Personal Information Protection and Privacy Policy
This Policy only applies to ZKBio CVSecurity products or services of ZKBio CVSecurity, including ZKBio CVSecurity Web Server, ZKBio CVSecurity Mobile APP.
Lastly updated on: September 2021 
If you have any question, comment or suggestion, please contact us via the following means:
Email:zkbiosecurity@zkteco.com

This Policy will help you understand the following:
-Personal information collection rules
-How we protect your personal information
-Your rights
-How we handle personal information of minors
-How this Policy is updated
-How to contact us
ZKTeco Co., Ltd. and its affiliates (hereinafter referred to "ZKTeco", or "Company" or "We") acknowledgs the importance of personal data and will do everything possible to protect your personal information. We are committed to preserving your trust in us by protecting your personal information based on the following principles: responsibility in accordance with authority, purpose specification, informed consent, minimal necessary, security safeguard, subject participation, openness and transparency, etc. ZKTeco also commits to protect your personal information by implementing appropriate security measures in accordance with industry accepted security standards.
Before using any products (or services), please read this Policy carefully and make sure you have fully understood and agreed to this Policy. By using any products or services, you acknowledge that you have fully understood and agreed to this Policy.
Definitions
1.ZKBio CVSecurity Services refers to cloud services developed and operated by the ZKBio CVSecurity platform to improve the management of ZKBio CVSecurity modules, including personnel, access control, time & attendance, consumption, lift control, visitors, parking, patrol, video, information screens, facial recognition, and system management. These services can be deployed in the cloud as well as on local servers, including websites, products, offline software, and mobile devices (apps).
2.ZKBio CVSecurity Service Provider refers to ZKTeco, the company that developed and provides ZKBio CVSecurity services.
3.Personal Information refers to information recorded electronically or otherwise that can be used alone or in combination with other information to identify the identity and activities of a particular natural person. Such information includes name, mobile phone number, ID number, email address, personal biometric information (e.g., face information), employment information (employee number), corporate information (corporate name and business identification number), and personal information of children under age 14 (inclusive).
4.Personal Information Controller an organization or individual that has the authority to determine the purpose and manner of handling personal information.The personal information controllers referred to in this agreement are corporate/organizational users of ZKBio CVSecurity products.
5.Local Server the enterprise/organization allocates and authorizes the access to and use of computers or devices on which ZKBio CVSecurity products are installed. That is, the enterprise/organization controls the personal information and data stored on the local server.

IPersonal information collection rules
(1) Which of your personal information will be collected by us
We will collect and use your personal information for the following purposes:
1.To Help You Activate ZKBio CVSecurity Services.
To register and activate these services, you must provide basic information such as your company name, contact, email address, and phone number, so that we can provide you with services related to employee registration and visitor booking.
2.Providing You With ZKBio CVSecurity Services.
1)Information to Provided by You
In using our services, you may provide feedback to help us better understand your experience and needs, so as to better improve our services.
2)Information We Collect During Your Use of the Service
To provide you with services, pages, and search results that better meet your needs; understand product suitability; and identify any issues with your account, we will collect information about the products and/or services you use, along with how you use them. This information includes:

Device Information: We receive and record information about the device you are using (e.g., device model, operating system version, device settings, unique device identifier, and other hardware and software characteristics), the location of the device (e.g., IP address, GPS/BeiDou location information, Wi-Fi connections, Bluetooth, and base stations that can provide relevant information) based on the specific permissions you granted during the installation and use of the software.

Log Information: When you use products or services provided by our website or client end, we will automatically collect detailed use information of our services and save them as relevant web logs. For example, your search and query content, IP address, browser type, language used, date and time of visit, and the records of webpages visited.

Separate device and log information cannot be used to identify particular natural person.

If we combine such non-personal information with other information to identify a specific natural person, or use this information in combination with personal information, such non-personal information will be treated as personal information during the combined use. We will anonymize and de-identify such personal information unless we obtain your authorization or are otherwise required by laws and regulations.

When you contact us, we may save your communication or call records, content, or contact information to better help you solve the problem, contact you in the future, or to help us solve related problems.
3.Security

To prevent, detect, and investigate fraud, infringement, breach of security, unlawfulness, or violations of agreements, policies, or rules with us and/or our partners, we may collect or integrate your user information, service usage information, device information, log information, and information that we and/or our partners have obtained your authorization to share or that is shared under the law.

If we cease to operate ZKBio CVSecurity services, we will promptly cease the continued collection of information about you and your employees and visitors, and will delete or anonymize your personal information in our possession.

