social credit code, business period, and business type), legal person information (name, ID number, mobile phone number), and invoice information (registered address, registered phone number, bank account, and recipient information). The authentication method does not limit the use of third-party platforms to verify the authenticity and validity of enterprises. Your enterprise information will be used for invoicing, and if you do not provide these information, it will affect your basic online shopping functionality. Additionally, if your identity is that of a third-party seller on our platform, your enterprise information will be partially publicly displayed to platform users.
(3) Displaying and Pushing Products and Services
To help you quickly find the products you need, we may collect your device information and browser type to provide you with the most optimal product information display. We will also use your information to continuously improve and optimize these functions.
(4) Device Information
We will collect and record your device-related information, such as device name, device model, device MAC address, operating system and application version, language settings, resolution, mobile application list (software installation list), unique device identifier (such as IDFA/OPENUDID/GUID/OAID/UUID information, based on the identifier supported by your device and system), and network type. We will also collect location-related information, including authorized GPS locations and information from WLAN access points, Bluetooth, and base station sensors.
(5) Log information
When you use our products or services, we will automatically collect detailed usage information, which will be saved as network logs, including your search records, browser type, browsing history, order information, attention and sharing information, IP address, access date and time, and page records.
(6) Order Information
When you are ready to settle your order, the system will generate your order. You must fill in your recipient's name, address, and mobile phone number. The order will include the order number, product or service information, and payment method. You can also fill in additional contact information, such as fixed phone number and email address, to ensure accurate delivery.
(7) Payment Function
After you place your order, you can choose to use payment services provided by our affiliated companies or third-party payment institutions. The payment function itself does not collect personal information, but we need to share your order number and transaction amount with these payment institutions to confirm your payment instructions and complete the payment.
(8) Delivery Function
After you place your order and choose to pay online or by cash on delivery, our platform, affiliated companies, suppliers, and third-party logistics companies will deliver your order. You agree that these parties will use your order information to ensure the safe delivery of your ordered products.
(9) Customer Service and After-Sales Function
Our telephone customer service and after-sales function will use your account information and order information.
2. Necessary Functions for Security
To improve the security of your use of our products and services and those of our affiliated companies and partners, we may use or integrate your member information (such as shipping address, identity information, and bank card information), transaction information (such as purchased products), device information (device model, device MAC address, application process list, device identifier, operating system and software version, device status, network status), log information, IP address, location information, browsing information, order information, common software list, SSID, Wi-Fi information, battery usage, and network logs, as well as information shared by our affiliated companies and partners, to comprehensively judge your account and transaction risks, verify your identity, detect and prevent security events, and take necessary records, audits, analyses, and handling measures.
ii. Exceptions to Authorized Consent
You should be fully aware that we do not need to obtain your authorized consent for the collection and use of personal information in the following cases:
1. related to public safety, public health, and significant public interests;
2. in connection with the investigation, prosecution, trial and execution of judgment of crimes;
3. for the purpose of safeguarding the life, property and other significant legitimate rights and interests of the subject of personal information or other individuals;
4. the personal information involved is disclosed to the public by the subject of personal information himself/herself;
5. necessary for the signing and fulfillment of contracts at your request;
6. necessary for maintaining the safe and stable operation of the products and services provided, such as the discovery and disposal of product and service failures;
7. other cases stipulated by laws and regulations.
iii. How we use Cookies and similar technologies.
1. In order to realize the needs of your online experience, so that you can get a more relaxed access experience. We will send one or more small data files called Cookies on your computer or mobile device. The Cookies assigned to you are unique and can only be read by the web server in the domain that issued the Cookies to you. We send you Cookies to simplify repeated logins, to store your shopping preferences or data about the items in your shopping cart, to provide you with shopping preferences, to help you optimize your selection of and interaction with advertisements, to help determine your login status, and for account or data security.
2. We do not use cookies for any purpose other than those described in this Privacy Policy. You can manage or delete cookies according to your preferences; you can clear all cookies stored on your computer; most web browsers automatically accept cookies, but you can usually modify your browser's settings to refuse cookies if you prefer; or you can clear all cookies stored in your software. However, if you do so, you may need to change the user settings every time you visit the CNAUTO website, and the corresponding information you have previously recorded will also be deleted, and may have a certain impact on the security of the services you use.
iv. How we provide your personal information to a third party
We do not sell your personal information to any third parties. We only share your information with third parties under the following circumstances:
(1) Our group companies
We may share information with Tuduoduo group companies (i.e. any company owned or controlled by Tuduoduo, or any company that owns or controls Tuduoduo). These companies will use your personal information to process it in the same way as we do. We believe that this processing is necessary for the legitimate interests we pursue. However, as required by applicable law, we will seek your consent where appropriate.
