Privacy Policy
Release date: June 3, 2025
Update date : 2025-6-3
Effective Date : 2025-6-3
Preface
[ Guizhou HINA Energy Storage Technology Co., Ltd. ] (hereinafter referred to as "we") attaches great importance to the protection of your personal data. In the process of providing you with [ HINAESS ] (hereinafter referred to as "this application"), we will strictly follow the provisions of the EU General Data Protection Regulation and collect and process your personal data only within the scope of this privacy policy (hereinafter referred to as "this policy").
Please read and understand this policy carefully before you submit your personal data to us. Please note that this policy only applies to this application. If you use other products or services we provide, please refer to other privacy policies applicable to such products or services.
This policy will help you understand the following:
1. Who we are
2. What personal data do we collect from you?
3. What legal basis do we rely on to process your personal data?
4. How we manage your personal data
5. How do we entrust, share, transfer, and disclose your personal data?
6. How your personal data is transferred outside the EU / EEA
7. What rights do you have?
8. How we protect children’s personal data
9. How this Policy is updated
10. How to contact us
1. Who we are
We, [ Guizhou HINA Energy Storage Technology Co., Ltd. ], are a company registered at [Bonded Warehouse No. 2, Gui'an Comprehensive Bonded Zone, Gui'an New District, Guizhou Province]. As the data controller that determines the data processing activities of this application, we have full rights to this application and will be responsible for handling all matters related to this application.
2. What personal data do we collect from you?
In order to better provide you with services and realize the basic functions of this application, we collect the following personal data from you:
(1) In order for you to successfully register and verify your account, we need to collect your username, password, email address, and mobile phone number, and use your personal information in compliance with relevant laws and regulations;
(2) In order to enable you to operate the relevant equipment smoothly and ensure the normal operation of the equipment, we need to collect your IP address, city, time zone, device information (including but not limited to WIFI box number, WIFI box MAC address, SSID , hardware device number, hardware device identification code, device MAC address, etc.) and real-time device data (including but not limited to software version, time, temperature, fault code, etc.);
(3) In order to enable you to smoothly provide feedback on equipment failures and push failure information to you when necessary, we need to collect your email address and mobile phone identification code.
(4) When you use our specific products or services: For example, when you use our network configuration function , we need to obtain your Bluetooth permission ; for example, when you use the device adding function and the avatar switching function, we need to obtain your camera permission. The device adding function also needs to obtain your location permission in order to obtain Wi-Fi information based on your city and time zone . The avatar switching function also needs to obtain your storage permission in order to read your local photos.
3. What legal basis do we rely on to process your personal data?
We collect and process your personal data only to the extent necessary to achieve the above purposes. Such processing is necessary to perform the obligations stipulated in the smart hardware device purchase agreement between you and us and to provide you with smart home and corresponding services (including this application). Therefore, we use the necessity of contract performance as the legal basis for the above data processing activities. When you use our specific products or services, the legal basis for such processing activities is based on your consent.
4. How we manage your personal data
4.1 Storage of your personal data
Your personal data will be properly stored on Alibaba Cloud servers rented by us in Shanghai, China, Frankfurt, Germany, and Virginia, USA.
4.2 Keeping your personal data secure
The servers we use have industry-leading security capabilities to fully protect the security of your personal data. In addition, we also strive to protect your personal data from unauthorized access, use, disclosure, modification, destruction, damage, loss or other forms of illegal processing by strengthening management and technical security measures, such as access control, encryption, employee training, etc.
The network environment is not absolutely safe. In the event of a personal data security incident, we will fulfill our obligation to inform you, which may include informing you of the following information: the basic situation of the security incident and the possible impact, the disposal measures we have taken or will take, and suggestions for you to prevent and reduce risks on your own. We will strive to inform you in a timely manner by phone, email, push notification, etc. In certain circumstances, we may publish an announcement on the company's official website.
If you know or have reason to believe that your personal data has been lost, stolen, misappropriated or otherwise compromised, or if there is any actual or suspected misappropriation of your personal data, you may contact us immediately.
5. How do we entrust, share, transfer, and disclose your personal data?
In principle, we will only transfer your personal data to third parties after informing and obtaining your authorization. In order to ensure the security of your personal data, we follow the principle of minimization and share, transfer or disclose your personal data to the following third parties in compliance with applicable legal requirements.
