生效日期：2023/11/17

更新时间：2024/05/17

本网站隐私政策（“隐私政策”）适用于深圳市绿联科技有限公司及其附属公司（美国绿联、香港绿联、香港绿联、德国绿联），以下简称“绿联”、“我们”、“我方”和“我们的”。我们认识到隐私是一项持续的责任，因此在我们采用新的个人数据做法或采用新的隐私政策时，我们将不时更新本隐私政策。

本隐私政策描述了Ugreen如何收集和使用您在我们的网站ugnas.com（“网站”）上提供的个人信息。本隐私政策不适用于根据合同向Ugreen客户提供的Ugreen产品或服务的使用。要查看我们的产品隐私政策，请单击此处。

本政策旨在帮助您了解：

1. 我们收集了哪些个人数据以及如何使用

2. 我们如何披露您的个人数据

3. 我们如何保护您的个人数据

4. 数据保留

5. 营销传播和订阅

6. 您的权利

7. 儿童隐私

8. 更新

9. 联系方式

1.我们收集了哪些个人数据以及如何使用这些数据

A.您直接自愿提供给我们的数据

（1） 申请体验帐户

您可以在正式购买前申请绿联私有云体验账户来体验我们的私有云服务，为此您需要提供您的手机号码并提交临时验证码，这是为了满足国家对网络实名制的要求。

（2） 漏洞提交

如果您发现或相信您在使用NAS服务时发现了潜在的安全漏洞或安全事件，我们感谢您向我们报告。为了方便我们更准确地定位、验证和处理漏洞和安全事件，请向我们提供漏洞名称、漏洞分类、漏洞类型和漏洞详细信息。您可以选择是否上传附件（如相关的屏幕截图等）。为了让我们与您取得联系，还请提供您的电子邮件地址，我们不会将您的电子邮件用于其他目的。我们根据您的同意收集和使用这些信息。

B.我们自动收集的数据

为了加快您访问我们网站的速度，我们收集IP地址并将您分配到最近的网站。

我们将您的同意作为处理您个人数据的合法依据。

C.来自第三方的数据。

1.学生折扣登记

如果您是学生，您可以在Studentsbeans上验证您的学生身份，验证后，您可以享受与学生相关的折扣，我们只从网站收集“是”或“否”的反馈。

我们将您的同意作为处理您个人数据的合法依据。 

2.我们如何披露您的个人数据

我们不会与第三方共享您的信息供其独立使用，除非：（1）您提出要求，（2）您授权，或（3）法律要求。

3.我们如何保护您的个人数据

我们采取适当的技术和组织措施来确保您的个人数据的安全。

我们已采取适当的安全措施来保护您的个人数据，防止未经授权的访问、操纵、损坏或丢失。我们使用加密技术来保护您个人数据的传输。我们对存储的个人数据使用适当的加密、访问控制和身份验证技术。我们还适当限制员工的访问权限。此外，我们定期创建个人数据的备份副本，以便在发生物理或技术事故时能够恢复对这些数据的访问。

为了应对个人数据泄露、损坏和丢失的潜在风险（称为“个人数据安全事件”），我们制定了此类事件的应急计划，并定期进行演习。

虽然我们努力保护您的个人数据，但没有一种互联网传输方法或安全系统是完美的，我们不能保证您的数据在任何情况下都是安全的。你通常处于保护自己在线的最佳位置。您有责任保护您的登录ID和密码不被第三方访问，并选择强密码。

4.数据保留

除非法律要求或允许更长的保留期（例如，出于反洗钱、会计或其他目的），否则我们将在有正当业务需要的情况下和/或在实现本隐私政策所述目的所需的时间内保留个人数据。当我们没有正当的业务需要处理您的个人数据时，我们将删除它，或者，如果这不可能（例如，因为您的个人信息已存储在备份档案中），我们将安全地存储您的个人资料，并将其与任何进一步处理隔离，直到可以删除为止。

