PRIVACY POLICY

Last updated: March 2023

HONGFA takes the protection of your personal data very seriously and strictly complies with the applicable data protection laws and regulations, in particular with the provisions of the EU General Data Protection Regulation (GDPR). Please find below information on how we collect and use your personal data when you use our website or are in direct contact with us. You may access this policy at any time on our website. 

1. DATA CONTROLLER

2. YOUR RIGHTS

2.1 You generally have the below individual’s rights, i.e. to ask us:

• for access to and a copy of your personal data that we hold (Art. 15 GDPR)

• that some of your personal data is provided to you or sent to another data controller in a commonly used, machine readable format (Art. 20 GDPR)

• to update or correct your personal data in order to make it accurate (Art. 16 GDPR)

• to delete your personal data from our records in certain circumstances (Art. 17 GDPR)

• to restrict the processing of your personal data in certain circumstances (Art. 18 GDPR)

And you may also have a right:

• to object to us processing your personal data in certain circumstances (e.g. in case we process your data for direct marketing purposes - Art. 21 GDPR).

2.2  These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data or if making the information available to you would reveal personal data about another person or if we are legally prevented from disclosing such information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

2.3  If you want to exercise your rights regarding your personal data, please send any requests for information, data subject access requests or objections to the data processing by email to webmaster@hongfa.com or to the address specified under Sec. 1.

2.4  We hope that we can satisfy any queries you may have about the way we process your data. In the event you still have unresolved concerns, you also have the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR, in particular the data protection authority in the Member State of your habitual residence or place of work.

2.5  Finally, please note that where we require personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. 

3.  INTERNATIONAL TRANSFERS AND DATA SECURITY 

3.1  As we are a globally operating company the data that we collect from you may be transferred and stored by us or our service provider(s) outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA (in our case in the People's Republic of China (PRC)) who works at HONGFA or for one of our suppliers. Where information is transferred outside the EEA, and where this is in a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by EU Commission approved standard contractual clauses, a Privacy Shield certification or a vendor's Processor Binding Corporate Rules. Please let us know if you have any questions or would like to receive a copy of the relevant documents (see below for contact details).

3.2  Our Sites may, from time to time, contain links to other websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for the processing on these websites. Please check the policies of these websites before you submit any personal data to these websites.

3.3  We have taken technical and organisational security measures in order to protect your data held by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Your data is transmitted in an encrypted form; we use the encryption TLS 1.2.

4.  COLLECTION OF PERSONAL DATA IN CASE OF USE OF OUR WEBSITE FOR INFORMATION PURPOSES

4.1  If the website is used for information purposes only, i.e. if you do not contact us beyond using our website or otherwise transmit information to us, we collect data which is automatically transmitted by your browser in order to enable you to visit the website. Such storage of data exclusively serves system-related and statistical purposes (on the basis of our legitimate interests according Art. 6 para. 1 lit. f) GDPR) as well as, in exceptional cases, to report criminal offences (on the basis of Art. 6 para. 1 lit. e) GDPR).

We may automatically collect the following data from you:

• technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, the type of device, browser and version, and operating system and platform; and

• information about your visit, including the full Uniform Resource Locators (URL), page response times and download errors.

We also may collect personal data by cookies as outlined below (see Section 10 “Cookies Policy” below. 

5.  COLLECTION AND PROCESSING OF PERSONAL DATA WHEN CONTACTING US AND FOR ADVERTISING PURPOSES

5.1  Your personal data (e.g. your name, phone number and email address) will be collected and processed if you explicitly provide us with such data for contact purposes. The use of this personal data exclusively serves the purpose of processing your request and is based on Art. 6 para. 1 lit. lit. f) GDPR.

5.2  Your personal data will only be used for advertising purposes subject to your previous consent according to Art. 6 para. 1 lit. a) GDPR. The data provided to us by you for the purpose of receiving our newsletter will be stored by us until you unsubscribe from the newsletter and will then be erased subject to legal retention obligations.

6.  COLLECTION AND PROCESSING OF PERSONAL DATA FOR THE PERFORMANCE OF CONTRACTS

6.1  We process your personal data (e.g. your name, email address, postal address, telephone number, country, business sector, company name, business interests) for the purposes of establishing and performing the contractual relationship as well as to comply with statutory requirements. The processing is based on Art. 6 para. 1 lit. a) GDPR (communication with the customer's contact person as necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract). The processing is furthermore based on Art. 6 para. 1 lit. c) GDPR as we may have a statutory obligation to store personal data, e.g. in situations of relevance under tax, trade law or fraud prevention.