Service providers: such as those who support our IT systems and assist us in processing data, and cloud service providers who provide us with underlying cloud services. We have signed data processing agreements with relevant service providers to fully ensure the legal and secure processing of your personal data;
API/SDK service provider: In order to enable you to use the various functions and services of this application normally, we will embed the SDK of authorized partners or other similar applications in this application (specifically, you use the following corresponding third-party services to carry out corresponding data processing activities):
Alibaba Cloud SDK
Functional modules: registration, account login, push notification
Purpose: Used to push device change information and some user operation information
Information collected: device token, phone system and phone model, device MAC address, address book, text messages, call logs, camera, software installation list, running process information
Privacy Policy address: http://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud201902141711_54837.html?spm=a2c4g.11186623.2.6.4660123ed06uEC
APIs ) and software development kits ( SDKs ) that authorized partners use to obtain personal information , and agree on strict data protection measures with authorized partners to ensure that they collect and process your personal data in accordance with our agreements and the provisions of this Privacy Policy.
...... (other potential partners involved in personal data processing activities)
Government agencies, regulatory agencies, etc.: If any applicable law or response to legal proceedings requires the disclosure of personal data, we will inquire about the basis for disclosure from the specific law enforcement agency and provide the law enforcement agency with the minimum necessary information on the basis of ensuring the security and legality of the disclosure;
Business transactions: In the event of a merger, acquisition, bankruptcy liquidation, asset transfer or similar transaction, if personal data is transferred, we will require the new company or organization holding your personal data to continue to be bound by the requirements, commitments and security measures of this Privacy Policy. For example, the use of personal data will not exceed the above-mentioned purposes. Otherwise, we will require the company or organization to obtain your authorization and consent again.
6. How your personal data is transferred outside the EU / EEA
Due to the necessity of normal operation and maintenance of this application, the service provider we commissioned needs to remotely access your personal data from other countries or regions outside the EU / EEA (including China), and the level of personal data protection in these countries or regions may not be as high as that in the EU / EEA. In order to fully protect the security of your personal data, we have signed a standard cross-border data transmission agreement as the corresponding transmission mechanism. You can obtain the corresponding transmission agreement by contacting us.
7. What rights do you have?
According to relevant laws and regulations, you have the following rights with respect to your personal data:
( 1 ) Right to know and right to access : You have the right to know relevant information about our processing of your personal data and have the right to access such personal data;
( 2 ) Right to correction : If your personal data changes, please inform us promptly. You have the right to request the update or correction of inaccurate or incomplete personal data; you have the right to change or delete your personal data, registration information, and cancel system location authorization, camera and storage permissions. However, please note that deleting relevant information and canceling relevant permissions may also delete any information you have stored in the system and affect the use of related functions. You must bear the corresponding risks.
( 3 ) Right to erasure : You have the right to request the erasure of your personal data if the processing of your personal data is no longer necessary for the purposes for which we collected or processed such data;
( 4 ) Right to data portability : You have the right to request that we transfer your personal data to you or another controller in a structured, commonly used, machine-readable and technically feasible format;
( 5 ) Right to restrict processing : If we no longer need to process your personal data but you need such data in connection with a legal claim, or if we have processed your personal data unlawfully but you do not ask us to delete such data, you have the right to restrict our processing of your personal data at the same time as you request correction of the data or object to data processing. If you exercise this right, we will continue to store your personal data and will only process it with your consent and only for the purpose of initiating, exercising or defending a legal claim, protecting the legal rights of others, or for important public interest purposes;
( 6 ) Right to complain to a supervisory authority : If you have any objection to our data processing activities and this Policy, you have the right to complain to the supervisory authority of your country or region.
We guarantee that you can legally exercise the relevant rights described in this article by contacting us or by setting up. Please note that we may ask you to verify your identity and request before taking further action on your request. Generally, we will not charge you any fees unless such request exceeds the normal requirements. If you have any questions, please feel free to contact us.
8. How we protect children’s personal data
Our products and services are primarily intended for adults. We will not intentionally collect personal data from children under the age of 14 without the consent of their parents or guardians . For children's personal data collected with the consent of their parents or guardians, we will only use or disclose such data with the explicit consent of their parents or guardians and in strict compliance with the relevant requirements of GDPR . If we find that we have collected personal data of children without first obtaining verifiable consent from their parents or guardians, we will take relevant measures to delete the relevant personal data as soon as possible.
9. How to update this policy
We may update this Privacy Policy from time to time. If this Privacy Policy is revised, we will promptly publish the latest version in a prominent position on this page. If there are major changes to this Policy, we will provide a more prominent way to notify you, such as email, SMS, website pop-up window, etc.
10. How to contact us
If you have any comments, suggestions or questions about this policy, or have any requests or inquiries about your personal data, you can contact us through the following methods. In principle, we will respond within 30 days.
Contact Details:
Email: carlos.cao@hinaess.com
Tel: (86) 147 2220 1532
Address: No. 2 Bonded Warehouse within the fence of Gui'an Comprehensive Bonded Zone, Gui'an New District, Guizhou Province
Thank you for taking the time to review our Privacy Statement.