Privacy Policy
Updated: 2020/06/07

Privacy Policy

Last updated on May 8, 2020

China Foreign Trade Centre, a government-sponsored institution affiliated to the Ministry of Commerce of PRC, is mainly in charge of hosting China Import and Export Fair (also known as the “Canton Fair”). Owing to its more than sixty-year experience specialized in exhibition, outstanding performance and professional services, China Foreign Trade Centre plays a dominant role in China’s exhibition industry.
China Foreign Trade Centre (Group), a business entity affiliated to the China Foreign Trade Centre, mainly hosts large specialized exhibitions and operates the Canton Fair exhibition hall. By means of its subsidiaries, holding companies or joint-stock companies, China Foreign Trade Centre (Group) also engages in a series of business under the industry chain of exhibition, including exhibition engineering, hotel, catering, advertising, business trip, property management and import and export trade. China Foreign Trade Centre (Group) (hereinafter referred to as “CFTC” or “we”) attaches great importance to the protection of your personal information. This Privacy Policy (“Policy”) is formulated according to the relevant laws, regulations and specifications of China, which is aimed at explaining how we collect, process and protect your personal information, and how you can safeguard your legitimate rights and interests.
This Policy will help you get a concrete understanding of the followings:
1. How we collect and use your personal information
2. How we use cookies and similar technologies
3. How we entrust third parties to process, share, transfer, or publicly disclose your personal information
4. How we protect your personal information
5. Your rights
6. How we process children’s personal information
7. How we update this policy
8. How to contact us
This Policy applies to platforms including the official website (www.cantonfair.org.cn), APPs and WeChat official accounts of CFTC (hereinafter collectively referred to as “Platforms”). This Policy applies to collection of information from the employees, contacts and other representatives of exhibitors and buyers (enterprises), as well as buyers (individuals) that attend the 127th Canton Fair, and visitors of our Platforms (hereinafter collectively referred to as “you”).
Our Platforms have links that direct you jump to third-party cross-border e-commerce platforms and third-party live-streaming platforms. We specifically explain to you that, this Policy does not apply to third-party software or applications that integrate with our website, products and/or services, or any other third-party products, services or businesses (hereinafter collectively referred to as “Third-Party Services”). Third-Party Services are subject to their own privacy policies. We will not assume liabilities for the collection, processing and protection of personal information subject to third parties’ privacy policies. We recommend that you may carefully read the privacy policy for Third-Party Services before using them.
You shall carefully read and thoroughly understand this Policy and confirm that you have fully understood the contents stated in this Policy before using our products and/or services. You may make appropriate choices in accordance with this Policy. Provisions regarding your personal sensitive information hereof are presented in bold and italics to catch your attention.
Refusal to accept this Policy or its updates (we will timely inform you of such update) may affect your normal use or continued normal use of our products and/or services. By clicking the “Acceptance” button of this Policy, you expressly consent that we may collect, use, retain, share, publicly disclose, and protect your information according to this Policy.
If you have any question or concern about this Policy or related issues, please contact us through the contact information provided in “8. How to contact us”.

1. How we collect and use your personal information
1.1  Scenarios under which we collect your personal information and types of your personal information we collect
(1) Registration
We will need to collect necessary personal information from you in the process to register accounts, which includes:
•  necessary personal information of the contacts of exhibitors to register enterprise accounts, including personal basic information (name, mobile phone number, e-mail address etc.), personal identity information (ID number etc.), and account password etc.;
•  necessary personal information for individual exhibitors to register  registering individual accounts (the individual accounts can carry out maintenance of exhibits etc., but cannot apply for the Canton Fair booths), including personal basic information (name, gender, telephone number, mobile phone number, e-mail address etc.), personal education and work information (department and position etc.), account password etc.;
•  necessary personal information to register accounts of buyers (including enterprise account and individual account), including personal basic information (name, gender, nationality etc.), personal identity information (passport number etc.), account password etc.
(2) Online behavior statistics
In order to help exhibitors optimize the display form of exhibits and the effect of live-streaming, and facilitate subsequent research, we may automatically collect and store personal information such as the track and web browsing records or other personal information of buyers and visitors of our Platforms, including but not limited to the following information: 
•  network identification information (including system account, IP address, email address, and password, passphrase, and passphrase protection answers etc.);
•  personal Internet access records (the frequency of user’s visits, visit pages, exhibitors and exhibits of concern, visit time, visit duration, inquiry status etc.);

