Privacy Policy

CRIonline (collectively referred to as "CRIonline" or "we") is very important to us to protect your personal data at all times. Therefore, we will adopt security measures to protect your personal data and privacy in accordance with the provisions of laws and regulations such as the European Union's General Data Protection Regulation (GDPR) and other laws and regulations, and establish the CRIonline Privacy Policy (hereinafter referred to as this Privacy Policy).

This Privacy Policy applies to the collection and processing of data implemented on CRIonline's websites (collectively, the "Sites"), smartphones, tablets and other online applications for mobile devices ("Apps"), as well as the use of our related products and services.

And remind you:

If you are under the age of 16, do not provide any personal data without the permission of your parent or legal guardian.

This Privacy Policy may be modified by making it clear that CRIonline reserves the right to amend this Privacy Policy at any time, in particular to adapt to the laws and regulations in force. Changes will be notified by posting online. We encourage you to stay in touch with the latest valid version.

We understand the importance of personal data to you and will take your personal data seriously. We strive to create and maintain a relationship of trust with you and to protect your personal data on the following principles: lawfulness, fairness, transparency, limited purpose, minimum necessity, accuracy, complete confidentiality, alignment of rights and responsibilities, and security. At the same time, we are committed to taking appropriate security measures to fully protect your personal data in accordance with the industry's mature security standards.

Before you use CRIonline-related products and services and submit personal data, you must carefully read and thoroughly understand this Privacy Policy, and confirm that you fully understand and agree to use the relevant products and services. By signing, or clicking on "Read", "Agree" or other similar options, and by submitting your personal data to us, you will be deemed to have accepted this Privacy Policy. We will lawfully use and protect your personal data in accordance with relevant laws and regulations and this Privacy Policy. Please read this Privacy Policy carefully before ticking or clicking on "Read", "Agree" or other similar options to complete, confirm, authorize the export or import of personal data, or sign the authorization document to ensure that the meaning of its contents and the corresponding legal consequences are fully understood and fully understood.

The CRIonline-related products and services described in this Privacy Policy may vary depending on the phone model, system version, software application version, etc. you are using. The final products and services are subject to the CRIonline related products and services you use.

Among them, we indicate in bold font or other reasonable ways that there is a material relationship with your rights and interests (possibly), and you should focus on reading them. If you have any questions, comments or suggestions about this Privacy Policy, please feel free to contact us through Part 9 of this Privacy Policy.

This policy will help you understand the following:

I.How we collect and use your personal data

II.How we entrust the processing, sharing, transfer, public disclosure and storage of your personal data

III.How we protect your personal data

IV.Your Rights

V.How we process children's personal data

VI.How your personal data is transferred worldwide

VII.Use of Cookies and Similar Technologies

VIII.How this Policy is updated

IX.How to contact us

I. How We Collect and Use Your Personal Data

Personal Data: means any data that points to an identified or identifiable natural person ("Data Subject"). The identifiable natural person can be identified directly or indirectly, in particular by reference to such identifiers as name, identity card number, positioning data, online identification, or by reference to one or more elements of the natural person such as physical, physiological, genetic, psychological, economic, cultural or social identity.

Special types of personal data: means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union members, as well as genetic data, biometric data, health, the sex life or sexual orientation of natural persons for the purpose of uniquely identifying natural persons. In this Privacy Policy, the terms relating to special types of personal data will be marked in bold font to alert you to special attention. In scenarios where sensitive personal data is actually collected, we will obtain your explicit consent.

We collect and use your personal data in accordance with the GDPR. We will only collect and use your personal data for the following purposes as described in this Privacy Policy.

Unless otherwise stated in this Policy or otherwise provided by laws and regulations, we will inform you in advance and seek your consent when we need to use personal data for other purposes not specified in this Privacy Policy.

Unless otherwise specified in the purposes described below, we only store your personal data for the period necessary to achieve the relevant purpose. If the data is used for more than one purpose, once the specific purpose has been completed, your data will be deleted or stored in a form that cannot be traced directly or indirectly to you.