(2) Business Transfers
In cases involving mergers, acquisitions, asset transfers or similar transactions that involve the transfer of personal information, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy, or else we will require that company or organization to re-collect your authorized consent.
(3) Disclosure as required by law
We may need to collect and disclose information collected about you (including personal information) in order to prevent, investigate or take action in response to illegal activities, suspected crimes and breaches of our terms and agreements involving potential threats to physical safety, rights, property or any person, as well as in response to laws, regulations, judgments, demands, or in order to establish or enforce our legal rights.
(4) Delegated Processing
We may delegate the processing of your personal information to authorized partners in order to authorize the partners to provide certain services or perform functions on our behalf. We will only entrust the processing of your information to an authorized partner for the lawful, legitimate, necessary, specific and stated purposes as set out in this Privacy Policy, and the authorized partner will only have access to the information it needs to perform its duties and will be required by agreement not to use personal information for any other purpose beyond the scope of the entrustment. If an authorized partner uses your information for a purpose that we have not delegated to them, they will obtain your consent separately. Currently, we have commissioned the following types of authorized partners:
1. Authorized partners for advertising and analytics services. We will entrust these partners to process information related to advertisement placement, coverage and effectiveness under the premise of adopting industry common security technology. We do not entrust partners with your personally identifiable information.
2. Vendors and other partners of products or services. We delegate the processing of information to vendors and other partners who support our business, including consulting, analytics, marketing, technical support, and other professional services commissioned by us.
3. Authorized Partners for Payment Categories. In order to complete payment for your order, we may provide your account information, order information, payment account information, and other information necessary to complete payment to third party payment authorized partners.
The content and purpose of sharing is shown in Appendix I, "Third Party SDK Catalog".
v. How we protect your personal information
(i) Our technology and measures to protect your personal information
We attach great importance to the security of personal information and take all reasonably practicable measures to protect your personal information:
1. Data Security Technical Measures
We will adopt security measures that meet the industry standards, including the establishment of reasonable institutional norms and security technologies to prevent unauthorized use and modification of your personal information and avoid data damage or loss.
Tuduoduo network service adopts encryption technology such as Transport Layer Security Protocol and provides browsing service through https to ensure the security of user data in the transmission process.
Tuduoduo adopts encryption technology to encrypt and save users' personal information and isolate it through isolation technology.
When personal information is used, such as displaying personal information and calculating the association of personal information, we adopt various data desensitization technologies, including content replacement and SHA256, to enhance the security of personal information in use.
Tuduoduo adopts strict data access rights control and multiple identity authentication technology to protect personal information and prevent data from being used in violation of the law.
Tuduoduo uses automatic code security checking and data access log analysis technologies to conduct personal information security audits.
2. Other security measures taken by Tuduoduo to protect personal information
Tuduoduo manages and regulates the storage and use of personal information by establishing a data classification and grading system, data security management standards, and data security development standards.
Tuduoduo provides comprehensive security control of data through confidentiality agreements for information contacts, monitoring and auditing mechanisms.
Tuduoduo establishes a data security committee with a dedicated department for information protection and a data security emergency response organization to promote and safeguard personal information security.
Enhance security awareness. We also organize security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.
3. We only allow employees and partners of Tuduoduo and Tuduoduo affiliates who have a need to know such information to access personal information, and have set up strict access control and monitoring mechanisms for this purpose. We also require all persons who may have access to your personal information to fulfill the corresponding confidentiality obligations. Failure to fulfill these obligations may result in legal liability or termination of the cooperative relationship with Tuduoduo.
4. We will take all reasonably practicable measures to ensure that no unnecessary personal information is collected.
5. Please note that the Internet is not an absolutely secure environment, and that it is not possible to determine whether e-mail, instant messaging, social software, and other means of communication with other users are fully encrypted, and we recommend that you use complex passwords when using such tools and take care to protect the security of your personal information. When trading online products and services with third parties through Tuduoduo, you will inevitably disclose your personal information, such as contact information or postal address, to the counterparty or potential counterparty. Please protect your personal information properly and provide it to others only when necessary.
