普华永道（以下简称 “我们” ）坚决致力于保护您的个人信息。本声明仅针对You Plus官方网站。本声明与普华永道网络成员机构或任何其他方的其他技术、产品、服务或网站无关。
本声明适用于您通过本网站提供给我们的个人信息（包括其他个人的个人信息）。本声明也描述了我们为何以及如何通过本网站收集和处理您的个人信息，并提供有关您对您的个人信息所享有的权利的信息。
我们只收集我们需要的个人信息并对个人信息的处理目的和处理方式保持透明。我们可能将您通过You Plus官方网站提供的个人信息用于本声明中说明的任何目的或在收集信息时另行说明的其它目的。
您正在以下述身份（之一）访问本网站：
运营本网站的普华永道成员机构是对You Plus官方网站个人信息保护和遵守适用的数据保护法律负主要责任的实体。
网站运营商的名称及联系人如下：
普华永道商务技能培训（上海）有限公司
中国（上海）自由贸易试验区陆家嘴环路1318号6楼
联系：Anchor_administration@youplus.pwccn.com
如果您没有从网站运营商处获得服务，负责向您或您的组织提供服务的相关普华永道成员机构是前述法律责任主体。
我们在本声明中使用以下术语：
“本网站”是指You Plus 官方网站, 通过这个网站,我们将展示You Plus 的课程介绍, 学员故事, 新闻和活动信息。
本网站存储在中国的PwC服务器中。
“个人信息”或“个人数据”是指以电子或其它方式记录的与已识别或可识别的自然人有关的各种信息，但不包括匿名化信息。“匿名化”是指使个人信息主体无法被识别或被关联的不可逆技术过程。
“个人信息主体”是指通过个人信息识别或与个人信息相关联的自然人。
“个人信息处理者”是指自主决定个人信息处理目的和方式的组织或个人。其等同于适用于香港特别行政区的《个人资料（私隐）条例》（第 486 章）下的“资料使用者”的定义，以及欧盟《通用数据保护条例》（“GDPR”）下的“数据控制者”的定义。
“个人信息处理”是指对个人信息的处理，包括但不限于个人信息的收集、存储、使用、处理、传输、提供、披露和删除。
“普华永道”是指以下在中国内地、香港特别行政区和澳门特别行政区运营的、负责向您或您的组织提供服务并让您访问本网站的普华永道网络成员机构。
如需其它普华永道网络成员机构的名单，请参阅https://www.pwc.com/gx/en/about/corporate-governance/legal-entities.html
普华永道网络中的每家成员机构均为独立的法人实体。
“敏感个人信息”是指一旦泄露或被非法使用，可能容易导致自然人人格尊严受到侵犯或可能危及其人身安全或财产安全的个人信息，包括生物特征、宗教信仰、特定身份、医疗健康状况、财务账户、个人行踪，以及未满14周岁未成年人的个人信息。
我们可能会为使用本网站的目的而处理您的个人信息。我们可能会直接从您或与普华永道签约的授权您使用本网站的机构（例如，您的雇主或授权机构）收集您的个人信息。
4.1 收集个人信息的类别
我们收集的个人信息包括：
(a) 必要的个人信息
为了让您能够使用本网站，您将需要向我们提供或允许我们收集下述信息：
| 基本业务功能及处理目的 | 处理方式 | 必要个人信息 |
|---|---|---|
| • You Plus 课程报名或You Plus 活动报名 | 存储到You Plus数据库, 读取显示到You Plus内部系统 | • 姓名, 性别, 年龄,电话号码, 邮箱, 学校, 专业 |
我们使用您提供的个人信息以为您提供我们的产品或服务、与您沟通、维护本网站的安全以及遵守适用法律。我们仅在有法律依据的情况下使用您提供的个人信息，包括在必要时获得您的事先同意。
我们亦会将所收集的上述信息用于如下目的：
与以下目的直接或合理相关的个人信息的使用：
本网站可能通过SDK链接到不受我们控制和不遵行我们的隐私实务操作的第三方网站。您访问第三方网站时，我们的隐私操作实务将不再适用，第三方网站将对从您处收集的个人信息负责。我们鼓励您在披露个人信息前，细阅第三方网站的隐私政策。
[在此处插入任何将与本网站整合或链接的第三方链接、代码或插件或使用软件开发工具包（ “SDK” ）的详细信息。]
如适用，请插入以下事项的详情：
(i) 该等第三方的姓名和联系方式；
(ii) 从用户到第三方链接、代码、插件或使用SDK的个人信息流；
(iii) 第三方收集个人信息的目的；
