1、Personal Data
Personal data refers to information that can be used to confirm the identity of individuals when being used separately or in combination with other information. Such data might be submitted to us directly by you when you are using our websites, products or services or when you are interacting with us, or might be obtained by us through recording how you are interacting with our websites, products or services, by using techniques such as cookie. The data collected by us depends on the websites you visited or the products and services you used, and might include names, addresses, emails, and telephone numbers. Our purpose of collecting such Personal data is to get in touch with you in order to provide corresponding services or send important notices.
2、Privacy Policy
Heyou Pinnacle Medical Center and its subsidiaries around the globe (hereinafter referred to as "Heyou Pinnacle Medical Center", "We" or "Our" for short) fully recognizes the importance of personal data to customers and users. For this purpose, Heyou Pinnacle Medical Center attaches great importance to the protection of personal data of customers and users, and has taken a series of measures to ensure that relevant businesses comply with applicable personal data protection requirements (such as GDPR).
2.1 To ensure the effective implementation of personal data protection requirements, Heyou Pinnacle Medical Center has appointed a Data Protection Officer (DPO).
2.2 Heyou Pinnacle Medical Center adopts the industry-recognized personal data protection approaches and practices. In the GDPR-applicable business scenarios, Heyou Pinnacle Medical Center has introduced the Data Protection Impact Assessments (DPIA) approach to evaluate and mitigate the security risks of personal data in products and services.
2.2.1 Heyou Pinnacle Medical Center requires a full assessment of all personal data involved in products and services, and projects involving personal data must undergo DPIA;
2.2.2 Projects involving personal data must create data lists and data flow diagrams;
2.2.3 Projects involving personal data must identify possible risks in the data processing procedures (including collection, use, storage, sharing, deletion, etc.), and take corresponding measures (including administrative, physical and technical measures) according to the risk level;
2.2.4 After the implementation of the DPIA, the corresponding report must be output and approved by the DPO.
2.3 Heyou Pinnacle Medical Center has implemented technical measures including IDS, access control, encryption, data leakage prevention, anti-spam, terminal security protection, vulnerability scanning, etc., and has conducted penetration testing to verify the effectiveness of these measures.
2.4 Heyou Pinnacle Medical Center has established an emergency response mechanism for personal data breaches. Once a personal data breach occurs, Heyou Pinnacle Medical Center will immediately initiate an emergency response process, strive to minimize the possible losses caused by personal data breaches and ensure that the affected persons are appropriately informed.
2.5 Heyou Pinnacle Medical Center has established a continuous employee privacy policy training mechanism to ensure that every employee involved in GDPR can accurately understand the legal principles of data protection based on their specific job responsibilities, and strictly implement the company's applicable systems and procedures.
2.6 To ensure compliance, Heyou Pinnacle Medical Center has implemented and will continuously conduct necessary technical and process audits on personal data protection.
2.7 Heyou Pinnacle Medical Center has obtained internationally recognized certifications and will continuously undergo assessments such as ISO 27001, TISAX, etc.
Personal data protection is not only a legal requirement, but also a social responsibility of Heyou Pinnacle Medical Center. We will continue to optimize our products and services to ensure security and privacy, and reduce personal data protection risks for customers and users.
3、Updates to This Policy
Heyou Pinnacle Medical Center reserves the right to revise or modify this policy at any time. We will release the latest Privacy Policy on this page to reflect any changes. If major changes are made to the Privacy Policy, we may also notify you through different channels, for example, posting a notice on our website or sending a separate notice to you.