Privacy Policy

Introduction

Genetron Health (Beijing) Co., Ltd. and its affiliated companies (“we” or “Genetron Health”) know well the importance of personal information to you, and will protect your personal information in strict compliance with applicable laws and regulations and by reference to industry practices. Therefore, we have formulated the Genetron Health Privacy Policy (“the Policy”) to provide detailed information on the following aspects:

Before using our online platforms (websites) and related services, please carefully read and fully understand the Policy, especially those terms highlighted in bold, and decide whether you agree that we can process your personal information in accordance with the terms hereof. Please note that, your use of our online platforms and related services will be affected if you do not agree to the contents hereof. We will seek your separate consent for processing of your personal information under the particular circumstances to the extent required by law.

Please note that, the Policy shall be only applicable to our online platforms (including websites, subscription accounts and service accounts) and related services, excluding any products/services outside the range indicated above, or any products/services from any third party who has any relationship with Genetron Health in the field of access service, business cooperation or advertising display. Therefore, for such excluded products/services, you shall read their respective privacy policies and the third party’s privacy policy, and be aware that we are not obligated to assume any liability for the processing of your personal information by the third party.

Please contact us through the contact information set out in the “Contact Us” section hereof in case you have any queries or suggestions about the contents hereof.

I. Personal Information We Collect and Use

We may collect and use your personal information when you use our online platforms and related services. In case of disclosure of any personal information of others through your use thereof, you shall ensure that such other persons are fully aware thereof and have given their consent thereto (as applicable), and your disclosure does not infringe the legitimate rights and interests of any person.

Specifically, we will, through our online platforms and related services, provide you with the following functions with their respective processing purposes and applicable types of personal information shown below. We will not use your personal information in automized decision.

(I) Account Registration and Management

When you create a Genetron Health-related online platform account, you need to provide us with your e-mail at least, so as to log in to your account by using your verification code or password. Alternatively, you may log in with a third-party account, in which case we will get your account and profile picture. If you refuse to provide such information, you will not be able to successfully complete the registration, which may affect your normal acquisition of our services related to our online platforms.

(II) User Feedback and Communication

You may submit your requests or express your ideas by contacting us through our online platforms. Therefore, you need to provide your e-mail, specific request, and company name (optional) in accordance with the guidelines of our online platforms.

(III) Online Recruiting

The recruitment section (social recruiting and campus recruiting) has been created on part of our online platforms, which you can enter to have a better understanding of job requirements and post your resume online if you are interested in a position. By applying for the job online, you agree that the third party is entitled to receive and store the resume, name, current employer, mobile phone number, e-mail and current position that you provide to the third party in order for us to evaluate your abilities and follow up with you, including evaluating your resume, inviting you to an interview, conducting a background check and verifying the authenticity of your information submitted, inviting you to participate in a survey in connection with Genetron Health’s positions or Genetron Health’s recruiting, and pushing to you the information about other suitable positions in Genetron Health.

(IV) Collection, Use and Processing of Personal Information without Your Consent

Please note that, according to applicable laws and regulations, we may collect and use or otherwise process your personal information without your consent under any of the following circumstances:

1. The collection, use and processing of your personal information are necessary for the conclusion and performance of contracts to which you are a party, or for human resource management in accordance with the labor rules and regulations as prescribed by law and the collective contracts concluded according to the law;

2. The collection, use and processing of your personal information are necessary for us to perform our statutory duties or obligations;

3. The collection, use and processing of your personal information are necessary for responding to public health emergencies or protecting the life, health and property safety of you or other natural persons in emergencies;

4. We process your personal information to a reasonable extent when news reports, supervision by public opinions and other behaviors are in the public interest;

5. We process your personal information that is disclosed by your own or has already been legally disclosed to a reasonable extent;

6. Other circumstances stipulated by laws and administrative regulations occur.

Anonymized information shall be no longer personal information, and shall not be bound and protected by the Policy.

II. Use of Cookie and Similar Technologies

Cookie is a technology widely used in the Internet. We may place one or more small files named Cookies on your device to optimize your access experience and guarantee the normal and efficient operation of the products/services when you use our online platforms and related services. In addition, we may use Cookies to simplify your login process, judge the security status of your operating environment, optimize your choice of and interaction with advertisements, and secure your data. You may manage or delete Cookies stored in your computer or mobile device on your own. Most browsers will automatically accept Cookies, but you usually may change your Cookie settings in your browser as needed.

III. Sharing, Transfer and Public Disclosure of Personal Information

As we attach great importance to protecting your personal information, we will share, transfer and publicly disclose your personal information with your consent or to the extent permitted by applicable laws and regulations.

(I) Sharing

1. Sharing with Genetron Health’s Affiliated Companies

In order to fulfill the contract concluded with you and offer related services to you, we may share the necessary personal information relating to you with our affiliated companies so that we can together with them offer to you the services requested by you.

