Oświadczenie o przetwarzaniu danych i przekazywaniu transgranicznym

Niniejszy dokument jest obecnie publikowany w języku angielskim. W razie rozbieżności rozstrzygająca jest wersja angielska.

1. Scope of this notice

This page describes how TIANROU transfers personal data across jurisdictions when you request cross-border services (DDU/DDP shipments or overseas support). It supplements our Privacy Policy.

2. Categories of data transferred

When you request DDU / DDP shipping outside mainland China, we transmit only the minimum dataset required by import/customs law in the destination country: consignee name, address, phone, company, tax/customs ID, and the commercial invoice line items (product codes, quantities, value, HS codes).

3. Transfer mechanisms

• EU / EEA destinations: Standard Contractual Clauses (SCC) 2021, Decision (EU) 2021/914. You may request a copy of our executed SCCs from DPO.
• US destinations: Where personal data is transferred to the United States, the transfer relies on the standard contractual clauses or on the data subject's explicit consent where applicable.
• APAC destinations: SCC (Australia/Japan) plus local customs data sharing where required by law.
• Mainland China inbound: data that has been collected outside China and is necessary to perform a contract with you is transferred pursuant to Article 38 of PIPL as contract-essential.

4. Recipients of transferred data

Transfers are made to contract logistics providers and customs brokers / freight forwarders engaged for the specific shipment or import procedure.

5. PIPL cross-border assessments

For transfers controlled under PIPL Article 38–42, TIANROU has conducted a personal information protection impact assessment covering the transferred categories, recipients, jurisdictions, technical and organizational safeguards, and retention schedules. A summary is available on request to [email protected].

6. Your rights and how to exercise them

You may request access, correction, deletion, data portability, or withdrawal of consent regarding cross-border transfers at any time. Write to [email protected]. We will respond within 15 business days.

7. Data protection contacts

• Overall DPO: [email protected]
• PIPL Officer: [email protected]
• EU / US privacy contacts: to be published once appointed.