(2) How we use your personal information
Your information is collected to provide you with services, and to improve the quality of those services. To this end, we will use your information for the following purposes:
1.To provide you with ZKBio CVSecurity products or services, and to maintain, improve, and optimize these services and your user experience.
2.To prevent, discover, and investigate fraud, infringement, acts endangering security, violations of laws and our agreements, policies, or rules, and to protect you, other users, or the public, along with us and our legitimate rights and interests, we may use or integrate your user information, service use information, device information, log information and information that was obtained by us, our partners, or shared under the law to comprehensively determine risks of your account and transactions, verify identities, detect and prevent security incidents, and take the necessary recording, auditing, analyzing, and disposing measures according to relevant laws.
3.We may process your information or combine it with information from other services for the purpose of providing you with a more personalized service, such as to recommend content that may be of interest to you, including but not limited to sending you information about ZKBio CVSecurity services, presenting you with personalized third-party promotions through the system, or sharing information with ZKBio CVSecurity partners with your consent so that they may send you information about their products and services.

(3) How we use Cookies and similar technologies
1.Cookies
Cookies and similar technologies are widely used in the Internet. To ensure the smooth operation of our website, we will store a small data file named Cookie in your computer or mobile device. A Cookie typically contains identifiers, site names, and some numbers and characters. With the Cookie, our website can store your preference and other data. We will not use Cookies for any other purpose than that specified in this Policy. You may manage the Cookie according to your own preference or delete it. You may choose to delete all Cookies saved in your computer, and most of the web browsers have a feature to block the Cookies. But if you do this, you will need to change the user settings each time you visit our website.
2.Other similar technologies
In addition to Cookies, we will also use other similar technologies such as website beacons and pixel tags on our website to help us understand your preference for products or services and improve our customer service.
(4) How we share, transfer and disclose your personal information
1. Share
Without your explicit consent prior, we will not share your personal information with any other company, organization and individual.
We may share your personal information with an external institution if required by laws and regulations or government authorities.
2. Transfer
We will not transfer your personal information to any other third party company, organization or individual, except under the following circumstances:
a)Transfer with your explicit consent: with your explicit consent, we will transfer your personal information to other parties;
b)If any merger, acquisition or bankruptcy process involves transfer of your personal information, we will request the new company or organization in possession of your personal information to continue to be bound by the personal information protection policy, or we will request the new company or organization to seek your permission again.
3. Public disclosure
We will only disclose your personal information in the following circumstances:
a)With your explicit consent;
b)Permitted by Applicable Law: we may disclose your personal information in cases where such disclosure is required by laws, legal proceedings, litigation or government authorities, including in cases:
-Related to personal information controller’s performance of obligations prescribed by laws and regulations;
-Directly related to national security or national defense security;
-Directly related to public safety, public health or vital public interests;
-Directly related to crime investigation, prosecution, trial and judgment execution;
-Where such disclosure is necessary for protecting the vital legitimate interests such as life and property of the subject of personal information or any other individual while it is difficult to obtain the consent therefrom;
-Where the personal information involved is disclosed to the public by the subject itself;
-Where such disclosure is necessary for signing and performing the contract concerned according to the requirements of the subject of personal information;
-Where the personal information is collected from legally and publicly disclosed information, such as legal news reports and publicized government information;
-Where such disclosure is necessary for maintaining safe and stable operation of the products/services provided, such as identification or disposal of failures of products/services;
-Where the personal information controller is a news agency and such disclosure is necessary for legal news reporting;
-Where the personal information controller is an academic research institute, and such disclosure is necessary for statistics or academic research in the public interest, and the personal information contained in the results of academic research or description provided externally is de-identified.
Please note that according to law, sharing, transferring or disclosing personal information does not include the scenario in which personal information is de-identified in such a way that the recipient of such information cannot restore the information or re-identify the subject of personal information before it is shared, transferred, or disclosed. As a result, we may store or process such information without notifying you or obtaining your consent.
IIHow we protect your personal information
If you are an administrator of an enterprise organization, we will not collect personal information submitted by individual users under your enterprise/organization when you use ZKBio CVSecurity. For personal information leakage problems, you should look for your company/organization. Relevant data is collected and stored in a software database of your enterprise/organizaional. Enterprise/organizational control data may include:
(1)Your position, subordinate department, public mailbox account, office phone number and other information assigned to you by your enterprise/organization, and as you to complete enterprise/organization activities asked to provide or produce fingerprint features, facial features, face images, personal information such as location, and attendance record, consumption records, approval records, parking records, visitors information, etc..
(2)Other data submitted by enterprise/organization users containing your personal information (including employment information, contact information, personal identity information, etc.).