(I)The purposes and types of personal data we collect about you when you visit our website and agree to our Privacy Policy

1. Purpose of Collection:

(1) To enable us to better understand how our website is used and how to improve it. By counting your visits to our website, we can continually improve the website experience and provide better content.

(2) For data verification and statistics

(3) Conduct PV, UV, and the user's area

(4) Statistics of news popularity

(5) You agree to collect

(6) The purpose of use of the cookie is self-contained

2. The type of collection

(1) User IP address (see: IP anonymization)

(2) Optional user ID

(3) Date and time of the request

(4) The title of the page being viewed (page title)

(5) The URL of the page being viewed (page URL)

(6) The URL of the page viewed before the current page (Referrer URL)

(7) The screen resolution being used

(8) The time in the time zone of the local user

(9) The file that was clicked and downloaded (downloaded)

(10) Link to the clicked external domain (Outlink)

(11) Page generation time (time generated by the web server and then downloaded by the user: page speed)

(12) User location: country, region, city, approximate latitude and longitude (geographical location)

(13) The main language of the browser used (Accept-Language header)

(14) User agent of the browser being used (User-Agent header)

(II)The purpose and type of data collection under specific circumstances

1. When you visit our website, we collect your personal data, such as your IP address, to verify your identity.

(1) IP address - A numeric code that identifies your device and your country, region, or city.

(2) Geographic location -- Used to determine the approximate latitude and longitude of the device, GPS-related data, and local Wi-Fi device connection data.

(3) Operational data in our Services or website - used to identify your user behavior, including user ID, date and time of the request, title of the page being viewed, URL of the page being viewed, URL of previously viewed page, clicked and downloaded files, clicked external links, and page generation time.

(4) The data we collect is to ensure the stability and accuracy of the statistical analysis service and to continuously optimize our service, including: your hostname, browser user agent, operating system, SDK / API / JS code version, Internet service provider, timestamp, application identifier, application version, application distribution channel, device display height / width, screen resolution, screen color, FLASH version, JAVA support, locale, cookie support, Terminal manufacturer, time zone, network status (Wi-Fi, etc.), and telecom operator.

2. In addition, when you contact us by e-mail, we will collect the following types of personal data:

(1) Nickname

(2) Contact data such as your email address

(3) Technical data such as your IP address

(4) Other data that you may disclose in your emails

We do not collect special kinds of personal data about you, such as your race, political opinions, religion, unless you voluntarily provide it to us.

3. Use CRIonline related products and services

(1) Purpose and scenario of collection: We will collect your data when you use CRIonline to access, share, retrieve, jump, copy, subscribe, listen to broadcasts, fill in forms and other products or services. Specifically, this includes, but is not limited to, the following scenarios

To provide you with updated data on the services you are using;

To respond to your requests on our websites and applications in tabular form;

Send you e-newsletters, push notifications, alarm data;

To promote our content and services and our partners;

Carry out valid delivery of materials;

Data analysis and statistical research to update and optimize the order of our website or to understand our website users, to conduct research and analysis of our content and services;

We collect data for data security reasons and ensure the stability and reliability of our systems, while protecting them from possible external attacks.

(2) With your prior consent, some data may be automatically collected through cookis or similar technical means (such as IP address, connection and browser data, location data, etc.) due to your behavior on this site.

(3) We may automatically collect the following data from you

Web logs.

i.Enter the content and search results of the search content in the station

ii.IP address

iii.Language used

iv.Date and time of access to the service

v.Cookies (see Detailed data in the Cookie Policy)

vi.Web Beacon

Device or application data: such as the mobile device you are using, the browser or other programs used to access CRIonline.

i.Configuration data

ii.Device version number

Location data: When you turn on the device location function and use the relevant services provided based on location, we will use various data for location after obtaining your consent.

i.IP address

ii.And other sensor data capable of providing relevant location data

CrIonline may also record in order to provide you with better service and improve your user experience.

i.Hardware model

ii.Operating system version number

iii.Hardware and software data such as network device hardware address (MAC).

