Last updated: 2019-12-11 20:43:29PDF
- ADDENDUM -- SOUTH KOREA
Last updated: 2019 - 11 - 23
What type of personal information do we collect?
We collect information regarding your use and purchase of our Services and your interactions with Tencent. You also provide information when you make an enquiry on our website or register to use our Services. Examples include your name and contact details. If you are the administrator of the account, you have the ability to provide access rights to other persons by including their email address in the service console. For information that you provide to us to set up your account, and that we collect and generate in managing your Services, we act as the controller. For information that you store using the Services (for example, content that you upload to store on our servers), we act as a processor. See below at The Types of Personal Information we Collect and Process for more information.
How will we use the collected personal information?
We will use the collected information to create and verify your account, enable password change, process payments, and to communicate with you. See below at How we use Your Personal Information for more information.
Who do we share the collected personal information with?
We share your information with our third party service providers, related group companies and as required by law. See below at How we share and store your Personal Information for more information.
Where do we process the collected personal information?
Our servers may be located outside of the country you are located, for example in Mainland China. See below at How we share and store your Personal Information for more information.
How long do we hold on to the collected personal information?
Your information is retained so long as your account exists. After which, the information is deleted within a set time period, depending upon the type of personal information. See below at Data Retention for more information.
How do I exercise my rights over my information?
You may have special rights over your information and how we can use it. These include how you can access the information, erasing the information, restricting how your information can be used, objecting to its use and getting a copy of your information. See below at Your Rights for more information.
If you have any concerns or complaints, please contact us at firstname.lastname@example.org.See below at Contact & Complaints for more information.
How will we notify you of changes?
Data Controller (EEA and Switzerland): Tencent Cloud Europe B.V.. Address: Atrium building, 8th floor, Strawinskylaan 3127, 1077 ZX Amsterdam, the Netherlands.
Data Controller (Outside EEA and Switzerland): The entity you have contracted with, as set out in the Terms of Service.
Data Protection Officer: Please email email@example.com.
We also hold data, including personal information, that you submit, upload, transmit or display using the Services ("Content") and we store this data solely in order to provide the Services. The terms relating to our storage of Content are set out in ourTerms of Service and Data Processing and Security Addendum. You are the data controller of Content and questions about data handling processes from your users or third parties regarding Content should in the first instance be addressed to you. At all times, we act as a service provider to you, and process data on your behalf. You can extract your Content at any time.
If you are located in the European Economic Area or Switzerland, the data controller of your personal information for the purposes of the General Data Protection Regulation is Tencent Cloud Europe B.V., a company registered in The Netherlands with its registered address at Atrium building, 8th floor, Strawinskylaan 3127, 1077 ZX Amsterdam, the Netherlands. If you are located outside the European Economic Area or Switzerland, the data controller of your personal information is the entity that you have contracted with, as set out in the Terms of Service. In each case, the relevant entity is referred to in this policy as "Tencent", "we" and "us".
Our data protection officer can be contacted at firstname.lastname@example.org.
SECTION 1: WHERE WE ARE A DATA CONTROLLER
The Types of Personal Information We Collect and Process
We will collect and use the following information about you:
Information you give us. You may give us information about you by making an enquiry about our Services, using our Services or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register for our Services (or for business customer, act as the company's business representative to register for Services), such as your name, username, email address, photo ID, Credit card information, telephone number and other information that helps us register you to use our Services.
Information we collect about you when use our Services. We automatically collect certain information from you when you use our Services through the Tencent Cloud web portal, including IP address, User Agent and Device ID, and information regarding your use of our Services such as our log of your visits, site access requests, uploads and downloads.
Information that we obtain from a third party. Tencent Cloud allows administrators of the user account to determine access rights. In doing so, the administrator of your Services (which might be you) can include the email addresses of other persons who are to be given access to the Services under that account. If you are the administrator of the account, you acknowledge and undertake to us that you have the consent of the individual concerned to provide their email address for this purpose.
We also collect and store your information each time you interact with Tencent, for example, when you communicate with us by email, activate new Services, or complete forms on our website. We also store information about the Services you purchase, such as the activation code, date of purchase, and information relating to any support issue.