6. Handling of Security Incidents
In order to cope with the possible risks of personal information leakage, destruction and loss, Tuduoduo has formulated a number of systems to clarify the criteria for categorizing and grading security incidents and security breaches, as well as the corresponding handling procedures. Tuduoduo has also set up a special emergency response team for security incidents, which will activate security plans for different security incidents, stop loss, analyze, locate, formulate remedial measures, and join hands with relevant departments to trace and combat security incidents in accordance with the requirements of the Security Incident Disposal Code.
Once a personal information security incident occurs, we will, in accordance with the requirements of laws and regulations, promptly inform you of: the basic situation and possible impact of the security incident, the measures we have taken or will take to deal with the incident, the suggestions you can independently prevent and reduce the risk, and the remedial measures for you. At the same time, we will promptly inform you of the situation related to the incident by email, letter, phone call, push notification, etc. When it is difficult to inform the subject of personal information one by one, we will take a reasonable and effective way to make a public announcement. At the same time, we will also take the initiative to report the disposition of personal information security incidents in accordance with the requirements of the regulatory authorities.
If you have any questions about the protection of our personal information, you can contact us through the contact information agreed in this privacy policy. If you find that your personal information has been leaked, especially your account and password have been leaked, please contact us immediately through the contact information agreed in this Privacy Policy [How to Contact Us], so that we can take appropriate measures.
vi. How we store your personal information
1. In the course of our provision of the products and its related services, we may transfer your personal information to countries outside of your home country. We will take appropriate measures to ensure that the recipients of your personal information are under a duty of confidentiality and implement appropriate measures to ensure that your personal information will be protected in accordance with this Privacy Policy, such as standard contractual clauses. A copy of these terms can be requested at service@cnauto.vip.
2. During your use of our products and services, your personal information will be retained for the period of time necessary to fulfill the purposes described in this policy, determined in conjunction with the legally mandatory retention requirement period. After the retention period, we will delete your personal information or anonymize it as required by applicable law.
3. Please note that we will delete or anonymize your personal information after you have successfully deleted your cnauto.vip account. After you or we have assisted you in deleting the relevant information, we may not be able to delete the corresponding information from our backup system immediately due to applicable legal and security technical limitations, and we will securely store your personal information and restrict any further processing of it until the backup can be deleted or anonymized.
4. If we terminate our services or operations, we will give you at least thirty days' notice and delete or anonymize your personal information after termination.
vii. How you manage your personal information
Tuduoduo takes your concerns about your personal information seriously and makes every effort to protect your rights to access, correct, delete, and withdraw consent to your personal information so that you have the full ability to safeguard your privacy and security. Your rights include:
1. Access to and correction of your personal information
You can access or correct all the personal information you have submitted to Tuduoduo in the "Account Settings" menu on the page.
Please feel free to contact us if you need to access or correct any other personal information generated in the course of using our products and services. We will respond to your request in the manner and within the timeframe set forth in this Privacy Policy.
2. Deleting your personal information
The information you can directly erase or delete in our products and services page, including order information, browsing information, and shipping address information.
In the following cases, you can make a request to us to delete your personal information:
(1) If our handling of personal information violates laws and regulations;
(2) If we collect or use your personal information without your consent;
(3) If our handling of personal information seriously violates our agreement with you;
(4) If the purpose of our processing has been achieved, cannot be achieved or is no longer necessary to achieve the purpose of the processing;
(5) If we process personal information in breach of this statement;
(6) If we terminate our services and operations.
If we decide to respond to your request for deletion, we will also notify the entities from whom we obtained your personal information and ask them to delete it promptly, unless otherwise required by law or regulation, or if those entities have been independently authorized by you. We will securely store your personal information and restrict any further processing of it until such time as the backup can be erased or anonymized, as we cannot guarantee that the corresponding information will be immediately deleted from our backup systems due to applicable laws and technical security limitations.
3. Obtaining a copy of your personal information
You have the right to obtain a copy of your personal information. If you need to obtain a copy of your personal information collected by us, you may contact us at any time. We will provide you with a copy of your personal information upon request, subject to compliance with relevant laws and regulations and where technically feasible.