7.  COLLECTION AND PROCESSING OF PERSONAL DATA IN CASE OF APPLICATIONS

7.1  We furthermore collect personal data when you apply for a position with us. The processing of this personal data by us is required for the performance of the recruiting process, including setting up an electronic job applicant file, managing your application, organising interviews – in short, the processing is necessary for us to enter into an employment contract with you. The processing is based on Art. 6 para. 1 lit. b) GDPR. You can find more details on the processing of your personal data in connection with your application in our [Privacy Announcement for Applicants] which we will provide you separately in due time.

8.  RECIPIENTS/CATEGORIES OF RECIPIENTS OF PERSONAL DATA

8.1  We may share your personal data with affiliates of HONGFA (meaning any company, corporation or other HONGFA entity listed hereunder for the improving our customer relationships and handling of your requests related to specific countries. 

8.2  Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws. Personal data may also be shared with third party service providers (like event partners, distributors, Engineering, procurement and construction (EPC) customers), who will process it on behalf of HONGFA for the purposes above.  

8.3  Furthermore, we use service providers for commissioned data processing whom we have instructed with the data processing within the scope of this privacy notice, e.g. within the framework of our website's technical infrastructure (like suppliers for conducting email marketing, event planning and management, and website design and creation). In this context, our technical service providers may also be located outside the EU/EEA. Where your data is transferred outside the EEA, and where this is in a country that is not subject to an adequacy decision by the EU Commission, your data is adequately protected like described above under section 3.

9.  RETENTION PERIOD OF PERSONAL DATA

9.1  Where you are a customer, we will keep your data for the duration of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this notice in accordance with applicable law.

9.2  Where we process personal data with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to process your data so that we can respect your request in future.

9.3  Data about your visits to our websites and where we process personal data for website security purposes, we will retain this data for [6/12] months following your last visit to our website. 

9.4  Laws may require us to store certain data of you for specific legal retention periods (this can be up to ten years in case of invoices). In other cases, we may retain data for an appropriate period after any relationship with you ends to protect us from legal claims (until the end of statutory limitation periods), or to administer our business (e.g. for book keeping and tax obligations). 

10. COOKIES POLICY 

How to manage cookies

You can change your cookie preferences at any time by clicking on the cookie consent management tool on our website. HONGFA's Cookie Consent Manager is a tool that allows you to modify settings related to non-necessary Cookies. It is not possible to modify settings related to Necessary Cookies. You can then adjust the available sliders to ‘On’ or ‘Off’, then clicking ‘Save’. You may need to refresh your page for your settings to take effect. These consent settings are stored in your browser’s local storage, are never (as far as technology permits) transmitted to our servers and do not allow our servers to identify or track individual users.

11. Google Analytics: This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. We use the information to compile reports and to help us improve the website. The cookies collect specific information, including the number of visitors to the website where visitors have come to the website from and the pages they visited. Please note that the data processing is essentially carried out by Google and Google may use your data collected by Google Analytics for any of its own purposes, such as profiling, and will link it to other data such as any Google Accounts. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored and your relevant personal data is processed based on your consent according Art. 6 (1) (a) GDPR. Cookies in connection with Google Analytics have a lifespan of 13 months and will be deleted automatically after that.  

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases the full IP address is sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements when using Google Analytics.

You can prevent the collection of your data by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current web browser.

Furthermore, data collection and storage by Google Analytics can be objected to at any time by setting an opt-out cookie, with effect for the future. For this, please click on the following link: Deactivate Google Analytics. By confirming the link, a so-called opt-out cookie is set on your data storage medium. This cookie has a lifetime of 5 years. Please note that, if you delete all cookies from your computer, such opt-out cookie will also be deleted, i.e., if you wish to continue to object to anonymised data collection by Webtrekk, you have to set the opt-out cookie again. The opt-out cookie is set per browser and computer. If you visit our websites from your home and workplace or using different browsers, you have to activate the opt-out cookie for the different browsers or for the different computers.

12. CHANGES TO OUR PRIVACY POLICY

This Privacy Policy may be updated periodically. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.