Dear User:
This Privacy Policy applies to the Project Safety Management System Application Service ("EHS") provided by Centurion (Shanghai) Engineering Consultants Limited ("C3"), and sets forth our privacy policy regarding your use of EHS and explains How we collect, protect and disclose information about you as a result of your use of our services.
If you choose to use the services we provide, you are consenting to the collection and use of information in connection with this policy. The personal information we collect is used to provide and improve our services. We will not use or share your information with anyone unless otherwise stated in this Privacy Policy.
Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from EHS.
1. Scope of Application
(1) The personal registration information you provide to EHS upon request when you register for an EHS account.
(2) Information on your browser and computer that EHS automatically receives and records when you use EHS network services or access EHS platform web pages, including but not limited to your IP address, type of browser, language used, date and time of access, hardware and software features, and records of web pages you request.
(3) Personal user data obtained by EHS from business partners through lawful means.
You understand and agree that the following information does not apply to this Privacy Policy.
(1) Keyword information that you enter when using the search services provided by the EHS platform.
(2) Data collected by EHS about information you post on EHS, including but not limited to project information, project safety data information, safety images.
(3) Violations of laws or EHS rules and the measures EHS has taken against you.
2. Use of Information
(1) EHS will not provide, sell, rent, share, or trade your personal information to any unrelated third party, except with your prior permission, or if such third party and EHS (including EHS affiliates) provide services to you, either individually or jointly, and after such services have ended, they will be denied access to all such information, including all such information to which they previously had access.
(2) EHS also does not permit any third party to collect, compile, sell or distribute your personal information by any means without compensation. If any EHS platform user engages in any of the above activities, EHS reserves the right to immediately terminate the service agreement with that user upon discovery.
(3) For the purpose of serving users, EHS may use your personal information to provide you with information of interest to you, including but not limited to sending you information about products and services, or sharing information with EHS partners so that they can send you information about their products and services (the latter requires your prior consent).
3. Disclosure of Information
(1) To third parties with your prior consent.
(2) To share your personal information with third parties as necessary to provide the products and services you have requested.
(3) To third parties or administrative or judicial bodies in accordance with the relevant provisions of the law, or the requirements of administrative or judicial bodies.
(4) To a third party if you are in violation of relevant Chinese laws, regulations or EHS service agreements or related rules.
(5) If you are an eligible IPR complainant and have filed a complaint, disclose to the respondent at the respondent's request so that both parties can deal with possible disputes over your rights.
(6) Other disclosures that EHS deems appropriate in accordance with laws, regulations or website policies.
4. Information Storage and Exchange
Information and materials collected about you by EHS will be stored on the servers of EHS and/or its affiliates and may be transferred to, accessed, stored and displayed outside of your country or the country where EHS collects the information and materials.
5. Use of Cookies
(1) EHS may set or retrieve cookies on your computer to enable you to log in or use services or features of the EHS Platform that rely on cookies, provided that you do not refuse to accept cookies.
(2) You have the right to choose to accept or reject cookies; you may reject cookies by modifying your browser settings, but if you choose to reject cookies, you may not be able to log in to or use EHS web services or features that rely on cookies.
(3) Information obtained through cookies set by EHS will be subject to this policy.
6. Information Security
(1) Your EHS account is protected by security features, so please keep your user name and password information secure, and EHS will ensure that your information is not lost, misused or altered by encrypting your password. Notwithstanding the aforementioned security measures, please note that there are no "perfect security measures" on the information network.
(2) Please protect your personal information and provide it to others only when necessary. If you discover that your personal information has been compromised, especially your EHS user name and password, please contact EHS Customer Service immediately so that EHS can take appropriate action.
7. Managing your information and account cancellation
In accordance with the relevant Chinese laws, regulations and standards, as well as the common practices of other countries and regions, we protect your rights with respect to your personal information as follows:
(1) Right of access

You have the right to access your personal information, except in the cases specified in laws and regulations. You may access or edit your personal information and other information in your account through EHS.
(2) Right of correction

When you find that we have processed personal information about you in error, you can correct the information through the inquiry path.
(3) Right to delete  

You may request us to delete personal information in the following cases:
(a）If our handling of personal information violates laws and regulations;
(b）If we collect and use your personal information without your consent;
(c）If our handling of personal information violates the agreement with you;
(d）If you no longer use our products or services, or if you cancel your account;
(e) If we no longer provide products or services to you.
4. Right of Revocation
(a) For information you have personally volunteered, you may revoke your personal information in your personal account EHS;
(b) For information that you have authorized to us, you can revoke it in EHS. Please note that the path may be different in different devices, please refer to the instructions and guidelines of your device and system developer.
5. Right to cancel

