Privacy Policy

Shanghai United Imaging Intelligence Healthcare Co., Ltd. and its subsidiaries, branches, and other entities under common control (collectively, "UIH","the Website", "we", "our" or "us") respect your concerns about privacy. We hope to introduce you our efforts in protecting your personal information and privacy. Please read carefully and familiarize yourself with this Privacy Policy, especially having a comprehensive understanding of terms marked in bold, while ensuring that ultimately, you make the corresponding choices.

Our Privacy Policy will help you understand the following:

  1. Scope of this Privacy Policy;
  2. How we collect and/or use your personal information;
  3. How we protect your personal information;
  4. Rights of individuals under the personal information;
  5. How we deal with children's personal information;
  6. How your personal information transfer cross-border;
  7. How we update this Privacy Policy; and
  8. How you contact us.

Scope of this Privacy Policy

The Privacy Policy applies to the personal information, privacy, and/or materials (collectively, "Personal Information") you provide during the course of browsing and/or using the Website and certain features of the Website (e.g., click Contact).To avoid any confusion, you shall note that this Privacy Policy does not apply to the following:

1. Products or services with independent privacy policies: Products or services with their own independent privacy policies are subject to the actual content of such polices. You may be required to separately accept, agree and commit to the independent privacy policy. However, provided that such policy cites this Privacy Policy or does not cover certain collection and/or use of Personal Information, please refer to this Privacy Policy herein for complete information.
2. Any third-party website, link or advertisement: While browsing the Website, you may as part of our page view specific content created or provided by a third party, or may log in or access a third-party website, URL, or advertisement via the link(s) provided on our page. The third-party website may collect a variety of Personal Information, and may use cookies and other means to collect Personal Information. However, such websites are not managed by UIH, and UIH assumes no responsibilities for any or all their actions or policies. You are advised to view the privacy policies of the third party on their website or URL.

How we collect and/or use your Personal Information

1.Scope and Rule in the Collection and/or Use

(1)Passively-collected Personal Information

You may access the Website and obtain related information in anonymous without providing your identity. In order to achieve basic operational functions of the websites, most browser will collect a limited range of necessary information. You shall authorize us to collect and/use such necessary information, including:

- Website browsing record:Website record, number of visitors and average length of visit etc.

- Log information: information related to your use of certain features and browsing of information on the Website, such as network requests, standard system logs, error and default records, and activity time of the service.

- IP address: The IP of the computer you use is automatically assigned by your Internet Service Provider (ISP). When you visit a website, the server will by itself recognizes the IP address and records alongside the access time and number of pages you visited.

We are committed to use the foregoing information exclusively for the daily operation of the network, and for the quality improvement of the operation thereof, for instance, to use as a reference to resolve issues related to the use, management, maintenance, and diagnosis of the Website and server. It is worthwhile to note that independent device information and log information are unable to identify a specific individual, and as such are not Personal Information or personal sensitive information. Whereas, in the event that such non-personal information is used in conjunction with other information to identify a particular natural persons or to use in combination with other Personal Information, such non- personal information shall be treated as Personal Information during the identification or combination. We will resort to your necessary consent or authorization should the event occurs.

(2)Actively-provided Personal Information

When you use certain services or features offered on the Website, for the services or features to achieve its contemplated target, you will need to provide certain Personal Information to us. For example, if you use the "Contact" section, you will provide your name, email address, company, mobile phone number, address and message; The information is necessary for us to contact you via corporate email.

We undertake to use the foregoing information exclusively for the purpose to fulfill the specific target of the services or features described herein, and will solicit your explicit consent or authorization before collecting such information. If you only need to use our basic services such as browsing, searching and others, you are under no obligation to register or to provide the foregoing information.

For the accuracy and security of our record, you should provide the correct, truthful, up-to-date and complete information on the registration form, and update us in a timely manner to ensure there are no errors, misrepresentations, outdated, incomplete or misleading information therein. If the information you provided include Personal Information belonging to other third parties, you shall ensure that you have obtained lawful consent or authorization from the third parties before such provision.