(iv) 收集方式及所收集的个人信息的类型；
(v) 如涉及个人信息的跨境转移，哪些信息因何目的转移给哪个接收方。
| 第三方姓名 | 第三方联系方式 | 收集信息的目的 | 隐私政策链接 |
|---|---|---|---|
| 阿里云 | 阿里云计算有限公司 | 个人信息存储在数据库, 读取显示在YouPlus 内部系统,以供BDA使用来联系潜在学员 | http://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud201902141711_54837.html?spm=5176.19720258.J_9220772140.78.7b812c4at3Sgst |
适用法律可能要求我们在本声明中指明我们处理您的个人信息所依赖的法律依据。在此情况下，我们依赖于下列一个或多个条件处理信息：
(i) 经您事先同意；
(ii) 我们有必要与您签订或履行合同；
(iii) 我们为履行法定职责或法定义务所必需的；
(iv) 我们有必要应对突发公共卫生事件或保护任何个人的生命、健康和财产安全；
(v) 为了公共利益的新闻报道、舆论监督等行为，且对个人信息的处理在合理范围内；
(vi) 需要在依法处理的合理范围内对您披露的个人信息或其他已合法披露的个人信息进行处理；和
(vii) 法律、行政法规规定的其他情形。
根据相关法律规定，处理个人信息应征得您的同意，但在前款第（ii）至第（vii）项所列情形下，无需征得您的同意。
您的个人信息可能会被转移给其他组织或个人，与其他组织或个人共享、被其他组织或个人处理和存储。关于共享您的个人信息，我们将在法律要求的范围内征求您的单独同意。
我们将与以下类别的受让人/接收方共享您的个人信息，以用于本声明中所述的目的：
(a) 个人信息的接收方：其他普华永道网络成员机构
必要时，我们可能出于本声明所述目的，与其他普华永道网络成员机构分享个人信息。例如，在向客户提供产品或服务时，我们有可能与其他地区参与向该客户提供产品或服务的普华永道网络成员机构共享个人信息。
(b) 个人信息的接收方：第三方服务提供商
我们可能将收集到的个人信息共享或披露予第三方承包商、分包商及/或其子公司和关联实体。第三方支持普华永道网络提供产品或服务并协助提供、运营和管理IT系统。我们利用的第三方承包商包括，比如身份管理、网站托管和管理、数据分析、数据备份、安全和云存储服务的供应商。驱动和协助我们IT系统的服务器可能位于全球各地的的安全数据中心，而个人信息可能保存在其中任何一处。
我们使用第三方供应商的政策是该供应商必须具有适当的安全和保密措施，并仅按照普华永道根据其与第三方供应商之间的合同作出的指令处理个人信息。在前述情况下，第三方供应商亦可能利用其各自的子公司和关联实体以及其自己的第三方分包商，而该子公司、关联实体或分包商具有接触个人信息的权限（子处理方）以满足披露及/或转移目的。
(c) 个人信息的其他接收方
在适用法律允许的范围内，我们也有可能在下列情况下共享您的个人信息：
普华永道是一个国际性网络，其成员机构和第三方服务提供商遍布世界各地。当我们（作为普华永道网络成员机构）向您提供产品或服务时，您的个人信息可能被转移至和/或储存在您所在地以外的国家或地区。普华永道网络成员机构、我们的服务提供商和其聘用的分处理商可能利用位于不同国家和地区的服务器和其他资源处理您的信息。
由于我们会调动全球资源和服务器提供产品或服务，这意味着，在取得您的单独授权同意后，您的个人信息可能被转移至您使用本网站所在地以外的国家或地区。
对于在中国内地收集的个人信息：
我们在中国内地收集和产生的个人信息原则上将存储在中国内地境内。在您同意的情况下，您的个人信息可能会被传输到您所在国家/地区以外的司法管辖区或从其处访问。在这种情况下，我们将确保您的个人信息享有与中国内地相同的保护水平。
我们将满足适用法律要求的跨境转移的适用条件（如有）。
我们将与个人信息接收方签订合同或其他具有法律效力的文件，或按照中华人民共和国法律的要求采取其他措施，确保您的个人信息得到充分保护。例如，我们会在跨境传输个人信息时征得您的单独同意，在跨境数据传输前实施适当的安全措施，进行个人信息保护影响评估，并在适用的情况下获得主管部门的批准。
仅适用于在欧洲经济区收集的个人信息：
若我们从欧洲经济区内收集个人数据，只会在下列情况下把有关数据转移至欧洲经济区以外：
