Privacy Policy

Effective date: 19/10/2024

Reminders:

Geely Unified Login Portal is provided for you by [Zhejiang Geely Holding

Group Co., LTD., Registered address: No. 1760 jiangling Road, Binjiang

District, Hangzhou, Contact number: 400-0110-111] and its affiliates

(hereinafter referred to as "we" or "Geely"). We fully respect and protect your

privacy and have formulated this Privacy Policy (hereinafter referred to as

the "Policy") to remind you to read it carefully.

This policy applies to products and services certified through Geely Unified

and/or services integrated with third-party certification sources,such as the

platforms or systems of Geely, Smart, Cevt, Lotus and suppliers. this policy

applys to those products or services which are based on written

authorization but there is no independent privacy policy as well.

In particular, this policy does not apply to products or services provided by

other third parties through the Portal. You should fully understand the terms

of service and privacy policy of the third party before you choose to use the

services of the third party.

Please send us your acceptance after you read and understand thoroughly

this policy Once you start using our products and/or services.

If you have any questions, comments or suggestions about the content of this

policy, you can contact us by calling at 400-0110-111 or sending an email

to <itservice@Geely.com>.

Contents

1. How We Collect and Use Your Personal Information

2. How We Use Cookies and Similar Technologies

3. How We Share,Ttransfer and Publicly Disclos Your Personal Information

4. How We Store and Protect Your Personal Information

5. Your Rights

6. Minor’s Privacy

7. International Transfer

8. Notification Regarding Update

9. Contact Us

1. How We Collect and Use Your Personal Information

For the purposes of this Policy, "Personal Information" means all kinds of

information recorded electronically or by other means relating to identified

or identifiable natural persons,excluding anonymized information. "Sensitive

personal information" refers to the personal information,which, once

disclosed or illegally used, may easily lead to infringement of the personal

dignity of a natural person or harm to the safety of person and property.

Such as biometrics, religious beliefs, specific identities, medical and health

care, financial accounts, track and other information,and Personal

information of minors under the age of 14. We will collect and use your

personal information in the following activities.

1.1 Guarantee Platform Operation Security

In order to improve the security of the Service and better prevent security

risks such as phishing websites, frauds, network vulnerabilities, computer

viruses, network attacks and network intrusions, we will collect your

operation logs, including your IP address, operation, usage and service logs,

when you use the service.

We collect the above information to comprehensively judge the risk of your

account, conduct identity verification, detect and prevent security incidents,

and take necessary recording, auditing, analysis and disposal measures

legally. Please understand that such information is necessary for us to

provide the services and ensure the normal and safe operation of the services.

Please note that information such as individual logs cannot identify specific

natural persons. If we use the information which is combined with other

kinds of information(including personal information) to identify a specific

natural person , it is likely to be regarded as personal information during the

period of using.In the above case, we will anonymize and de-identify this

kind of personal information unless we obtain your authorization or

otherwise prescribed by laws and regulations.

1.2 Authentication and Login

1) Information that you may need to provide or allow us to collect when you

a．when you use Geely authentication source log in the Portal, we may need

to collect your domain account, employee ID, mobile phone number,

email and password to authenticate your identity.

b．when you use Smart, Cevt, or Lotus authentication sources to log in the

Portal, we may need to collect your domain account and password to

authenticate your identity.

c．when you use Supply Portal to log in the Portal, we may need to collect

your account and password to authenticate your identity.

2) When you use mobile dynamic verification to log in the Portal, we may

need to collect your mobile phone number and mobile dynamic verification

code;

3) When you use Enterprise Wechat scan code to log in the Portal, we may

need to collect your name, mobile phone number and profile picture

information;

4) If you forget your password, you can use “Lost Password” function to

reset your password. In order to ensure the security of your account, we may

need to verify your identity by using your mobile phone number dynamic

verification code.