5.我们如何分享、分配和披露您的个人信息

5.1.共享

除以下情况外，您的个人信息不会与UGREEN或其附属公司以外的任何实体共享：

（1）  我们收到您或您的监护人的明确授权或同意。

（2）  司法或行政机构要求将披露作为法律程序的一部分；

（3）  我们对用户提起法律诉讼或仲裁，以保护我们的合法权利；

（4）  此类共享是您与UGREEN之间的服务协议或使用规则所必需的；

（5）  在法律允许的范围内，防止UGREEN、其附属公司、我们服务的用户和公众的合法权利受到侵犯；

（6）  共享符合您与第三方之间达成的协议。

（7）  这些信息用于学术研究目的。

5.2.分配

我们不会将您的个人信息转移给绿联附属公司以外的任何公司、组织或个人，但以下情况除外：

（1）  在您明确事先授权和同意的情况下；

（2）  遵守法律义务、法律程序、强制性政府指令和法院命令；

（3）  在合并、分立、破产清算或收购/出售我们或我们附属公司的业务的情况下，您的个人信息可能会作为交易的一部分进行转移。我们将确保转让过程中的保密性，并要求继任实体遵守本隐私政策，否则，请寻求您的重新授权。

5.3.披露

只有在以下情况下，我们才会公开披露您的个人信息：

（1）  事先征得您的明确同意；

（2）  遵守法律、法律程序、诉讼或政府命令。

5.4.共享、分配或披露您的个人数据时获得您同意的例外情况

请注意，在某些情况下，我们可能会在未经事先授权或同意的情况下共享、分配或披露您的个人数据：

（1）  该请求与国防和安全直接相关；

（2）  该请求涉及公共安全、公共卫生和其他重大公共利益；

（3）  在直接涉及刑事调查、起诉、审判或法院命令执行的情况下；

（4）  在无法获得同意的情况下，保护重要的法律权利，如数据主体或其他个人的生命和财产；

（5）  如果个人数据已由数据主体公开披露；

（6）  从合法披露的信息来源获得的个人数据，包括但不限于新闻报道、政府信息披露和其他合法渠道。

6.如何行使个人信息管理权

您的权利包括：

(1) 可访问性和便携性。您可以要求我们确认我们是否正在处理您的个人数据，向您提供我们收集的信息以及我们如何处理您的私人信息的详细信息，并在某些有限的情况下，向您发送一份您的个人信息副本。您可以要求我们以结构化、常用的机器可读格式提供您的个人数据，也可以要求将其直接移植到另一个控制器。

您可以要求我们更正我们持有的关于您的任何不准确或不完整的个人数据。

（3） 擦除或删除。您可以要求我们删除我们持有的有关您的个人数据。

（4） 反对包括营销和自动化决策在内的处理。您可以要求我们停止出于特定目的处理您的个人数据，包括营销和分析。

（5） 限制个人信息的处理或披露

您有权根据适用法律（例如，您认为我们持有的关于您的个人数据不准确或不合法），在适当的情况下限制对其个人信息的处理或披露，例如屏蔽或删除不必要或过多的个人信息，或未按照这些法律处理的个人信息。

（6）向您当地的数据保护机构提出投诉。您可能有权向国家数据保护局或同等监管机构提出投诉。

（7）撤回同意书

我们在征得您同意的基础上处理您的大部分个人信息。您有权表示同意，也有权撤回您的同意。

（8）账户关闭

如果您已经注册了帐户，您有同样的权利关闭您的帐户。

本政策不创建、扩展或修改权利，您可能拥有上述所有或部分权利，或适用法律规定的其他权利。如果您想行使上述任何权利，请使用本政策末尾的详细信息与我们联系。我们将根据适用的隐私和数据保护法律处理您的请求。为了保护您的隐私和安全，我们可能会在处理请求之前采取措施验证您的身份。

合理的请求通常是免费处理的。我们保留拒绝不合理重复、技术负担重（如必须开发新系统或从根本上修改当前做法）、侵犯他人合法权利或不切实际（如涉及备份磁带上数据的请求）的权利。如果被拒绝，我们将通知您拒绝的原因，您有权对拒绝提出上诉、提出投诉或寻求符合适用法律的其他补救措施。

7.儿童隐私

我们不会故意向儿童索取或接收信息。如果您是孩子的父母，并且认为您的孩子向我们提供了有关自己的信息，请使用下面“联系我们”部分中的信息与我们联系。

8.更新

如果适用法律和我们的商业惯例发生变化，我们可能会更新本隐私政策。当此政策更新时，我们将通过我们网站上的弹出窗口通知您，或者我们将再次征求您的同意。

9.联系方式

如果您对本隐私政策有任何疑问或担忧，请联系我们：service@ugreen.com.

如果您有未解决的隐私或数据使用问题，而我们没有满意地解决，请联系我们位于美国的第三方争议解决提供商（免费），网址为：https://feedback-form.truste.com/watchdog/request.