我们遵守国际公认的技术和操作安全准则，以保护个人信息，避免遗失、滥用、篡改和损毁的情况。只有获授权人士才能访问经由本网站收集的个人信息，他们并已同意维护该等信息的机密性。我们已建立了数据保护、保密性和安全性的政策和程序框架，并定期检查我们是否采取了适当的措施来确保所持个人信息的安全性。
尽管我们在收取个人信息时已实施适当的安全措施，但是经由互联网（包括电邮）传递个人信息无法确保绝对的安全。我们尽力保护个人信息，但无法就经由互联网以电子形式传送的信息的安全承担保证责任。
倘若发生个人信息安全事故，我们将作出反应、评估事故可能产生的影响，并且采取必要的措施使事故得到控制。必要时，我们将根据适用法律和法规的规定将事故上报有关机关并告知您。
当您使用本网站时，我们可能会收集有关您和您使用相关网站的信息，包括通过 cookie 和分析工具。每次您访问本网站时，cookies便可能储存在您的电脑或设备内。Cookies是载于您的设备上的小型文字档案，有助我们通过分析您对本网站的使用情况而提供更个人化的体验。
如果您对cookies有顾虑，大部分浏览器允许用户拒绝cookies。在大部份情况下您都可以拒绝cookies，但是个别功能可能因此被削弱。
无论何时，您都可以透过浏览器的设定删除cookies。
我们留存个人信息的政策是，只会保留个人信息至完成该信息使用目的所必要的时间。我们会根据收集个人信息的目的或适用法律的规定，把个人信息留存在系统内直到我们不需要该信息。若双方同意延长留存期或基于法律、法规或专业准则的要求或为了确立、行使或维护我们的法律权利，我们可能保留个人信息更长时间。若完成该信息使用目的所必要的期限、约定或法定留存期届满，我们将依法删除相关个人信息；若删除相关个人信息从技术上难以实现的，我们将停止除存储和采取必要的安全保护措施之外的处理。
我们致力于保护儿童的隐私。本网站或应用程序并非为儿童（即：不满十四周岁的未成年人，以下提及“儿童”指同一群体）设计或以儿童为对象，而且我们无意收集或储存儿童的个人信息。如果我们在中国内地收集了儿童的个人信息，我们仅会在取得他们的父母或监护人明确同意的情况下使用或公开披露该等信息。我们将根据国家相关法律法规的规定保护他们的个人信息的保密性及安全性。
就我们持有的您的个人信息而言，在适用法律下，您可能具有以下权利，包括：
[仅适用于在欧洲经济区收集的个人信息：
[若您位于欧洲经济区，而欧盟的《通用数据保护条例》适用于普华永道，则您可能享有其他权利。]
本网站的用户可向 普华永道商务技能培训（上海）有限公司Anchor_administration@youplus.pwccn.com发出请求，随时要求注销账户。我们将在适用法律规定的期限内回应您的请求。
若您想申请依据适用的隐私法行使权利，或在任何时候对于个人信息的处理有任何疑问、或有任何投诉，请联络我们的隐私保护部门 https://www.pwccn.com/en/privacy-team-contact-form.html or https://www.pwchk.com/en/privacy-team-contact-form.html。
如您对本声明的任何内容有疑问，请联系为您或您所属的机构提供本网站访问权的普华永道项目组成员。
因本声明引发的或与本声明有关的任何争议，应当根据您/您所属机构与负责向您提供本网站访问权的普华永道公司之间的协议（如有）解决。
我们保留将其拥有的所有数据转让给其业务或资产的利益继受人的权利,以符合适用法律法规。
我们可能不时地更新本声明，以符合适用法律法规或其他正当目的。我们亦可能将该等变更单独告知您。如按照适用法律需要获得您的明确同意，则新的修订后的个人隐私声明将自该修订日起生效。因此，我们鼓励您定期查阅本声明，以了解我们如何保护您的个人信息。
”PwC(hereafter referred to as “we”) are strongly committed to protecting your personal information. This Statement relates only to You Plus web site. It does not relate to other technologies, products, services or sites of PwC Network Member Firms or any other party.
