Yutong Yutong Yutong
Yutong Yutong Yutong

Privacy Policy

We,YUTONG Bus Co., Ltd. and its global affiliates (hereinafter referred to as “YUTONG” or “we”) pay full attention to your privacy. Please read over the Privacy Policy because it explains how YUTONG uses your personal information and how you can exercise your rights about it.

I. Core Terms

We are responsible for your personal information collected and processed by us in accordance with the Chinese laws and other applicable data privacy laws, including but without limitation EU or UK General Data Protection Regulation (“Data Privacy Laws”).

We will use your personal information for the purposes stated in Section III of this Privacy Policy.

For the purposes stated in the Privacy Policy, we will share your personal information with our affiliates and authorized partners as well as with administrative or judiciary authorities in accordance with requirements under the applicable Data Privacy Laws. Please refer to Section IV for details.

If we rely on your consent, for example, for the purpose of marketing or providing the right of access to your personal information for a third party, you may withdraw your consent at any time.

For more information on your rights and how to exercise these rights, please refer to “Your Rights” in Section IX.

II. Personal Information Collected by us and How do we Collect

Personal information means all information relating to an identified or identifiable natural person as defined under the applicable Data Privacy Laws. Your personal information can be (1) provided directly by you, (2) collected automatically, or (3) provided by third parties. The provision of certain types of personal information may be necessary or optional. Mandatory information will be marked as such at the moment of collection of your personal information. If you refuse to provide the mandatory information, we may not be able to bear some or all of the obligations to you, or provide you with all our services or respond to or resolve the problems that you encounter.

1. YUTONG APP or YUTONG website

While you create an account or log in the website, you need to provide us with your following personal information: company name (required), company address (required), name (required), gender (required), position, tel./ mobile phone (required), e-mail (required), passport number/ ID card number (only involving customs clearance in the customer’s personal name), date of birth.

2. Sale of products/ services

While you conduct commercial communication, exchange business cards, sign sales contracts, distribution contracts, KD contracts, MoU and other agreements with us, to better perform the contracts and provide you with better services, we may collect your following personal information: company name, company address, name, gender, position, tel., mobile phone and E-mail.

3. Handling the Invitation Letter for you

When you are invited to visit YUTONG, in order to help you handle the Invitation Letter with the Henan Provincial Department of Business, we will collect your following personal information: name, gender, passport number/ ID card number, date of birth, nationality and past visa information.

4. Using YUTONG Bus products or services

When using vehicle maintenance services and after-sale services, we will collect your following personal information: vehicle owner name, vehicle owner phone number, vehicle owner E-mail; repair man’s name and repair man’s phone number.

When using the three-way monitoring cameras pre-installed in all overseas and high-end bus models, tourist vehicle models as well as airport shuttles, we will collect the following personal information of the drivers and passengers: images and videos recorded by such cameras.

It should be noted that the following data is used for vehicle operation status monitoring and quality analysis and shall not be associated with your personal information: vehicle parameter related information through V+ system (including components such as vehicle sensing equipment, vehicle application platform, vehicle SIM card service, etc.)(e.g., VIN and vehicle number data, vehicle mileage parameters, vehicle dynamics parameters, vehicle operation process parameters, vehicle battery status parameters, vehicle AC system operation status parameters and other data).

5. Recruitment process

When applying for our jobs through YUTONG website, APP or a third-party recruiting website, we will collect your following personal information as the reference information for recruitment or conducting background investigation: name, gender, date of birth, E-mail address, mobile phone number and work experience.

When you sign the employment contract with us, we will collect your following personal information as the reference information for recruitment: name, phone number, nationality, local country, gender, ID card number (or passport number), family address, work experience, qualification certificate, emergency contact’s name, emergency contact’s phone number and salary.

6. Supplier/ Service provider provides services

When you register the supplier’s qualification or sign the service procurement contract with us through the YUTONG website, we will collect your following personal information to perform the contract or conduct background investigation: name, gender, date of birth, ID card number (or passport number), contact address, practicing qualification, E-mail address and mobile phone number.

When you sign the service authorization contract and after-sale agreement with us, in order to better perform the contract, we will collect your following personal information: company name, company address, contact name, position, telephone, E-mail, service station personnel’s name, and service station personnel’s salary.

