Privacy Policy

Privacy Policy
隐私政策
(For XiaoXiongMeiShu)
(小熊美术)

 

  

MSB Art Global Limited (hereinafter as “we”) is the controller with regard to the data processing activities described herein. We respect the privacy of users (hereinafter as “you” or “user”) and abide by applicable privacy laws and regulations to protect your personal data, particularly the EU General Data Protection Regulation (hereinafter as the “GDPR”). Accordingly, we developed this privacy policy in order for you to understand what types of personal data we collected, how we use it, for what reason do we need to process your personal data, who we share it with, when and how we destroy it, what rights do you have concerning your personal data and what measures we take to protect it.

MSB Art Global Limited(以下简称 "我们")是本文所述数据处理活动的控制者。我们尊重用户(以下简称 "您 "或 "用户")的隐私,并遵守适用的隐私法律和法规,特别是欧盟《通用数据保护条例》(以下简称 "GDPR"),以保护您的个人数据,。因此,我们制定了本隐私政策,以便您了解我们收集了哪些类型的个人数据,我们如何使用这些数据,我们出于什么原因需要处理您的个人数据,我们与谁分享这些数据,我们何时以及如何销毁这些数据,您对您的个人数据有什么权利,以及我们采取什么措施来保护这些数据。

 

 

Main contents of this privacy policy:

  • Who we are
  • Types of personal data we collect, purpose and legal basis
  • Purposes of processing personal data
  • Our reasons (legal basis) for processing
  • Sharing of personal data
  • Cross-border transfer of personal data
  • Retention and destruction of personal data
  • Security of personal data
  • Links to other websites and services
  • Children’s personal data
  • Rights of data subjects
  • Updates of this privacy policy
  • Contact us

本隐私政策的主要内容:

 

1  我们是谁

2  我们收集的个人数据类型、目的和法律依据

3  处理个人数据的目的

4  我们进行处理的原因(法律依据)

5  个人数据的共享

6  个人数据跨境传输

7  个人数据的保留和销毁

8  个人数据的安全

9   与其他网站和服务的链接

10  儿童的个人数据

11  数据主体的权利

12  本隐私政策的更新

13  联系我们

 

  • Who we are

We are

MSB Art Global Limited

Address: Building 11, No. 36, Chaolai Science and Technology Park, Chaoyang District, Beijing, People's Republic of China

Email: privacy@meishubao.com

 

1 我们是谁

我们是

MSB Art Global Limited

住所地:中华人民共和国北京市朝阳区朝来科技园36号院11号楼

电子邮件:privacy@meishubao.com

 

  • Types of personal data we collect, purpose and legal basis

2    我们收集的个人数据类型、目的和法律依据

2.1 While accessing our product and services

2.1 在访问我们的产品和服务时

 

我们在提供 "小熊美术"(以下简称 "小熊美术"、"产品 "或 "服务")所需的最小范围内收集个人数据。我们收集的个人数据可以由用户自由提供,或者在使用数据的情况下,在使用我们的产品和服务时自动收集。

  • to deliver information subscriptions, we collect your email address and usage data including your courses ordered based on your consent. If you wish to withdraw your consent, including with regard to the personalization of adverts and content, please go to Section 107) Right to withdraw your consent.

为了提供信息订阅,我们收集您的电子邮箱和使用数据,包括在您同意的基础上订购的课程。如果您想撤回您包括关于广告和内容的个性化的同意,请见第10节7)撤回同意的权利。

  • to optimize the product and services, we collect your country/region, city, purchase history, play history.

为了优化产品和服务,我们收集您的国家/地区、城市、购买历史、游戏历史。

 

2.2 Access permission we request

2.2 我们要求的访问许可

在您使用我们的服务的情况下,我们要求您的移动设备提供以下访问许可,以执行相关功能和服务:

 

访问

目的

法律依据

通知

课程提醒,应用内推送

GDPR 第 6(1)(f)条

网络

网络连接

GDPR 第 6(1)(b)条

 

  • Purposes of processing personal data

3    处理个人数据的目的

 

We process your personal data for specific purposes and process only the personal data relevant for achieving that purpose. Depending on our relationship with you and the products and services that we are providing, we use collected personal data for following purposes as assigned to the above description of the respective processing activity:

我们为特定目的处理您的个人数据,并且只处理与实现该目的有关的个人数据。根据我们与您的关系以及我们所提供的产品和服务,我们将收集到的个人数据用于上述各自处理活动的描述中的以下目的:

 

  • Our reasons (legal basis) for processing

4    我们进行处理的原因(法律依据)

 

We process your personal data if one of the following applies:

如果有下列情况之一,我们会处理您的个人数据:

 

  • necessary for entry into, or performance of, any contract(s) with you (Art 6(1)(b) of the GDPR). This applies to [Section 3 1)for account registration; 2) for provision and administration of our services; 3) for processing of your request and orders of our study tools and commodities]. 