This Statement describes why and how we collect and process your personal information through this Site and provide information about your rights in relation to your personal information. This Statement also applies to personal information (including other individuals’) you provide to us through this Stie.
We only collect what we need and be transparent about why and how we process personal information. We may use the personal information provided in connection with this Site for any of the purposes described in this Statement or as otherwise stated at the point of collection.
This Statement relates only to PwC You Plus. It does not relate to other products, services or sites of PwC or any other party.
You are visiting this Site as you are one of the following:
The PwC firm operating this Site is the entity with primary responsibility for the protection of personal information and for ensuring compliance with applicable data protection laws.
Name of Site Operator and contact person are as follows:
PwC & Business Training (Shanghai) Company Limited 6th Floor, No. 1318, Lujiazui Ring Road, China (Shanghai) Pilot Free Trade Zone
Contact: Anchor_administration@youplus.pwccn.com
If you are not receiving Services from the Site Operator, the PwC firm responsible for delivering services to you or your organisation is the PwC firm providing you access to this Site.
In this Statement, we use the following terms:
"This Site" refers to You Plus website, With the adaptive new website, all of the programmes course introduction, successful stories, news and upcoming events will be accessed easily.
This Site is hosted in PwC Cloud Server in China.
"Personal information" or "personal data " refers to various information related to an identified or identifiable natural person recorded electronically or by other means but does not include anonymized information. "Anonymization" refers to irreversible technical process that makes personal information subjects unidentifiable or unassociated.
"Personal information subjects" refers to natural person identified by or associated with personal information.
"Personal information processor" refers to an organization or individual that autonomously determines the purposes and means of personal information processing. This is equivalent to the definition of "Data User" under Personal Data (Privacy) Ordinance (Cap, 486) applicable to HKSAR and "Data Controller" under EU General Data Protection Regulation ("GDPR").
"Processing of personal information" means processing of personal information includes, without limitation, the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information. Processing under GDPR means any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organisation, transferring, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
"PwC" refer to the list of PwC Member Firms operating in Mainland China, Hong Kong SAR, and Macau SAR responsible for delivering services to you or your organisation and providing you access to this Site.
For a list of other PwC Network Member Firms, please see details at https://www.pwc.com/gx/en/about/corporate-governance/legal-entities.html
Each member firm in the PwC network is a separate legal entity.
"Sensitive personal information" is personal information that once leaked or illegally used, may easily lead to the infringement of the personal dignity of a natural person or may endanger his personal safety or property, including information such as biometrics, religious belief, specific identity, medical health status, financial accounts, and the person’s whereabouts, as well as the personal information of a minor under the age of 14 years.
We may process your personal information for use of this Site. We may collect your personal information either directly from you or the organization contracted with PwC (e.g., your employer or authorized organization) authorizing you the use of this Site.
4.1 Categories of personal information collected
The personal information we collect includes:
(a) Necessary personal information
For you to use this Site, you will need to provide us or allow us to collect the following information:
| Basic Business Function and Purpose of Processing | Means of Processing | Necessary Personal Information |
|---|---|---|
| You Plus course application or You Plus events application | Store personal information to You Plus database, and display in You Plus internal system. | Name, gender, age, phone number, email address, school, major |
We use your provided personal information to provide you with our products or services, to communicate with you, to maintain the security of this Site, and to comply with applicable law. We use your provided personal information only when we have a legal basis to do so, including your prior consent where necessary.