7. Customer return visit

We may collect your following personal information in the customer’s return visit business process: name, phone number, WhatsApp, customer needs and return visit result, personal information collected in the process of accepting the customer’s active consultation, including name, phone number, E-mail and customer needs.

8. Financing service

When applying for the financing service, you may need to provide us your following personal information: bank statements, housing information, vehicle information, credit information, detailed property condition and debt condition.

9. Third-party source information and public information

Where permitted by law, we will acquire relevant information from public and commercial third parties or public sources (e.g., information of YUTONG ‘s customers from suppliers, deals and service providers, including customer name, company address, contact name, position, phone number and E-mail).

To find an international supplier, YUTONG Bus will obtain the contact information (name, phone number and E-mail) of the business party through the supplier’s official website for negotiations on daily purchase price, contract signing, quality issue settlement, marketing and other business cooperation.

III. Purpose for which we Use Personal Information and What Permission do we Process Personal Information

We do not process your personal information, unless we have a specific and legitimate purpose as well as a legal basis to do so. The purposes and legal bases for the processing of your personal information are described below:

1. Communicating and interacting with you

(1) Informing you of important safety related information of vehicles or new energy products, based on consent or our contract with you;

(2) Informing service personnel where the vehicle has a fault or an accident, based on consent or our contract with you and our legitimate interests regarding customer satisfaction;

(3) Sending information of products, services, terms and policies and changes to you, based on consent or our contract with you;

(4) Informing you of our marketing activities, based on consent or our contract with you;

(5) For internal management and backstage support, share your contact information with branches of companies around the world, based on our contract with you, reporting, improve quality and cost in line with our legitimate interests to improve internal business processes.

2. Providing you with products and services

(1) Realizing your order: processing payment, delivery and evaluating your financing needs based on our contract with you;

(2) Monitoring vehicle performance based on our contract with you, improve vehicle performance based on our legitimate interests;

(3) Road rescue, care and maintenance and other after-sale services either on our contract with you, or our legitimate interests to ensure the safety, security and improvement of our products.

3. Verifying the reasons for accidents

Verifying vehicle position and cause of the accident as well as vehicle status based either on our contract with you, or our legitimate interests to ensure the safety, security and improvement of our products.

4. Compliance with legal and regulatory obligations

Complying with laws and regulations, court orders or other legal procedures, or competent government organizations, including the government collection/monitoring platform monitors the relevant data of the vehicles in order to access to new energy vehicle data based on explicit legal basis under local laws.

5. Improving of our products and services

(1) Product system upgrade (Legitimate interest);

(2) Satisfaction degree investigation (Legitimate interest);

(3) Analyzing and improving product performance, R&D and new technology related to the products including the three-way cameras (Legitimate interest).

6. Information flow analysis

When you access to YUTONG relevant website or use the services provided by YUTONG, we may identify your identity through small-scale data documents. These data documents could be Cookies, Flash Cookies or your browser or other local storage provided by associated applications (collectively referred to as “Cookies”). We use Cookies to analyze the information flow, customize services, contents and ads, evaluate the promotion effect and promote trust and security. Please refer to the Cookie policy for details.

IV. Our Sharing of Personal Information

In accordance with the applicable Data Privacy Laws, we may disclose your personal information to the following recipients, who may or may not be affiliated with YUTONG:

•In order to facilitate us to provide you with services on the basis of YUTONG’s OCRM system and manage your personal information and transaction behaviors, your personal information may be shared between YUTONG’s affiliates;

•Third parties which help provide you with products and/or services, such as deals, service providers;

•Other third parties which help us carry on business and conduct market investigations, for example, marketing institutions, satisfaction degree investigation institutions;

•Credit reference institutions;

•Banks we cooperate.

In addition to the above-mentioned relevant authorized partners, if required, we may share your personal information with administrative, regulatory or judiciary authorities or agencies and other third parties to comply with any legal or regulatory obligation and/or in the cases of an express and justified request or in case of an alleged violation of legal or regulatory provisions. Following or during a restructuring, reconstitution, merger, acquisition or debt financing, transfer, sale of assets of YUTONG, as well as insolvency, bankruptcy or receivership, your information will be disclosed to our counselor or the counselor of any potential buyer and delivered to the new owner of business.

We will only share the personal information necessary to provide you with services and be constrained by the purposes stated in the Privacy Policy.

