Huawei Cloud Privacy Statement History Version
Print
Huawei Cloud Privacy Statement History Version
V1004 August 2023
Huawei Cloud ("Huawei Cloud", "we", "our" and "us") understands how important your privacy is to you and fully respects it. Please carefully read this Privacy Statement ("Statement") before you submit your personal data to us. This Statement applies to https://www.huaweicloud.com/intl/en-us/ ("Website"), and all products and services that contain or refer to this Statement (collectively “Services”).
This Statement does not apply to Your Content that we process as a provider of Huawei Cloud, on behalf of our customers as their data processor, based on Huawei Cloud Data Processing Addendum. "Your Content" is defined in the Huawei Cloud Customer Agreement you entered into with Huawei Cloud, and without prejudice to such definition, it covers all data (including personal data) that you entrust to Huawei Cloud. Our materials, data and information do not form part of Your Content.
This Statement describes how we collect, use and disclose your personal data, as well as our legal bases for processing, and the security measures implemented by us to protect your personal data. It also demonstrates your rights in connection with your personal data, and other related details you need to know before you provide personal data to us. We may inform you of product- or service-specific data collection which is not reflected in this Statement through supplementary policies or notices provided before the relevant collection of your personal data.
By interacting with us, using our Website, submitting information to us, or signing up for our Services, you agree and consent to Huawei Cloud (including its affiliates), as well as our third-party service providers, representatives and/or agents, collecting, using, and disclosing your personal data in the manner set forth in this Statement.
We have created this Statement to help you understand:
- 1. How Huawei Cloud Collects Your Personal Data
- 2. How Huawei Cloud Processes Your Personal Data
- 3. How Huawei Cloud Uses Cookie and Similar Technologies
- 4. How Huawei Cloud Shares Your Personal Data
- 5. How Huawei Cloud Protects Your Personal Data
- 6. How Long Huawei Cloud Retains Your Personal Data
- 7. How to Access and Control Your Personal Data
- 8. How Huawei Cloud Handles Personal Data of Children
- 9. How Your Personal Data Is Transferred Internationally
- 10. How This Statement Is Updated
- 11. How to Contact Huawei Cloud
- 12. Additional Information for Certain Jurisdictions
1. How Huawei Cloud Collects Your Personal Data
Personal data means any information (whether true or not) relating to an identified or identifiable natural person, including information that can identify an individual when taken in combination with other information to which we have or are likely to have access. We collect personal data from you in the course of your interaction with us for various purposes, such as providing you with the Services and maintaining the best possible operations of the Services. Your interaction with us may include: registering a Huawei Cloud account (the “Account”) with the Website, subscribing to the Services, completing payment with us, contacting us when experiencing (technical) problems, browsing our Website and configuring your settings for your Account.
If you provide us with any personal data relating to a third party (e.g. information of your employees and/or end users), by submitting such information to us, you represent and warrant to us that you have notified such third party of the terms of this Statement, and that such third party has consented to you disclosing his/her personal data to us for the collection, use and disclosure of their personal data by us as described in this Statement.
Depending on your use of the Services, we collect the following personal data:
a) Personal data provided through Huawei ID (which may be collected by our affiliate administering Huawei ID accounts and shared with us) to register the Account, such as mobile phone number, email address, account name, account ID, country/region as required for registration. For more information about Huawei ID, please refer to Statement About HUAWEI ID and Privacy.
b) Personal data provided when you manage your information, including account information (such as account name, avatar, and authentication credential), contact information (full name, email and mailing address, mobile phone number), business information (company name, industry, position, country/region, tax information) and payment information (bank account information including credit card number, expiry date and security code, invoice information).
c) Personal data provided when you order, subscribe to or use the Services, including your account information, order information, transaction information and service information. If the service you select runs on Chinese infrastructure, personal data collected may include your name, ID card number (such as passport or driver's license number), and a scanned copy of your ID card, passport or driver's license when you choose individual real-name authentication in accordance with the laws and regulations of China.
