Original Effective Date: July 1, 2023
Last Updated: July 1, 2023

GRG Banking Equipment (HK) Co., Limited, (“GRG” “we” or “us”) take the protection of your personal information very seriously. The following Privacy Policy will provide you with rules about the personal information that is collected and how it is processed and used when you use the Services provided by GRG.

PLEASE READ THIS PRIVACY POLICY CAREFULLY BECAUSE BY USING THE SERVICES, IT IS ACKNOWLEDGED THAT YOU CONSENT TO THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY AND TO OUR PROCESSING OF PERSONAL INFORMATION FOR THE PURPOSES STATED BELOW. IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.
In order to secure the processing of your personal information as much as possible, we will use our best endeavor to implement safeguards required by applicable laws.

1. Purpose of this Privacy Policy
This Privacy Policy applies only to the websites and applications in relation with “IService” controlled by GRG where this privacy policy is posted, as well as events related to “iService” (collectively, the “Services”).

2. Information to be Collected for the Services (Categories and Sources of Personal Information)
We may collect several types of personal information from you when you use the Services.
We considers personal information to be any information concerning the personal or material circumstances of an identified or identifiable individual (e.g. name, date of birth, and other information which enables the identification of specific individuals), as well as email addresses and other information associated with an individual. We may collect:

- your Internet Protocol (IP) address, a number that lets devices attached to the Internet know where to send you data, such as the webpages you view; and
- your name, e-mail address, and/or telephone number.
Furthermore, we may collect information on the situation concerning access to the iService and how it is being used. This includes the information in below:
- Device information
- Location information
- Log information
- Cookies

3. Cookies
We use cookies in the Services, a small text file that may be used to collect information about your activity on the Services and to make the use of our Services as comfortable as possible for you, not only for your current use of the respective service but also for latter uses. For example, when someone visits a web page within the Services, a cookie is placed on the user’s machine (if the user accepts cookies) or is read if the user has accessed the Services previously. These cookies enable us to collect information including user ID, app version, operation system, device name, and any error codes. You may also set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser. If you do so, you may not be able to take advantage of the personalized features enjoyed by other users of our Services. Some of the cookies we use may be Adobe or “flash” cookies, which may not be deleted when other cookies are deleted. Please check your system requirements for deletion of this type of cookie.

4. Use of Personal Information
We may process your personal information for the purposes detailed below:

- To contact and communicate with you to respond to your inquiries and complaints;
- To provide you with special offers, updated information and other new services from us or other third parties, or to forward promotional materials if you have requested this information or provided your consent for us to do so;
- To complete a transaction or service requested by you;
- To ensure that the Services are relevant to your needs;
- To help us create and publish content that is the most relevant to you;
- To notify you about a change to this Privacy Policy or the Terms of Service Agreement, if necessary;
- To allow you access to limited-entry areas of the Services;
- To deliver information that you request;
- In other manners as disclosed within this policy or at the time of collection.
If we need to process your personal information for a purpose not set out in this privacy policy, we will inform you accordingly and, where required, obtain your consent.

5. Other information collected with your consent

If you would like to enjoy more convenient, better quality and personalized functions of the products or services, you may be requested to provide some specific personal sensitive information. If you choose not to provide such sensitive information, you may not be allowed to get access to those personalized functions, but it will not affect the use of other functions in your service. These personalized functions include:

(1) Application function based on the camera (camera): you can complete the functions of video shooting, photographing and scanning the code after opening the camera / camera permission.

(2) Application function of image / video access and upload based on the photo album (photo library / video library): you can use the corresponding function to edit your photos / pictures / videos after opening the photo album permission.

(3) Application function based on the address book information: we will collect your address book information after you open the address book permission, so that you can more easily access the contact information in your address book when using the corresponding function, no need to manually input.

(4) Calendar-based application function: After we will open the permission to read / write your calendar, we will collect your calendar information for memo records and reminders.

(5) Application function based on mobile phone file reading: you can use the corresponding function to edit the files in the mobile phone after opening the permission of file reading / upload.