2.Consent Exception of the collection and/or use

Pursuant to currently effective laws and regulations in the People's Republic of China, UIH do not need to solicit your explicit consent or authorization to collect and/or use the Personal Information, provided that the collection and/or use:

(1)Concerns UIH's compulsory obligations to comply with all applicable laws and regulations;

(2)Involves national security or defense concerns, and state secrets;

(3)Relates to public safety, public health and major socio-economic benefits;

(4)Touches on criminal investigation, prosecution, trial and execution of judgments directly;

(5)Protects the life and property rights of the Personal Information subject or other individuals, while unfeasible to obtain your own consent;

(6)Contains Personal information collected from legally publicly disclosed sources, such as legitimate news reports, government information disclosure, and others;

(7)Verifies specific accounts or claims for the purpose of secure transactions and fraud prevention; and

(8)Performs the required contractual agreement, including to perform you requested need, as the pee-requisite to complete the request, UIH need to proceed your personal information.

In accordance with current effective laws and regulations, provided that we have taken comprehensive technical measures and other necessary measures to annoymize and de-identificate Personal Information, in such a way that the data receiver is unable to re-idenitfy or tracking the specific individual, you acknowledge that the subsequent processing of such information which has became non-personal information do not require your further awareness or consent.

3. Rules in Sharing,Transferring, and Publicly Disclosing your Personal Information

(1)Sharing

We will take reasonable safety measures to protect the Personal Information under our control. Unless it is requested by law or law enforcement actions, UIH will not share any Personal Information collected via the Website to any unrelated third parties (including companies, organizations and individuals);

However, we may share Personal Information in good faith and in the belief such practices are necessary for the following:

- Voluntary sharing: based on your explicit consent, authorization or proactive choice, UIH may share Personal Information to your designated third party within your agreed scope;

- Sharing within our Group: In order to ensure that affiliates of UIH provides you the same quality of services, we will share the Personal Information to affiliates exclusively on a need-to-know basis and apply the rules and scope stipulated herein. If we share sensitive personal information or the affiliates change the purpose of processing the Personal Information, we undertake to ask your re- consent or authorization. Affiliates hereby refer mainly to Shanghai United Imaging Healthcare Co., Ltd. and its affiliates.

- Sharing with third-party service providers: As this website is co-maintained by a third-party service provider authorized by UIH, such third-party service provider may collect and/or use your Personal Information in accordance with its business needs. The collection and/or use of the Personal Information by the third-party service provider is also governed by the Privacy Policy. We will use reasonable effects to investigate third party information security capabilities and execute contracts with confidentiality provisions to ensure that third party service providers comply with our privacy policies and all applicable laws and regulations. To learn more about the companies, organizations, and individuals currently involved in this situation, please click and check the link below:

- Digitiger http://www.digi-tiger.com/

- Qedge http://qedgegroup.com/

- Beijing 21 Vianet Broad Band Data Center https://www.21vianet.com/

Third-party service providers may also calculate and/or count independent device information, log information (non-personal information) in aggregate forms, and we will use such statistical information to understand the population browsing and/or using the Website, the population's interacting with the Website, and the general trend in using the Website, such as the amount of usage in a given country or region. These uses do not involve the identification and tracking of specific subjects.

(2)Transferring

We will not transfer your Personal Information to any other entities, organizations or individuals except in the following cases:

- Transfer with your express consent; and

- In the case of mergers, acquisitions or bankruptcy liquidation, if we are involved in the transfer of Personal Information, we will request the new companies or organizing holding your Personal Information to be bound by this Privacy Policy, otherwise we will require the companies and organizations to seek your re-consent or authorization.

(3)Public disclosing

We will publicly disclose your personal information exclusively in the following circumstances:

- Disclosure that is required by law, legal notice, litigation, or mandatory requirement of a governmental authority; or

- Obtain your separate consent for public disclosure.

How we protect your Personal Information

1.Network security measures

To prevent Personal Information from unauthorized access, cyber attacks, disclosures, modifications, damage, or similar risks, we have taken or will implement practicable security measures, including but not limited to physical, technical, and managerial processes to protect the Personal Information under our control. These measures include but without limitation:

(1)We use encryption features such as the Secure Socket Layer (SSL) protocol and provide a secure browsing link with Hyper Text Transfer Protocol over Secure Socket Layer (HTTPS);

(2)Your personal information is stored on a secure encrypted Microsoft cloud and protected by industry-standard firewall systems;

(3)We have special and limited access control for your Personal Information,and we allow only specific personnel of UIH to view or use it under necessity;

(4)We will classify the storage of the Personal Information based on its importance and sensitivity, and ensure that the collection, storage or use of the corresponding classification has corresponding security standards and ratings;

(5)We regularly review, monitor and evaluate the operation mode of our cybersecurity system, to identify possible cybersecurity risks and take corresponding pre-cautions;

(6)We will conduct regular information security training to test and strengthen the importance of Personal Information to all employees;and

(7)In accordance with the cybersecurity level system stipulated in the Cybersecurity Law of the People's Republic of China, we have initiated plan to carry out the Equipoise 2.0. system.