d) Personal data provided when you contact us or request support or help from us through various ways (such as service ticket, hotline, customer service), including account information, operation and maintenance information, contact information, business information, service information (such as service name, specifications, configuration information), chat sessions, phone conversations, problem description, and other information you submit (such as text, picture, video).
e) Personal data provided when you sign up as a seller on KooGallery, including contact information (full name, email and mailing address, mobile phone number) and self-introduction description.
f) Personal data provided when you join Huawei Cloud Partner Network (“HCPN”), including name, phone number, and email address of a business contact person.
g) Personal data provided when you participate in marketing activities (including open beta testing (OBT) activities, promotion activities, market survey, or satisfaction survey), including contact information, business information and problem description information.
h) Personal data obtained and collected automatically by us when you access and use the Services, including your browser history, access date and time, browser information (including but not limited to fonts, types), your activities on the Website, hardware and software features, network link information (such as IP address) and other information about your use of Services (such as service information, transaction information, billing information, operation and maintenance information).
i) Personal data that we legally obtain from business partners which join HCPN, sellers or third parties. We may receive and collect personal data about you from publicly and commercially available sources as permitted by applicable laws and regulations.
Many of the Services require personal data to operate. If you choose not to provide the data required, you may not be able to use those Services. For example, if you do not register for an Account on our Website by submitting your personal data, you cannot purchase the Services. In other cases, where providing personal data is optional, and you choose not to submit your personal data, you may be unable to use certain features of the Services, such as personalization. However, this will not affect your use of other features of the Services.
2. How Huawei Cloud Processes Your Personal Data
We process your personal data for the following purposes:
a) Creating your Account and managing your Account.
b) Performing a contract entered into with you, in particular processing your transaction or service requests, including orders, requests for purchase, payment and use; providing you with certain seller services (such as releasing and listing of Services on KooGallery), or providing you with business partners services (such as training and enablement, professional technical support, and marketing).
c) Responding to your requests, inquiries, comments or suggestions about us, including requests for changes or information (such as materials on the Services, and white papers).
d) Delivering, activating, or verifying the Services; providing maintenance services, customer service and technical support.
e) Contacting you and sending you notices related to the provision of the Services by telephone, email and other means.
f) Sending you information about the Services that may interest you; inviting you to participate in Huawei Cloud activities (including promotional activities), market surveys or satisfaction surveys; or sending you marketing information. If you do not want to receive such information through messages, please refer to paragraph 7(c) below.
g) Using automated processes to tailor your Services experiences based on various data, including your personal data, and providing you with personalized user experience and content on such basis.
h) Evaluating and improving the Services through troubleshooting, internal audits, data analysis and research.
i) Ensuring the security of the Services and our customers and users, executing and improving our loss prevention and anti-fraud programs.
j) Complying with and enforcing applicable legal or regulatory requirements, or industry standards.
k) Any other purposes which we may separately notify you and obtain your consent for.
We process your personal information on one or more of the following legal bases:
a) As necessary to enter into a contract with you or a legal entity you represent, or to perform our contractual obligations, e.g. to provide Services, to respond to requests from you, or to provide customer support;
b) Where processing is based on our legitimate interests and those of third parties as described in this Statement;
c) When necessary to comply with applicable law and relevant legal obligations;
d) When you have given your consent.
3. How Huawei Cloud Uses Cookie and Similar Technologies
To ensure our Website works correctly, we may at times place cookies on your computer or mobile device. Please see our Cookie Policy for details on the cookies and similar technologies we use and how they process your data.
