中国银行股份有限公司隐私政策
中国银行股份有限公司(“我行”)深知个人信息对您的重要性,会尽力保护您的个人信息安全。我行致力于维护您对我行的信任,恪守以下原则保护您的个人信息:权责一致原则、目的明确原则、选择同意原则、必要性原则、确保安全原则、公开透明原则等。同时,我行承诺依法采取相应的安全保护措施来保护您的个人信息。 请您在使用前,仔细阅读并确认本《隐私政策》。 本《隐私政策》将帮助您了解以下内容: 1.我行如何收集和使用您的个人信息 2.我行如何使用 Cookie和同类技术 3.我行如何存储和共享您的个人信息 4.我行如何保护您的个人信息 5.您控制个人信息的权利 6.本政策如何更新 7.如何联系我行
一、我行如何收集和使用您的个人信息 个人信息是指以电子或者其他方式记录的能够单独或者与其他信息结合识别特定自然人身份或者反映特定自然人活动情况的各种信息。个人信息包括姓名、出生日期、身份证件号码、通信通讯联系方式、住址、账户信息、财产状况、个人生物识别信息(例如脸部信息)、位置信息、电子设备信息、操作行为信息等。  (一)我行收集和使用个人信息的原则 我行收集使用您的个人信息将遵循合法、正当、必要的原则,按照法律法规要求以及业务需要收集您的个人信息,不会收集与业务无关的信息或采取不正当方式收集信息。
(二)我行收集和使用个人信息的目的 我行收集您的个人信息,目的在于依法合规的为您提供优质的产品(或服务),该等信息对于充分履行您和我行之间的合约很有必要,并使得我行能够遵守相关法律义务,具体可能包括: 1.为保护您的账户安全,对您的身份进行识别、验证等; 2.为评估您的履约能力及履约状况,用于业务准入和防控风险; 3.为您提供产品(或服务)所必须; 4.为保护您的资金安全; 5.为改善产品(或服务)、提升客户体验; 6.为履行法定义务(如反洗钱义务); 7.经您许可的其他用途。 (三)我行收集个人信息的方式 1.我行为您提供金融服务时,您主动向我行提供的个人信息; 2.我行为您提供金融服务过程中形成的与服务相关的信息; 3.向征信机构、信用管理公司、资信评估机构或有关法律、监管机构许可的类似机构采集您的信用信息和行为信息; 4.向政府机构、司法机关及公共事业单位(如人民银行、公安部、人力资源和社会保障部门、公积金管理中心等机构)、合法的电信运营商采集使用与服务相关的必要信息,如您的身份证件信息、工商信息、税务信息、社保信息、位置信息等; 5.经您授权,向合法留存您信息的自然人、法人以及其他组织收集与我行提供的服务相关的必要信息; 6.经您许可的其他方式。 (四)我行如何使用个人信息 1.在向您提供我行的金融产品或服务,并为改进这些产品或服务时使用。 2.在我行向您提供金融服务期间,您授权我行持续收集和使用您的信息。在您注销服务时,我们将停止收集您相关的个人信息,但我行会在业务资料归档、审计、监管协查等领域继续使用此前收集的您的相关个人信息。 3.为提升您的产品或服务体验,或为防范风险,我行会对服务使用情况进行汇总、统计分析、加工,但这些信息不会包含您的任何身份识别信息。 4.将您的个人信息用于法律允许的其它用途。
二、我行如何使用Cookie和同类技术 (一)Cookie 为确保网站正常运转,我行会在您的计算机或移动设备上存储名为 Cookie 的小数据文件。Cookie 通常包含标识符、站点名称以及一些号码和字符。借助于 Cookie,网站能够存储您的偏好等数据。我行不会将 Cookie 用于本政策所述目的之外的任何用途。您可根据自己的偏好管理或删除 Cookie。 (二)日志与位置信息 为了提升用户体验和防范风险,我们可能会自动收集日志信息和位置信息。我行不会将这些信息用于本政策所述目的之外的任何用途。 日志信息包括设备或软件信息,例如您的移动设备、网页浏览器或您用于接入我行服务的其他程序所提供的配置信息、您的IP地址、无线网络接入信息和您的移动设备所用的版本和设备识别码。 位置信息指您开启设备定位功能并使用我们基于位置提供的相关服务时,我们收集的有关您位置的信息。您可以通过关闭定位功能随时停止我们对您的地理位置信息的收集。
三、我行如何存储和共享您的个人信息 (一)存储 1.我行在中华人民共和国境内收集和产生的个人信息,将存储在中华人民共和国境内。但为处理跨境业务并在获得您的授权同意后,您的个人信息可能会被转移到境外。此种情况下,我行将按照法律、行政法规和相关监管部门的规定,采取有效措施保护您的信息安全,例如,在跨境数据转移之前实施数据去标识化等安全措施,或通过协议、核查等措施要求境外机构为您的信息保密。 2.我行仅在法律法规要求的期限内,以及为实现本政策声明的目的所必须的期限内,确定单个用户数据的最长储存期限以及用户日志的储存期限。 (二)共享 我行不会与其他任何公司、组织和个人分享您的个人信息,但以下情况除外: 1.在获得您的明确同意或授权后,我行会与其他方共享您的个人信息。 2.我行可能会根据法律法规规定,或按政府主管部门的强制性要求,对外共享您的个人信息。 3.为实现隐私政策声明的目的,或为向您提供服务之必须,我行会与关联公司、合作伙伴共享您的某些个人信息。我行只会共享必要的个人信息,且我行合作伙伴和关联公司无权将共享的个人信息用于任何其他用途。 (三)公开披露 我行仅会在以下情况下,公开披露您的个人信息: 1.事先获得您明确同意或授权; 2.根据法律法规规定,或按政府主管部门的强制性要求,我行可能会公开披露您的个人信息。
四、我行如何保护您的个人信息 (一)我行已使用符合业界标准的安全防护措施保护您提供的个人信息,防止数据遭到未经授权的访问、公开披露、使用、修改、损坏或丢失。我行会采取一切合理可行的措施,保护您的个人信息。 (二)请您理解,由于技术水平局限以及可能存在的恶意攻击,有可能出现我行无法合理预见、防范、避免、控制的意外情况。互联网并非绝对安全的环境,请使用复杂密码,协助我行保证您的账号安全。 (三)如发生个人信息安全事件,我行将按照法律法规的要求,及时将事件相关情况以邮件、信函、电话、推送通知等方式告知您,或采取合理、有效的方式发布公告。同时,我行还将依据监管规定,上报个人信息安全事件处置情况。
五、您控制个人信息的权利 按照中国相关的法律法规和监管规定,我行保障您对自己的个人信息行使以下权利: (一)访问、更正及更新您的个人信息 您有权通过我行国际互联网网站、网上银行、手机银行、电话银行、微信银行等渠道访问及更正、更新您的个人信息,法律法规另有规定的除外。您有责任及时更新您的个人信息。 (二)删除您的个人信息 在以下情形中,您可以向我行提出删除个人信息的请求: 1.如果我行处理个人信息的行为违反法律法规; 2.如果我行收集、使用您的个人信息,却未征得您的同意; 3.如果我行处理个人信息的行为违反了与您的约定。 (三)拒绝我行商业广告 您有权拒绝接收或退订我行基于个人信息向您推送的商业广告。 (四)响应您的上述请求 为保障安全,您可能需要提供书面请求,或以其他方式证明您的身份。我行可能会先要求您验证自己的身份,然后再处理您的请求。请您理解,对于某些无端重复、需要过多技术手段、给他人合法权益带来风险或者非常不切实际的请求,我行可能会予以拒绝。 尽管有上述约定,但按照法律法规要求,如涉及以下情形我行将可能无法响应您的请求: 1.与国家安全、国防安全相关的; 2.与公共安全、公共卫生、重大公共利益相关的; 3.与犯罪侦查、起诉、审判和判决执行等相关的; 4.有充分证据表明您存在主观恶意或滥用权利的; 5.响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的; 6.涉及我行商业秘密的。
