Privacy policy and information security

1、 Privacy clause

1. Personal data

Personal data refers to information that can determine personal identity when used alone or in combination with other information. Such data will be submitted to us by you when you use our website, products or services and when you interact with us, or we will obtain it by recording how you interact with our website, products or services, for example, through technologies such as cookies. The data we collect depends on the website you visit or the products and services you use, and may include personal data such as name, address, email address, telephone number and so on. The purpose of collecting personal data is to get in touch with you in order to provide corresponding services or send important notices.

2. Privacy policy

Shenzhen Maxima New Energy Technology Co., Ltd. and its global subsidiaries (hereinafter referred to as "Maxima new energy company", "we" or "our") are well aware of the importance of personal data to customers and users. Therefore, Maxima new energy company attaches great importance to the protection of personal data of customers and users, and has taken a series of measures to ensure that relevant businesses comply with applicable personal data protection requirements (such as gdpr).

2.1 in order to ensure the effective implementation of personal data protection requirements, Maxima new energy has appointed a data protection officer (DPO).

2.2 Maxima new energy company adopts the personal data protection methods and practices recognized by the industry. In the business scenario applicable to gdpr, Maxima new energy company uses the data protection impact assessment (DPIA) method to assess and reduce personal data security risks in products and services.

2.2.1 Maxima new energy company requires full evaluation of personal data involved in products and services, and projects involving personal data must be subject to DPIA;

2.2.2 data list and data flow chart shall be established for items involving personal data;

2.2.3 items involving personal data must identify possible risks in the process of data processing (including collection, use, storage, sharing, deletion and other processes), and take corresponding measures (including management, physical and technical measures) according to the risk level

2.2.4 after the execution of DPIA, the corresponding report must be output and approved by DPO.

2.3. Maxima new energy company has implemented technical means including intrusion detection, access control, encryption, data leakage prevention, anti spam, terminal security protection, vulnerability scanning and so on, and tested the effectiveness of personal data protection measures through penetration test.

2.4. Maxima new energy company has established an emergency response mechanism for personal data leakage. In case of personal data leakage, Maxima new energy company will immediately start the emergency response process, strive to reduce the possible losses caused by personal data leakage and ensure that the affected personnel are properly notified.

2.5. Maxima new energy company has established a continuous employee privacy policy training mechanism to ensure that every employee involved in gdpr can accurately understand the legal principles of data protection based on their specific job responsibilities and strictly implement the applicable systems and processes of the company.

2.6. In order to ensure compliance, Maxima new energy company has implemented necessary personal data protection technology audit and process audit.

2.7. Maxima new energy company has obtained internationally recognized certification and has been continuously evaluated and identified, including tisax, ISO 27001, etc.

Personal data protection is not only a legal requirement, but also the social responsibility of enterprises. Maxima new energy company will continue to optimize products and services to ensure security and privacy and reduce the personal data protection risks of customers and users.

3. Policy update

Maxima new energy reserves the right to update or modify this policy from time to time. If this policy changes, we will publish the latest version of the policy here. If we make significant changes to our privacy policy, we may also send you change notices through different channels, such as posting notices on our website or separately.