You have the option to permit installation of such Cookies or subsequently disable them. You may accept all Cookies, or instruct the web browser to provide notice at the time of installation of Cookies, or refuse to accept all Cookies by adjusting the relevant function in the web browser of your computer. However, in the event of your refusal to install Cookies, Tencent Cloud may be prevented from providing some of its Services available to you.
For more information about the Cookies we use, please see our Cookies Policy
Our Service is not intended for children. Children must not use the Service for any purpose. We will not knowingly allow anyone under 16 to register for our Services and/or provide any personal identification information. If you are under 16, please do not sign up to use our Services or provide any information about yourself through the Service.
How We Use Your Personal Information
We will use the information in the following ways and in accordance with the following legal bases:
|Personal Information||Purpose of Use||Legal Basis for Processing (only applicable for the EEA)|
|Location, Name, Email Address, IP Address, User Agent (or website browser), Device ID and Tencent Cloud ID, Address (including city and post code) [Mandatory]||We use this information to:
· create your Tencent Cloud account in accordance with your request;
· allow for password resets;
· provide you with user support; and
· enforce our terms, conditions and policies.
|We process this information as it’s necessary for us to perform our contract with you to provide the Services.|
|Mobile Number, Email Address [Mandatory]||We use this information:
· to verify your Tencent Cloud account;
· for security protection (if you activate account verification, this will be used to send you SMS alerts and two-factor authentication codes when you modify account passwords, email addresses, etc.);
· for product notifications;
· for order confirmations; and
· for service information (e.g. account balance information, and to communicate to you when your account balance is running low).
|It is in our legitimate interests to verify your identity and communicate with you about the Services.|
|Photo ID (e.g., driver’s license or passport) Name, Address and ID Number [Mandatory]||If you elect to use servers located in the PRC (excluding Hong Kong (China), Macau (China) and Taiwan (China)) for the Services, we use your photo ID (or, where you are a corporate customer, corporate documentation) to ensure that your account is legally verified in accordance with local law.||It is in our legitimate interests to process such data to ensure you are able to activate the service for use in jurisdictions where this is a legal requirement.|
|Credit card information (card number, name, expiration date, security code) [Mandatory]||We use your Credit card information to process payments made by you for use of the Services.||We process this information as it’s necessary for us to perform our contract with you to facilitate payment for the Services.|
|Transaction Records (such as date and time of payment for services) [Mandatory]||We provide access to your Transaction Records to allow you to see your transaction history.||We process this information as it’s necessary for us to perform our contract with you to manage payments in respect of the Services.|
|Log Data, Metadata, IP Address, User Tickets, User Agent, Date and Time of Access, each URL visit within the Tencent Cloud website whether direct or referred from third party website, Location data (Wifi and GPS) [Optional]||We use this information for strategy and Service improvement and for analytics.||It is in our legitimate interests to improve our strategy and Services.|
|Customer Service Ticket/ Chat Content, IP Address, Tencent Cloud ID, incident details and response steps [Mandatory]||We use this information to:
· deal with your concerns and complaints about the Service; and
· improve and administer our Services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, and to keep our Services safe and secure.
|It is in our legitimate interests to improve our Services and provide support in connection with the Services supplied to you.|
|Log and Metadata in relation to incidents [Optional]||We use this information in order to improve our Service and responses.||It is in our legitimate interests to improve our Service and responses.|
|Enquiry Data (data provided when you submit an enquiry via our website contact form or as part of a sales enquiry, including your name, email and phone number) [Mandatory]||We use this information to respond to your request.||It is in our legitimate interests to process this information as it is needed to respond to your request.|
|Promotional Contact Data: Name, Email and Phone Number [Optional]||We use this information to promote our products and services to you.||We process this information with your consent.|
How We Share and Store Your Personal Information
We may share your personal information with selected third parties in and outside your country, including:
Third Parties where we use a third party service to: (a) process payments ; (b) provide customer support (including provision of a support database and ticketing); (c) send SMS service notification; or (d) provide other services, support, features or functionality as part of the Services, including those listed on our Third Parties page.
Related group companies, including the entities listed on our Third Parties page, with whom we share your personal information to operate our Services.