六、本政策如何更新 根据国家法律法规变化及服务运营需要,我行将可能对本政策及相关规则不时地进行修改,修改后的内容会通过我行国际互联网网站、手机银行、网上银行、微信客户端等渠道公布,并取代此前相关内容。您应不时关注相关公告、提示信息及协议、规则等相关内容的变动。您知悉并确认,如您不同意更新后的内容,应立即停止使用相应服务,并注销相关的用户,我行将停止收集您的相关个人信息;如您继续使用服务,即视为同意接受变动内容。
七、如何联系我行 如果您对本隐私政策有任何疑问、意见或建议,请联系我行客服热线:95566。
请您在勾选“同意”之前仔细阅读本隐私政策,确保对其内容特别是字体加黑内容的含义及相应法律后果已全部知晓并充分理解。您勾选“同意”并完成注册程序即视为您接受本隐私政策,我行将按照相关法律法规及本政策来合法使用和保护您的个人信息。
Privacy Policy of Bank of China Limited
Bank of China Limited (“BOC”) understands the importance of personal information to you and will do its utmost to protect the security of your personal information. BOC is committed to maintaining your trust in us by protecting your personal information based on the following principles: principle of consistency between rights and obligations, principle of definite purpose, principle of informed consent, principle of necessity, principle of security and principle of openness and transparency. At the same time, BOC commits to take appropriate security measures in accordance with law to protect your personal information. Please read and confirm this Privacy Policy carefully before using our services. This Privacy Policy will help you understand the following: I. How BOC Collects and Uses Your Personal Information II. How BOC Uses Cookies and Similar Technologies III. How BOC Stores and Shares Your Personal Information IV. How BOC Protects Your Personal Information V. Your Right to Control Your Personal Information VI. How This Policy is Updated VII. Contact Information
I. How BOC Collects and Uses Your Personal Information Personal information refers to information recorded electronically or otherwise that can identify a particular natural person or reflect the activity of a particular natural person, either alone or in combination with other information. Personal information includes name, date of birth, ID number, communication and contact information, address, account information, property status, personal biometric identification information (such as facial information), location, electronic device used and operational behavior, etc. i. Our principle of collecting and using personal information BOC will collect your personal information based on the principles of legality, propriety and necessity; in other words, BOC will collect your personal information in accordance with statutory and regulatory requirements and based on the business needs, and will not collect any information that is unrelated to our business or do so in any improper manner. ii. Our purpose of collecting and using personal information To provide you with quality products (or services) in accordance with law, BOC will collect your personal information that is necessary for fully performing the contract between you and us, and will enable us to comply with relevant legal obligations. BOC will probably use such information to: 1. Identify and authenticate your identity, in order to protect your account; 2. Assess your contractual capacity and performance, for the purpose of business access control and risk prevention; 3. Provide you with relevant products (or services); 4. Protect the security of your funds; 5. Improve products (or services) and enhance the customer experience; 6. Fulfill legal obligations (such as anti-money laundering obligations); 7. Other purposes permitted by you. iii. How BOC