We may also use the personal information collected above for the following purposes:
Use of Personal Information directly or reasonably related to the following purposes:
This Site may link to third-party sites via SDK which are not controlled by us and which do not operate under our privacy practices. When you access to third-party sites, our privacy practices no longer apply, and the third-party site provider is responsible for the personal information collected from you. We encourage you to review each third-party site's privacy policy before disclosing any personal information.
[insert here details of any third-party links, code or plug-in, that will integrate or be linked with this Site or use of Software Development Kit (“SDK”)]
If applicable, insert details of
| SDK name | Contact | Collection Purpose | Link |
|---|---|---|---|
| Alibaba Cloud | Alibaba Cloud | Store and display in You Plus internal system for BDA | http://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud201902141711_54837.html?spm=5176.19720258.J_9220772140.78.7b812c4at3Sgst |
Applicable laws may require us to set out in this Statement the legal grounds on which we rely in order to process your personal information. In such cases, we rely on one or more of the following processing conditions:
(i) With your prior consent;
(ii) It is necessary for us to conclude or preform a contract with you;
(iii) It is necessary for us to perform the statutory duties or statutory obligations;
(iv) It is necessary for us to respond to a public health emergency or to protect the life, health and property safety of any individual;
(v) Such acts as news reporting and supervision by public opinions are carried out for the public interest, and the processing of personal information is within a reasonable scope;
(vi) it is necessary to process the personal information disclosed by you or other personal information that has been legally disclosed within a reasonable scope in accordance with the laws; and
(vii) Other circumstances prescribed by laws and administrative regulations.
The processing of personal information should be subject to your consent in accordance with relevant laws, however, your consent is not required under the circumstances set forth in Items (ii) to (vii) of the preceding paragraph.
Your personal information may be transferred to, shared with, processed by and stored with other organizations or individuals. In regard of the sharing of your personal information, we will seek your separate consent to the extent required by law.
We will share your personal information with the following classes of transferees/categories of recipients for the purposes as described in this Statement:
(a) Recipients of personal information: other PwC Network Member Firms
We may share your personal information with other PwC Network Member Firms where necessary in connection with the purposes described in this Statement. For example, when providing products or services to a client we may share personal information with PwC Network Member Firms in different territories that are involved in providing products or services to that client.
(b) Recipients of personal information: third-party providers
We may share or disclose the personal information we collect to third-party contractors, subcontractors, and/or their subsidiaries and affiliates. Third parties support the PwC Network in providing its products or services and help provide, run and manage IT systems. Examples of third-party contractors we use include providers of identity management, website hosting and management, data analysis, data backup, security and cloud storage services. The servers powering and facilitating our IT infrastructure may be located in secure data centres around the world, and personal information may be stored in any one of them.
It is our policy to use only third-party providers that are bound to maintain appropriate levels of security and confidentiality and process personal information only as instructed by PwC pursuant to the contract between PwC and such third-party providers. Subject to the foregoing, third party providers may also use their respective subsidiaries and affiliates, and their own third-party subcontractors that have access to personal information (sub-processors) to meet purposes of disclosure and/or transfer.
(c) Other recipients of personal information
We may also share your personal information under the following circumstances to the extent permitted under applicable laws:
As PwC is a global network with member firms and third-party service providers located around the world. Your personal information may be transmitted and/or stored outside the country or region where you are located when we (as a PwC Network Member Firm) provide products or services to you. PwC Network Member Firms, our service providers and sub-processors they engage may use servers and other resources in various countries and territories to process your information.
Since we provide products or services through resources and servers all over the world, this means that after obtaining your separate authorized consent, your personal information may be transferred outside of the country where you use the Site to the extent permitted by laws.
For personal information collected from Mainland China:
In principle, the personal information we collect and generate in Mainland China will be stored within the Mainland China. With your consent, your personal information might be transmitted to or accessed from a jurisdiction outside of the country/region where you are located. Under such circumstances, we will ensure that your personal information will enjoy the same level of protection as it does in Mainland China.
We will satisfy the applicable condition(s) for cross border transfer (if any) required by applicable law.
