UNIONPAY INTERNATIONAL PRIVACY NOTICE
UNIONPAY INTERNATIONAL PRIVACY POLICY
(Version: V2.0)
Publication Date:30 October 2024
Effective Date:30 October 2024
This UnionPay International Privacy Policy (“Privacy Policy” or “Policy”) applies to the products and services provided on the official website of UnionPay International (“UnionPay International Official Website” or “Official Website”) and explains to you how UnionPay International Co. Ltd. (“UPI” or “we”) may process your personal information when you browse or use our Official Website. If the products or services we provide to you have separate privacy policies, the corresponding privacy policies shall apply. Please note that this Policy does not apply to other third-party products/services (other third party, including but not limited to, any third-party websites and third party service providers) that you access through our Official website. Please refer to the privacy policy or similar statements of such third parties for specific information.
Please be sure to read and understand this Policy carefully before using our products and services, especially the terms and conditions highlighted in bold. If you have any questions, comments, or suggestions about the content of this Policy, you may contact us through the means provided under “How to Contact Us” in this Privacy Policy.
I. How do We Collect and Use Your Information?
II. How do We Use Cookies?
III. How do We Share, Transfer, Publicly Disclose and Cross-border transfer Your Information?
IV. How do We Store Your Information?
V. How do We Protect Your Information?
VI. How do You Manage Your Information?
VII. How do We Handle Information about Minors?
VIII. Revision and Notification of Privacy Policy
IX. How to Contact Us
Specialized Terms and Keywords Utilized in this Policy:
1. UnionPay International Official Website/ Official Website: refers to the official homepage of UPI (http://www.unionpayintl.com).
2. UnionPay International: refers to UnionPay International Co., Ltd, the internet information and software technology service provider of UnionPay International Official Website, with its registered address at Floor 9, No. 1899 Guozhan Road, China (Shanghai) Pilot Free Trade Zone.
3. Personal information: refers to all kinds of information related to identified or identifiable natural persons recorded by electronic or other means, excluding anonymized information.
4. Sensitive personal information: refers to the personal information that is likely to result in damage to the human dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used, including but not limited to information on biometric identification, religious belief, specific identity, medical health, financial account and whereabouts and tracks, as well as the personal information of minors under the age of 14.
I. How do We Collect and Use Your Information?
When you use the products or services provided by us, we need or may need to collect and use the following information as follows:
(i) Browsing the Official Website
If you only browse or search information on the Official Website, you do not need to register an account and provide your personal information.
(ii) U•Plan section: collect and manage your coupons
We provide you with coupon browsing and collecting services through our Official Website. You can browse the preferential information in U•Plan section. In some occasions, for the purpose of account management, user rights response, etc, before you collect the coupon, you need to register and log in as a user on the Official Website. Under such circumstances, we may collect coupon information and your basic registration or log-in information (such as mobile phone number/email address and corresponding verification code or password). You can refuse to provide the above-mentioned information, and by doing so will not affect your ability to browse the Official Website.
(iii) Tax refund section: inquire about tax refund process
We provide you with tax refund process inquiry services through our tax refund section. We may collect your tax refund information, i.e. the tax refund form number when you use the Planet tax refund portal, so that we could verify your tax refund information.
(iv) Submit your resumes to us
You can browse and review our job openings on Recruitment section. If you wish to apply for any position, you can send your resume to recruitment@unionpayintl.com and indicate the name of position you are applying for. After receiving your resume, we might contact you based on the contact information provided in your resume and notify you to take the written test or interview. If you are not hired by us, we will keep your resume in our talent database so that we can consider your application for future positions. Your personal information will be used solely for the purpose of recruitment process, including but not limited to the screening resumes, conducting written tests and interviews, background check, medical examination and building talent database, and will not be used for any other commercial purposes. You understand and confirm that your resume contains personal information, and by submitting your resume to us, you are deemed to have agreed on our processing of your personal information in accordance with the requirements of this Policy.
(v) Advertisement Marketing
We may send you marketing/benefit information and other preferential information through your email or mobile phone number in order to provide you marketing/benefit activities concerning with UnionPay Card. If you are unwilling to receive this message, you can unsubscribe through the unsubscribed method provided in mobile phone message or email, or you can contact us directly to refuse or request termination of this service at any time.
