Privacy Policy

Preamble

The Website (the “www.szxac.com”) is provided by Shanghai AIKO Energy Co.,Ltd. and our subsidiaries and affiliates(hereinafter also referred to as “we” or “AIKO”). In order to explain how the Website will collect, use and store your personal information and what rights you have according to Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation, “GDPR”), we will explain the relevant matters to you through this guide, the main points are as follows:

• A.Information we collect and use
• B.Storage of Information
• C.Security
• D.Sharing of Personal Information
• E.Your Rights
• F.Amendments
• G.Others
• H.Contact us

A. Collection of information

In the process of your use of the Website service, we will collect and use the information you actively provide when using the service or generated due to the use of the service in the following ways:

a. When you send inquiries and complete forms, we will collect and use your name, address, email, and other data concerning your request (e.g., solar energy usage, property assets). The purpose of collecting this information is to answer your inquiry, provide you with the requested information and process your request through the corresponding form.

• ? Legal basis: Consent [Article 6(1)(a) GDPR].
• ? Retention period: AIKO may process your personal data for the duration of the solving of your query/providing the requested information and/or until you request the cancellation or deletion of your personal data.

b. When you request support services, we will collect and use your name, address, email, and other data concerning your request (e.g., solar energy usage, property assets). The purpose of collecting this information is to provide you with the requested support.

• ? Legal basis: The processing is necessary for the performance of a contract to which you are party [Article 6(1)(b) of the GDPR].
• ? Retention period: AIKO may process your personal data for the duration of the provision of the requested assistance / for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

c. When you send us your CV for evaluation, we will collect your name, address and relevant employment details included in your CV. The purpose of collecting this information is to assess your application.

• ? Legal basis: Consent [Article 6(1)(a) GDPR].
• ? Retention period: AIKO may process your personal data for the duration of the selection process. For further conservation, AIKO will request your consent.

d. Account Registration: we will collect and use your name, email, and your phone number and third-party social platform information. The purpose of collecting this information is to help you complete the functions of the AIKO Business registration and protect the security of your account. If you do not provide such information, you may not be able to use our services normally. You can also choose to fill in the user name and other information according to your own needs.

• ? Legal basis: Consent [Article 6(1)(a) GDPR].
• ? Retention period: We may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

e. During your use of AIKO Business services, in order to ensure the normal operation of the services, optimize the user experience and protect your account security, we will collect the basic information necessary for AIKO Business to provide services for you, including your device model, operating system, Unique Device Identifier (a string that the manufacturer assigns to your device to uniquely identify the device), login IP address, AIKO Business version number, the method, type and status of network connection, network condition, device accelerators (such as gravity sensor), operation logs, service logs (your searches and views in AIKO Business, service failures, referral URLs, etc.), and other information.

• ? Legal basis: The processing is necessary for the performance of a contract to which you are party [Article 6(1)(b) of the GDPR].
• ? Retention period: AIKO may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

f. Create a PV Power Station Online: you need to enter the plant name, region, capacity, address, GPS location, etc. This information will be uploaded and stored in our server so that you can use it when you log in to AIKO Business on other devices. You can also modify this information at any time.

• ? Legal basis: The processing is necessary for the performance of a contract to which you are party [Article 6(1)(b) of the GDPR].
• ? Retention period: AIKO may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

g. Data Display and Statistics: we will process Real-time and historical data related to power generation, power usage, power grid and storage battery, etc. (depending on real application scenario) will be displayed in your power station.

• ? Legal basis: The processing is necessary for the performance of a contract to which you are party [Article 6(1)(b) of the GDPR].
• ? Retention period: We may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

h. Data export: we will process the information of your power station and related device data for further analysis.

• ? Legal basis: The data processing activity performed under the legitimate basis of your consent [Article 6(1)(a) GDPR].
• ? Retention period: We may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

i. Alert information Receiving: we will process your name, email, or phone number to to send you the respective alert.

• ? Legal basis: The data processing activity performed under the legitimate basis of your consent [Article 6(1)(a) GDPR].
• ? Retention period: We may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

j. Data Acquisition: We will process the information necessary for the performance of the contract, such as name, phone number, email, information about the order and other personal data that we have in our possession, in order to process and store the information correctly.

• ? Legal basis: The processing is necessary for the performance of a contract to which you are party [Article 6(1)(b) of the GDPR].
• ? Retention period: We may process your personal data for the duration of your status as a registered user of our services and/or until you request the cancellation or deletion of your personal data.

k. To ensure the proper and efficient functioning of our website we store small data files called cookies on your web or mobile browser. The content of a cookie can only be retrieved or read by the server that created it. Each cookie is unique to your web or mobile browser. Using cookies can help you save yourself from having to repeatedly fill in personal information, enter search content and steps and processes (example: form filling, search history). You can manage or delete cookies according to your preferences. Most browsers or mobile phone operating systems provide users with the function of clearing cached data. You can perform corresponding data clearing operations in the browser settings or mobile phone operating system settings. However, you may not be able to fully experience some of our convenience and security service functions. You can consult more information concerning cookies in our [Cookie Policy].