签订或履行与您的任何合同所必需的(GDPR 第 6(1)(b)条)。这适用于[第3节1)用于账户注册;2) 用于提供和管理我们的服务;3)用于处理您对我们的学习工具和商品的请求和订单]。

  • Sharingof personal data

5   个人数据的共享

 

In order to provide you with more convenient and prompt services, we share your personal data with our partners and entrust other companies with such tasks. We share your personal data with third-party service providers provided these third parties assume confidentiality obligations regarding your personal data collected. We have concluded data processing agreements (as required in accordance with Art 28 of the GDPR) or joint controller agreements (as required in accordance with Art 26 of the GDPR), as applicable, with such third-party service providers.

为了向您提供更方便、更及时的服务,我们与我们的合作伙伴分享您的个人资料,并委托其他公司完成这些任务。我们与第三方服务供应商共享您的个人数据,但这些第三方必须对所收集的您的个人数据承担保密义务。如果适用的话,我们已经与这些第三方服务供应商签订了数据处理协议(根据 GDPR 第 28 条的要求)或共同控制者协议(根据 GDPR 第 26 条的要求)。

 

We have engaged technical services providers including Infobip for automated customer services, ActiveCampaign for automated email distribution, Akamai for improvement of CDN performance, AWS for Cloud services and third-party logistics and payment service providers.

我们已经聘请了技术服务供应商,包括用于自动化客户服务的Infobip,用于自动化电子邮件分发的ActiveCampaign,用于改善 CDN 性能的 Akamai,用于云服务的 AWS 以及第三方物流和支付服务提供商。

 

  • Cross-border transfer of personal data

6    个人数据跨境传输

 

The personal data which you provide to us will be transferred to countries outside the European Union for part of the services provided to you through our services (e.g., Singapore and China). To exemplify: this will happen if any of our servers are, from time to time, located in a country outside the EU. These countries may not have similar data protection laws as the EU. We will however take all necessary measures to protect your personal data in accordance with applicable law.

您提供给我们的个人数据将被转移到欧盟以外的国家,用于通过我们的服务向您提供的部分服务(例如,新加坡和中国)。举例来说:如果我们的任何服务器有时位于欧盟以外的国家,就会发生这种情况。这些国家可能没有类似于欧盟的数据保护法。然而,我们将采取一切必要措施,根据适用的法律保护您的个人数据。

 

In particular,

特别是,

 

  • If your personal data is transferred to countries/territories with adequacy decision, the cross-border transfer is subject to the mechanism of an adequacy decision. (Art 45 of the GDPR)如果您的个人数据被转移到具有充足保护的国家/地区,则跨境转移须遵守具有充足保护的机制。(GDPR 第 45 条)
  • If your personal data is transferred to other countries/territories, we will evaluate the ability of personal data protection and network security safeguards and take measures from the catalogue set out in (Art 46(2) of the GDPR).如果您的个人数据被转移到其他国家/地区,我们将评估个人数据保护和网络安全保障的能力,并从(GDPR 第 46(2)条)规定的目录中采取措施。

You can obtain copies of the applicable safeguards from us by sending a respective request to the contact details outlined at Section 13.

您可以通过向第 13 节所述的联系方式发送各自的请求,从我们这里获得适用的保障措施的副本。

 

  • Retention and destruction of personal data

7   个人资料的保留和销毁

 

We only process and store your personal data for as long as required by the purpose they have been collected for, until you object the use of your personal data in case of the legitimate interest being the legal basis for processing (Art 6(1)(f) of the GDPR) or until you withdraw your consent (Art 6(1)(a) of the GDPR).

我们只在收集目的所需的时间内处理和储存您的个人数据,直到您反对使用您的个人数据,因为正当利益是处理的法律依据(GDPR 第 6(1)(f)条)或直到您撤回您的同意(GDPR 第 6(1)(a)条)。

 

After the termination of your Terms of Services with us, we will delete your personal data in 10 years upon the termination of Terms of Services in accordance with the applicable laws, unless the retention of your personal data is necessary to meet legal or regulatory requirements, especially to comply with commercial and tax retention obligations, to resolve potential disputes or to preserve evidence within the scope of the statutory limitation provisions. Should this be the case, we will retain the personal data concerned until the end of the respective statutory period.

在您与我们的服务条款终止后,我们将根据适用的法律自服务协议终止后10年内删除您的个人数据,除非保留您的个人数据是为了满足法律或监管要求,特别是为了遵守商业和税收保留义务,解决潜在的纠纷或在法定时效规定的范围内保存证据的需要。如果是这种情况,我们将保留相关的个人数据,直到相应的法定期间结束。

 

Thereafter, your personal data will be securely deleted or destroyed. Personal data stored in an electronic file format will be erased by a technical tool which prevents the recovery of the information. Personal data printed in a paper record, print media or a document is destroyed into scrap.