•  personal information on equipment (including equipment name, equipment model, equipment Mac address, unique identifier of equipment, list of software, operating system and application versions and language settings etc.);
•  personal location information (including precise positioning etc.).
Please note that since information regarding your keyword search cannot independently identify you, it will not be categorized as your personal information. We have the right to use it for any purpose. Only when your information regarding keyword search is combined with other information to collectively identify you can such information be listed as personal information in the period of combined use and we will process and protect it together with your search history in accordance with this Policy.
(3) Customer services
When you contact our customer service staff, to secure your account, we will require you to provide necessary personal information to verify your identity. For the purpose of facilitating the contact with you and helping you solve problems as soon as possible, or recording the solutions and results of related problems, we may save the communication/call records with you and related content (including account information, other information that you provide to prove the relevant facts, or phone number, e-mail address or other contact information you provide).
(4) Other additional services
In order to facilitate the communication between exhibitors and buyers, our Platforms will also have a comment function. Employees, contacts and other representatives of buyers (enterprises) and buyers (individuals) can make inquiries on our Platforms through instant messaging and messages etc. If you want to use this function, according to requirements of real-name authentication, you may need to provide us with your real name, personal identity information (ID Number and passport number etc.) or other information, so that we can carry out real-name authentication.
In order to optimize and improve our services, we may conduct investigation on your opinions or intentions through questionnaires, surveys or other marketing survey activities. If you choose to participate, we may require you to provide your personal information such as name, gender, age, preferences, and joy etc.
For the above-mentioned additional services, you may choose not to provide your personal information, and you can still use other functions normally.
(5) We obtain your personal information from third parties
We may obtain your personal information from third parties only in the event that we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.
We may obtain your personal information from third parties mainly under the following circumstances:
•  The personal information of the employees, contacts or other representatives of buyers (enterprises) and buyers (individuals) provided by the third-party cross-border e-commerce platform, including personal Internet access records (browsing and usage records etc.) and personal property information (transaction record etc.)
•  The personal information of the employees, contacts or other representatives of buyers (enterprises) and buyers (individuals) who watched the live streaming provided by the third-party live-streaming platform, including personal Internet access records (browsing records etc.).
We will require third parties to make commitments on the legality and compliance of the sources of personal information. If any third party breaches the foregoing commitments, we will explicitly hold the third party liable according to law.
We will investigate and understand the scope of the authorization and consent of personal information processing obtained from third parties, including what such personal information is used for and whether personal information subject has given authorization and consent of transfer, sharing, public disclosure, deletion or other content.
The information obtained from third parties will be used to provide services to you, and to ensure the accuracy of the records we hold about you. If our processing of such personal information exceeds the scope of the authorization and consent that obtained from you by third parties, we will request your express consent directly or through the third party providing such information to us, within a reasonable period of time after obtaining such personal information or before processing such personal information.
To avoid ambiguity, the above-mentioned scenarios do not strictly correspond to the types of personal information we collect. The personal information collected in one of the above-mentioned scenarios may also be collected in other scenarios.
1.2  Our use of your personal information
We use above-mentioned personal information and other similar information to facilitate your attendance of the Canton Fair and to provide you with information and services of other events hosted by CFTC.
We will ask for your consent before using your personal information for other use that is not covered in this Policy.
If we change our original specified purposes or have a new purpose for such personal information collected from you, we will ask for your fresh consent before using them.
1.3  Exceptions to obtaining authorization and consent
To the extent permitted by law, we may collect and use your personal information, without the need to obtain the consent from you, and we may not respond to your request for corrections/modifications, deletions, deregistration, revocation of consent, or request for information, under any of the following circumstances:
(1) where the collection and use are in direct relation to national security or national defense security;
(2) where the collection and use are in direct relation to the public security, public sanitation, or major public benefits;
(3) where the collection and use are in direct relation to investigations into crimes, prosecutions, court trials, execution of rulings, etc.;
(4) where the collection and use are for the sake of safeguarding significant legal rights and interests, such as the life and property, of you or other individuals, but it is difficult to obtain your or their consent;
(5) where the personal information collected is the data voluntarily published by you before the general public;
(6) where the Information is collected from information that has been legally and publicly disclosed, such as legal news reports and information published by the government;
(7) where the collection and use are necessary for signing and performing contracts as required by you;
(8) where the collection and use are necessary for ensuring the safe and stable operation of our products and/or services, such as identifying and handling faults in our products and/or services;
(9) where the collection and use are necessary for legitimate news reports;
(10) where the collection and use are necessary for statistical or academic research conducted by academic research institutions based on public interest, and they de-identify the personal information contained in the academic research or description results provided externally;
(11) other circumstances as specified by laws and regulations.

2. How we use cookies and similar technologies
In order to give you a better access experience and recommend content that you may be interested in, we will use Cookies and similar technologies such as cookies and pixel tags / beacons and scripts (hereinafter collectively referred to as “  ”). By using Cookies, we can store the information about visits and visitors, and provide you with better and more services by analyzing data. If you click "Agree" when the Cookie notification is displayed to you, it means you agree to accept our use of Cookies to provide you with services.
You are free to modify your acceptance to Cookies or decline our Cookies, but declining Cookies may result in you not being able to use some service functions that rely on Cookies under certain circumstances.
For further information about the types of Cookies we use, why we use Cookies, and how you can manage Cookies, please see our Cookies Policy.