Under the circumstance where we have evaluated the protective measures taken by the authorized partners for personal information and consider that their data protection measures are enough to guarantee information security, we allow them to process your personal information. When you access the service of our authorized partners, they will also provide you with their own privacy policy in view of collecting and using your personal information. We suggest reading such privacy policy of third parties. We also impose contractual obligations and confidentiality obligations on authorized partners to ensure that they shall process your personal information in accordance with the applicable Data Privacy Laws. Once any partner is discovered to violate the contractual provisions, we will take effective measures till the cooperation is terminated.

V. Storage of Personal Information

We store the vehicle end information of domestic vehicles and overseas non-EU region vehicle end data in the IDC machine room (private cloud)/ Alibaba public cloud operated by our company. Personal information collected and generated within China is stored in China; the vehicle end information in overseas EU region will be stored in our server in Frankfurt, Germany. Customer information and employee information will be stored in the system of YUTONG headquarters and the system of the aforesaid authorized partner.

No matter where our server is located, we will take proper organization and safety measures to protect your rights and the security of your personal information according to the Privacy Policy. For example, we will use encryption techniques and protection mechanism to prevent information disclosure; ensure that only a few authorized personnel can access the personal information; and we will hold privacy protection training courses to strengthen employees’ understanding of the importance of protecting personal information. We will try to protect your personal information. However, please note that any security measures cannot be impeccable.

VI. Retention Time of your Personal Information

When you have the account of our website or we provide you with products and/or services, we will reserve your personal information. Hereafter, we will reserve your personal information when necessary:

•Responding to any questions, complaints or claims to you;

•Recommending marketing information and materials to you;

•Improving product performance and satisfaction degree investigations;

•Keeping records required by law;

•Solving vehicle operation faults and maintenance information.

For the purpose stipulated in the Policy, we will not keep your personal information longer than necessary unless the retention period needs to be extended or we are permitted by law. Different retention periods are applicable to different types of personal information. When the retention period expires, we will completely delete or anonymize your relevant data in the system to ensure that the data cannot be restored or traced to you.

Despite of this provision, we may reserve your personal information to assist in any government and judicial investigation and use it to file legal claims or civil, criminal or administrative litigation or provide support for that.

VII. Transfer your Personal Information abroad

In order to provide services to you, we sometimes need to share your personal information outside your country, for example:

•Our offices, branches and subsidiaries and affiliates all over the world;

•Service providers outside your local country;

Note: The cross-border transfer of personal data in the European Economic Area (EEA) is subject to the special provisions of the EU GDPR. YUTONG promises, where applicable, to ensure that (in the absence of an adequacy decision and, where necessary, after having carried out a transfer impact assessment) appropriate legal and technical and organizational safeguards required by the EU GDPR are in place (in particular, EEA standard contract clauses) .

VIII. Data Processing Records

YUTONG’s system maintains necessary data sharing, transfer and processing records. The content includes third party information, disclosed information, disclosure time, etc. The aforesaid content is generated by our software during data processing. Records are generally made in electronic form. Based on the requirements of the regulatory institutions, as the controller or processor and when necessary, we may provide data processing records that are available.

IX. Your Rights

Depending on the applicable Data Privacy Laws that apply to your situation, you may be able to exercise the following rights regarding your personal information, free of charge:

Data access right

If you want to access your website or account information, order information, vehicle use data and other information, you may contact us according to the methods listed in the "Contact Us" section below to access your personal information.

Correction right

When you find that your personal information we processed is wrong, after verification of your identity and with correction not affecting the objectiveness and accuracy of information, you have the right to correct or update the wrong or incomplete information. You may contact us according to the methods listed in the "Contact Us" section below.

Right to be forgotten

You have the right to require the erasure of your personal information under certain conditions (e.g., we collect or use your personal information in violation of the applicable legal or regulatory provisions).
To exercise this right, you may contact us according to the methods listed in the "Contact Us" section below.

Limited processing right

In some cases, you have the right to require the restriction of personal information processing during a limited period of time, in particular in order to carry out some verifications under certain conditions.
To exercise this right, please contact us according to the methods listed in the "Contact Us" section below.

Data portability

In some cases, you have the right to receive the personal information you have provided to us and/or transfer such information to a third party in a structured, commonly used and machine-readable format. It should be noted that this right is not exercised in all circumstances. If you have such request, please contact us according to the methods listed in the "Contact Us" section below.