To the extent data is transferred outside of the EEA for processing (for example, to Mainland China), we rely on the European Commission's model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses), pursuant to Decision 2001/497/EC (in the case of transfers to a controller) and Decision 2004/915/EC (in the case of transfers to a processor);
Law enforcement agencies, public authorities or other judicial bodies and organisations. We disclose information if we are legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:
comply with a legal obligation, process or request;
enforce our terms of service and other agreements, policies, and standards, including investigation of any potential violation thereof;
detect, prevent or otherwise address security, fraud or technical issues; or
protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction); and
A third party that acquires all or substantially all of us or our business. We will disclose information to a third party in the event that we sell or buy any business or undergo a merger, in which case we will disclose your data to the prospective buyer of such business. We will also disclose information to a third party if we sell, buy, merge or partner with other companies or businesses, or sell some or all of our assets. In such transactions, user information may be among the transferred assets.
Third Party Links and Services
The Security of Your Personal Information
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of the information transmitted to our site; any transmission of your information is at your own risk.
We will retain your personal information as described below (except if otherwise required to be retained by applicable law).
|Location, Email Address, Password, IP Address, User Agent (or website browser), Device ID, Tencent Cloud ID, Verification Code, Mobile Number, Name, Address (including city and post code)||Account data is held for so long as an account exists. Information is erased within thirty (30) days of the date the account is deleted.|
|Credit card information(card number, name, expiration date, security code)||Account data is held for so long as an account exists. Information is erased within thirty (30) days of the date the account is deleted.|
|Transaction Records||Payment data is held for as long as an account exists. Information is erased within ninety (90) days of the date the account is deleted.|
|Photo ID (e.g., driver’s license or passport) Name, Address and ID Number||Account data is held for so long as an account exists. Information is erased within thirty (30) days of the date the account is deleted.|
|Log Data, Metadata, IP Address, User Agent, Date and Time of Access, each URL visit within the Tencent Cloud website whether direct or referred from third party website, Location (assisted by Wifi and GPS)||This data is held for so long as an account exists. Information is erased within thirty (30) days of the date the account is deleted.|
|Customer Service Ticket / Chat Content, IP Address, Tencent Cloud ID, incident details and response steps||This data is held for so long as an account exists. Information is erased within twenty-four (24) hours of the date the account is deleted.|
|Log and Metadata in relation to incidents||This data is held for so long as an account exists. Information is erased within thirty (30) days of the date the account is deleted.|
|Enquiry Data (data provided when you submit an enquiry via our website contact form or as part of a sales enquiry, including your name, email and phone number)||Enquiry data is held until an enquiry is resolved, and then erased within thirty (30) days of such resolution, unless you agree to have this data retained and receive more information in the future.|
|Marketing Data: Name, Email and Phone Number||Such data is held until you tell us that you no longer wish to receive promotional information.|
Personal information, which has fulfilled the purpose for which it was collected or used, and has reached the period of time during which personal information was to be possessed, will be destroyed in an irreversible way. Personal information stored in electronic files will be deleted safely in an irreversible manner by using technical methods, and printed information will be destroyed by shredding or incinerating such information.
In the event that the processing and retention period have terminated, but personal information is required to be retained continuously for other reasons including for the purposes as prescribed under applicable laws, the relevant personal information will be stored and maintained separately from other types of personal information.
This section ("Your Rights") applies to users who are located in the European Economic Area.The sub-section entitled "Access, Correction & Deletion" also applies to users who are located in Japan and Korea.
You have certain rights in relation to the personal information we hold about you. Some of these only apply in certain circumstances as set out in more detail below. We also set out how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights. We must respond to a request by you to exercise those rights without undue delay and at least within one month (although this may be extended by a further two months in certain circumstances). To exercise any of your rights, please complete the request form here
Access, Correction & Deletion
You can access, correct and delete some of your data in the account portal at any time here. If you believe there is any other personal information we process about you, or you are unable to correct or delete inaccurate information, you can make a request here. You may also have the right to receive a copy of certain personal information (see Portability below).
Please note, however, that we may retain personal information if there are valid grounds under data protection laws for us to do so (e.g., for the defence of legal claims or freedom of expression) but we will let you know if that is the case.
You have the right to receive a copy of certain personal information we collect from you in a structured, commonly used and machine-readable format and a right to request that we transfer such personal information to another party. The relevant personal information is information you provided for the purposes of performing our contract with you (for example, your mobile number, email address, or transaction data). You can export your Content at any time.