(III)In the following cases, our collection and use of your data will not obtain your authorization and consent:

1. Related to the fulfillment of obligations under laws and regulations by the controller of personal data;

2. Directly related to national security or national defense security;

3. Directly related to public safety, public health, or major public interests;

4. Directly related to criminal investigation, prosecution, trial, and enforcement of judgments;

5. For the purpose of safeguarding the major legitimate rights and interests of the data subject or other individuals, such as life and property, but it is difficult to obtain the authorization and consent of the person;

6. The personal data involved is disclosed to the public by the data subject himself;

7. It is necessary to conclude and perform the contract according to the requirements of the data subject;

8. Collecting personal data from legally and publicly disclosed data, such as legal news reports, government data disclosure and other channels;

9. Necessary for maintaining the safe and stable operation of the products or services provided, such as discovering and disposing of the failure of the products or services;

11. It is necessary to carry out statistical or academic research in the public interest, and take specific measures to protect the rights and interests of data subjects.

II. How we transfer, publicly disclose and store your personal data

(I)Provision

We will not provide your personal data to any company, organization or individual, except in the following cases:

Update and amendment

1. Provided on the condition of obtaining explicit consent. With your explicit consent, we will provide your personal data to other parties.

2. In the case of mergers, acquisitions or bankruptcy liquidations, if the personal data is provided to the company's rights and obligations inheritors, we will separately inform you of the relevant situation and require the new company or organization holding your personal data to continue to be bound by this privacy policy, otherwise we will require the company or organization to seek your authorization and consent again.

(II) Disclosure

We will only disclose your personal data in the following circumstances:

1. It is really necessary for our business and after obtaining your consent.

2. Disclosure based on law: We may disclose your personal data in cases of laws, legal proceedings, litigation or mandatory requirements of government authorities.

((III) Storage

When you visit our website, any data we collect will be stored in The People’s Republic of China. When you contact us by email, any data contained in your email will be stored in The People’s Republic of China. We securely store the personal data we collect in accordance with GDPR regulations and state-of-the-art cybersecurity practices. The storage period will not exceed the period necessary for the processing of personal data, unless a longer period of time is required by law, regulation or procedural purpose. However, when the technical and organizational measures required by the GDPR are met, and are processed only for public interest, scientific or historical research and statistics, they will be stored for a long time.

We securely store the personal data we collect in accordance with cybersecurity best practices and the GDPR:

1. For personal data collected when you visit our website:

（1） Location data is retained for two years after your last visit to our website

（2） Technical data is retained for two years after your last visit to our website

（3） Usage data is retained for two years after your last visit to our website

（4） Device data is retained for two years after your last visit to our website

（5） Other data will be retained for two years after your last visit to our website

2. For personal data collected when you send us an email:

（1） Identity data is retained for two years from the date we receive your email

（2） Contact data will be retained for two years from the date we receive your email

（3） Technical data is retained for two years from the date we receive your email

（4） Other data is retained for two years from the date we receive your email

3. After the expiration of the retention period, your personal data will be deleted from our systems or anonymized.

III How we protect your personal data

（I） We have used security measures in line with industry standards to protect the personal data you provide and prevent the data from being unauthorized access, public disclosure, use, modification, damage or loss. We will take all reasonable and practicable measures to protect your personal data. For example, we use encryption technology to ensure the confidentiality of data; We use trusted protection mechanisms to protect data from malicious attacks; We will deploy access control mechanisms to ensure that only authorized persons have access to personal data; And we regularly conduct security and privacy training sessions to raise awareness among our employees of the importance of protecting personal data.

(II) We will take all reasonable and practicable measures to ensure that only personal data is collected that is necessary to achieve the purposes described in this policy. We will only retain your personal data for as long as necessary to achieve the purposes described in the Cost Policy, unless it is truly necessary to extend the retention period and obtain your separate authorization and consent or in accordance with laws and regulations or special regulatory requirements regarding the retention period.