An affiliated company refers to the company that directly or indirectly controls, is controlled by, or is under common control with, Genetron Health (Beijing) Co., Ltd. through ownership, agreement or otherwise.

Before and during our sharing of your personal information, we will fully assess the legality, legitimacy and necessity of such sharing, and take appropriate management measures and technical measures, so as to secure your personal information. Our affiliated companies will seek your separate authorization and consent if they intend to change the use purposes of personal information set out herein.

(II) Transfer

If we have to transfer your personal information due to merger, division, dissolution, being declared bankrupt or other reasons, we will inform you of the recipient’s name and contact information, and require the recipient to continue to be bound by the Policy. Unless otherwise required by applicable laws and regulations, the recipient shall seek separate consent from you if it intends to change the original purposes and modes of processing stated herein. In case of bankruptcy liquidation without any recipient, we will delete your personal information, unless otherwise required by applicable laws and regulations.

(III) Public Disclosure

Generally, we will not publicly disclose your personal information, unless with your separate consent or in accordance with applicable laws and regulations.

Please note that, the information that you may voluntarily disclose when using our products/services may involve your personal information or even sensitive personal information; therefore, you shall consider carefully whether to publicly disclose such information. For any personal information of others, you may need to seek their consent (as applicable).

(IV) Sharing, Transfer and Public Disclosure of Your Personal Information without Your Consent

Please note that, according to applicable laws and regulations, we may share, transfer and publicly disclose your personal information without your consent under any of the following circumstances:

1. The sharing, transfer and public disclosure of your personal information are necessary for us to perform our statutory duties or obligations;

2. The sharing, transfer and public disclosure of your personal information are necessary for responding to public health emergencies or protecting the life, health and property safety of natural persons in emergencies;

3. We process your personal information to a reasonable extent when news reports, supervision by public opinions and other behaviors are in the public interest;

4. We process your personal information that is disclosed by your own or has already been legally disclosed to a reasonable extent;

5. Other circumstances stipulated by laws and administrative regulations occur.

Anonymized information shall be no longer personal information, and shall not be bound and protected by the Policy.

IV. Security of Personal Information

As we attach great importance to securing your personal information, we will take various reasonable and feasible security measures which comply with applicable laws, regulations and industry standards, so as to protect your personal information and prevent your personal information against leakage, damage, loss, tampering and other security incidents.

1. Management measures: We have established corporate systems and organizations, and designated managers, in respect of the security of personal information. We have severely limited access to your personal information to certain type(s) of persons who are informed of their confidentiality obligations. In addition, we will hold training courses related to the protection security of personal information, in order to improve the employees’ awareness of and capabilities in the protection of personal information.

2.Technical measures: We will improve the security of personal information by using encryption technologies, so that the data exchange between relevant online platforms and servers may be protected by the SSL protocol. And, we will prevent malicious attacks on personal information by using reliable protection mechanisms.

3.Response to security incidents: We have formulated contingency plans for personal information security-related incidents, and have been paying attention to risk monitoring and prevention. In the event of an unfortunate or possible security incident, such as the leakage, tampering and loss of personal information, we will promptly activate such contingency plans and take remedial measures to minimize the impact of such security incident. We will, in accordance with the law, inform you of the causes and harm of such security incidents, types of personal information, remedial measures, and other items by e-mail, push notification, announcement and other reasonable and effective methods. Meanwhile, we will also report such security incidents to the relevant regulatory authorities in accordance with the law.

4.Work with us to prevent security risks: We will use reasonable endeavors to secure your personal information during your use of our online platforms and related services. However, you shall understand that the Internet is not 100% secure. Therefore, you shall have the obligation to properly store your account information. If you find that your personal information has been leaked or any other security incident has occurred, you shall promptly contact us through the contact information set out herein, in order that we can take appropriate measures.

V. Storage Period and Location of Personal Information

(I) Storage Period

Unless otherwise required by applicable laws and regulations, we generally store your personal information within such period as may be necessary for realizing the processing purposes. We determine such storage period mainly based on the following criteria:

1. Your account: We will not delete your personal information involved in this account upon your cancellation of your account, but will retain such information for a reasonable period of time thereafter;

2. In case of any other provision stipulated by laws and regulations, or any other agreement concluded between you and us, the storage period stated in such provision or agreement shall prevail.

After the storage period expires, we will delete or anonymize your personal information. If it is technically difficult to delete the personal information, we will stop processing except storing and taking necessary security measures over the information.

If we stop the operation of all/part of our online platforms and/or related services, we will stop our collection of related personal information, and delete or anonymize your personal information within a reasonable period.

(II) Storage Location

The personal information collected by us and generated within the People’s Republic of China (“the PRC”), will be stored in the PRC.

In case of the outbound transfer of personal information in the future (for example, the personal information stored within the PRC is transferred overseas), we will strictly carry out the requirements and conditions for such transfer as prescribed by applicable laws and regulations.