You understand and agree that the above personalized functions may require you to open access of your camera (camera), photo album (photo gallery), address book and calendar to us in your device to enable the collection and use of the information involved in these functions. Please note that we will obtain your consent in a popup or similar significant way before collecting personal sensitive information. If you offer to provide your personal sensitive information, you agree that we will process your personal sensitive information for the purpose and manner described in this policy

6. Security
No data transmissions over the Internet can be guaranteed to be 100% secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you understand that any information that you transfer to IService is transmitted at your own risk. We specifies rules for the protection of personal information, and incorporates appropriate administrative, technical, organizational, and physical security measures that are required under applicable regulations. We use firewalls to protect your information from unauthorized access, disclosure, alteration, or destruction. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered or destroyed by third party’s breach of said firewalls and secure server software.
If we learn of security systems breach, we may attempt to notify you electronically so that you can take the appropriate protective measures. By using these Services or providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy, and administrative issues relating to your use of these Services. We may post a notice on our Services if a security breach occurs. We may also send an email to you at the email address you have provided to us in these circumstances.

7. Access, Portability & Correction of Personal Information
You have the right to access and to request the correction or transfer of the information that we hold about you or to object to the processing of any data relating to you, by using the contact details. When we receives a request from you for access to, transfer of, correction of, addition to, deletion of, or objection to the processing of personal information due to error (hereinafter referred to as Correction), we shall conduct any necessary investigation without undue delay and provide you with your personal information and perform a Correction as soon as possible.

8. Accounts Information
Your account information and access to our Services are sometimes accessible only through the use of an individual user ID and password. To protect the confidentiality of personal information, you must keep your password confidential and not disclose it to any other person. Please note that we will never ask you to disclose your password in an unsolicited phone call or email. We are NOT RESPONSIBLE FOR ACTIONS TAKEN REGARDING YOUR ACCOUNT WHILE A USER IS LOGGED IN USING YOUR USER ID AND PASSWORD.

9. Transmission of information about the Services
We may send you communications or data regarding the Services, including but not limited to (i) notices about your use of the Services, including any notices concerning violations of use, (ii) updates, and (iii) information or materials regarding transactions, products, and/or services that you may have purchased or selected.

10. Retention Period
We will not retain your personal information longer than necessary to fulfill the purposes for which it was collected for, unless there is another legal basis for such processing (e.g. fulfillment of legal obligations). Afterwards, we will delete your personal information. The individual retention periods depend on the type of personal information and the purpose of its processing.

11. International Transfer of Information
If you choose to provide us with personal information, it will be stored in GRG Server. We may transfer (by any means including sending or allowing access) that information to our subsidiaries, affiliated entities, and other third parties explained in Article 6 across borders, and from your region to other regions around the world in accordance with applicable laws and regulations regarding the international transfer of personal information. Such personal information may be processed by such parties for the term necessary to fulfill the purposes specified in Article 6.

12. Push Notifications
We may occasionally send you push notifications through our mobile applications to send you updates and other service related notifications that may be of importance to you. You may at any time opt out from receiving these types of communications by turning them off on your device through your settings.

13. Third Party Services
This Privacy Policy applies solely to information collected on the Services. The Services may contain links to other webservices. We are not responsible for the privacy practices or the content of these other web services.

14. Changes to this Privacy Policy
We reserve the right to change this Privacy Policy from time to time. When we do, we will also revise the “last updated” date at the top of this Privacy Policy. For some changes to this Privacy Policy we may attempt to obtain your consent before implementing the change by placing a notice on the Services. Continued use of the Services following such notice will be viewed as consent to such changes unless otherwise specified. However, please note that we may process your personal information without your consent to the extent that such processing is permitted under applicable laws.

15. Our Policy Regarding Children

These Services do not address personal information of anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to take the necessary actions.

16. Contact & Complaints

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to:

gtsc.it@grgbanking.com

Website: www.grgbanking.com