(III) The Internet environment is not 100% secure, and while we are committed to protecting your personal data, we cannot guarantee or guarantee its absolute security. Therefore, you should also take proactive measures to ensure the security of your personal data.

(IV) After the unfortunate occurrence of personal data security incidents or data breaches, we will promptly inform you in accordance with the requirements of GDPR laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, the suggestions that you can prevent and reduce risks independently, and the remedial measures for you. We will promptly inform you of the relevant circumstances of the incident by email, letter, telephone, push notification, etc., and when it is difficult to inform the personal data subject one by one, we will take a reasonable and effective way to issue an announcement. If you have any questions about the protection of our personal data, for example if you find that your personal data has been compromised, please contact us immediately via the contact details in Section IX so that we can take appropriate action. At the same time, we will also proactively report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.

(V) Some products or services such as [search engines, social media, and friendship links] may contain network links that are operated and maintained by third parties, but we cannot control such third parties. Please note that any data you provide to a third party will be subject to the terms of that third party's privacy policy or personal data protection policy. We recommend that you understand and inquire before providing any data to third parties. We are not responsible for the content, conduct or policies of third parties. The presence of third-party links to some of our products and services does not constitute an endorsement by us of the content, behavior or policies of that third party.

IV. Your Rights

In accordance with the relevant provisions of the GDPR and the prevailing practices in other countries and regions, we guarantee you the following rights to your personal data:

(I) Access, consult and copy your personal data

You have the right to access your personal data, except in exceptional circumstances provided by laws and regulations.

You can send us an e-mail to: web-service@cri.cn to inquire about your personal data. We will respond to your request within 15 working days of verification.

You also have the right to copy your personal data, or to obtain a copy of your personal data, which you can send at any time by sending an e-mail to web-service@cri.cn

Where technically feasible (automated), we may also transfer a copy of your personal data directly to a third party of your designation upon your request.

(II) Delete your personal data

You may request the deletion of personal data from us in the following circumstances:

1. If our processing of personal data violates laws and regulations;

2. If we collect and use your personal data without your consent;

3. If our processing of personal data violates our agreement with you;

4. If the purpose for which your personal data is processed has been achieved, cannot be achieved or is no longer necessary to achieve the purpose of the processing (e.g. you no longer use our products or services, etc.);

5. When we terminate the services and operations of our website;

6. You have withdrawn your consent to our processing of your personal data.

If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal data from us and request them to delete it in a timely manner, unless otherwise provided by laws and regulations, or these entities have obtained your independent authorization.

When you delete data from our Services, we may not immediately delete the corresponding data from the backup system due to applicable legal and security technical restrictions, but we will securely store your personal data and will not process it any further. In order to fully protect your personal rights and interests, we may retain the necessary data in the backup system and at the same time keep such data in a state that cannot be retrieved or accessed through technical means.

You can always send an email to web-service@cri.cn. We will respond to your request no more than 15 business days after verification is approved.

(III) To respond to your above requests and appeals

In order to keep your personal data secure, you may need to prove your identity and we will process your request after we have verified your identity.

We will respond within 15 working days.

For your reasonable request, we will not charge a fee in principle, but for multiple repetitions and requests that exceed reasonable limits, we will charge a certain cost fee as appropriate. We may reject requests that are unwarrantedly repetitive, require excessive technical means (e.g., need to develop new systems or fundamentally change existing practices), pose a risk to the legitimate rights and interests of others, or are very impractical (e.g., involving data stored on backup tapes).

If you are not satisfied with our processing, you can also make a complaint through the data authority。

We will not be able to respond to your request in the following situations:

1. Related to our performance of our obligations under laws and regulations;

2. Directly related to national security or national defense security;

3. Directly related to public safety, public health, or major public interests;

4. Directly related to criminal investigation, prosecution, trial, and enforcement of judgments;

5. We have sufficient evidence that you have subjective malice or abuse of rights;

6. For the sake of safeguarding the life, property and other major legitimate rights and interests of you or others, but it is difficult to obtain your consent;

7. Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations;

8. Involving trade secrets.

V . How we process children's personal data

Our products, websites and services are primarily intended for adults. If we become aware that a minor's personal information has been collected without prior verifiable parental consent, we will seek to delete the relevant data as soon as possible.