Right to object

You have the right to object to our processing of your personal information at any time if:
—the processing is based on our legitimate interest;
—your personal information is processed for direct marketing purposes.

We will no longer process your personal information unless we demonstrate compelling legitimate grounds——for the processing which override your interests, right and freedoms, such as the respect of a legal obligation or for the establishment, exercise or defense of legal claims.

Self-determination (independent personal decision-making)

You have the right to be not subject to a decision to rely solely on (including analysis) automated processing. If you object to automatic decision-making of your personal information, you may give us feedback through “Contact Us” below.

Right to withdraw your consent

You have the right to withdraw your consent when it has been obtained, without this withdrawal affecting the lawfulness of the processing previously carried out.

If you want to exercise any of these rights, please conduct through the following means:

•Sending E-mail, making phone calls or writing letters – see below “How to contact us”;

•Telling us the rights you would like to exercise and the personal information involved in the request.

X. Responding to Your Requirements Aforesaid

To guarantee your information security, we will first require you to verify your identity and then process your request. Generally, we will accept your request fed back via E-mail within 7 working days and your request fed back via telephone within 5 working days. We will process your legitimate request within 15 working days after accepting and may give you feedback on the results of the processing via telephone, E-mail and other channels.

For your reasonable request, we do not charge fees in principle. However, in view of repeated requests exceeding the reasonable limit, we will charge a certain cost as appropriate. In terms of those unreasonably repeated requests that require too many technical means (for example, the need to develop new systems or fundamentally change existing practices), bring risks to the legitimate rights and interests of others, or are very unrealistic requests (for example, involving information stored on backup tapes), we may refuse.

In the following cases, we are unable to respond to your request:

1. Related to personal information controllers fulfilling obligations stipulated by laws and regulations;

2. Directly related to national security and national defense security;

3. Directly related to public safety, public health, and major public interests;

4. Directly related to criminal investigation, prosecution, trial and execution of judgments;

5. The personal information controller has sufficient evidence to show that the personal information subject has subjective malice or abuses of rights;

6. It is for the purpose of protecting the life, property and other major legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain the consent of the person;

7. The response to the request of the personal information subject will cause serious damage to the lawful rights and interests of the personal information subject or other individuals or organizations;

8. Involving business secrets.

XI. Guaranteeing the Security of Personal Information

We will take appropriate technical and organizational security measures to protect your personal information security. We have established an information security management organization to build and improve the information security management system and privacy security management system, and take necessary technical measures to effectively protect the life cycle security of your personal information. We also have formulated the procedures for processing any suspicious data security holes. We will inform you and the corresponding regulatory institutions of the suspicious situations of data security holes.

XII. Processing Minors’ Personal Information

Except applicable legal requirements, we will not knowingly collect minors’ (according to legal provisions of each country) personal information. Minors are not allowed to provide us with their personal information without the consent of their guardian.

If we discover that we have collected minors’ personal information without a verifiable parent or guardian’s prior consent, we will manage to delete relevant data as soon as possible. If the parent or guardian has a reason to believe that minors provide their personal information to YUTONG without their prior consent, please contact us to ensure to delete such personal information and guarantee that minors cancel ordering any applicable YUTONG products and services.

XIII. Jurisdiction

If the relevant provisions of the Privacy Policy conflict with the laws and regulations in the specific jurisdiction, the latter shall prevail.

XIV. Changes in Privacy Policy

The privacy statement was issued on May 30, 2019 and finally updated on May 7, 2024.

We may modify the Privacy Policy from time to time - we will publish it on the website https://en.yutong.com/privacy/ at that time. We may also send a change notice via different channels, for example, sending a separate notice to you via E-mail.

XV. Exceptions

Information collected by third party services (including any third party websites) accessed through our services is inapplicable to the Privacy Policy. Please refer to the privacy policies of third parties before submitting personal information to them.

XVI. How to Contact us

If you have any doubt about the Privacy Policy or your information we hold, or claim your above-mentioned legal rights and interests, please contact us via mailing letters, E-mail or making phone calls.

Our contact information

Address: No. 6, Yutong Road, Guancheng District, Zhengzhou City, China E-mail: dataprotection@yutong.comTEL: 0086-371-66718999

Subscribe

Receive the news that you are interested in.

Submit

Yutong Yutong