If you wish for us to transfer the personal information to a third party you can contact us using the form available here.. Note that we can only do so where it is technically feasible.
Restriction of Processing to Storage Only
You have a right to require us to stop processing your personal information that we hold, other than for storage purposes, in certain circumstances. Please note, however, that if we stop processing the personal information, we may use it again if there are valid grounds under data protection laws for us to do so (e.g., for the defence of legal claims or for another's protection).
You have the right to object to our processing of your personal information under certain circumstances (such as where that information is used for marketing or profiling) by completing the form here.
Communications from Us
We may from time to time send you service-related announcements when we consider it necessary to do so (such as when we temporarily suspend Tencent Cloud for maintenance, or security, privacy or administrative-related communications). You may not opt-out of these service-related announcements, which are not promotional in nature.
Contact & Complaints
Questions, comments and requests regarding this policy are welcomed and should be addressed to our Privacy Officer at email@example.com.
In the event that you wish to make a complaint about how we process your personal information, please contact our Privacy Officer in the first instance at firstname.lastname@example.org and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the EU country in which you live or work where you think we have infringed data protection laws.
Updates & Changes
If we make any material changes to this policy, we will post the updated policy here and provide a notice on our website. Please check this page frequently to see any updates or changes to this policy.
ADDENDUM -- SOUTH KOREA
Last updated: 11 / 23 / 2019
How We Share and Store Your Personal Information
a. We delegate the processing of your personal information as described below, and the delegatees may process your personal information according to the purpose of the delegation:
|Adyen Singapore Pte Ltd.||Payment processing and risk management|
|Image Frame Investment (HK) Limited||SMS Sending|
|Renke Interaction (Beijing) Information Technology Co., Ltd.||Customer relationship management|
|Tencent Computing (Beijing) Co., Ltd.||Providing back-end support|
Overseas Transfer of Personal Information
We transfer Personal Information to third parties overseas as follows:
|Recipient (Contact Information of Information Manager)||Country to which Your Personal Information is to be Transferred||Date and Method of Transfer||Types of Your Personal Information to be Transferred||Purposes of Use by Recipients||Period of Retention of Use by Recipient|
|Adyen Singapore Pte Ltd.||Singapore||Encrypted transmission||Credit card number, name, valid period, CVV, address||Payment processor and risk management||7 years|
|Image Frame Investment (HK) Limited||Hong Kong||Online transmission||Mobile number, SMS content||SMS Sending||Account data is held for so long as an account exists. SMS messages are deleted 13 months after the SMS messages have been sent.|
|Tencent Computing (Beijing) Co., Ltd.||People’s Republic of China||Online transmission upon account creation and payment||[Mandatory]： Date of birth, name, mobile phone number, email address, location, address (including city and post code), credit card information, type of business, password [Optional]: Photo ID (e.g., driver’s license, passport or business license) name, address and ID number||System operation and maintenance|
|Renke Interaction (Beijing) Information Technology Co., Ltd.||People’s Republic of China||Manual entry information for sales||Customer name, contact person, address, location (including city), industry, visit record||Customer relationship management|
Your Rights of Data Subject and Methods to Exercise Such Rights
You may exercise rights related to the protection of personal information by requesting access to your personal information or the correction, deletion or suspension of processing of your personal information, etc. in writing or via email, fax, phone, etc. pursuant to applicable laws. You may also exercise these rights through your legal guardian or someone who has been authorized by you to exercise such rights. However, in this case, you must submit a power of attorney to us in accordance with applicable laws. Upon your request, we will take necessary measures without delay in accordance with applicable laws. You can also withdraw your consent or demand a suspension of the personal information processing at any time.
[Department in Charge of Protection of Personal Information]
Name of Department: Privacy and Data Protection Department
Person in Charge: Timothy Ma
[Domestic Privacy Representative]
Pursuant to the Article 32-5 of Act on the Promotion of the Use of the Information Network and
Information Protection, the information regarding the domestic agent is as follows:
Name: Tencent Korea Yuhan Hoesa
Address: 152, Taeheran-ro, Gangnam-gu (Gangnam Finance Center, Yeoksam-dong), Seoul, Korea
Telephone Number: +82-2185-0902