    You understand and agree that the enterprise/organization is the controller of the aforesaid enterprise data, and the operation, management and use of the aforesaid services and the processing of your personal information/data by the enterprise/organization has nothing to do with the ZKBio CVSecurity team. The enterprise/organization shall ensure that the express consent of the individual users of ZKBio CVSecurity has been obtained in advance. Only end user information necessary for enterprise operation and management is collected, and end users are fully informed of the purpose, scope and usage of relevant data collection.
(3)Information provided to us by third parties We will collect information about you from other users when they perform operations related to you. We may also obtain your personal data from affiliated companies of ZKBio CVSecurity, cooperative third parties or other legal means. For example, in order to protect your legitimate rights and interests, prevent fraud, gambling and other risks, and maintain the safe and stable operation of ZKBio CVSecurity services, we need to obtain the user identification information.
(4)Despite our security measures, the Internet environment is not 100% safe. Please be aware that there is no "perfect security measure" on the Internet, but we will try our best to ensure safety of your information.
IIIYour rights
In accordance with Chinese laws, regulations, standards, and established practices of other countries and jurisdictions, we will protect your rights to:
(1)Access your personal information
You have the right to access your personal information, unless otherwise provided by laws and regulations. You may access your personal information by contacting:Your enterprise/organization administrator
For other personal information generated during your use of our products or services, if you want to exercise your right to access your personal data, please send an email to your enterprise/organization administrator
(2)Correct your personal information
Upon noticing any of your personal information we processed is wrong, you have the right to request us to make corrections. You may submit the request via means listed in Item "(1) Access your personal information".
(3)Delete your personal information
In the following cases, you may request your enterprise/organization to delete your personal information:
1.The enterprise/organization process your personal information in violation of laws and regulations;
2.The enterprise/organization collect or use your personal information without your consent;
3.The enterprise/organization process personal information in violation of the agreement with you;
4.You can no longer use our products or services, or you want to canceled your account;
In circumstances prescribed by applicable laws, you have the right to revoke your consent to your enterprise/organization processing of your personal data at any time. However, the cancellation will have no bearing on the legality and effectiveness of your personal data that your enterprise/organization previously processed with your consent, or other appropriate legitimacy.
(4)Respond to your request
To safeguard security, you may need to provide a request in writing or otherwise prove your identity. Your enterprise/organization may ask you to provide proof of your identity before processing your request.
You enterprise/organization may not respond to your request in the following circumstances:
1.The request is related to personal information controller’s performance of obligations prescribed by laws and regulations;
2.The request is directly related to national security or national defense security;
3.The request is directly related to public safety, public health or vital public interests;
4.The request is directly related to crime investigation, prosecution, trial and judgment execution;
5.The personal information controller has sufficient evidence that the subject of personal information is subjectively malicious or abusing his/her rights;
6.Not responding to the request is for protecting the vital legitimate interests such as life and property of the subject of personal information or any other individual, while it is difficult to obtain the consent therefrom;
7.Responding to request of the subject of personal information will bring serious damage to the legitimate rights and interests of the subject or any other individual or organization;
8.The request involves trade secrets.
IVHow we handle personal information of minors
Our products, website and services are mainly designed for adults. Without consent of parents or guardians, minors shall not create their own account. If you are a minor, it is recommended that you ask your parents or guardian to read this Policy carefully, and only use our services or information provided by us with consent of your parents or guardian.
We will only use or disclose personal information of minors collected with their parents' or guardians' consent if and to the extent that such use or disclosure is permitted by law or we have obtained their parents' or guardians' explicit consent, and such use or disclosure is for the purpose of protecting minors.
Upon noticing that we have collected personal information of minors without the prior consent from verifiable parents, we will delete such information as soon as possible.
VHow this Policy is updated
Our personal information protection and privacy policy is subject to change from time to time.
Without your explicit consent, we will not cut your rights you are entitled to under this Policy. We will post any change to this Policy on our website.
For major changes, we will also provide a more prominent notification (for some services, we will send notice via email, stating the particulars of changes to this Policy).
Major changes referred to in this Policy include, but are not limited to:
1.Major changes of our service model, such as change of purpose, type or way of use of personal information;
2.Major changes in ownership structure or organizational structure, such as changes caused by business adjustment, bankruptcy, merger and acquisition;
3.Change of the party with which we share personal information or to which we transfer or disclose personal information;
4.Major changes in your rights of participating in the handling of personal information or the way you exercise such rights;
5.Changes of the department responsible for personal information security, or of the contact information or of the channel for filing a complaint;
We will also archive the previous versions of this Policy for your reference.
VIHow to contact us
If you have any question, comment or suggestion about this Policy, please send an email to zkbiosecurity@zkteco.com, . Normally, we will reply within 30 days. More contact information is available on our website (http://www.zkteco.com/en).
VIIConflict of terms
If there are any conflict of terms between the Chinese and English version, the Chinese version shall prevail.