VI. Your Rights and Choices Regarding Your Personal Information

You may view and manage your information in the following manner, and we will fully respect your rights and choices regarding your personal information and respond to your requests to the extent required by applicable laws and regulations.

(I) Rights and Exercise Thereof Regarding Personal Information

You may exercise your rights regarding personal information in the following manner during your use of our online platforms and related services.

1. Viewing, correcting and supplementing personal information

You shall have the right to view, correct and supplement your personal information in the following manner:

(1) Viewing and copy personal information: You may view and copy the account information/resume submitted by you from your personal homepage on the online platform;

(2) You may, through the contact information set out in the “Contact Us” section hereof, submit to us your requests to view, correct and supplement your personal information.

2. Deleting personal information

You shall have the right, through the method set out in the “Contact Us” section hereof, to request us to delete your personal information in any of the following cases:

(1) The purpose for which we process your personal information has been achieved or cannot be achieved, or your personal information is no longer necessary for the purpose of the processing;

(2) Our processing of your personal information has violated the Policy and/or applicable laws and regulations;

(3) You have canceled your account, uninstalled the APP, intended to no longer use our related online platforms and/or services, or withdrawn your consent (as applicable);

(4) We cease providing services to you.

3. Account cancellation

You may apply for account cancellation through the method set out in the “Contact Us” section hereof. Please note that, after canceling your account, you may not be able to use all or part of functions or services on our online platforms, and we will delete your personal information within a reasonable period.

4. Change or cancellation of user authorization

You may turn off the relevant system permissions that you have previously authorized for our use in the operating system of your device, after which we will no longer collect the information related to such permissions.

Please note that, after you perform such operations, we will no longer be able to continue to provide you with the services corresponding to your authorization, which will not affect the processing activities on the personal information based on your authorization.

5. Response to your requests

We fully respect your personal information rights, and use reasonable endeavor to respond to your requests for exercising your rights.

Please note that, in principle, we will not charge you any fees for your reasonable requests. However, we may charge fees as appropriate for the requests which are made a number of times, repeatedly, or beyond reasonable limits. And, we may refuse your requests, and explain the corresponding reasons to you if such requests contain the personal information irrelevant to you, are made beyond reasonable limits, require excessive technical assistance (for example, it is necessary to develop new systems or fundamentally change current practices), may violate the legitimate rights and interests of others, or are impracticable, or there are other legitimate and justified reasons.

We will process your requests as soon as possible, and respond within 15 days after verifying your identity.

If you are not satisfied with our response, especially if you think that our processing of your personal information has harmed your legitimate rights and interests, you may complain to the regulatory authorities or bring the case to a court in accordance with the law.

(II) Protection of Deceased Users’ Personal Information

In case of the death of our user, you, as his/her close relative, may exercise the rights to view, copy, correct or delete his/her personal information in accordance with the law, unless otherwise arranged by him/her. You may submit your requests through the method set out in the “Contact Us” section hereof. In order to protect the personal information of the deceased user, we need your assistance in submitting the appropriate supporting documents.

VII. Protection of Minors

We attach great importance to the protection of minors’ personal information. Our online platforms and related services are mainly intended for adults. If you are a minor(depends on the personal information collected in which the minors located）, you shall read and agree on the Policy in the presence of your parent(s) or other guardian(s) before using our relevant online platforms and/or related services.

If we find that we have collected the personal information from a minor under the age of 14 without the consent of his/her parent(s) or other guardian(s), we will delete such personal information forthwith.

VIII. Updates to the Privacy Policy

As our business, products and services improve and change, the Policy may be subject to change. Once the Policy is changed, we will publish its updated version on our online platforms, and inform you of its material changes in a noticeable manner,such as, pop-up windows, push notifications, announcements, e-mails or other legal and applicable forms. Without your knowledge and consent (as applicable), we will not limit your rights hereunder.

For the purpose hereof, material changes include but are not limited to:

1. Material changes in our business, product or service models, affecting the purposes and modes of processing personal information, and the categories of personal information processed;

2. Material changes in our ownership structure and organizational structure, resulting in changes in the subject responsible for processing personal information;

3. Changes in the main parties with or to whom personal information is shared, transferred or publicly disclosed;

4. Material changes in the modes and procedures of exercising your personal information rights;

5. Changes in the contact information of our personal information protection team and the person in charge of personal information protection;

6. High risks as indicated in our personal information security protection assessment report;

7. Other circumstances that may have material impacts on your rights and interests.

IX. Contact Us

We have built up a dedicated personal information protection team and designated a person in charge of personal information protection. You may contact us in the following method:

1. You may contact us through the contact information set out in the “Contact Us” section on our online platforms;

2. You may call Genetron Health hotline at 4000-996-336 (office hours: 9:00 a.m. - 6:00 p.m., Monday - Sunday) or emil to us at infoprotection@genetronhealth.com.