B. Storage of Information

a. Where information is stored

We will store the collected personal information of users in China, the United States and Europe in accordance with laws and regulations.

For these purposes, your data will be stored in countries located outside the European Economic Area (EEA), such as the China. In these cases, we will adopt the necessary safeguards to ensure an adequate level of protection for personal data. In particular, we will transfer your personal data outside the EEA only when the corresponding country counts with an adequacy decision by the European Commission recognising that country or territory as safe or when the Standard Contractual Clauses approved by the European Commission have been executed.

b. Information storage duration

In the event that we discontinue providing our products or services, we will notify you of such change by sending a notification, posting an announcement, or other means, and delete or anonymize your personal information within a reasonable period (“Anonymization” refers to the irreversible erasure or removal of sensitive personal information that leads to the information owner being identified. Any anonymized information shall not be considered as personal information.).

C. Information Security

We are committed to protecting users’ information against theft, improper use, unauthorized access, or leakage.

We will use efforts not less than a reasonable degree of care to protect the security of user information. For example, we will use encryption technologies (such as SSL), data anonymization, and other methods to protect your personal information.

We will enhance the security of the personal data using ever-improving technical means to prevent your personal information from leakage. For example, we will perform partial information encryption for secure data transmission; collect the information to defend against viruses, Trojans, or other malicious programs or websites; analyze and use the data such as unique device identifiers, login IP addresses, operation logs, and location information to take measures or issue alerts to prevent against illegal acts including Internet scam, account theft, and impersonation, and to carry out security inspection.

We have the relevant management policies, processes, and teams in place to ensure information security. For example, We strictly restrict personnel who can access the information, require them to comply with confidentiality obligations, and conduct personnel audits.

In the event of information leakage or any other incident related to information security, we will make immediate response to such incident to avoid the worsening of the incident and prevent it further affecting more users, and will notify you of the incident by sending you a notification or posting an announcement.

We will take all possible technical measures to protect your information but makes no guarantee or warranty that our technical measures will eliminate all security risks.

D. Sharing of Personal Information

Some entities subcontracted by AIKO may have access to your personal data and information as processors of AIKO. These entities will process your personal data on behalf of AIKO and, in any case, in accordance with AIKO’s instructions and in strict compliance with the GDPR.

With the continuous development of our business, AIKO may conduct mergers, divisions and other transactions. If it involves the transfer of personal information, we will inform you of the relevant circumstances, and continue to protect or require new processors continue to protect your personal information.

As mentioned above, in order for AIKO to provide the services, your personal data will be communicated to entities subcontracted by AIKO, some of which may be located in third countries outside the European Economic Area (EEA).

In this regard, and in accordance with the GDPR, AIKO will only communicate your personal data to those entities that are able to provide adequate guarantees or that are located in an appropriate territory duly recognized by the European Commission.

Particularly, personal data is transferred to data processors located in China and the United States. International data transfer agreements implementing the contents of the European Commission’s Standard Contractual Clauses for data transfers have been subscribed.

If you have any queries concerning the above, you may contact us through the methods disclosed in Article 8 of these Rules.

E. Your Rights

You may exercise any of the following rights before AIKO. To exercise such rights, you can contact us through the methods disclosed in Article 8 of this Policy. If the request does not meet the necessary requirements, you are informed that AIKO may request its modification.

• ? Right of access: consult which of your personal data is being processed by AIKO.
• ? Right of rectification: modify the personal data being processed by AIKO when such data is inaccurate.
• ? Right of opposition: ask AIKO not to process your personal data for certain specific purposes.
• ? Right of erasure: ask AIKO to delete your personal data.
• ? Right to restriction of processing: ask AIKO to limit the processing of your personal data.
• ? Right to data portability: request AIKO to provide you with your information in a computer-readable format.

Additionally, if you consider that AIKO has not adequately addressed your request for rights, you may file a complaint against AIKO before the competent Control Authority. Please see this directory for the corresponding contact details: https://edpb.europa.eu/about-edpb/board/members_en.

F. Amendments

This Policy may be updated, revised, amended, or modified as appropriate from time to time. In the event of any updates, changes, or amendments to any provisions in this Policy, we will provide you with the changed Policy by pushing a notification, showing a pop-up, or other means when you log in to the Website or the app version is updated.

G. Others

Under certain specific services or functions of the Website, we may also inform you of the purpose, method or scope of processing personal information through interactive copywriting, product interface or pop-up window. In case of inconsistency, the content notified separately shall prevail.

H. Contact us

We have set up a dedicated personal information protection team and person in charge of personal information protection. If you have any questions, complaints or suggestions about this privacy policy or personal information protection, you can contact us in any of the following ways:

a. Send your question to EMAIL ：[email protected]

We will review the issue as soon as possible and respond within fifteen days of receiving your complaint feedback.