If you decide to stop using EHS, then you can cancel your account. Please contact Customer Service for account cancellation, which will be processed for you within 7 business days.
6. In the following cases, we will not be able to respond to your above requests in accordance with the requirements of laws and regulations:
(1)In connection with the performance of the obligations of the controller of personal information as required by laws and regulations;
(2) Directly related to national security or national defense security
(3) Directly related to public safety, public health, and significant public interests
(4) Directly related to criminal investigation, prosecution, trial and execution of judgments, etc;
(5) Where the controller of personal information has sufficient evidence of subjective malice or abuse of rights by the subject of personal information
(6) For the purpose of safeguarding the life, property and other significant legitimate rights and interests of the subject of personal information or other individuals but for which it is difficult to obtain his or her authorized consent
(7) When responding to the request of the subject of personal information will result in serious damage to the legitimate rights and interests of the subject of personal information or other individuals or organizations
(8) Where commercial secrets are involved.
8. Device permission call description
(1) Phone privileges (to obtain cell phone identification code): Application-based services (auto-fill verification code, third-party SDK, etc.) need to identify your device, you need to call your phone privileges to obtain this information, except for other purposes will not be based on the call.
(2) Storage permission (read/write storage): In order to store the necessary application configuration files and the content you choose to download and update, or to read the content you need to upload and synchronize, your storage permission needs to be invoked.
(3) Camera permission: We need to invoke your camera permission when you use shooting or scanning related functions.
(4) Location permission (access to rough/precise location): When you use the functions related to adding address, we will ask you for this permission when we provide you with geolocation-based services. If you want to cancel the authorization of the above-mentioned permission, you can turn it off in the system settings - permission management, we will no longer obtain your corresponding permission, but this may affect the use of the functions or services involving the corresponding necessary permission.
9. Message pushing explanation

(1) Aurora Push SDK

Third party entity: Shenzhen Huxun Huagu Information Technology Co.
SDK use: to provide information push service for APP users
Processing personal information type:
Device parameters and system information (device type, device model, system version, and related hardware information): used to identify the user's device type, device model, system version, etc. to ensure accurate message delivery;
Device identifiers (IMEI, IDFA, Android ID, GID, MAC, OAID, VAID, AAID, IMSI, MEID, UAID, SN, ICCID, SIM information): used to identify unique users and ensure accurate delivery of push and accurate statistics of push messages;
Network information (IP address, WiFi information, base station information, DNS address, DHCP address, SSID, BSSID) and location information (latitude and longitude): used to optimize the network connection request between SDK and Aurora server to ensure the stability and continuity of the service, as well as to realize the regional push function;
Application list information (application crash information, notification switch status, APP application list and active status, APP application page information, APP function event related information): when a device has multiple APP push links active at the same time, we use merge link technology to randomly merge into one link to achieve the purpose of saving electricity and traffic for users;;
Push log information: so that developers can query the use of push service records, understand the delivery of push information and adjust the push strategy.
Data processing method: through de-identification, encrypted transmission and other security methods
Official website link: https://www.jiguang.cn/push
Privacy policy link: https://www.jiguang.cn/license/privacy

(2) Third Party SDK Privacy Policy
If the vendor channel is also integrated through the Aurora Push SDK, please add the privacy policy statement for the vendor channel in the Privacy Policy, as follows:

(3) Xiaomi Push SDK
Type of personal information involved: device identifier (e.g. Android ID, OAID, GAID), device information
Purpose of use: pushing messages
Usage scenarios: used when pushing messages on Xiaomi mobile terminals
Third party subject: Beijing Xiaomi Mobile Software Co.
Data processing method: through de-identification, encrypted transmission and other security methods
Official website link: https://dev.mi.com/console/appservice/push.html
Privacy policy: https://dev.mi.com/console/doc/detail?pId=1822


(4) Huawei HMS SDK
Types of personal information involved: basic application information, in-app device identifiers, hardware information of the device, basic system information and system settings information
Purpose of use: pushing messages
Usage scenario: used when pushing messages in Huawei cell phone terminals
Third party subject: Huawei Software Technology Co.
Data processing method: through de-identification, encrypted transmission and other security methods
Official website link: https://developer.huawei.com/consumer/cn/
Privacy policy: https://developer.huawei.com/consumer/cn/doc/development/HMSCore-Guides/sdk-data-security-0000001050042177


(5) Honor Push SDK
Type of personal information involved: Application Anonymous Identification (AAID), Application Token
Purpose of use: Push messages
Usage scenario: Used when pushing messages on Gloria cell phone terminals
Third party subject: Honor Terminal Co.
Data processing method: through de-identification, encrypted transmission and other security methods
Official website link: https://developer.hihonor.com/cn/promoteService
Privacy policy: https://www.hihonor.com/cn/privacy/privacy-policy/


(6) OPPO Push SDK
Type of personal information involved: device identifiers (such as IMEI, ICCID, IMSI, Android ID, GAID), application information (such as application package name, version number and running status), network information (such as IP or domain name connection results, current network type)
Purpose of use: pushing messages
Usage scenario: used when pushing messages from OPPO mobile terminals
Third party subject: Guangdong Huantai Technology Co.
Data processing method: Secure processing method through encrypted transmission and processing
Official website link: https://open.oppomobile.com/new/introduction?page_name=oppopush
Privacy policy: https://open.oppomobile.com/wiki/doc#id=10288


(7)vivo Push SDK
Type of personal information involved: Device information
Purpose of use: pushing messages
Usage scenario: used when pushing messages in vivo mobile terminals
Third party subject: Guangdong Tianchen Network Technology Co., Ltd. and companies that will be transferred to operate the vivo open platform in the future
Data processing method: through de-identification, encrypted transmission and other security methods
Official website link: https://dev.vivo.com.cn/promote/pushNews
Privacy Policy: https://www.vivo.com.cn/about-vivo/privacy-policy


(8)Meizu Push SDK
Type of personal information involved: device identification information, location information, network status information, operator information
Purpose of use: pushing messages
Usage scenario: when pushing messages on Meizu mobile terminals