2. How We Use Cookies and Similar Technologies

When you access the Portal, we may use "Cookies" or Similar

Technologies,which are small text files stored by a network server on a

device's hard disk,to collect your habits of accessing the Platform, your

browsing information, your login information,and to store users' preferences

or set network beacons,in order to prevent fraud, authenticate users and

collect operational information about the Services.,You can reject or manage

cookies by changing the Settings of the browser add-on. However, please

note that if cookies are disabled, you may not enjoy the best service

experience and some services may not be used properly.

3. How We Share,Ttransfer and Publicly Disclose Your Personal Information

3.1 Share

In principle, we will not share your personal information with any company,

organization or individual other than our own company, except under the

following circumstances:

1) Obtain your express authorization or consent;

2) must be provided in accordance with applicable laws and regulations,

legal procedural requirements， mandatory government requirements or

judicial rulings;

3.2 Transfer

We will not transfer your personal information to any company,

organization or individual, except under the following circumstances:

1) We will transfer your personal information to other parties after

obtaining your express consent;

2) In the case of merger, acquisition or bankruptcy liquidation, if the transfer

of personal information is involved, we will require the new company or

organization that holds your personal Information to continue to be bound

by the policy; otherwise, we will require the company or organization to seek

authorization from you again.

3.3 Publicly Disclose

We will only publicly disclose your personal information under the following

circumstances:

1) After obtaining your express consent;

2) We may publicly disclose your personal information when required by

laws, legal procedures, lawsuits or government authorities.

3.4 Exceptions for your authorization and consent

We will not require your authorization and consent when we share, transfer

and public disclose your personal information under the following

circumstances:

1) Relevant to your performance of obligations prescribed by laws and

regulations;

2) Directly related to national security and national defense security;

3) Directly related to public security, public health or major public interests;

4) Directly related to criminal investigation, prosecution, trial and execution

of judgment;

5) For the purpose of safeguarding the life, property and other important

legal rights and interests of the subject of personal information or other

individuals, and it is difficult to obtain authorization and consent from the

subject;

6) Personal information Subjects disclose Personal information to the public

by themselves;

7) Personal information collected from legally disclosed information, such as

legal news reports, government information disclosure, etc.

Please acknowledge that, in accordance with applicable laws, we will share,

transfer or publicly disclose your Information whithout further notification

and your consent，which we take technical and other necessary measures

and the recipient of such information cannot re-identify and recover a

particular individual.

4. How We Store and Protect Your Personal Information

We are committed to protecting your personal information. And we use

every possible security technology and procedure to protect your personal

information from unauthorized access, use, modification, damage or

disclosure. We have mainly taken the following safety measures:

1) We store your personal information in a computer system located in a

controlled location and take common security measures.

2) We only allow particular employees who need to process relevant

information for the operation of our products and services and require them

to perform strict confidentiality obligations.

3) We constantly strive to ensure the security of your personal information,

and take full encryption measures in the process of information transmission

to prevent your information from being subjected to unauthorized access,

use, modification, damage or disclosure.

4) When we transmit and store your special personal information, we will

be more cautious to ensure information security by taking encryption and

other technical security measures.

5) We use various systems, security technologies and procedures to strictly

protect your personal information from unauthorized access, tampering,

disclosure or destruction.and we will ensure the security of information in

accordance with the requirements of national laws and regulations.

If personal information security incidents happen, We will timely notify

you in the form of push notification or announcement as required by l

aws and regulations.which contain the basic situation,possible impact of

security incidents, measures we have taken or will take to deal with th

em, suggestions on risks you can prevent and reduce independently, an

d remedial measures for you. We will promptly deal with security risks

such as system vulnerabilities, network attacks, virus attacks and netwo

rk intrusions as well.

We will operate the Portal within the territory of the People's Republic of

China，as well as the personal information collected and generated by us is

stored in the Territory of the People's Republic of China.At present, we will

not transmit the above information abroad. If we do, we will comply with

relevant national regulations or seek your consent.

5. Your Rights

5.1 Access, Correct/Modify Your Personal Information

You have the right to access, correct/modify your personal information. If

you need to do that, you can contact us through the contact information

specified in this Policy. We will respond to your request within 15 working

days.

