Privacy Notice隐私通知

Please read the following information carefully before proceeding with the KYC/KYB onboarding and compliance verification process.

请在进行 KYC/KYB 入驻及合规核查流程前,仔细阅读以下信息。

Important Note重要说明

This Privacy Notice is made pursuant to, and should be read together with, the Privacy Policy of the Platform available at privacy-policy (as amended from time to time, the "Privacy Policy"). By reading, acknowledging or accepting this Privacy Notice, you, as business user ("you", "your" or "I"), confirm that you have already read, understood and accepted the Privacy Policy and this Privacy Notice, that you have informed the Relevant Individuals of the Privacy Policy and the Privacy Notice, provided or made the Privacy Policy and this Privacy Notice available to them, and obtained any consent, authorisation or other lawful basis required by applicable law before providing their personal information as provided in the Privacy Policy and this Privacy Notice. This Privacy Notice is the restatement of certain specific matters under the Privacy Policy. Nothing in this notice shall prejudice, limit, narrow, exclude, amend or otherwise affect the application of the Privacy Policy.

本隐私通知依据平台隐私政策 (可通过 隐私政策 获取,并不时修订,下称"隐私政策")制定,并应与隐私政策一并阅读。作为商业用户("您"或"我"),一旦阅读、确认或接受本隐私通知,即表示您确认已阅读、理解并接受隐私政策及本隐私通知,已向相关个人告知隐私政策及本隐私通知,已向其提供或使其可获取隐私政策及本隐私通知,并在根据隐私政策及本隐私通知提供其个人信息前,已获得适用法律所要求的任何同意、授权或其他合法依据。本隐私通知是隐私政策下某些特定事项的重述。本通知中的任何内容均不得损害、限制、缩小、排除、修改或以其他方式影响隐私政策的适用。

You should not proceed with KYC/KYB onboarding or compliance verification unless you have read, understood and accepted both the Privacy Policy and this Privacy Notice.

除非您已阅读、理解并接受隐私政策及本隐私通知,否则您不应继续进行 KYC/KYB 入驻或合规核查。

Capitalised terms used but not defined in this notice shall have the meanings given in the Privacy Policy.

本通知中使用但未定义的大写术语应具有隐私政策中赋予的含义。

Data Controller数据控制者

DIGITAL AUTO MARKET PLACE LTD ("we", "us" or "our")

DIGITAL AUTO MARKET PLACE LTD("我们"、"我方")

For operation of the Platform, the Maritime & Shipping Cluster Unified KYC System (UKYCS), adopted by the above Data Controller and its authorized affiliates, collects and processes personal information for customer due diligence, Know Your Customer (KYC), Know Your Business (KYB), sanctions screening, anti-money laundering (AML), fraud prevention, regulatory compliance, and related business purposes.

为运营平台及海事与航运集群统一 KYC 系统(UKYCS),上述数据控制者及其授权的关联方收集并处理个人信息,用于客户尽职调查、了解您的客户(KYC)、了解您的业务(KYB)、制裁筛查、反洗钱(AML)、欺诈防范、监管合规及相关业务目的。

Purpose of Processing处理目的

Specifically, and without prejudice to the Privacy Policy, we may collect, use, store, share, transfer, retain or otherwise process personal information of Relevant Individuals for the following purposes:

在不影响隐私政策的前提下,我们可能为以下目的收集、使用、存储、共享、传输、保留或以其他方式处理相关个人的个人信息:

  • Identity verification and authentication.身份核验与认证。
  • Customer and counterparty due diligence.客户及交易对手尽职调查。
  • KYC and KYB verification activities.KYC 和 KYB 核查活动。
  • Sanctions, watchlist, and politically exposed person (PEP) screening.制裁、观察名单及政治公众人物(PEP)筛查。
  • Anti-money laundering (AML) and fraud prevention activities.反洗钱(AML)及欺诈防范活动。
  • Risk assessment and compliance monitoring.风险评估与合规监控。
  • Regulatory reporting and legal obligations.监管报告及法律义务履行。
  • Internal audit, governance, and business risk management.内部审计、治理及商业风险管理。

The above is the restatement of certain purposes of processing relate specifically to KYC/KYB onboarding and compliance verification. They do not limit or narrow the scope of purposes of processing provided in the Privacy Policy.