3. How we entrust third parties to process, share, transfer, or publicly disclose your personal information
3.1 Entrusted processing
Some of our modules or functions are provided by external service providers. For example, we will hire professional data processing service agencies to provide technical support for data analysis for our Platforms.
We will enter into strict non-disclosure agreements with all companies, organizations and individuals that we entrust to process personal information, requiring them to process personal information according to our instructions, this Policy and any other related confidentiality and security measures.
3.2 Sharing
Your personal information will be shared among domestic and foreign exhibitors and buyers (including exhibitors and exhibitors, buyers and buyers and exhibitors and buyers) at the 127th Canton Fair. You confirm and explicitly agree that we will share your information internally in this way. We will take appropriate technical measures for your information to ensure information security.
In addition, we will share your personal information with third parties under the following circumstances:
(1) we will share your personal information outside of CFTC when we have your consent;
(2) we may share your personal information in accordance with laws and regulations, or the mandatory requirements of the competent government authorities;
(3) we will share your personal information with our affiliates. However, we only share it on a need-to-know basis and will be bound by the purposes stated in the Policy. If our affiliates are to change the intended purposes for which they use your Information, they will seek your consent again;
(4) we may share your personal information with the authorized partners of the 127th Canton Fair (e.g., third-party cross-border e-commerce platform and third-party live-streaming platform) to ensure the smooth provision and completion of our products and/or services. However, we will only share your Information for legitimate, justified, necessary, specific, and explicit purposes, and will only share the Information necessary to provide our products and/or services. Our partners have no right to use the shared Information for any other purposes.
We will enter into strict non-disclosure agreements with all companies, organizations and individuals with which we share personal information, requiring them to process personal information according to our instructions, this Policy and any other related confidentiality and security measures.
3.3 Transfer
We will not transfer your personal information to any company, organization or individual, except under the following circumstances:
(1) we will transfer your personal Information to other parties when we have your express consent;
(2) when it comes to mergers, acquisitions or bankruptcy liquidations, if it involves the transfer of personal information, we will require the new company or organization which hold your personal information to be bound by this Policy, otherwise we will require the company or organization to obtain your consent again.
3.4 Public disclosure
We will make available your personal information to the public only under the following circumstances that:
(1) we receive your express consent;
(2) it is required by law, legal processes, litigation or mandatory requests proposed by the competent government authorities.

4. How we protect your personal information
We attach great importance to the security of your personal information. For example, we use encryption, desensitization and other technologies to improve the security of personal information; we use trusted protection mechanisms to prevent malicious attacks on personal information; we deploy access control mechanisms to prevent unauthorized access; and we hold training courses on security and privacy protection. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information
We will take reasonable and feasible measures and do our utmost to avoid collecting unrelated personal information.
We will only retain your personal information for a period for the purpose stated in this Policy, unless otherwise stipulated by laws and regulations. When the retained personal information exceeds the retention period, we stop our operations and services or after your deregistration, we will either delete or anonymize your personal information. If it is not possible to do so (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and avoid any further processing until deletion is possible.
While no method of transmission over the Internet or method of electronic storage is 100% secure and thus we cannot guarantee its absolute security, we will take appropriate technical and organizational safeguards to protect your Information from theft, loss, misuse, and any unauthorized access, copying, collection, use, disclosure, alteration or destruction.

