1. Personal Data
Personal data refers to information that can determine an individual's identity when used alone or combined with other information. Such data will be submitted to us by you when you use our website, products, or services, as well as when you interact with us, or obtained by us by recording how you interact with our website, products, or services. For example, through technologies such as cookies, the data we collect depends on the website you visit or the products and services you use, which may include personal data such as name, address, email address, and phone number. The purpose of our collection of personal data is to get in touch with you in order to provide corresponding services or send important notices, etc.
2. Privacy Policy
Shanghai BioGerm Medical Technology Co., Ltd. and its global affiliates (hereinafter referred to as "BioGerm", "we", "us", or "our") deeply understand the importance of personal data to customers and users. To this end, BioGerm attaches great importance to the protection of personal data of customers and users, and has taken a series of measures to ensure that relevant businesses comply with applicable personal data protection requirements (such as GDPR).
2.1 To ensure the effective implementation of personal data protection requirements, BioGerm has appointed a Data Protection Officer (DPO).
2.2 BioGerm adopts industry-recognized personal data protection methods and practices. In business scenarios where GDPR applies, the Data Protection Impact Assessment (DPIA) method is utilized to assess and mitigate personal data security risks in products and services.
2.2.1 BioGerm requires full assessment of personal data involved in products and services, and projects involving personal data must undergo a DPIA;
2.2.2 Projects involving personal data must establish data inventories and data flow diagrams;
2.2.3 Projects involving personal data must identify potential risks during data processing (including collection, use, storage, sharing, deletion, etc.) and take corresponding measures (including managerial, physical, and technical measures) based on risk levels;
2.2.4 After executing a DPIA, a corresponding report must be output and approved by the DPO.
2.3 BioGerm has implemented technical means including intrusion detection, access control, encryption, data leakage prevention, anti-spam, endpoint security protection, and vulnerability scanning, and verifies the effectiveness of personal data protection measures through penetration testing.
2.4 BioGerm has established an emergency response mechanism for personal data breaches. Once a personal data breach occurs, BioGerm will immediately initiate the emergency response process, striving to minimize the losses that may be caused by the personal data breach and ensuring that affected personnel are appropriately notified.
2.5 BioGerm has established a continuous employee privacy policy training mechanism to ensure that every employee involved in GDPR can accurately understand the legal principles of data protection based on their specific job responsibilities and strictly execute the company's applicable systems and processes.
2.6 To ensure compliance, BioGerm has implemented necessary technical and process audits for personal data protection. Personal data protection is not only a legal requirement but also a corporate social responsibility. BioGerm will continuously optimize products and services to guarantee security and privacy, reducing personal data protection risks for customers and users.
3. Policy Updates
BioGerm reserves the right to update or modify this policy from time to time. If changes are made to this policy, we will post the latest version of the policy here. If we make material changes to the privacy policy, we may also send you change notifications through different channels, for example, by posting a notice on our website or sending a notice to you individually.