For the purposes of this Privacy Policy, we treat anyone under the age of 16 as a child.

VI . How your personal data is transferred globally

In principle, the personal data we collect and generate will be stored in The People’s Republic of China. However, because we provide you with products or services through websites located in multiple countries and for other business needs, your personal data may be transferred to or accessed from, the countries in which you use the products or services.

Before transferring your personal data across borders, we will prompt you again with enhanced notification or immediate prompting (e.g. pop-up windows, etc.) and obtain your authorization.

Although such jurisdictions may have different data protection laws, we use organizational and technical measures to ensure that your personal data is adequately and equally protected. For example, we will carry out security measures such as personal data security impact assessments prior to cross-border data transfers, and adopt technical and administrative measures to effectively fulfill data security protection obligations.

VII . Use of Cookies and Similar Technologies

(I) When you visit our website, your cookies will be collected and processed by us, and Google Analytics and Baidu Statistics will also collect and process your cookies on our behalf. For detailed data on how Google Analytics and Baidu Statistics uses your personal data, please visit the Google Analytics Terms of Service and Baidu Privacy Statement.

Our websites and services use cookies and similar technologies to help us collect other data. The Sites and Services may also include cookies and similar tracking technologies from third parties that may collect other data about you through the Sites and Services and other websites and online services. This policy provides data about how and when we use cookies for these purposes. We respect your privacy and are committed to protecting your privacy by complying with this Privacy Policy.

(II) This Privacy Policy applies to all websites that reference or link to this Cookie Policy. For any personal data collected using cookies and similar technologies, our Privacy Policy also applies and complements this Cookie Policy.

(III) A cookie is a small text file that is stored on your computer to recognize and remember you. It is sent to your browser and stored on your computer's hard drive, tablet or mobile device. When you visit our website, we may automatically collect your data through cookies or similar technologies. For more detailed instructions on what cookies are and how they work, please visit the EU Guidelines for Cookies: https://ec.europa.eu/info/cookies_en.

(IV) Using cookies and similar technologies, other organizations can help us analyze the use of our website and measure the number of visitors to our website to improve your experience on our website and understand how you use our website.

(V) When you visit our website, we will send a cookie to your device and send it to Google, Baidu and our servers. We do not use cookies for any purpose other than those described in this Privacy Policy.

( VI) You can change your web browser settings at any time to opt out of our cookies. You can do this with a browser.

( VII) You can delete all cookies that are already on your device by clearing your browser's browsing history. This will delete all cookies from all websites you have visited. Please note that you may also lose some of your saved data.

VIII . How to update this policy

Our personal data protection policy is subject to change. If such changes are substantial, we will automatically assume that your consent has been withdrawn until you again agree to the terms of our Privacy Statement. We will not diminish your rights under this Privacy Policy without your explicit consent. We will post any changes to this policy on this page. We will archive older versions of this Policy for your review.

For significant changes, we will also provide more significant notice.

Material changes referred to in this Policy include, but are not limited to:

1. Significant changes have occurred in our functional modules, such as the purpose of processing personal data, the type of personal data processed, the way personal data is used, etc.;

3. Changes in the main objects of personal data sharing, transfer or public disclosure;

4. there has been a material change in your right to participate in the processing of personal data and the way in which it is exercised;

5. When there is a change in the department responsible for handling the security of personal data, contact information and complaint channels.

IX . how to contact us

For any other questions regarding this Privacy Statement, our website or your exercise of your privacy rights, you may contact us in the following ways:

(1) Guoguang International Online Network (Beijing) Co., Ltd

Email: web-service@cri.cn

Address: Room 701, 7th Floor, Building 7, No. 30 Courtyard, Shixing Street, Shijingshan District, Beijing

Zip code: 100040