We will enter contract or other legally effective documents with the recipients of personal information or implement other measures as required by laws of the People’s Republic of China to ensure that your personal information is adequately protected. For example, we will ask for your separate consent to transfer personal information across borders, implement appropriate security measures before cross-border data transfer, conduct personal information protection impact assessment and obtain the approval of competent authorities, where applicable.
[For personal information collected from European Economic Area (EEA) only:
Where we collect your personal information within the European Economic Area, transfer outside the European Economic Area will be only:
We adhere to internationally recognised standards of technology and operational security to protect personal information from loss, misuse, alteration and destruction. Only authorised persons are provided access to personal information collected via this Site. These individuals have agreed to maintain the confidentiality of such information. We have a framework of policies and procedures in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the personal information we hold secure.
Although we use appropriate security measures once we have received your personal information, the transmission of personal information over the Internet (including by email) is never completely secure. We endeavor to protect personal information, but we cannot guarantee the security of information transmitted electronically over the Internet.
Where a personal information security incident arises, we shall respond to the incident, assess the likely impact of the incident, and take necessary actions to bring the incident under control. Where necessary, we will report to the appropriate authority and notify you of the incident as may be required under applicable laws and regulations.
When you use this Site, we may collect information about you and your use of the relevant Site, including through cookies and analytics tools. Cookies may be placed on your computer or device whenever you visit the Site. Cookies are small text placed on your device that assist us in providing a more customised experience by analysing your use of this Site.
If you are concerned about cookies, most browsers permit individuals to decline cookies. In most cases, you can refuse cookies, however some functionality may be impaired.
You can always delete cookies if you wish via your browser’s setting.
It is our policy not to retain personal information longer than is necessary for the fulfilment of the purposes for which the information is to be used. We will retain personal information on our systems for as long as we need it, given the purposes for which it was collected, or as required to do so by applicable laws. Personal information may be held for longer periods where extended retention is agreed or are required by laws, regulations or professional standards and to establish, exercise or defend our legal rights. If the period necessary for the fulfilment of the purposes for which the information is to be used, agreed retention period, or legal retention period expires, we will erase the relevant personal information according to law; if it is difficult to erase personal information technically, we will cease the processing of personal information other than storing and taking necessary security protection measures for such information.
We are committed to protecting children’s privacy. This Site is not intentionally designed for or directed at children (i.e., minor under age of 14; “children” refers to the same group hereinafter), and we do not knowingly collect or store personal information about children. In the case of collecting personal information of a children in Mainland China, we will only use or publicly disclose such information if we have obtained explicit consent of their parent or guardian. We will protect the confidentiality and security of their personal information in accordance with relevant applicable laws and regulations.
You may have certain rights under applicable laws and regulations in relation to the personal information we hold about you, including:
[For personal information collected from European Economic Area (EEA) only:
[If you are an individual based in the EEA and GDPR is applicable to PwC, you may be entitled to additional rights.]
Users of this Site may request their account be deactivated at any time by sending their request toPwC & Business Training (Shanghai) Company Limited,Anchor_administration@youplus.pwccn.com We will respond to your request within the time required under applicable laws.
If you wish to submit a request to exercise your rights, under applicable privacy law, or have questions about how your information is handled at any time, or to make complaints, please send your request to our Privacy Team https://www.pwccn.com/en/privacy-team-contact-form.html or https://www.pwchk.com/en/privacy-team-contact-form.html。
Should you have any concerns with any matter in respect of this Statement, you may also approach members of the PwC team who is providing you or your organization with access to this Site to discuss.
Any unresolved dispute arising from or in connection with this Statement shall be resolved in accordance with the agreement (if applicable) between you/your organization and the PwC firm responsible for providing you with access to this Site.
We reserve the right to transfer all data in its possession to a successor-in-interest to its business or assets in accordance with applicable law and regulation.
We may update this Statement from time to time to comply with applicable laws and regulations or other legitimate purposes. We may also separately advise you about the changes. Subject to obtaining your explicit consent as may be required by applicable laws, the new modified Privacy Statement will apply from that revision date. Therefore, we encourage you to review this Statement periodically to be informed about how we are protecting your information.