Shanghai MExpert Technology Co., Ltd.
MExpert Technology
1. Personal Data
Personal data refers to information that can identify an individual, either alone or in combination with other information. Such data may be submitted by you when you use our website, products, or services, or when you interact with us, or it may be collected through technologies such as cookies as we record how you engage with our website, products, or services. The data we collect depends on the website you visit or the products and services you use, and may include personal information such as your name, address, email, and phone number. The purpose of collecting personal data is to communicate with you for the provision of relevant services or to send important notifications.
2. Privacy Policy
Shanghai MExpert Technology Co., Ltd. and its global affiliates (hereinafter referred to as "MExpert Technology," "we," or "our") recognize the importance of personal data to our clients and users. Accordingly, Shanghai MExpert Technology Co., Ltd. takes the protection of client and user personal data very seriously and has implemented a series of measures to ensure compliance with applicable personal data protection requirements (such as GDPR).
2.1 To effectively implement personal data protection requirements, Shanghai MExpert Technology Co., Ltd. has appointed a Data Protection Officer (DPO).
2.2 Shanghai MExpert Technology Co., Ltd. employs industry-recognized methods and practices for personal data protection. In business scenarios governed by GDPR, Shanghai MExpert Technology Co., Ltd. utilizes Data Protection Impact Assessments (DPIAs) to evaluate and mitigate security risks to personal data within our products and services.
2.2.1 Shanghai MExpert Technology Co., Ltd. mandates a comprehensive assessment of personal data involved in products and services; projects involving personal data must conduct a DPIA.
2.2.2 Projects involving personal data are required to establish a data inventory and data flow diagram.
2.2.3 Projects that involve personal data must identify potential risks during the data processing lifecycle (including collection, use, storage, sharing, deletion, etc.) and implement corresponding measures according to the level of risk (including administrative, physical, and technical measures).
2.2.4 Following the completion of the Data Protection Impact Assessment (DPIA), a corresponding report must be generated and approved by the Data Protection Officer (DPO).
2.3 Shanghai MExpert Technology Co., Ltd. has implemented a range of technical measures, including intrusion detection, access control, encryption, data loss prevention, anti-spam solutions, endpoint security protection, and vulnerability scanning. Additionally, penetration testing is conducted to evaluate the effectiveness of personal data protection measures.
2.4 Shanghai MExpert Technology Co., Ltd. has established an emergency response mechanism for personal data breaches. In the event of a data breach, the company will promptly activate the emergency response process, striving to minimize potential losses caused by the breach and ensuring that affected individuals receive appropriate notification.
2.5 Shanghai MExpert Technology Co., Ltd. has instituted an ongoing training mechanism for employee privacy policy awareness, ensuring that every employee involved with GDPR comprehends the legal principles of data protection based on their specific job responsibilities and strictly adheres to the applicable policies and procedures of the company.
2.6 To ensure compliance, Shanghai MExpert Technology Co., Ltd. performs necessary technical audits for personal data protection as well as process audits.
Personal data protection is not only a legal requirement but also a corporate social responsibility. Shanghai MExpert Technology Co., Ltd. will continue to optimize products and services to safeguard security and privacy while mitigating the risks associated with personal data protection for customers and users.
3. Policy Updates
Shanghai MExpert Technology Co., Ltd. reserves the right to periodically update or modify this policy. Should there be any changes to this policy, the latest version will be published here. If we make significant changes to the privacy policy, we may also notify you through various channels, such as posting a notice on our website or send them directly to you individually.