1. Personal data
Personal data is information that can identify an individual when used alone or in combination with other information. Such data is submitted to us by you when you use our website, products or services and when you interact with us, or we obtain it by recording how you interact with our website, products or services, for example, through technologies such as cookies. The data we collect depends on the website you visit or the products and services you use, and may include personal data such as name, address, email address, phone number, etc. The purpose of collecting personal data is to get in touch with you in order to provide appropriate services or send important notifications, etc.
2. Privacy Policy
Shanghai Hongrun Boyuan School understands the importance of personal data to customers and users. For this reason, Shanghai Hongrun Boyuan School attaches great importance to the protection of customers' and users' personal data, and has taken a series of measures to ensure that the relevant business complies with the applicable personal data protection requirements (such as GDPR).
2.1 To ensure effective implementation of personal data protection requirements, Shanghai Hongrun Boyuan School has appointed a Data Protection Officer (DPO).
2.2 Shanghai Hongrun Boyuan School adopts industry-recognized personal data protection methods and practices. In business scenarios where the GDPR applies, Shanghai Hongrun Boyuan School utilizes the Data Protection Impact Assessment (DPIA) methodology to assess and mitigate personal data security risks in its products and services.
2.2.1 Shanghai Hongrun Boyuan School requires a full assessment of the personal data involved in its products and services, and a DPIA is required for projects involving personal data;
2.2.2 Projects involving personal data are required to create data inventory and data flow diagrams;
2.2.3 Projects involving personal data are required to identify possible risks during data processing (including collection, use, storage, sharing, deletion, etc.) and take appropriate measures (including management, physical and technical measures) according to the risk level
2.2.4 After the execution of DPIA, the corresponding report shall be output and approved by DPO.
2.3. Shanghai Hongrun Boyuan School implements technical measures including intrusion detection, access control, encryption, data leakage prevention, anti-spam, endpoint security, vulnerability scanning, etc., and tests the effectiveness of personal data protection measures through penetration testing.
2.4. Shanghai Hongrun Boyuan School has established an emergency response mechanism for personal data leakage. In the event of a personal data leakage, Shanghai Hongrun Boyuan School will immediately start the emergency response process, trying to minimize the loss that may be caused by the personal data leakage and ensure that the affected people are properly notified.
2.5. Shanghai Hongrun Boyuan School has established an ongoing employee privacy policy training mechanism to ensure that every employee involved in the GDPR is able to accurately understand the legal principles of data protection based on his/her specific job duties and strictly implement the school's applicable systems and processes.
2.6. To ensure compliance, Shanghai Hongrun Boyuan School has implemented the necessary technical and process audits for personal data protection.
Personal data protection is not only a legal requirement, but also a corporate social responsibility. Shanghai Hongrun Boyuan School will continue to optimize its products and services to ensure security and privacy and reduce the risk of personal data protection for customers and users.
3. Policy Updates
Shanghai Hongrun Boyuan School reserves the right to update or modify this policy from time to time. If this policy changes, we will post the latest version of the policy here. If we make material changes to our Privacy Policy, we may also send you notice of the changes through different channels, for example, by posting a notice on our website or by giving you a separate notice.