collects your personal information 1. BOC will receive your personal information actively provided by you during our provision of financial service to you; 2. BOC will develop some service-related information during our provision of financial services to you; 3. BOC will collect your credit information and behavioral information from credit agencies, credit management companies, credit rating agencies, or similar agencies licensed by competent law or regulatory authorities; 4. BOC will collect from government agencies, judicial organs, and public institutions (such as the People’s Bank of China, the Ministry of Public Security, human resources and social security departments and provident fund management centers) and legal telecom operators, some information in relation to our services, such as information on your ID, business, tax, social security and location; 5. With your permission, BOC will collect information in relation to the services provided by us from natural persons, legal persons and other organizations that legally retain your information; 6. Other ways permitted by you. iv. How BOC uses your personal information 1. BOC will use your personal information in the process of providing our financial products or services to you and during improvement of such products or services. 2. BOC will continuously collect and use your information as authorized by you during our provision of financial services to you. When you cancel the service, BOC will stop collecting your personal information, but will continue to use your personal information collected previously in the process of business data archiving, auditing and regulatory review. 3. To improve your experience with our product or service, or to prevent risks, BOC will summarize, statistically analyze and process information on use of our service, but such information will not contain any of your identity information. 4. BOC will use your personal information for other purposes permitted by law.
II. How BOC Uses Cookies and Similar Technologies i. Cookies To ensure the normal operation of our website, BOC will store a small data file called Cookies on your computer or mobile device. Cookies typically contain an identifier, a site name and some numbers and characters. With Cookies, the website can store your preferences and other data. BOC does not use Cookies for any purpose other than those stated in this Policy. You can manage or delete Cookies based on your preferences. ii. Log and location information To improve our user experience and prevent risks, BOC will probably automatically collect log and location information. BOC will not use such information for any purpose other than those stated in this Policy. Log information includes the device or software information, such as the configuration information provided by your mobile device, web browser or other programs you used to access our services, your IP address, wireless network access information, and the version and ID of your mobile device. Location information is the information BOC collects about your location when you turn on the Geolocation function and use our services provided based on the location. You can stop our collection of your location information at any time by turning off the Geolocation function.