(vi) Exemptions from obtaining consent for processing your personal information according to the law
We will only process your personal information when we have a legal basis for such processing. Please understand that apart from obtaining consents, which serve as our primary legal basis for data processing, the following circumstances may also constitute as legal basis on which we may process your information without your consent in accordance with applicable laws, regulations, and national standards:
(1) where it is necessary for the conclusion or performance of a contract to which the individual concerned is a party;
(2) where it is necessary for the performance of statutory duties or legal obligations;
(3) where it is necessary for the response to a public health emergency or for the protection of the life, health and property safety of a natural person in an emergency;
(4) where such acts as news reporting and public opinions monitoring are carried out for the public interest, and the handling of personal information is within a reasonable scope;
(5) where it is necessary to handle the personal information disclosed by the individual concerned or other personal information that has been lawfully disclosed within a reasonable scope; and
(6) other circumstances prescribed by laws and administrative regulations.
II. How do We Use Cookies?
In order to ensure a smoother and easier use experience for you, we may identify you through a small data file "Cookie" to help you reduce the number and frequency of information input, or help assess the security status of your account. Cookie usually contain identifiers, site names, numbers and characters. By cookies, websites can store data such as your preferences.
We will not use Cookie for any purpose other than the purpose described in this Policy. The Cookie storing your data is unique, and can be read by those web servers which published cookies in your domain only. Most web browsers have the function of managing and blocking Cookie, you can manage or refuse Cookie by setting the web browser, but it may impact part of the services and functions of our website when you use it, we suggest you to consider these possible impacts when you mange Cookie in order to ensure a more optimum user experience for you.
We take reasonable technology and management measures for protecting data collected by Cookie, and prevent data disclosure, destruction or unauthorized access. We will not share the data collected by Cookie with any third parties, unless for the necessity of achieving the aforementioned purpose, and we will ensure the third party to comply with the privacy protection standard equally.
You understand and agree that we process Cookie in accordance with requirements of applicable laws and regulations. Please refer to our Cookie Policy for knowing more information about Cookie and how to manage your Cookie.
III. How do We Share, Transfer, Publicly Disclose and Cross-border transfer Your Information?
(1) Share
1. Sharing principle
a. Principle of authorization and consent: unless otherwise permitted by applicable laws, we will not share your personal information without your consent. If the purpose of affiliates and third parties to use the information exceeds the scope of the original authorization, they need to obtain your consent again.
b. Principle of legitimacy and minimum necessity: the shared personal information must have a lawful and legitimate purpose, and the shared personal information is within the minimum necessity limit of achieving the purpose.
c. Principle of security prudence: we will carefully evaluate the purpose of affiliates and third parties to use shared information, comprehensively evaluate the security guarantee ability of these partners, and require them to abide by the requirement of privacy protection and data security in cooperation agreement.
2. In order to provide you with tax refund services, when you use the Planet tax refund portal to check the progress of Planet tax refunds, your tax refund tracking number will be transmitted to the Planet tax refund company(Planet Payment Group Holdings Limited; Website: planetpayment.com; Contact email: tourists@planetpayment.com; Contact number: +97145864700) to provide you with inquiry services.
(2) Transfer
1. Unless otherwise permitted by applicable laws, we will not transfer your personal information to any other third party without your consent.
2. With the ongoing development of our business, we may carry out merger, acquisition and asset transfer, so, your personal information may be transferred. In case of the above changes, we will require the successor to protect your personal information in accordance with laws and regulations and security standards not lower than those specified in this Privacy Policy, otherwise we will require the successor to obtain your authorization and consent again.
(3) Public display
We will not publicly disclose your information unless required by applicable laws and regulations or obtaining your consent. When publicly disclosing your personal information, we will adopt security measures that meet industry standards.
(4) Cross-border transfer of personal information through UnionPay Card cross-border transactions
In order to fulfill the cross-border transactions using your UnionPay Cards, we need to transfer your relevant personal information (such as UnionPay Card number, transaction time and amount) to overseas cooperative institutions (such as overseas cooperative institutions engaged in merchant acquiring business), in order to complete the authorization, clearing, transaction recording and other UnionPay Card transaction services. Regarding the overseas recipients of specific UnionPay Card transactions processed through the UnionPay International network, you can call customer service line 95516, your issuing institution, or merchant to obtain relevant information.