以上为与 KYC/KYB 入驻及合规核查特别相关的某些处理目的的重述,并不限制或缩小隐私政策中规定的处理目的范围。

We maintain records of processing activities and ensure accountability for compliance with applicable data protection laws.

我们保留处理活动记录,并确保对适用数据保护法律的合规性负责。

Categories of Personal Information个人信息类别

Only the minimum personal information necessary for the purposes described in this notice and the Privacy Policy will be collected and processed. Specifically, and without prejudice to the Privacy Policy, the personal information which we may process in accordance with this notice and the Privacy Policy may include:

仅会收集和处理为本通知及隐私政策所述目的所必需的最少个人信息。在不影响隐私政策的前提下,我们根据本通知及隐私政策可能处理的个人信息包括:

  • Name, nationality, date of birth, and contact details.姓名、国籍、出生日期及联系方式。
  • Passport, national identity card, residence permit, or other identification information.护照、国民身份证、居留许可或其他身份识别信息。
  • Company and ownership information.公司及所有权信息。
  • Ultimate Beneficial Owner (UBO) information.实际受益人(UBO)信息。
  • Financial, business, and compliance-related information.财务、业务及合规相关信息。
  • Screening and verification results.筛查与核查结果。
  • Biometric information and other sensitive personal information where required for verification purposes.为核查目的所需的生物识别信息及其他敏感个人信息。

The above categories of information are the restatement of certain personal information which we may process specifically in connection with KYC/KYB onboarding and compliance verification. They do not limit or narrow the scope of personal information categories provided in the Privacy Policy.

以上类别为我们在 KYC/KYB 入驻及合规核查中可能处理的特定个人信息之重述,并不限制或缩小隐私政策中规定的个人信息类别范围。

Method of Processing处理方式

We take reasonable steps to ensure that personal information is accurate, complete, and kept up to date. Personal information may be collected directly from you, from information submitted through the UKYCS portal, from authorized representatives, and from authorized third-party screening and verification providers. Processing may be performed using automated and manual review processes.

我们采取合理措施确保个人信息的准确性、完整性和及时更新。个人信息可能直接从您处、通过 UKYCS 门户提交的信息、来自授权代表以及来自授权的第三方筛查和核查服务提供商处收集。处理可能通过自动化及人工审核流程进行。

Data Security Measures数据安全措施

Appropriate technical and organisational measures are implemented to protect personal information against unauthorised access, alteration, disclosure, or destruction, ensuring the integrity and confidentiality of the data processed.

我们已实施适当的技术和组织措施,以保护个人信息免遭未经授权的访问、篡改、披露或破坏,确保所处理数据的完整性和保密性。

Cross-Border Transfers跨境传输

The personal information of Relevant Individuals may be transferred to, stored in, or processed by authorized service providers, affiliated entities, regulatory authorities, or screening providers located in jurisdictions outside the country or region where the Relevant Individual is located where required for identity verification, sanctions screening, AML compliance, fraud prevention, and regulatory obligations as provided in the Privacy Policy. Specifically, you may be redirected to, or required to submit relevant personal information directly through, a third-party KYC/KYB, identity verification, AML, sanctions screening or other compliance service provider's system, webpage, interface or portal. Such processing, including any related sharing with third-party service providers and any cross-border transfer of Personal Information, is conducted in accordance with the Privacy Policy.

相关个人的个人信息可能被传输至、存储于或由位于相关个人所在国家或地区以外的授权服务提供商、关联实体、监管机构或筛查提供商处理,以用于隐私政策中规定的身份核验、制裁筛查、反洗钱合规、欺诈防范及监管义务等目的。具体而言,您可能被引导至或要求直接通过第三方 KYC/KYB、身份核验、反洗钱、制裁筛查或其他合规服务提供商的系统、网页、界面或门户提交相关个人信息。此类处理,包括与第三方服务提供商的任何相关共享及任何个人信息跨境传输,均按照隐私政策进行。

Retention Period保留期限

Personal information will be retained only for the shortest period necessary to fulfill the purposes described in this notice and the Privacy Policy, unless a longer retention period is required or permitted by applicable laws, regulations, regulatory requirements, dispute resolution, enforcement, audit, accounting or record-retention obligations.