III. How BOC Stores and Shares Your Personal Information i. Storage 1. Personal information collected and generated by us within the territory of the People’s Republic of China will be stored within the territory of the People’s Republic of China. However, in order to handle cross-border business and with your permission, your personal information will be probably transferred overseas. Under such circumstances, BOC will take effective measures to protect your information in accordance with laws, administrative regulations and requirements of relevant regulatory authorities, for instance, BOC will implement security measures such as data de-identification before cross-border data transfer, or requiring foreign institutions to keep your information confidential through agreement or inspection. 2. BOC will store data and logs of individual users for the longest period required by laws and regulations and necessary for achieving the purpose of this Policy. ii. Sharing BOC will not share your personal information with any other company, organization or individual except in the following circumstances: 1. BOC will share your personal information with other parties with your explicit consent or authorization. 2. BOC will share your personal information in accordance with laws and regulations or the mandatory requirements of the competent government authorities. 3. To fulfill the purpose of the Privacy Policy or to provide services to you, BOC will share some of your personal information with our affiliates and partners. BOC will only share the necessary personal information, and will not authorize our partners and affiliates to use the shared personal information for any other purpose. iii. Public disclosure BOC will only publicly disclose your personal information in the following circumstances: 1. BOC has obtained your explicit consent or authorization; 2. BOC will probably disclose your personal information in accordance with laws, regulations or the mandatory requirements of the competent government authorities.
IV. How BOC Protects Your Personal Information i. BOC has adopted the security measures that are up to the industry standards to protect your personal information from unauthorized access, public disclosure, use, modification, damage or loss. BOC will take all reasonable and practical measures to protect your personal information. ii. Please understand that due to technical limitations and possible malicious attacks, there may be unexpected situations that BOC cannot reasonably foresee, prevent, avoid, and control. The Internet is not an absolutely secure environment. Please use a complex password to help us keep your account secure. iii. In the event of a personal information security incident, BOC will promptly inform you of the incident by mail, letter, telephone or notification in accordance with laws and regulations, or make an announcement in a reasonable and effective manner. At the same time, BOC will report the handling of the personal information security incident in accordance with regulatory requirements.
V. Your Right to Control Your Personal Information BOC will grant you the following rights to your personal information in accordance with relevant PRC laws, regulations and regulatory requirements: i. Access, correct and update your personal information You have the right to access, correct and update your personal information through our Internet website, online bank, mobile bank, telephone bank, WeChat bank or other channels, except as otherwise provided by laws and regulations. You are obligated to timely update your personal information. ii. Delete your personal information You may make a request for deleting your personal information in any of the following circumstances: 1. BOC is handling your personal information in violation of laws or regulations; 2. BOC is collecting and using your personal information without your consent; 3. BOC is handling your personal information in violation of the agreement with you. iii. Refuse to accept our commercial advertisements You have the right to refuse to accept or unsubscribe from commercial advertisements sent by us based on your personal information. iv. Our response to your above request To ensure security, you may need to provide a written request or otherwise to prove your identity. BOC will probably ask you to prove your identity before processing your request. Please understand that BOC may refuse some overly repetitive requests, or requests involving excessive technical measures, or requests threatening other people’s legitimate rights or interests, or very unrealistic requests. Notwithstanding the above, in accordance with relevant laws and regulations, BOC may not respond to your request if your request is: 1. Related to national security and national defense security; 2. Related to public safety, public health or major public interests; 3. Related to criminal investigation, prosecution, trial or execution of judgments; 4. There is sufficient evidence that you are maliciously using or abusing your right; 5. Responding to your request will result in serious damage to the legitimate rights of you or other individuals or organizations; 6. Involving our trade secrets.
VI. How This Policy is Updated BOC may revise this Policy and related rules from time to time in view of changes in national laws and regulations and the needs of our operations. The revised contents will be announced through our Internet website, mobile bank, online bank, WeChat client or other channels and will replace the previous contents. You should pay close attention to relevant announcements and messages about changes in agreements and rules, etc. You should acknowledge and confirm that if you do not agree to the updated contents, you will immediately stop using the service and delete the username, and BOC will stop collecting your personal information; if you choose to continue to use the Service, you will be deemed to have agreed to accept the changes.
VII. Contact Information If you have any question, comment or suggestion about this Privacy Policy, please dial our customer service hotline: 95566.
Please read this Privacy Policy carefully before ticking “Agree” and ensure that you have fully acknowledged and understood the meaning of the contents, especially the contents in bold, and the corresponding legal consequences. By ticking “Agree”, you will be deemed to have accepted this Privacy Policy, and BOC will use and protect your personal information in accordance with relevant laws, regulations and this Policy.