IV. How do We Store Your Information?
(i) Storage location
We will store your information in the People's Republic of China in compliance with applicable laws and regulations.
(ii) Storage period
We will retain your personal information for as long as the information is needed for the purposes of providing products and services as outlined in the Policy and for any additional period that may be required, for example, responding to your potential inquiries or complaints in consideration of the statute of limitations; ensuring the security and quality of the services we provide to you; complying with retention periods as mandatorily required under applicable laws or any other extended retention periods agreed by you.
When the storage period is expired, we will delete or anonymize your personal data according to requirements of applicable laws. We are committed to abiding by applicable laws and regulations and ensure that your personal data is properly protected.
V. How do We Protect Your Information?
Appropriate technical and management measures have been taken to protect your information, including but not limited to:
a. Concerning the internal management system, we have established two certified systems: an information security management system compliant with the ISO 27001 standard and a personal privacy protection system compliant with the ISO 27701 standard. We have implemented data classification and grading measures based on the sensitivity and type of data.
b. Regarding technical guarantees, we have adopted encryption technology, anonymization processing, secure transmission, as well as other techniques, to ensure the security of your information.
c. In the event of an information security incident, we will provide you with the following information in accordance with company policies and applicable legal obligations: the basic information and potential impacts of the security incident; the preventative and mitigating measures that have been implemented or are planned; recommendations for self-prevention and risk mitigation by yourself, and remedial actions have been taken. Furthermore, we will also report on the handling of the security incident as required by regulatory authorities.
d. Despite the reasonable and effective measures we have implemented and our adherence to the standards required by applicable legal provisions, we respectfully request your understanding that it is not always possible to guarantee the absolute security of information due to technological limitations and the existence of various potential malicious methods even we have tried every possible measure. We promise we will make every effort to guarantee the security of the information you provide to us.
e. Please note that the systems and communication networks you use to access our services may encounter problems due to factors beyond our control. Therefore, we strongly recommend that you take proactive measures to protect your personal information, including but not limited to using a strong password, changing your password regularly, and not disclosing your account password or related personal information to others.
f. We have established relevant emergency plans and will immediately initiate these plans in the event of any data breach/information security incident, striving to mitigate the impact and consequences of such incidents. Upon the occurrence of any information security incident (e.g. leakage and loss), we will notify you of the following information in a timely manner in accordance with the requirements of company policy and applicable laws: the basic information and potential impacts of the security incident; the preventative and mitigating measures that have been implemented or are planned; recommendations for self-prevention and risk mitigation by yourself; and remedial measures have been taken by us. We will promptly notify you of the incident through push notifications, emails, letters, text messages, and other related methods. Where it is impossible to notify all users one by one, we will post an announcement using a reasonable and effective method. Furthermore, we will also report the progress of information security incidents as required by regulatory authorities.
g. Please note, once you leave the UnionPay International Official Website and use other information or services (including but not limited to websites, application etc.) provided by any third party, we will neither be able to nor be obligated to protect any personal information you submit to third parties during the use of services or information provided by them, regardless of whether you access to them through the links or under the guidance of UnionPay International Official Website. Therefore, please read carefully the privacy policy or similar statements provided by such third parties.
VI. How do You Manage Your Information?
We attach great importance to your effective management of personal information and endeavor to protect your rights to query, access, withdrawal of authorization, cancel account, complaint and report regarding your information, so that you can safeguard your privacy and information security.
(i) Withdrawal of authorization
You can communicate with us using the service line 95516 if you wish to withdraw your consent or authorization.
(ii) Enquire, correct and supplement your information
After you log in through U•Plan section, you can check, adjust or supplement your mobile phone number or email address in your account; and you can check your coupon status (available, used and expired coupon information) in “coupon package”.
(iii) Delete your information
After you cancel your account, you will not be able to use the relevant services, for instance, you will not be able to check, browse or redeem your previously collected U•Plan coupon and we will delete your personal information in consideration of storage period as outlined in this Policy and pursuant to requirements under applicable laws.
