更新日期：2024年1月18日
生效日期：2024年1月18日
随申行（或简称“我们”或“我方”）深知保护儿童（指未满十四周岁的未成年人，下同）个人信息和隐私安全的重要性。在《“随申行”用户隐私政策》的基础上，我们希望通过《“随申行”儿童个人信息保护规则及监护人须知》（以下简称“本规则”）说明我们在收集和使用儿童个人信息时对应的处理规则等相关事宜。您作为您监护的儿童（以下简称“儿童”）的父母或其他监护人（以下统称为“监护人”），请在儿童使用随申行的产品及服务（详见《“随申行”用户隐私政策》，以下统称“我们的产品及服务”）前仔细阅读并透彻理解本规则，特别是以粗体标识的条款应重点阅读，在确认充分理解并同意全部条款后再开始使用或允许儿童使用。
监护人特别说明：
您的理解和配合对我们保护儿童的个人信息和隐私安全非常必要，为了维护儿童的合法权益，我们希望您可以协助我们，确保儿童在您的同意和指导下使用我们的产品及服务，以及向我们提交个人信息。若我们获知我们产品及服务的使用者是儿童，我们将根据本规则采取特殊措施保护我们获得的儿童个人信息。如果您不同意本规则的内容，请您要求您监护的儿童立即停止访问/使用我们的产品及服务。
另外，请您和儿童务必妥善保管好儿童的账号、密码及其他身份要素。儿童在使用我们的产品及服务时，我们会通过账号、手机号及/或其他身份要素来识别其身份。一旦前述信息泄露，可能会使您或儿童蒙受损失。如监护人和儿童发现账号名、手机号及/或其他身份要素可能或已经泄露时，请立即和我们取得联系，以便我们及时采取相应措施以避免或降低相关损失。
儿童特别说明：
任何儿童参加网上活动都应事先取得监护人的同意。如果您是儿童，请务必通知您的监护人共同阅读本规则，并在您使用我们的产品及服务、提交个人信息之前，寻求您的监护人的同意和指导。您于线上阅读并勾选同意本规则，或者您使用/继续使用我们的产品及服务、提交个人信息，都表示您已获得您的监护人的许可，您的监护人已同意我们按照本规则（包括更新版本）收集、使用、存储、共享、转让和公开披露您的个人信息。
本规则适用于我们在中华人民共和国境内通过网络从事的收集、存储、使用、转移、分享、转让和公开披露儿童个人信息等的活动。本规则为在《“随申行”用户隐私政策》基础上制定的特别规则，若在儿童个人信息保护方面与《“随申行”用户隐私政策》如有不一致之处，优先适用本规则；本规则未载明之处，则适用《“随申行”用户隐私政策》。除非本规则另有说明，本规则中涉及的词语与《“随申行”用户隐私政策》中对应的词语含义一致。
在您阅读完本规则后，如对本规则或与本规则相关的事宜有任何问题，可通过本规则“七、如何联系我们”章节所列的反馈渠道联系我们，我们会尽快为您作出解答。
本规则将帮助您了解以下内容：
一、我们如何收集和使用儿童个人信息
二、我们如何共享、转让、公开披露和委托处理儿童个人信息
三、我们如何存储儿童个人信息
四、我们如何保护儿童个人信息
五、您对于儿童个人信息的控制权
六、本规则的修订
七、如何联系我们
请您注意，在绝大多数情形下，我们无法识别使用我们的产品及服务的具体人员信息是否属于儿童个人信息。例如，当用户使用页面浏览、产品搜索等无需用户主动提供个人信息的功能时，我们无法判断收集和处理的设备信息、上网操作记录等不具备明显年龄识别特征的个人信息是否属于儿童个人信息。在此情形下，我们将按照《“随申行”用户隐私政策》的规定处理上述的用户个人信息。如果我们识别出相应人员属于儿童，我们会将该人员的相关个人信息统一作为儿童个人信息处理。同时，按照法律法规的规定，14周岁以下未成年人（儿童）的个人信息属于个人敏感信息。我们针对14周岁以下儿童个人信息的处理将按照个人敏感信息的有关法律规定和相关国家标准与要求进行。
（一）收集和使用
我们会严格履行法律法规规定的儿童个人信息保护义务与责任，遵循正当必要、知情同意、目的明确、安全保障、依法利用的原则，在征得您的同意后收集和使用儿童个人信息。
⼉童在使⽤我们的产品及服务过程中，我们为向⼉童提供我们的产品及服务，我们可能会收集和使⽤⼉童个⼈信息。有关具体的使⽤⽬的、收集个⼈信息的范围，以及您拒绝提供信息的后果，您可以查阅《“随申行”用户隐私政策》详细了解。
您使用我们的产品及服务时向我们主动提供儿童的个人信息，表示您已经同意我们按照本规则之规定收集和使用儿童的个人信息。
我们的产品及服务中集成的Cookies、SDK等技术会自动收集正在使用我们产品及服务的使用者的个人信息，在此过程中可能会收集儿童的个人信息，具体请您查阅《“随申行”用户隐私政策》“我方如何使用Cookie 和同类技术”章节进行详细了解。
如我们需要超出上述范围收集和使用儿童个人信息，我们将再次征得您或儿童其他监护人的同意。
（二）征得授权同意的例外
根据相关法律法规及监管要求，以下情形中，我们可能会处理用户信息而无需事先征得您授权同意：
1．根据您的要求签订和履行合同所必需的。
2．与我们履行法定职责或者法定义务所必需的。
3．为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需。
4．为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理您的个人信息。
5．在合理的范围内处理您自行公开或者其他已经合法公开的您的个人信息。
6．法律、行政法规规定的其他情形。
（一）共享、转让、公开披露和委托处理
我们承诺对⼉童个⼈信息进⾏严格保密，⼀般情形下我们不会主动共享、转让和公开披露已被识别的⼉童个⼈信息，但在法律法规规定及在本规则下与您约定且您明确授权同意的情况下可能涉及⼉童个⼈信息的共享、转让与公开披露，我们会依据《“随申行”用户隐私政策》第四章“我方如何共享、转让、公开披露和委托处理您的个人信息”部分所列举的⽬的、⽅式和范围处理⼉童个⼈信息。
为了提升信息处理效率，降低信息处理成本，确保您的账号安全，并为您和儿童提供其需要的内容和可能更感兴趣的产品及服务，我们可能会委托有能力的我们的关联公司或其他专业机构代表我们来处理儿童个人信息，过程中将涉及儿童个人信息的共享。具体请参见《“随申行”用户隐私政策》“我方如何共享、转让、公开披露和委托处理您的用户信息”章节。
除了《“随申行”用户隐私政策》“我方如何共享、转让、公开披露和委托处理您的用户信息”部分所述的内容外，对于儿童个人信息，我们还将会采取如下措施来保护儿童个人信息在共享、转让、公开披露和委托处理过程中的安全：
1.如果为了本规则所述目的而需要将儿童个人信息共享至第三方，我们将评估该第三方收集儿童个人信息的合法性、正当性、必要性。
2.请您放心，我们会与接收儿童个人信息的所有第三方签署书面协议，明确包括儿童个人信息在内的个人信息保护责任，个人信息处理事项、处理期限、处理性质和目的等，并要求其处理行为不得超出您向我们提供的授权范围；且请您放心，除得到您的授权同意，否则我们不会将儿童的个人信息与第三方共享，由其用于直接向您或儿童进行商业营销。我们另要求接收儿童个人信息的第三方依法履行以下义务：
1）按照法律、行政法规的规定和我们的要求处理儿童个人信息。
2）协助我们回应您或儿童其他监护人提出的申请。
3）采取措施保障信息安全，并在发生儿童个人信息泄露安全事件时，及时向我们反馈。
4）合作关系或委托关系解除时及时删除儿童个人信息。
5）不得转委托或再次对外共享、转让儿童个人信息。
6）其他依法应当履行的儿童个人信息保护义务。
3.我们向第三方共享儿童的个人信息时，我们将采用加密、去标识化处理等手段保障儿童的个人信息安全。我们可能与我们合作的第三方共享基于个人信息（含儿童个人信息）统计加工后的信息，以便于了解用户如何使用我们服务或让公众了解我们服务的总体使用趋势，上述共享的信息不含任何涉及个人或儿童的身份识别内容。
（二）征得授权同意的例外
1.我们会在法律法规有特别规定、或政府机关或其他法定组织明确要求，或与（可能的）刑事侦查直接相关，或民事诉讼、仲裁、审判、执行等司法程序直接相关等情形下，向特定的主体共享或转移儿童个人信息。该等共享或转移无需向您获得授权同意，但当我们收到上述披露信息的要求时，我们会要求有关机关或组织出具与其要求相对应的法律文件，如传票、通知、调查令、协查函等。
2.共享、转让、公开披露经匿名化处理的个人信息，且确保数据接收方无法复原并重新识别信息主体的，不属于个人信息的对外共享、转让及公开披露行为，对此类数据的保存及处理，我们无需另行对您通知并获取您的同意。
（一）境内存储
我们在中华人民共和国境内（不包括中华人民共和国香港特别行政区、澳门特别行政区及台湾地区）运营中收集和产生的儿童个人信息，将存储在中国境内。
（二）存储期限
我们会采取合理可行的措施，尽力避免收集和处理无关的儿童的个人信息。我们只会在达成本规则所述目的所需的期限内保留儿童的个人信息，除非法律有强制的留存要求。关于我们如何确定儿童个人信息存储期限，请参见《“随申行”用户隐私政策》“我方如何保存您的用户信息”章节。如我们终止服务或运营，我们将及时停止继续收集儿童个人信息的活动，同时会遵守相关法律法规要求提前向您通知，并在终止服务或运营后对儿童的个人信息进行删除或匿名化处理，但法律法规或监管部门另有规定的除外。
我们非常重视儿童的个人信息安全，并采取一切合理可行的措施，保护儿童个人信息：
（一）严格控制儿童个人信息的访问权限
对可能接触到儿童个人信息的工作人员，我们采取最小必要的授权原则，并采取技术措施对工作人员处理儿童个人信息的行为进行记录和管控，避免违法复制、下载儿童个人信息。
（二）制定儿童个人信息安全事件应急预案
我们会定期组织内部相关人员进行应急响应培训和应急演练，使其掌握岗位职责和应急处置策略和规程。在不幸发生儿童个人信息安全事件后，我们将按照法律法规的要求，及时向儿童及其监护人告知：安全事件的基本情况和可能的影响、我们已采取或将要采取的处置措施、儿童及其监护人可自主防范和降低风险的建议、对儿童及其监护人的补救措施等。我们将及时将事件相关情况以App推送通知、发送邮件/短消息等方式告知儿童及其监护人。难以逐一告知时，我们会采取合理、有效的方式发布相关警示信息。同时，我们还将按照监管部门要求，主动上报儿童个人信息安全事件的处置情况。若儿童及其监护人的合法权益受损，我们将承担相应的法律责任。
（三）其他措施
如您希望了解更多，请查阅《“随申行”用户隐私政策》“我方如何保护您的用户信息”和“我方如何保护未成年人信息”章节，详细了解我们所采取的保护儿童个人信息的措施。
（一）访问、复制、更正、补充您的个人信息
1.您或儿童在使用我们的产品及服务期间，可以访问、复制或补充您或儿童提供或者在使用中产生的儿童个人信息，具体范围详见本规则“我们如何收集和使用儿童个人信息”章节。
2.当您和儿童发现我们收集、使用和处理的儿童个人信息有错误时，可以通过我们产品及服务中的更正操作功能由您自行更正。若在特定阶段或部分产品及服务中您已无法自行更正，您可根据本规则“如何联系我们”章节提供的方式联系我们进行更正。我们会在对您进行身份验证并询问您一些问题以核实您与儿童的监护关系后，及时采取措施予以更正。
3.对儿童个人信息的访问、复制、更正和补充的方式请参见《“随申行”用户隐私政策》“您如何管理您的个人信息”章节。
（二）账号注销权
您可以在“我的-设置-账号与安全-注销账号”里注销账号。在注销账号之后，我们及其他方基于“随申行”平台的应用系统也将停止为您提供服务，并依据您的要求删除您的用户信息，法律法规另有规定的除外。
（三）个人信息删除权
下列情形下，您或您监护的儿童可以通过本规则“如何联系我们”章节提供的方式联系我们，要求删除相应的儿童个人信息：
1.我们违反法律、行政法规的规定或者双方的约定收集、存储、使用、共享、转让或对外提供儿童个人信息的。
2.超出目的范围或者必要期限收集、存储、使用、共享、转让或对外提供儿童个人信息的。
3.您撤回有关的授权同意的。
4.您或儿童通过注销随申行账号等方式终止使用产品或者服务的。
我们会在对您进行身份验证并询问您一些问题以核实您与儿童的监护关系后，及时采取措施对儿童个人信息予以删除。
（四）改变授权同意的范围
您和儿童有权选择是否向我们提供授权，使得我们有权处理儿童个人信息。您可以通过关闭设备权限、选择退出我们提供的某些功能等方式改变您对我们收集、使用儿童个人信息的授权范围，或撤回您的授权同意。您可以通过《“随申行”用户隐私政策》“您如何管理您的个人信息”章节提供的方式实现授权同意范围的改变或通过联系我们官方服务热线进行反馈。
（五）个人信息处理规则的解释说明
您可以致电我方官方服务热线要求我方对儿童个人信息处理规则进行解释说明。
（六）约束信息系统自动决策
在某些业务功能中，我们可能仅依据算法在内的非人工自动决策机制做出决定。您或儿童可以在“我的－设置－隐私中心－推荐管理”处关掉个性化内容推荐。或如果这些决定影响您或您监护的儿童的合法权益，您可以通过致电我方官方服务热线对自动决策结果进行投诉。
（七）您行使有关权利的后果
请您注意，若您或儿童要求注销账号、删除特定儿童个人信息或改变授权同意范围，可能导致您或儿童无法继续使用我们的产品或服务，且我们也无法为您或儿童提供针对您的账号中原有订单的后续服务（如查询等）。
（八）响应您的上述请求
为保障安全，您可能需要提供书面请求，或以其他方式证明您的身份。我方可能会先要求您验证自己的身份并审核合法性，然后再处理您的请求。请您理解，由于技术所限、基于法律法规要求，您的某些请求可能无法进行响应。请您理解，对于某些无端重复、需要过多技术手段、给他人合法权益带来风险或者非常不切实际的请求，我方可能会予以拒绝，但会向您说明理由。
尽管有上述约定，但按照法律法规要求，如涉及以下情形我方将可能无法响应您的请求：
1.与国家安全、国防安全相关的。
2.与公共安全、公共卫生、重大公共利益相关的。
3.与犯罪侦查、起诉、审判和判决执行等相关的。
4.有充分证据表明您存在主观恶意或滥用权利的。
5.响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的。
6.涉及商业秘密的。
7.与我方履行法律法规规定的义务相关的。
如您对上述权利实现存在疑问，可以根据“如何联系我们”中的相关联系方式与我们取得联系。对于您向我们提出上述请求，以及中华人民共和国法律与其他适用法律规定的您或儿童的相关个人信息权利，您可以通过客服联系我们或直接向我们的个人信息保护负责人发起投诉。我们将在15天内做出答复。
我们可能会根据我们的产品及服务的更新情况及法律法规的相关要求适时修改本规则的条款，该等修改构成本规则的一部分。我们如需对本规则做出修改，将在修订生效前通过在主页弹窗提示的方式再次请您确认，确认后即生效，并取代此前相关内容。您如不同意新的修改内容，请及时与我们联系或立即停止使用本规则约定的服务，如您选择继续使用相关服务，则视为您完全同意并接受新的修改内容。如客观情况及经营方针变化导致我们需要中断或停止相关服务的，我们将及时进行通知，请您对此表示理解和认同。
Last Updated: May 30, 2024
Effective Date: May 30, 2024
SH MaaS (or simply "we") understands the importance of protecting the personal information and privacy of children (referring to individuals under the age of fourteen, collectively referred to as "children"). Building on SH MaaS Personal Information Protection and Privacy Policy, we aim to clarify the procedures related to the collection and use of children's personal information through the SH MaaS Children's Personal Information Protection Rules and Guardian Guidelines (referred to as "this Rule").As a parent or other guardian (collectively referred to as "guardian") of the child ("children") under your care using SH MaaS's products and services (referred to as "our products and services", see SH MaaS Personal Information Protection and Privacy Policy for details), please carefully read and fully understand this Rule, especially the terms highlighted in bold. Start using or allow children to use our products and services only after thoroughly understanding and agreeing to all the terms.
Guardian Special Note:
Your understanding and cooperation are crucial for us to safeguard the personal information and privacy of children. To protect the legal rights of children, we request your assistance in ensuring that children use our products and services and submit personal information with your consent and guidance. If we become aware that users of our products and services are children, we will take special measures to protect the personal information we obtain from them according to this Rule. If you disagree with the content of this Rule, please request that the child under your guardianship immediately stop accessing/using our products and services.
Additionally, please ensure that both you and the child properly safeguard the child's account, password, and other identity elements. When children use our products and services, we identify their identity through the account, phone number, and other identity elements. If the aforementioned information is leaked, it may result in losses for you or the child. If guardians and children discover that the account name, phone number, and/or other identity elements may be or have been leaked, please contact us immediately so that we can take appropriate measures to avoid or mitigate the related losses.
Children's Special Note:
Any child participating in online activities should obtain prior consent from their guardian. If you are a child, please make sure to inform your guardian to read this Rule together. Before using our products and services or submitting personal information, please seek your guardian's consent and guidance. By reading and checking the box to agree to this Rule online or by using/continuing to use our products and services and submitting personal information, you indicate that you have obtained permission from your guardian, and your guardian has agreed that we collect, use, store, share, transfer, and publicly disclose your personal information in accordance with this Rule (including updates).
This Rule applies to our activities within the People's Republic of China involving the collection, storage, use, transfer, sharing, transfer, and public disclosure of children's personal information through the network.This Rule is a special regulation formulated based on the SH MaaS Personal Information Protection and Privacy Policy. In case of any inconsistency in the protection of children's personal information between this Rule and the SH MaaS Personal Information Protection and Privacy Policy, this rule takes precedence. Where not stated in this Rule, the SH MaaS Personal Information Protection and Privacy Policy applies. Unless otherwise stated in this Rule, the terms used in this Rule have the same meanings as those in the SH MaaS Personal Information Protection and Privacy Policy.
After reading this Rule, if you have any questions about this Rule or related matters, you can contact us through the feedback channels listed in Section Seven, "How to Contact Us," and we will respond as soon as possible.
This rule will help you understand the following:
I. How We Collect and Use Children's Personal Information
II. How We Share, Transfer, Publicly Disclose and Entrust the Processing of Children's Personal Information
III. How We Store Children's Personal Information
IV. How We Protect Children's Personal Information
V. Your Control Over Children's Personal Information
VI. Revision of This Rule
VII. How to Contact Us
Please note that in most cases, we cannot identify whether the specific personal information of individuals using our products and services belongs to children. For instance, when users engage in functions such as page browsing and product searches that do not require the voluntary provision of personal information, we cannot determine whether the collected and processed personal information, such as device information and internet operation records lacking obvious age identification features, belongs to children. In such cases, we will process the user's personal information according to the provisions of the SH MaaS Personal Information Protection and Privacy Policy.If we identify that the corresponding individual as a child, we will uniformly treat the relevant personal information as children's personal information.
(1) Collection and Use
We will strictly fulfill the legal obligations and responsibilities for protecting children's personal information, following the principles of legitimacy, necessity, informed consent, clear purposes, security assurance, and lawful use. We collect and use children's personal information with your consent.
Children's personal information may be collected and used by us when using our products and services. In order to provide products and services to children, we may collect and use their personal information. For specific purposes of use, the scope of collected personal information, and the consequences of refusing to provide information, you can refer to the SH MaaS Personal Information Protection and Privacy Policy for detailed information. By actively providing us with personal information of children when using our products and services, you indicate that you have agreed to allow us to collect and use the personal information of children in accordance with this policy.
Cookies, SDKs and other technologies integrated into our products and services automatically collect personal information from users who are using our products and services. During this process, personal information of children may be collected. For detailed information, please refer to the "How we use Cookies and Similar Technologies" section in the SH MaaS Personal Information Protection and Privacy Policy.
If we need to collect and use children's personal information beyond the scope mentioned above, we will seek your or the child's guardian's consent again.
(II) Exceptions to Obtaining Authorized Consent
In accordance with relevant laws, regulations, and regulatory requirements, there are situations where we may process user information without obtaining prior authorization:
1．Necessary for signing and fulfilling contracts at your request.
2．Necessary for us to fulfill legal duties or obligations.
3．In response to sudden public health emergencies, or necessary to protect the life, health and property of individuals in emergency situations.
4．Processing personal information within a reasonable scope for the implementation of news reporting, public supervision and other behaviors in the public interest.
5．Processing personal information you voluntarily make public or other information that has already been lawfully disclosed.
6．Other circumstances as stipulated by laws and regulations.
(I) Sharing, Transfer, Publicly Disclose, and Entrust Processing
We promise to strictly keep children's personal information confidential. Generally, we do not proactively share, transfer, or publicly disclose identified personal information of children. However, under legal and regulatory requirements or circumstances specified and expressly authorized by you under this policy, sharing, transfer, and public disclosure of children's personal information may be involved. We will process children's personal information based on the purposes, methods, and scope listed in the fourth chapter of the SH MaaS Personal Information Protection and Privacy Policy regarding how we share, transfer, publicly disclose, and entrust the processing of your personal information.
To improve information processing efficiency, reduce processing costs, ensure the security of your account, and provide content needed by you and children, as well as potentially interesting products and services, we may entrust our affiliated companies or other professional organizations capable of handling children's personal information to process such information on our behalf. This process may involve sharing of children's personal information. For specific details, please refer to the SH MaaS Personal Information Protection and Privacy Policy section on how we share, transfer, publicly disclose, and entrust the processing of your user information. In addition to the content described in the SH MaaS Personal Information Protection and Privacy Policy section on how we share, transfer, publicly disclose, and entrust the processing of your user information, we will take the following measures to protect the security of children's personal information during the sharing, transfer, public disclosure, and entrusted processing processes:1. If sharing children's personal information with third parties is necessary for the purposes described in this policy, we will assess the legality, legitimacy, and necessity of the third party's collection of children's personal information.
2. Rest assured that we will sign a written agreement with all third parties receiving children's personal information, clearly stating the responsibility for personal information protection including children's personal information, matters related to personal information processing, processing period, nature, and purpose, etc. We will also require them not to exceed the scope of authorization provided by you unless they obtain your authorized consent. We will not share children's personal information with third parties for direct marketing to you or children without your authorization. We also require third parties receiving children's personal information to fulfill the following obligations:
（1）Process children's personal information in accordance with laws, regulations, and our requirements.
（2）Assist us in responding to requests from you, children, or other guardians.
(3) Take measures to safeguard information security and promptly report to us in case of any security incidents involving children's personal information leakage.
(4) Delete children's personal information promptly when the cooperation or entrustment relationship is terminated.
(5) Not transfer or share children's personal information again without authorization.
(6) Fulfill other obligations for the protection of children's personal information as required by law.
3.When sharing children's personal information with third parties, we will use encryption, de-identification, and other methods to ensure the security of children's personal information. We may share information based on personal information (including children's personal information) after statistical processing with third parties we cooperate with to understand how users use our services or to let the public understand the overall usage trends of our services. The shared information does not contain any personally identifiable information of individuals or children.
(II) Transfer and Public Disclosure
1.We may share or transfer children's personal information to specific entities without obtaining your authorization in situations where there are special legal requirements, or explicit requests from government agencies or other statutory organizations, or direct relevance to (potential) criminal investigations, or direct relevance to judicial procedures such as civil litigation, arbitration, trial, and enforcement, etc. However, when we receive requests for disclosure of such information, we will require the relevant agencies or organizations to provide corresponding legal documents, such as subpoenas, notices, investigation orders, letters of assistance, etc.
2.Sharing, transferring, or publicly disclosing anonymized personal information that has undergone anonymization processing, and ensuring that the data recipient cannot reconstruct and re-identify the information subject, does not fall under the category of sharing, transferring, or publicly disclosing personal information. For the storage and processing of such data, we do not need to separately notify you or obtain your consent.
(III) Exceptions to Obtaining Authorized Consent
1.We may share or transfer children's personal information to specific entities without obtaining your authorized consent in the following circumstances: when there are special provisions in laws and regulations, or when government agencies or other statutory organizations explicitly require it, or when it is directly related to (potential) criminal investigations, or directly related to judicial procedures such as civil litigation, arbitration, trial, and enforcement. Such sharing or transfer does not require your authorized consent, but when we receive requests for the disclosure of information, we will ask the relevant authorities or organizations to provide corresponding legal documents, such as subpoenas, notices, investigation orders, and cooperation letters.
2.Sharing, transferring, or publicly disclosing anonymized processed personal information, ensuring that the data recipient cannot recover and reidentify the information subject, does not fall under the category of sharing, transferring, and publicly disclosing personal information. For the storage and processing of such data, we do not need to separately notify you and obtain your consent.
(I) Storage within the PRC
The children's personal information collected and generated during our operation in the People's Republic of China will be stored within China, excluding the Hong Kong Special Administrative Region, Macau Special Administrative Region, and Taiwan for the purpose of this Rule.
(II) Storage Period
We will take reasonable and feasible measures to avoid collecting and processing irrelevant children's personal information. We will only retain children's personal information for the period necessary to achieve the purposes stated in this Rule, unless there is a mandatory retention requirement under the law. For information on how we determine the storage period of children's personal information, please refer to the "How We Store Your User Information" section in the SH MaaS Personal Information Protection and Privacy Policy. If we terminate services or operations, we will promptly cease collecting children's personal information and, in compliance with relevant laws and regulations, notify you in advance. After terminating services or operations, we will delete or anonymize children's personal information, unless otherwise required by laws, regulations, or regulatory authorities.
We attach great importance to the security of children's personal information and take all reasonable and feasible measures to protect it:
(I) Strict Control of Access to Children's Personal Information
For staff who may access children's personal information, we follow the principle of minimum necessary authorization. We implement technical measures to record and control staff's processing of children's personal information, preventing illegal copying and downloading of children's personal information.
(II) Formulation of Emergency Plans for Children's Personal Information Security Incidents
We regularly organize internal personnel for emergency response training and drills to ensure they understand their duties and emergency response strategies and procedures. In the event of a children's personal information security incident, we will, as required by laws and regulations, promptly inform children and their guardians of the basic situation and potential impacts of the security incident, the measures we have taken or will take, advice on how children and their guardians can independently prevent and reduce risks, and remedial measures for children and their guardians. We will promptly notify children and their guardians of the incident through App push notifications, emails, SMS, etc. In case individual notifications are challenging, we will adopt reasonable and effective means to release relevant warning information. Additionally, we will proactively report the handling of children's personal information security incidents to regulatory authorities. If the legitimate rights and interests of children and their guardians are damaged, we will bear corresponding legal responsibilities.
(III) Other Measures
If you would like to learn more, please refer to the "How We Protect Your User Information" and "How We Protect Information of Minors" sections of the SH MaaS Personal Information Protection and Privacy Policy to gain detailed insights into the measures we take to protect children's personal information.
(I) Access, Copy, Correct, And Supplement Your Personal Information
1. During your or your child's use of our products and services, you may access, copy, or supplement the personal information of your child provided or generated during use. For specific details, please refer to the section "How We Collect and Use Children's Personal Information" section of this Rule.
2. If you or your child find any errors in the children's personal information we collect, use, and process, you can correct them yourself through the correction function in our products and services. If you are unable to correct it yourself at a specific stage or in certain products and services, you can contact us for correction using the methods provided in the section "How to Contact Us" in this Rule. We will verify your identity and your relationship with the child by asking you some questions, and then take corrective measures promptly.
3. For the methods of accessing, copying, correcting, and supplementing children's personal information, please refer to the section "How You Manage Your Personal Information" in the SH MaaS Personal Information Protection and Privacy Policy.
(II) Account Cancellation Rights
You can cancel your account in "My - Settings - Account and Security - Cancel Account". After canceling the account, we and other parties based on the "SH MaaS" platform's application system will also cease to provide services to you. According to your request, we will delete your user information, except as otherwise provided by laws and regulations.
(III) Personal Information Deletion Rights
Under the following circumstances, you or the guardian of the child can contact us through the methods provided in the "How to Contact Us" section of this rule to request the deletion of the corresponding children's personal information:
1. We violate laws, regulations, or agreements regarding the collection, storage, use, sharing, transfer, or provision of children's personal information.
2.Collection, storage, use, sharing, transfer, or provision of children's personal information beyond the scope or necessary period.
3.You withdraw the relevant authorized consent.
4.You or the child terminate the use of products or services by canceling the SH MaaS account.
(IV) Changing the Scope of Authorized Consent
You and the child have the right to choose whether to authorize us to process children's personal information. You can change the scope of your authorization for us to collect and process children's personal information or withdraw your authorized consent by closing device permissions, choosing to opt-out of certain functions we provide, or other methods. You can achieve changes to the scope of authorized consent through the methods provided in the SH MaaS Personal Information Protection and Privacy Policy in the "How You Manage Your Personal Information" section or by contacting our official service hotline.
(V) Explanation of Personal Information Processing Rules
You can call our official service hotline to request an explanation of the rules for handling children's personal information.
(VI) Constraints on Automated Decision-Making Systems
In certain business functions, we may make decisions solely based on algorithmic non-human automatic decision-making mechanisms. You or your child can turn off personalized content recommendations in "My - Settings - Privacy Center - Recommendation Management." Alternatively, if these decisions affect your or your child's legitimate rights and interests, you can file a complaint about the automated decision-making results by calling our official service hotline.
(VII) Consequences of Exercising Relevant Rights
Please note that if you or the child requests account cancellation, deletion of specific children's personal information, or a change in the scope of authorized consent, it may result in you or the child being unable to continue using our products or services, and we may be unable to provide subsequent services for existing orders in your account (such as queries).
(VIII) Response to Your Requests
For security purposes, you may need to provide a written request or other proof of identity. We may first require you to verify your identity and verify the legality before processing your request. Please understand that due to technical limitations and legal requirements, some of your requests may not be responded to. We may refuse certain requests that are unreasonably repetitive, require excessive technical means, pose risks to the legal rights of others, or are impractical, but we will explain the reasons to you.
Despite the above provisions, according to legal requirements, we may be unable to respond to your request in the following situations:
1.Matters related to national security and national defense.
2.Matters related to public security, public health, and major public interests.
3.Matters related to criminal investigation, prosecution, trial, and execution of judgments.
4.Clear evidence of your subjective malice or abuse of rights.
5.Responding to your request would cause serious harm to your or others' legitimate rights and interests.
6.Matters related to commercial secrets.
7.Matters related to our fulfillment of legal obligations stipulated by laws and regulations.
If you have any questions about the realization of the above rights, you can contact us through the relevant contact information provided in "How to Contact Us." Regarding your requests and the related personal information rights of you or your child under the laws of the People's Republic of China and other applicable laws, you can contact us through customer service or directly file a complaint with our person in charge of personal information protection. We will respond within 15 days.
We may modify the terms of this Rule in a timely manner based on updates to our products and services and relevant legal requirements. Such modifications constitute a part of this Rule. If we need to make modifications to this Rule, we will prompt you again through a pop-up window on the homepage before the revisions take effect. After confirmation, the modifications will take effect and replace the previous relevant content. If you do not agree with the new modifications, please contact us promptly or immediately stop using the services specified in this rule. If you choose to continue using the relevant services, it will be deemed that you fully agree to and accept the new modifications. In the event of objective circumstances and changes in operational policies that require us to interrupt or stop relevant services, we will promptly notify you, and we appreciate your understanding and agreement.
If you have any questions about this Rule or any complaints or opinions about the processing of children's personal information, please contact us through the following channels. We will respond to your request within 15 working days after receiving the question, opinion or suggestion, and after verifying the identity and guardianship relationship with the guardian and/or child:
(I) You can contact us through our official service hotline at 400-820-0022 and online customer service.
(II) If you discover matters such as the potential leakage of personal information, you can also contact our dedicated department for personal information protection. The contact information for the personal information protection officer is sec_shmaas@shmaas.cn.
Special Reminder: This English version is translated from the Chinese version. In case of any conflict, the Chinese version shall prevail.