4. Automated decision making
In certain business functions, we may make decisions based solely on non-human automated decision-making mechanisms, including algorithms. If these decisions affect your legal rights, you may contact us through Customer Service.
5. Responding to your requests
If you are unable to access, correct or delete your personal information through the above methods, or if you need to access, correct or delete other personal information generated by your use of our products and services, or if you believe that there is any violation of laws and regulations by Tuduoduo, or any agreement with you regarding the collection or use of personal information, you may contact us by sending us an email at service@cnauto.vip or by any other means set forth in this Privacy Policy. For security purposes, we may require you to provide a written request, or provide documentation of your identity, and we will respond to your request within fifteen days of receiving your feedback and verifying your identity. For your reasonable requests, we do not charge fees in principle, but for requests that are repeated many times and exceed reasonable limits, we will charge a fee for certain costs as appropriate.
viii. Protection of personal information of Minors
1. CNAUTO website does not provide services to minors. If you are a minor under the age of 18, you should obtain the consent of your guardian before using our products and services. We protects the personal information of minors in accordance with the relevant national laws and regulations.
2. We will not collect personal information from minors directly. If we collect personal information from minors with the consent of their guardians, we will only use, share, transfer or disclose personal information when permitted by law, with the consent of the guardians, or when it is necessary for the protection of the minors.
3. If it is proved that a minor has registered for our products and services without the consent of his/her guardian, we will consult with the guardian and try to delete the personal information as soon as possible.
4. The child or his/her guardian has the right to access and correct the child's personal information at any time, and may also submit a request for correction or deletion to us. If you have any comments, suggestions or complaints or reports on matters related to children's personal information, please contact us. We will be ready to assist you.
ix. Account cancellation
You can submit a cancellation request in "My Account - Settings - Cancel Account", or you can contact us through online customer service, by calling the official phone number, or by email to assist you in canceling your account. You should meet the conditions (including but not limited to no arrears, no contractual disputes, etc.). After you cancel your account, we will stop providing you with products and services, and according to your requirements, unless otherwise stipulated by laws and regulations, we will delete your personal information.
x. Notices and Amendments
1. In order to provide you with better services and with the development of Tuduoduo business, this Privacy Policy will be updated. However, we will not reduce your rights under this Privacy Policy without your explicit consent. We will remind you of the updates by posting the updated version on our website and mobile terminal, and by posting on the website or by other appropriate means before the effective date, and we also invite you to visit CNAUTO website in order to keep abreast of the latest privacy policy.
2. For material changes, we will also provide a more prominent notice (we will explain the specific changes to the Privacy Policy by means including but not limited to emails, text messages or special notices on the browsing page).
The material changes referred to in this Privacy Policy include, but are not limited to:
(1) A material change in our service model. For example, the purpose of processing personal information, the type of personal information processed, and how personal information is used;
(2) Significant changes in our ownership structure, organizational structure, etc.. Such as changes in ownership due to business restructuring, bankruptcy and mergers and acquisitions;
(3) Changes in the primary recipients of personal information shared, transferred, or publicly disclosed;
(4) Significant changes in your rights to participate in the handling of personal information and the manner in which they are exercised;
(5) Changes in the department responsible for handling the security of personal information, contact information and complaint channels;
(6) When a security impact assessment of personal information indicates that there is a high risk.
3. In order for you to receive timely notification, we recommend that you notify us when your contact information is updated. Your continued use of our Services after the effective date of the update to this Policy signifies that you have fully read, understood, and accepted the updated Policy and that you are willing to be bound by the updated Policy. We encourage you to review this Policy each time you use our Services. You can view this Policy in our products and services.
xi. How to contact us
1. If you have any questions, comments or suggestions regarding this Privacy Policy or matters related to your personal information, please contact Customer Service Department for initial inquiries or you may contact us by sending an email to our specialized personal information protection email address at service@cnauto.vip. Generally, we will respond within fifteen days.
2. The operator of the Tuduoduo platform is Beijing Tuduoduo E-commerce Co., Ltd. and the common office address is Building 3, District 6, No. 188, West Road of the South Fourth Ring, Fengtai District, Beijing.
Appendix I: "Third Party SDK Catalog
1. Google Analytics SDK
Operator: Google LLC
Purpose: statistical analysis
Types of personal information collected: Number of users, Session statistics, Approximate geolocation, Browser and device information
Privacy policy link: https://policies.google.com/privacy