2.The principal to minimize collection and/use of Personal Information

We will only retain your personal information for the period of time required to achieve the purposes of the Website and for the scope defined herein. After your Personal Information exceeds the retention period, we will remove or de-identificate your Personal information as required by applicable laws. When such deletion is to be taken, we may not immediately remove the information in the backup system, but will remove in the time of system updates.

3.Cybersecurity incidents

Please note that the internet environment is not 100% secured and we will do our best to ensure or guarantee the security of your Personal Information. We therefore strongly recommend that you use a safe and encrypted communication method to send the foregoing Actively-provided Personal Information. You should avoid sending sensitive personal information to us, or inform us when you do so, we will then classify your sensitive information and store it in separate secured locations.

If you have reasonable awareness of a possible Personal Information leak, please contact us immediately so that we can take timely remedial action.

Rights of individuals under the Personal Information

1. The request you can exercise

(1)In accordance with laws and regulations of the country or region to which you apply, you have the right to request access, correction, deletion, change of authorization, and restrict information system automatic decision (collectively, "Requests") for any and all Personal Information under our control.

(2)You may contact dataprivacy@united-imaging.com to exercise the Requests. Please note that to ensure the reliability and security of your request, we hope that you:

- make a request in writing; and

- Provide your name, contact information and other necessary information to ensure that the company can verify your identity so as to confirm the requester is the Personal Information subject or other legal agent of Personal Information subject.

(3)Access rights

You have the right to access the Personal Information under our control. Based on your request, we may provide a record of such Personal Information or its copy.

(4)Correction rights

When you discover that any or all of your Personal Information under our control is incomplete or incorrect, you have the right to ask us to make corrections subject to the terms of this Privacy Policy.

(5)Deletion rights

You have the right to ask us to delete your personal information, if:

- we deal with personal information in violation of laws and regulations;

- we collect and use your personal information without your consent;

- we process personal information in violation of your agreement;

- you no longer need us to store or use this personal information; and

- we no longer provide such products or services for you.

If we decide to respond to your removal request, we will also within reasonable capacity notify other entities that obtained your Personal Information from us, including but not limited to the third-party service providers, to request that they remove the Personal Information in a timely manner, unless otherwise required by laws and regulations, or independent consent you entered into with those entities.

When such deletion is to be performed, we may not immediately remove the information in the backup system, but will remove in the time of system update.

(6)Change the scope of your authorization

You may give or withdraw your authorization consent at any time for the collection and/or use of Personal Information beyond the purposes of the Privacy Policy. When you withdraw your consent, we will no longer process the corresponding Personal Information. However, your decision to withdraw your consent will not affect the use or process previously performed based on your authorization.

(7)How to contact us

If you have any questions, comments or suggestions, or you require us to improve certain aspects, or you find that personal information may be leaked or that UIH has violated the laws and regulations related to the collection or use of Personal Information, you can notify us at dataprivacy@united-imaging.com via written email, and contact us at 2258 Chengbei Road, Jiading District, Shanghai, China.

In principle, we do not charge fee for any reasonable request, but we will charge a reasonable cost for repeated requests that exceed the reasonable limit. We may refuse to respond for those requests needing too many technical means (for example, requiring us develop new systems or fundamentally changing our existing practices), posing risks to the legal rights of others, or being excessively impractical (for example, involving information stored on backup tapes).

2.Refusal of the request

We will not be able to respond to your request when

(1)It relates to the performance of our obligations stipulated by laws and regulations;

(2)It concerns national security and national defense security;

(3)It concerns public safety, public health, and major public interests;

(4)It is required by criminal investigation, prosecution, trial, and execution of judgments;

(5)We have sufficient evidence to show that the Personal Information Subject has malicious intent or abuse of rights;

(6) Our responding to Personal Information Subject's request will result in serious damage to the legitimate rights and interests of the Personal Information Subject or other individuals or organizations; and

(7) It involves trade secrets.

How we deal with children's personal information

 

UIH is very concerned about children's privacy protection. In accordance with current effective laws and regulations, children specifically refer to minors aged fourteen (14) and under. The services on this website are primarily for adults, and children should not provide personal information without the consent of their parents or guardians.

 

In the event we have obtained consent from parents or guardians, we will only use, share, transfer or publicly disclose Children's Personal Information if permitted by law and with the explicit consent of the parent or guardian.