5. Your rights
5.1 Access your personal information
Unless otherwise provided by laws and regulations, you have the right to log in your account and access your personal information by yourself at any time.
You can also contact us through the contact methods provided in “8. How to Contact Us” to exercise this right.
5.2 Correct your personal information
When you find that your personal information processed by us in incorrect, you have the right to ask us to make corrections. You may log in your account and correct your personal information by yourself.
You can also contact us through the contact methods provided in “8. How to Contact Us” to exercise this right.
5.3 Delete your personal information
Under the following circumstances, you may request us to delete your personal information through the contact methods provided in “8. How to Contact Us”:
(1) when our processing of personal information violates laws or regulations;
(2) when we collect or use your personal information without your consent;
(3) when our processing of personal information violates our agreement with you;
(4) when you no longer use our products or services, or cancel your account
(5) when we no longer provide you with any products or services
If we agree with your request to delete your personal information, we will also notify entities that have obtained your personal information from us to require them to delete your personal information concerned in a timely manner, unless otherwise stipulated by laws and regulations or such entity has obtained your separate authority.
Once your personal information has been removed from our services, we may not immediately delete the corresponding information from the backup system, but will delete such information when the backup is updated.
5.4 Change your authorization scope or withdraw your authorization
To the extent you have authorized us to collect and process your personal information, you may change the scope of authorization or withdraw that authorization to process your information by changing the settings or other methods.
For example, we will use algorithms to smartly feed exhibition information and service information to your smart terminal devices, but you have the right to opt out at any time. You can opt out by changing the settings in your smart terminal device. You can also contact us through the contact methods provided in “8. How to Contact Us” to exercise this right.
Please understand that each business function requires some basic information. Once you withdraw your consent or authorization, we cannot continue providing you with the services for which you withdraw consent or authorization, and will not process your corresponding information. However, your decision to withdraw your consent or authorization will not affect the processing of information previously conducted according to your authorization.
5.5 Deregistration
You may log in your account and cancel it by yourself.
You can also contact us through the contact methods provided in “8. How to Contact Us” to exercise this right.
5.6 Obtaining copies of your personal information
You can follow the path described in “5.1 Access to your personal information” to enter your own account and obtain copies of your personal information.
5.7 Constraining automated decision-making of information systems
In some business functions, we may make decisions based solely on non-manual decision-making mechanisms such as information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to ask us for an explanation, and we will provide a method of appeal without infringement upon the trade secrets of CFTC or the rights and interests of other users and social public interests.
5.8 Response to your above requests
For security reasons, you may need to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request.
We will reply you within thirty (30) days. If you are not satisfied with our reply or have any question, you can contact us through the contact methods provided in “8. How to Contact Us”.
In principle, we do not charge fees on your reasonable requests. But for requests repeated for many times and beyond the reasonable limit, we will charge certain fees for cost as appropriate. We may reject the requests that are repeated for no reason, require excessive technical means (e.g., a new system needs to be developed or the existing practice needs to be changed fundamentally), present risks to the legitimate rights and interests of others, or are very unrealistic (e.g., the request involves backing up information stored on tape).
Under the following circumstances, according to laws and regulations, we may not be able to respond to your certain requests:
(1) directly relating to national security and national defense security;
(2) directly relating to public safety, public health, and major public interests;
(3) directly relating to criminal investigation, prosecution, trial and execution of   judgement;
(4) where there is sufficient evidence that you have subjective intentions or abuse rights;
(5) where a response will result in serious damages to the legitimate rights and interests of you or other individuals and organizations;
(6) relating to trade secrets.

6. How we process children’s personal information
Our Platforms, products, and/or services are designed mainly for adults. Children are not allowed to create their own accounts without the consent of their parents or guardians.
We will not take the initiative to collect personal information directly from children. For the personal information of child collected with the consent of parents, we will only use or publicly disclose it when permitted by laws, explicitly consented by the parent or guardian or required for protecting the child.
We treat anyone under the age of 14 as a child.
If we find ourselves collecting personal information of a child without  prior consent of a verifiable parent, we will try to delete it as soon as possible.

7. How we update this policy
We may update this Policy from time to time in response to legal, technical or business developments. But we will not reduce your rights under this Policy without your express consent. We will post the last updated version of the Policy on this page, and you can see when this Policy was last updated by checking the “last updated date” displayed at the top of this Policy.
If we make material changes to this Policy, we will notify you through appropriate methods. If you continue to use our services after this Policy is changed, it means that you have fully read, understood the revised privacy policy and are willing to be bound by it. Such updates of the privacy policy will be in force from the effective date specified in the notification. If you do not agree to the updated privacy policy, you should stop accessing or using our Platforms.
Material changes as mentioned in this Policy include, but are not limited to:
(1) material changes on our service model, for example, changes to the purpose of processing personal information, the type of personal information processed, and the way we use personal information etc.;
(2) material changes on our ownership structure and organizational structure etc., for example, changes to ownership arising from business adjustment and bankruptcy or M&A etc.;
(3) changes of the main objects of personal information sharing, transfer, or public disclosure;
(4) material changes on your right to participate in the processing of personal information and how you can exercise such right;
(5) changes of the department in charge of personal information security, its contact information, or complaint channels;
(6) personal information security considered to be highly risky as a personal information security impact assessment report indicates.

8. How to contact us
Please contact us in the following ways:
Domestic customer service: 4000-888-999
International customer service: (8620) 28-888-999
E-mail: info@cantonfair.org.cn
We will review the issues involved as soon as possible and reply within thirty (30) days after verifying your user identity.
If you are not satisfied with our reply, or you believe that our personal information processing methods have damaged your legitimate rights and interests, you can negotiate with us. If such negotiation comes to no avail, you may and agree to submit such dispute to the people’s court with jurisdiction where CFTC is located. The PRC law (excluding laws and regulations of Hong Kong SAR, Macao SAR and Taiwan, China) shall apply to the dispute resolution under This Policy.