Personal Information Protection Policy

Effective Date: 2023/11/17

Last updated: 2024/05/17

 This Website Privacy Policy ("Privacy Policy") applies to Shenzhen Ugreen Technology Co., LTD and its affiliates (LULIAN GROUP LIMITED, UGREEN America- AMERICA UGREEN LIMITED, UGREEN Hong Kong- HONG KONG UGREEN LIMITED, and UGREEN Germany- UGREEN Group GmbH) hereinafter referred to as “Ugreen,” “we,” “us,” and “our”. We recognize that privacy is an ongoing responsibility and will therefore update this Privacy Policy from time to time update this Privacy Notice as we adopt new personal data practices or adopt new privacy policies.

This Privacy Policy describes how Ugreen collects and uses the personal information you provide on our website located at:ugnas.com (“Website”). This Privacy Policy does not govern the use of Ugreen products or services offered under contract to Ugreen customers. To view our Product Privacy Policy, click here.

This policy is intended to help you understand:

1. WHAT PERSONAL DATA WE COLLECT AND HOW WE USE IT

2. HOW WE DISCLOSE YOUR PERSONAL DATA

3. HOW WE PROTECT YOUR PERSONAL DATA

4. DATA RETENTION

5. MARKETING COMMUNICATIONS AND SUBSCRIPTIONS

6. YOUR RIGHTS

7. CHILDREN'S PRIVACY

8. UPDATE

9. CONTACT INFORMATION

 1.WHAT PERSONAL DATA WE COLLECT AND HOW WE USE IT

 A. Data that you provide to us directly and voluntarily

(1)Apply for an experience account

You can apply for a Green Link Private Cloud Experience account to experience our private cloud services before the official purchase, for which you need to provide your mobile phone number and submit a temporary verification code, which is to meet the national requirements on the network real name system.

（2） Vulnerability submission

If you find or believe that you have found a potential security vulnerability or security incident in the use of NAS services, we thank you for reporting it to us. In order to facilitate us to locate, verify and handle the vulnerability and security incident more accurately, please provide us with the vulnerability name, vulnerability classification, vulnerability type and vulnerability details. You can choose whether to upload attachments (such as relevant screenshots, etc.). In order for us to get in touch with you, please also provide your email address, we will not use your email address for other purposes. We collect and use this information based on your consent.

B.Data that we collect automatically

1.Assign Sites

To speed up your access to our website, we collect IP addresses and assign you to the nearest website.

We rely on your consent as the lawful basis for processing your personal data.

C.Data from third parties.

1.Student discount register

If you are a student, you can verify your student status on Studentsbeans, after verification, you can enjoy student-related discounts, we only collect "yes" or "no" feedback from the site.

We rely on your consent as the lawful basis for processing your personal data.

 2. HOW WE DISCLOSE YOUR PERSONAL DATA

We do not share your information with a third party for their independent use unless: (1) you request , (2) you authorize it, or (3) it is required by law.

3. HOW WE PROTECT YOUR PERSONAL DATA

We take appropriate technical and organizational measures to ensure the security of your personal data.

We have taken appropriate security measures to protect your personal data and prevent unauthorized access, manipulation, damage or loss. We use encryption techniques to secure the transmission of your personal data. We use appropriate encryption, access control and identity verification technologies for stored personal data. We also appropriately restrict the access rights of our employees. In addition, we regularly create backup copies of personal data in order to be able to restore access to this data in the event of physical or technical incidents.

To address potential risks of leakage, damage and loss of personal data (referred to as “personal data security incidents"), we have developed a contingency plan for such incidents and conduct regular drills.

While we strive to protect your personal data, no internet transmission method or security system is perfect and we cannot guarantee that your data will be secure in all circumstances. You are often in the best position to protect yourself online. It is your responsibility to protect your login ID and password from access by third parties and to choose strong passwords.

4. DATA RETENTION

We will retain Personal Data where we have a justifiable business need to do so and/or for as long as is needed to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g. for anti-money laundering, accounting or other purposes). When we do not have no justifiable business need to process your personal data, we will either delete  it or, if this is not possible (e.g. because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.

5. How we share, assign, and disclose your personal information

5.1.Sharing

Your personal information will not be shared with any entities other than UGREEN or its affiliates, except under the following circumstances:

(1) We receive your or your guardian's explicit authorization or consent.