此后,您的个人数据将被安全地删除或销毁。以电子文件格式存储的个人数据将被技术工具删除,以防止信息的恢复。打印在纸质记录、印刷媒体或文件中的个人数据将被碎纸销毁。

 

  • Security of personal data

8   个人数据的安全

 

We take appropriate security measures to prevent unauthorized access, disclosure, modification, unauthorized destruction of the personal data or any accidents such as hacking or computer viruses.

我们采取适当的安全措施,防止未经授权的访问、披露、修改、未经授权的破坏个人数据或黑客攻击、计算机病毒等意外情况。

 

The processing of personal data is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition, we restrict the number of staff in charge with access to your personal data to the minimum level and frequently conduct trainings and educations so that they comply with the confidentiality obligations with respect to your personal data.

个人数据的处理是通过计算机和/或信息技术工具进行的,并遵循与所述目的严格相关的组织程序和模式。此外,我们将负责访问您的个人数据的工作人员的数量限制在最低水平,并经常进行培训和教育,以便他们遵守有关您的个人数据的保密义务。

 

  • Links to other websites and services

9 与其他网站和服务的链接

 

XiaoXiongMeiShu may contain links to other websites and services run by other organizations. This privacy policy applies only to our product and services of XiaoXiongMeiShu‚ so we encourage you to read the privacy statements on the other websites and services you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our product.

小熊美术可能包含其他网站的链接和其他组织的服务。本隐私政策仅适用于我们的产品和小熊美术的服务,因此我们鼓励阅读您访问的其他网站和服务的隐私声明。即使您使用我们产品的链接访问其他网站,我们对这些网站的隐私政策和实践不负责任。

 

In addition, if you linked to our product and services from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

此外,如果您从第三方网站链接到我们的产品和服务,我们不能对该第三方网站的所有者和经营者的隐私政策和实践负责,建议您检查该第三方网站的政策。

 

  • Rights of data subjects

10 数据主体的权利

 

You have rights to protect your personal data as follows. If you would like to exercise any of the following rights, please contact us at privacy@meishubao.com.

您有如下权利来保护您的个人数据。如果您想行使以下任何权利,请通过privacy@meishubao.com联系我们。

 

  • Right of access

According to Art 15 of the GDPR, you have the right to receive information about your personal data processed by us upon request.

访问权

根据 GDPR 第 15 条,您有权根据要求获得有关我们处理的您的个人数据的信息。

 

  • Right to rectification

According to Art 16 of the GDPR, you have the right to correct your personal data if it is incorrect.

2)  纠正权

根据 GDPR 第 16 条,如果您的个人数据有误,您有权利纠正它。

 

  • Right to erasure

According to Art 17 of the GDPR, you have the right to obtain from us, under the following conditions, the deletion of your personal data:

  1. a) the respective processing purpose has been achieved;
  2. b) we have unlawfully processed your personal data;
  3. c) you have withdrawn your consent without another legal basis applying to the data processing;
  4. d) you have successfully objected to the data processing; or
  5. e) in cases where there is an obligation to delete personal data on the basis of EU law or the law of an EU member state to which we are subject.

3)  擦除权(“被遗忘权”)

根据 GDPR 第 17 条,在以下条件下,您有权向我们要求删除您的个人数据:

已经实现了各自的处理目的。

我们非法处理了您的个人数据。

  1. c)  在没有其他法律依据适用于数据处理的情况下,您已经撤回了您的同意。
  2. d)  您已成功反对数据处理;或
  3. e)  根据欧盟法律或我们所遵守的欧盟成员国的法律,有义务删除个人数据的情况下。

 

  • Right to restriction of processing

According to Art 18 of the GDPR, you have the right to request us to process your personal data only to a restricted extent under the following conditions:

  1. a) the accuracy of your personal data is contested;
  2. b) you request limited processing instead of deletion under the conditions of a justified right of erasure;
  3. c) the data is no longer required for the purposes pursued by us, but you need the data to assert, exercise or defend legal claims; or
  4. d) the success of an objection is still disputed.

4)   限制处理权

根据 GDPR 第 18 条,您有权要求我们在以下条件下仅在有限范围内处理您的个人数据。

  1. a)  您的个人数据的准确性有争议。
  2. b)  您要求进行有限的处理,而不是在合理的擦除权条件下进行删除。
  3. c)  控制者不再需要个人数据以实现其处理的目的,但数据主体为了提起、行使或辩护法律性主张而需要该个人数据;或
  4. d)  反对是否成功仍有争议。

 

  • Right to data portability

According to Art 20 of the GDPR, you have the right to receive from us personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, as well as the right to request us to forward this personal data to another controller under the following conditions:

  1. a) the data processing is based on consent (Art 6(1)(a) of the GDPR) or the contract (Art 6(1)(b) of the GDPR); or
  2. b) the processing is carried out by automated means.