个人信息将仅在本通知及隐私政策所述目的所需的最短期限内保留,除非适用法律、法规、监管要求、争议解决、执法、审计、会计或记录保留义务要求或允许更长的保留期限。

When the personal information is no longer necessary for the purposes for which it is processed, we will delete, anonymise or otherwise securely dispose of it in accordance with the Privacy Policy and applicable law. When determining the appropriate retention period for personal information, we consider the following factors:

当个人信息不再为实现其处理目的所必需时,我们将按照隐私政策及适用法律予以删除、匿名化或以其他方式安全处置。在确定个人信息的适当保留期限时,我们考虑以下因素:

  1. the quantity and nature of personal information;个人信息的数量和性质;
  2. sensitivity of personal information;个人信息的敏感性
  3. risks of harm arising from unauthorized use or disclosure of personal information;因未经授权使用或披露个人信息而产生损害的风险;
  4. the purposes for which we process the personal information;我们处理个人信息的目的;
  5. whether we can achieve the relevant objectives through other means; and我们是否可以通过其他方式实现相关目标;以及
  6. applicable legal and regulatory requirements.适用的法律和监管要求。

Data Breach Management数据泄露管理

In the event of a personal data breach, we will notify the relevant supervisory authorities and affected individuals in accordance with applicable legal requirements and without undue delay and we will take corrective actions to prevent recurrence.

一旦发生个人信息数据泄露,我们将根据适用法律要求,及时通知相关监管机构和受影响个人,并采取纠正措施以防止再次发生。

Rights of Relevant Individuals相关个人的权利

Subject to applicable laws and regulations, Relevant Individuals may have the right to:

在适用法律法规的前提下,相关个人可能享有以下权利:

  • Request access to their personal information;请求访问其个人信息;
  • Request correction of inaccurate or incomplete information;请求更正不准确或不完整的信息;
  • Request deletion of personal information where legally permissible;在法律允许的情况下请求删除其个人信息;
  • Request explanation regarding processing activities;请求对处理活动进行解释说明;
  • Withdraw their consent where consent is the legal basis for processing;在基于同意进行处理的情况下撤回其同意;
  • Submit inquiries or complaints regarding the processing of their personal information;就其个人信息的处理提出询问或投诉;
  • Request the transfer of their personal information to them or another party, where applicable;在适用情况下请求将其个人信息转移至其本人或另一方;
  • Object to the processing of their personal information where legally permissible.在法律允许的情况下反对对其个人信息的处理。

The Relevant Individual exercise their rights directly or you may act on behalf of a Relevant Individual only where you are duly authorised to do so. We may require the requesting party to verify its identity and, where applicable, its authority to act on behalf of the Relevant Individual before responding to any request.

相关个人可直接行使其权利,或仅在您获得适当授权的情况下,您方可代表相关个人行事。在回应任何请求前,我们可能要求请求方验证其身份,并在适用情况下验证其代表相关个人行事的授权。

Withdrawal of Consent撤回同意

Relevant Individuals may withdraw their consent at any time by contacting the designated privacy contact. You may submit a withdrawal request on behalf of a Relevant Individual only where you are duly authorised to do so. Withdrawal of consent will not affect the lawfulness of processing conducted prior to the withdrawal. Please note that withdrawal of consent may prevent the completion of KYC, compliance verification, onboarding, or business relationship activities.

相关个人可随时通过指定的隐私联系渠道撤回其同意。仅在您获得适当授权的情况下,您方可代表相关个人提交撤回请求。同意的撤回不影响撤回前基于同意进行处理的合法性。请注意,撤回同意可能导致 KYC、合规核查、入驻或业务关系活动无法完成。

Privacy Contact隐私联系渠道

For privacy-related inquiries, requests, or complaints, please contact:

如有隐私相关的咨询、请求或投诉,请联系: