SJTU-BOC Institute of Technology and Finance, Shanghai Jiao Tong University (hereinafter referred to as "SJTU-BOC Institute of Technology & Finance" or "we") has always attached great importance to the protection of personal information and privacy. We will make every endeavor to take security measures as required by laws and regulations to make your personal information safe and controllable. When you use our product or service, we will collect, store, use your personal information, and provide it to the external party in accordance with relevant laws and regulations and this Privacy Policy (hereinafter referred to as the " Policy").
The Policy applies to products and services of SJTU-BOC Institute of Technology & Finance, including the official website (https://itf.sjtu.edu.cn) and the mini-program of SJTU-BOC Institute of Technology & Finance. It should be noted in particular that the Policy does not apply to any service provided to you by any other third party through the aforementioned webpage or client end. For example, the Policy shall not apply to information you have provided to a third party when you download and use a third-party application through the open platform of SJTU-BOC Institute of Technology & Finance or when the third party provides any service to you by means of any product of SJTU-BOC Institute of Technology & Finance, in which case, you shall refer to corresponding policies and regulations separately.
Before using our products or services, please read and understand the Policy, especially the bolded provisions. We will post the Policy on our official website. By using our products or services, you are deemed as having read, understood and agreed to the Policy and its updated version from time to time, and agreed to our collection and use of your personal information in accordance with the provisions herein.
1. Content and Purpose of Personal Information Collection
1.1 Content of Collection
We may collect, store and use your personal information when providing products and services to you, including but not limited to your name, age, gender, educational background, occupation, employer, ID card number, language, post code, personal image, mail address, email address, social account and nickname, other contact information and school performance, etc.
1.2 Purpose of Collection, Storage and Use
We undertake to collect, store and use your personal information only for the following purposes:
· To manage and provide you with our products and services, and to communicate with you about your purchase and use of our products and services;
·To support the operation of our products and the performance of our services, and to respond to your inquiries and requests;
· To provide you with on-campus and off-campus services and support, and to receive your feedback and resolve feedback issues;
· To keep you informed of our latest courses, services, derivative products and marketing activities in a timely manner;
· For internal processing, such as data analysis and research to improve the quality of our products and services;
· To facilitate communication with you and solve your problem in a timely manner;
· Other uses with your consent.
2. How do we collect your personal information
2.1 Information you provide to us
This includes, but is not limited to, information you provide when you apply for examination, information you provide when you download or use applications developed by us or our designated companies, information you provide when you visit our official website, participate in the activity organized by us or use other online services provided by us, information you provide when you follow our social media, and your personal information generated during your school period, etc.
2.2 Information we actively collect when providing products or services
This includes, but is not limited to:
academic performance (including grades, assignments submitted, etc.).
2.3 Cookies
We may use Cookies and other tracking technologies to learn about how you use our website. The information collected through Cookies is personal information that cannot be used separately. You understand and agree that we may use the information collected through Cookies in combination with other information about you. Most web browsers automatically turn on Cookies, and you can choose to turn them off at any time by adjusting your browser settings. However, Cookies allow you to enjoy a better and more personalized service from us, and if you turn off Cookies, you may not be able to fully experience all the services provided on our website, so we recommend that you keep them on.
2.4 It should be noted that the personal information you provide to us or collected by us may contain sensitive personal information about you, such as biometric identification, religious belief, specific identity, medical health, financial account, whereabouts track, etc. Please be cautious and pay attention to your sensitive personal information, and you agree that we may process your sensitive personal information for the purposes and in the manner set forth herein.
3. How do we share, transfer or publicly disclose your personal information?
We respect your privacy and comply with relevant laws and regulations, and we undertake to keep your personal information collected strictly confidential and we shall not illegally sell your personal information to others.
3.1 Share
3.1.1 We may provide your personal information to third-party partners as necessary to facilitate cooperation and to launch quality and updated products and services. Our authorized partners are not authorized to use the personal information shared for any other purposes.
Currently, our authorized partners mainly are:
Third-party service providers (e.g., suppliers, service outsourcers, etc.) that we engage to provide services for our customers.
3.1.2 We may share your personal information according to laws and regulations or as mandatorily required by competent government authorities without your prior authorization or consent.
3.1.3 We will only share or provide your personal information to parties other than those above-mentioned in Article 3.1.1 and 3.1.2 with your express prior consent.
3.2 Transfer
We will not transfer your personal information to any company, organization, or individual, except for the following circumstances:
3.2.1 We have obtained your express consent;
3.2.2 In case of a merger, acquisition or bankruptcy and liquidation involving the transfer of personal information, we will require the new company or organization holding your personal information to continue to be bound by the Policy, otherwise we will require such company or organization to seek your authorization and consent again.
3.3 Public Disclosure
We will only disclose your personal information to the public when:
3.3.1 We have obtained your express consent;
3.3.2 Law-based disclosure: We will disclose your personal information to the public as mandatorily required by laws, legal proceedings, litigation or competent government authorities.
3.4 We will confirm the management system and transmission risk of the third party before sharing, transferring or publicly disclosing your information.
4. How do we protect your personal information
4.1 We use reasonably practicable security measures that comply with industry standards to protect the personal information you provide against unauthorized access, public disclosure, use, modification, damage or loss.
4.2 We will take reasonable and practicable steps to ensure that no unrelated personal information is collected.
4.3 Except as otherwise required by laws and regulations, we will only store your personal information for the minimum period required to achieve the purposes set forth herein.
4.4 We will regularly update this Policy and make publicly available reports on security risks, etc. You can view them on our official website.
4.5 In the event of an unfortunate personal information security incident, we will inform you in a timely manner, and if it is impractical to inform the subject of personal information one by one, we will issue an announcement in a reasonable and effective manner. Meanwhile, we will also actively report the processing progress of personal information security incidents according to the requirements of regulatory authorities.
5. Your rights with respect to your personal information
You may choose not to provide us with your personal information, but we may not be able to provide you with our products or services or respond to issues you may have in using our products or services, and we shall not be liable for any loss you may suffer as a result.
If you agree to provide us with your personal information, we will guarantee your exercise of the following rights over your personal information in accordance with relevant laws and regulations:
5.1 Access to your personal information:
You will be entitled to access or edit your personal information in your account, change your password, add security information, or close your account.
5.2 Update your personal information:
You will be entitled to require us to correct any error or omission in your personal information that we have collected, stored or used.
5.3 Delete your personal information
You can make a request with us to delete your personal information. If we decide to respond to your deletion request, we will also notify the third party who has obtained your personal information from us and require them to delete it in a timely manner, unless otherwise stipulated by laws and regulations, or unless they have obtained your authorization separately.
When you delete your personal information from our products or services, we may not immediately delete such information from our backup system, which will be deleted when the backup is updated.
If the entire deletion is impossible for certain information due to future reference requirements, we will anonymize such information so that it can no longer be specifically directed to an individual.
5.4 Change the scope of your authorization
You may change the scope of your authorization to us for the collection, store and use of your personal information, or withdraw such authorization.
If you withdraw your authorization, we will no longer process your personal information, provided that your decision to withdraw your authorization will not affect the personal information processing activities previously carried out based on such authorization.
5.5 Respond to your request above
You may submit a request for the aforesaid rights to us by phone call. For security purposes, you may be required to submit such requests in writing, and we may require verification of your identity before processing your request. In principle, we do not charge a fee for your reasonable request, but we will charge a certain cost for repeated requests beyond reasonable limit, as appropriate.
6. How the policy is updated
We may amend the Policy and will post any change to the Policy on the official platform of SJTU-BOC Institute of Technology & Finance in China. In case of any material change with a significant impact on the collection, storage and use of your personal information (for example, in case of any change to the contact information and complaint channel corresponding to your personal information), we will notify you in an explicit manner, stating the specific change, etc.
7. If you have any question, comment or suggestion regarding the Policy, please contact us.