5)   数据可携带权

根据 GDPR 第 20 条,您有权获得提供给我们的相关个人数据,且其获得个人数据应当是经过整理的、普遍使用的和机器可读的,并有权要求我们在以下条件下将这些个人数据转给另一个控制者。

数据处理是基于同意(GDPR 第 6(1)(a)条)或合同(GDPR 第 6(1)(b)条);

处理是通过自动化方式的。

 

  • Right to object

According to Art 21 GDPR, you have the right to object to the processing of your personal data. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims on our part.

6)   反对权

根据 GDPR 21 条,您有权反对对您的个人数据的处理。如果您反对,我们将不再处理您的个人数据,除非我们能证明处理的正当理由超过您的利益、权利和自由,或者处理是为了维护、行使或捍卫我们的法律主张。

 

  • Right to withdraw your consent

According to Art 7(3) of the GDPR, you have the right to withdraw consent given to us at any time. As a result, we are no longer allowed to continue the processing based on such consent in the future. This does not affect the legality of the processing carried out on the basis of the consent up to the point of withdrawal.

At any time, you may withdraw your consent or object to the receipt of advertising messages or push, the personalization of advertisements or the sharing of your data with our partners (except for technical service providers):

  1. by activating “ATT” on Apple device or “Opt-out of Ads Personalization” on Android device
  2. contact us at privacy@meishubao.com

7)   撤回您的同意的权利

根据 GDPR 第 7(3)条,您有权在任何时候撤回给我们的同意。因此,我们不再被允许在未来继续进行基于这种同意的处理。这并不影响在撤回同意的基础上进行的处理的合法性。

 

在任何时候,您都可以撤回您的同意或反对接收广告信息或推送、个性化广告或与我们的合作伙伴(技术服务供应商除外)分享您的数据:

 

  1. a) 通过激活苹果设备上的 "ATT "或安卓设备上的 "选择退出广告个性化 "来实现。
  2. b) 通过privacy@meishubao.com联系我们

 

8) Complaints

In addition, you have the right to file a complaint with a data protection authority on our collecting and processing of your personal data. (Please see this directory (https://edpb.europa.eu/about-edpb/board/members_en) for more details with regard to the local data protection authorities.)

8) 投诉

此 外 , 您 有 权 就 我 们 收 集 和 处理 您 的 个 人 数 据 向 数 据 保 护 机 构 提 出 投 诉 。(请 参 阅 本 目 录(https://edpb.europa.eu/about-edpb/board/members_en

),了解有关当地数据保护机构的更多细节)。

 

  • Updatesof this privacy policy

11  本隐私政策的更新

 

We may, from time to time, change and/or update this privacy policy to reflect related laws or any changes in relation to our services and products. If this privacy policy changes in any way, we will post an updated version on this page. In case of essential changes, we will notify you of such changes directly. We will store the previous versions of this privacy policy in our documentation achieve. We recommend you regularly review this page to ensure that you are always aware of our information practices and any change.

我们可能会不时地改变和/或更新本隐私政策,以反映相关法律或与我们的服务和产品有关的任何变化。如果本隐私政策有任何变化,我们将在本网页上公布更新的版本。如果有本质上的变化,我们将直接通知您这些变化。我们将把本隐私政策的先前版本保存在我们的文件实现中。我们建议您定期查看本页面,以确保您始终了解我们的信息实践和任何变化。

 

  • Contact us

12  联系我们

 

As per queries, complaints, feedbacks or other matters on personal data protection which arise from the use of our services, please contact us. All correspondence received by us from you (written or electronic inquiries) is classified as restricted-access information and may not be disclosed without your written consent. The personal data and other information about you may not be used without your consent for any purpose other than for response to the inquiry, except as expressly provided by law.

Contact information:

Email: privacy@meishubao.com

Address: Building 11, No. 36, Chaolai Science and Technology Park, Chaoyang District, Beijing, People's Republic of China

对于因使用我们的服务而产生的有关个人数据保护的询问、投诉、反馈或其他事项,请联系我们。我们从您那里收到的所有信件(书面或电子询问)都被归类为限制访问的信息,未经您的书面同意不得披露。除非法律明确规定,未经您的同意,有关您的个人数据和其他信息不得用于回复询问以外的任何目的。

联系信息:

电子邮件:privacy@meishubao.com

地址:中华人民共和国北京市朝阳区朝来科技园36号院11号楼