You can request us to delete your personal information in the following cases:
(a) If the purpose of processing has been achieved, unachievable or is no longer necessary to achieve it;
(b) If we stop providing products or services, or the storage period has expired;
(c) If you withdraw your authorization;
(d) If our handling of personal information violates laws and regulations or violates the agreement with you;
(e) Other circumstances specified by laws and administrative regulations.
Please understand that due to the restrictions of applicable laws and security technologies, we may not be able to delete the corresponding information from the backup system immediately. We will safely store your personal information and limit any further processing until the backup can be erased or anonymized.
(iv) Cancel your account
You can communicate with us using the service line 95516 if you wish to cancel your account.
(v) Complaints and reports
If you believe that your personal information rights may be infringed, or if you find clues of infringement, you can contact our service line 95516 to provide feedback. We will promptly provide feedback on your complaints and reports after verification.
(vi) Response to your above requests
In order to ensure the security of your account, when you make the above request to us, we may ask you to verify your identity (such as requiring you to provide authentication information or other methods) before processing your request.
In principle, we will not charge you for reasonable requests. However, we will charge a certain fee as appropriate for multiple and repeated requests which is out of reasonable scope. We may reject requests that are not directly relevant to your identity, information that is repeated for no apparent reason, or requests that involve excessive technical requirements (e.g., the development of a new system or fundamental changes to the current practice), that pose a risk to others' legitimate rights or interests, or that are impractical.
In accordance with the requirements of laws and regulations, we will not be able to respond to your request under the following circumstances:
1. Where the request is related to our fulfillment of the obligations prescribed by laws and regulations;
2. Where the request is directly connected with national security or national defense security;
3. Where the request is directly connected with public security, public health security, or material public interests;
4. Where the request is directly related to criminal investigations, prosecution, trial, or execution of judgments;
5. Where there is sufficient evidence that you have subjectively malicious intent or abuse your rights;
6. Where we seek to protect your or other individuals' life, property, and other major legitimate rights and interests, but we find it difficult to obtain your or other individuals' consent;
7. Where the response to your request will result in serious damage to the legitimate rights and interests of you or other individuals or organizations; and
8. Where the request involves a trade secret.
VII. How Do We Handle Information about Minors?
1. We assume that you have the appropriate civil conduct capacity when you use our services or sign up for any UnionPay promotion activities If you are a minor under the age of eighteen (18), we require you to request your parent or other guardian (collectively, the "Guardian") to read this Privacy Policy carefully, and to obtain the consent of the Guardian before you use our services or provide information to us. We do not provide services to children under the age of fourteen (14). If you are under the age of fourteen (14), please stop using our services immediately and inform the Guardian.
2. If there is evidence that a minor has registered and used our products and/or services without the consent of their guardian, we will contact the guardian and delete the relevant personal information as soon as possible.
3. If you are the guardian of a minor and find that we have mistakenly collected the personal information of the minor unknowingly, or if you have questions about the personal information of the minor under your guardianship, please contact us through the contact information stated in this Privacy Policy. We will delete the relevant information or take other necessary measures upon the receipt of requests from you.
VIII. Revision and Notification of Privacy Policy
Please understand that in order to adapt to the development of the social environment and to provide better services, we will develop and update our services constantly. Therefore, we may revise this Privacy Policy from time to time and update the revised version along with the effective date on Official Website. You may refer to this Privacy Policy and prior versions of this Privacy Policy on the bottom of Official Website at any time.
IX. How to Contact Us
If you have any questions, comments, or suggestions about the content of this Privacy Policy or if you have any complaints, suggestions, or questions about our collection, use, or disclosure of your personal information, you can contact us in the following ways, and we will reply to your request within 15 days.
Email: upidataprivacy@unionpayintl.com
Service line: 95516.
Address: No. 1899 Guozhan Road, China (Shanghai) Pilot Free Trade Zone.
If you are not satisfied with our response, especially if you believe that how we process your personal information has harmed your legitimate rights and interests, you may also file a lawsuit with the competent court at the place where the defendant is domiciled for the resolution of the case.