5.2 Withdraw Your Consent

If you wish, you can change your authorization for the processing of your

personal information (such as location, camera, photo album) by contacting

us through the contact information set out in this Policy.

Please note that when you withdraw your consent for the processing of

certain personal information, we may not be able to provide you with

certain services as normal.

Upon receiving the request of withdrawing your consent, we will no longer

process your personal information. Please understand that the withdrawal

of your consent will not affect the collection and processing of your personal

information we have dealed with.

5.3 Delete Your Personal Information

You may request us to delete your personal information under the following

circumstances:

1) Your personal information is no longer necessary for us to collect or

process;

2) You have withdrawn your consent;

3) Personal information is illegally processed;

4) We are obliged to delete your personal information as required by

applicable laws.

5.4 Close Your Account

You have the right to close your account.You can contact us to apply to close

your account. We will verify your personal identity and equipment

information, complete the cancellation within 15 working days after

successful verification.Please be aware and understand that the act of

account cancellation is irreversible.Then the Protal will stop providing

products or services to you and delete or anonymize your personal

information according to the requirements of relevant laws and regulations.

5.5 Respond to Your Request

If you wish to exercise the above rights, you can contact us by calling

400-0110-111 or sending us an email at <itservice@Geely.com>.Upon

receipt of your request, we may first verify your identity and ask you to

provide the necessary information for authentication.

Under normal circumstances, we will complete the verification, processing

or provide a reasonable explanation within 15 working days. If you are not

satisfied with our response, especially if our personal information processing

behavior has harmed your legitimate rights and interests, you can also seek

a solution through external channels.

You know, this portal provide efficient office system services and human

resources management system for the entire group of internal staff's daily

work.In order to ensure the smooth progress in your daily work and the

needs of the group requirements like group's overall human resource

management, we will decide whether we meet your request rights or not as

appropriate , If your claim affects your daily work, we may not be able to

satisfy your claim.

6. Minor’s Privacy

Our products and services are for adults only and we do not actively collect

personal information from children.Although laws and customs in different

regions define children differently, we consider anyone under the age of 14

to be a child. We do not allow children under the age of 14 to register for

an account or use our products and services, and do not knowingly collect

information about children under the age of 14.

If the guardian believe that we have collected personal information about

children at any time, please contact us and we will take steps to delete the

information as soon as possible.

7. International Transfer

In principle, personal information collected and generated by us in the

People's Republic of China will not be transferred to other countries.If we

need to transfer your personal information outside China, we will comply

with relevant national laws

，

regulations and standards.

At present, we may collect your domain account and password information

and transfer it from Sweden to the People's Republic of China for your

identity authentication when you log in Cevt. Please note that we will not

store your domain account and password information after the completion

of authentication. we have signed the Intra-Group Data Transfer

Agreement with Cevt for cross-border transmission activies, and we will

guarantee the security of your personal information in strict accordance

with the agreement.

8. Notification Regarding Update

We may change or modify this policy. If such changes or modifications would

result in a substantial impairment of your rights under this Policy, we will

notify you of such changes or modifications by a prominent notice on the

page.At that time, please be sure to fully understand the updated or revised

deemed to agree to the updated version of this Privacy Policy. And We will

not reduce your rights under this Privacy Policy without your express

consent.

Substantial changes or modifications referred to in this Policy include, but

are not limited to:

1) Major changes such as the purpose of processing user information, the use

of personal information, etc.

2) Major changes in control rights and organizational structure.Such as

business adjustment, bankruptcy merger and acquisition caused by the

owner change;

3) The changes of main object of personal information sharing, transferring

or public disclosing;

4) The changes of our responsible departments, contact methods and

complaint channels for handling user information security;

5) When user information security impact assessment report indicates that

there is a high risk.

9. Contact Us

If you have any questions or suggestions about this Policy, or find any

violations of this Policy, you can contact us by calling 400-0110-111 or

sending us an email to itservice@Geely.com . We will respond within 15 days

of receiving your request and verifying your identity.