If we discover that a child has provided us Personal Information without prior verifiable parental consent, we will immediately remove the Personal Information thereof.

Any UIH staff who accesses children's Personal Information must record the access and take technical measures such as encryption. We strictly prohibit the illegal copying, downloading, or sharing, transfer, or public disclosure of children's Personal Information, except as required by laws and regulations or mandatory measures.

How your Personal Information transfer cross-border

1.General specifications for cross-border transfers

We have servers in People's Republic of China (including Shanghai and Hong Kong) that will collect and/or store Passively-collected Personal Information. Whereas Actively-provided Personal Information will be available only within the People's Republic of China (excluding Hongkong, Macao, and Taiwan). In general, your Personal Information will be transmitted to these countries/regions in accordance with applicable laws and regulations.

If your Personal Information is transferred to overseas jurisdictions or was accessed from these jurisdictions, you should be aware that some jurisdictions may have different data protection laws or even absence of relevant laws. In these cases, we will apply our best efforts to ensure that your Personal Information is adequately protected to the same standard of care as required by laws in People's Republic of China. For example, we will ask you for permission to transfer Personal Information across borders or to implement security measures such as data de- identification before such transfers.

2.Special specifications for EU residents

(1) We strive to comply with the laws and regulations of all jurisdictions, including the direct obligations in the General Data Protection Regulations ("GDPR"). However, if you are an EU resident but are browsing and/or using the Website anonymously, we might unintentionally transfer your Personal Information to countries outside the EU exclusive economic zone. You acknowledges that these countries may not be able to provide the same level of protection as the EU exclusive economic zone.

(2) Upon active knowledge of the transmission in the above (1) situation, we will take reasonable and feasible measures in accordance with the provisions of this Privacy Policy and GDPR, including the use of standard contract terms. We will accordingly make adjustments or remedies to the previous transferred Personal Information.

(3) Please note that GDPR does not apply to EU residents providing Personal Information outside the EU. If you are an EU resident but are browsing and/or using the Website in China, your Personal Information should be collected, used and/or processed in accordance with effective laws and regulations of the People's Republic of China.
When GDPR is applicable, you have the following additional rights:
- Limit our data processing activities or oppose to certain data processing activity;
- Request data transfer for Personal Information;
- Request transfer of Personal Information from UIH to other data controllers in a structured or electronic form; and
- Submit a request to your local data protection agency (DPA). The following links can help you find the appropriate DPA: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

(4) If you have such a requirement, you can exercise your additional rights in the same way as listed in the above request exercise section. Please note that this may also mean that we will not be able to provide you with related services or services of the same quality.

(5) Our website does not use technologies such as cookies to identify you and personalize your browsing and/or use experience. We promise not to use your Personal Information in targeted advertising or commercial promotion, nor do we use systematic and extensive user portraits. However in the event UIH initiates the foregoing use due to business change, if you are an EU resident, we will ask for your explicit consent or authorization beforehand and will only open these functions to you if you agree or authorize.

How we update this Privacy Policy

The website may modify the Privacy Policy from time to time. We will not reduce your rights under this Privacy Policy without your express consent or authorization. For material changes, we will provide you with noticeable notices. For its purpose, material changes shall refer to the following:

1.Significant changes in the way the website is viewed and/or used, which affects the processing of Personal Information, the type of Personal Information collected or used;

2.Significant changes in UIH ownership structure, organizational structure, and others caused by business adjustment or bankruptcy mergers and acquisitions;

3.Changes in the main object of personal information sharing, transfer or public disclosure;

4.Significant changes in your rights with relation to your Personal Information and how they shall be exercised;

5.Changes in the person responsible for handling Personal Information security, contact information, and complaint channels; and

6.High risk detected in the cybersecurity system which impact the safety of Personal Information.

By continuing to use this website after the issuance of updates to this Privacy Policy, you agree to abide by any such updates.

If you have any questions or have any suggestions, please contact us by:

Shanghai United Imaging Healthcare Co., Ltd.

2258 Chengbei Road. Jiading District, Shanghai, 201807

TEL: +86 (21) -67076888-8220

FAX: +86 (21) -67076889

If you are dissatisfied with how we handle Personal Information, especially if our Personal Information processing actions harm your legal rights, you can resort to the industry association where the defendant's residence is located.


© Shanghai United Imaging Healthcare Co., Ltd. 2022. All rights reserved.

Last updated: March 21,2022