(2) Judicial or administrative agencies demand disclosure as part of legal proceedings;

(3) We engage in legal action or arbitration against a user to protect our legal rights;

(4) Such sharing is necessitated by the service agreement or usage rules between you and UGREEN;

(5) To prevent infringement of the legal rights of UGREEN, its affiliates, users of our service, and the public to the extent permitted by law;

(6) The sharing complies with agreements made between you and third parties.

(7) The information is utilized for academic research purposes.

5.2.Assignment

We will not transfer your personal information to any company, organization, or individual outside of UGREEN's affiliates, except under the following circumstances:

(1) With your express prior authorization and consent;

(2) To comply with legal obligations, legal proceedings, mandatory government directives, and court orders;

(3) In cases of mergers, separations, bankruptcy liquidation, or acquisition/sale of our or our affiliates' business, your personal information may be transferred as part of the transaction. We will ensure confidentiality during the transfer and require the successor entity to adhere to this privacy policy, or otherwise, seek your reauthorization.

5.3.Disclosure

We will only publicly disclose your personal information under the following circumstances:

(1) With your express prior consent;

(2) In compliance with laws, legal proceedings, lawsuits, or government orders.

5.4.Exceptions to Obtaining Your Consent when Sharing, Assigning, or Disclosing Your Personal Data

Please be aware that in certain instances, we may share, assign, or disclose your personal data without prior authorization or consent:

(1) The request is directly related to national defense and security;

(2) The request is related to public security, public health, and other material public interests;

(3) In circumstances directly involving criminal investigations, prosecutions, trials, or court order execution;

(4) To protect vital legal rights, such as the life and property of the data subject or other individuals, when obtaining consent is not possible;

(5) If the personal data has been publicly disclosed by the data subject;

(6) Personal data obtained from legally disclosed information sources, including without limitation news reports, government information disclosure, and other legal channels.

6.How to Exercise Your Right to Manage Personal Information

Your Rights include :

(2) Access and portability. You may ask us to confirm whether we are processing your personal data, provide you with details about what we have collectted and how we process your personal information,and, in some limited circumstances, give you a copy of your personal data. You may ask us to provide your personal data in a structured, commonly used, machine-readable format, or you can ask to have it ported directly to another controller.

(2)Rectification or correction. You may ask us to correct any inaccurate or incomplete personal data that we hold about you.

(3)Erasure or deletion. You may ask us to delete the personal data that we hold about you.

(4)Objection to processing including marketing and automated decision-making. You may request that we stop processing your personal data for specific purposes including marketing and profiling.

(5) Restrict the Processing or disclosure of Personal Information

You have the right to restrict the Processing or disclosure of their Personal Information where appropriate and in accordance with applicable law(for example, where you believe that the personal data we hold about you is not accurate or lawfully held),such as   , blocking, or deletion of unnecessary or excessive personal information, or personal information not processed in compliance with those laws.

（9）Lodge a complaint to your local Data Protection Authority. You may have the right to lodge a complaint with your national Data Protection Authority or equivalent regulatory body.

（10）Withdraw Consent

We process most of your personal information on the basis of your consent. You have the right to give your consent ，and you also have the right to withdraw your consent.

（11）Account Closure

If you have registered an account, you have the same right to close your account.

This Policy does not create, extend, or modify rights , you may have all or some of the above rights, or other rights, under applicable law. These rights are not absolute and are subject to conditions or limitations as specified in applicable laws. If you would like to exercise any of the above rights, please contact us using the details in the end of this Policy. We will process your request in accordance with applicable privacy and data protection laws. To protect your privacy and security, we may take steps to verify your identity before dealing with the request.

Reasonable requests are typically processed free of charge. We reserve the right to deny requests that are unjustifiably repetitive, technically burdensome (such as by necessitating the development of new systems or fundamentally amending current practices), infringe on others' legal rights, or are impractical (such as requests involving data on backup tapes).If denied, we will notify you of the reasons for the denial and you have the right to appeal the denial , file a complaint,or seek other remedies consistent with applicable law.

7.PRIVACY FOR CHILDREN

We do not knowingly attempt to solicit or receive information from children. If you are a parent of a child and believe that your child has provided us with information about themselves, please contact us using the information in the Contact Us section below.

8.UPDATE

We may update this Privacy Policy if applicable law and our business practices change. When this policy is updated, we will notify you via a pop-up window on our website or we will seek your consent again.

9. CONTACT INFORMATION

If you have any questions or concerns about this Privacy Policy, please contact us at service@ugreen.com.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.