4. How Huawei Cloud Shares Your Personal Data
Sharing means providing third parties with personal data, where such third parties would handle the personal data independently of us or on our behalf. We do not share your personal data with third parties without your consent, except in the following circumstances or as described in this Statement:
a) Third parties under your instruction. We may share your personal data with your consent and/or in accordance with your instructions.
b) For compliance, fraud prevention and security. We may share your personal data for the purposes of complying with applicable laws and regulations and enforcing or applying our terms or agreements, protecting the rights or property of Huawei Cloud, and protecting our customers and/or the public. For example, we may share your personal data, when we believe sharing is necessary or appropriate to prevent or defend against cyber threat, fraud, physical harm, or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.
c) Affiliates. We may share your personal data with our affiliates including Huawei Cloud Computing Technologies Co., Ltd. located in China, for purposes of transactions support, Services support, delivery and maintenance support, customer service support and technical support or security support, and for other reasonable purposes, to the extent required by the Services.
d) Partners. We may share your personal data with our partners or enable partners to collect information (including your personal data) directly via the Services, such as your billing information and account information, for the purpose of implementing our Services and/or other reasonable purposes. Our partners may include:
1) Third-party Service providers, including business partners and sellers: Some Services may be provided directly by third-party providers. In such cases, we may share with them the relevant account information, contact information, order information and transaction information to fulfil the transaction, after-sales service or service delivery. For example, if you purchase third parties’ Services via KooGallery, we need to share your personal data with them to fulfil the transaction. If you have enabled features or functionality that connect the Services to a third-party platform or social media network (such as by logging in to the Website using your account with the third-party, providing your access token for the Services to a third-party, or otherwise linking your account to a third-party’s services), we may share the personal data that you authorized us to share for this purpose. If you connect your account with a solution provider’s account, we need to share the necessary information with them in order to facilitate the service. Third-party Service providers’ names will be publicized on the product or service details page and third-party Service providers may have their own separate privacy policies and are not subject to the Statement.
2) Service providers and professional advisors. We may share your personal data with third party companies and individuals that provide services on our behalf or help us operate the Website and the Services (such as supply, payment, marketing, data analytics and compliance assessment). We share such data only for purposes consistent with this Statement or under your authorization. For example, we may need to share your order information with logistic service providers in order to arrange delivery, and we may need to share your payment information with payment service providers (e.g. Worldpay, learn more about Worldpay Privacy Policy) in order to confirm and proceed with your payment instructions. We may share your personal data with professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.
When we share your personal data with third parties, their responsibilities and obligations will be governed by contracts and we will require them to take appropriate measures to ensure the security of the personal data shared and/or processed.
5. How Huawei Cloud Protects Your Personal Data
We take the security of your personal data seriously. We take appropriate physical, organizational, and technical measures to protect your personal data. For example, we use encryption to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious data attacks; we deploy access control mechanisms to ensure that only authorized personnel can access your personal data; and we raise awareness among employees about the importance of protecting personal data through security and privacy protection training sessions. While we take the utmost care to protect your personal data, please note that no security measures are completely infallible. You can find more details on our security measures at Huawei Cloud Security. To this end, Huawei Cloud takes the following measures:
a) Sets up a privacy protection organization to identify and manage personal data protection risks.
b) Adopts strict data security and personal data protection policies, in accordance with the risk of the categories of data processed. Develops security breach response and data breach process to reduce privacy and security risks brought by personal data breaches and guide relevant departments to handle personal data in compliance with laws and regulations.
c) Holds security and privacy protection training courses, tests, and publicity activities to raise employees' personal data protection awareness.
d) Takes reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to what is necessary in relation to the purposes for which they are processed.
e) Takes a range of measures such as an entrance and exit control, entrance guard systems and CCTV system to ensure the physical security of the data centers to prevent unauthorized persons from gaining access to data processing systems with which personal data are processed or used.
f) Deploys access control mechanisms and implements hierarchical permission management on them based on service requirements and personnel levels to ensure that only authorized personnel can access personal data.
g) Clearly defines and assigns cyber security roles and responsibilities, and implements separation of duties (SOD) based on a risk assessment to reduce risks to prevent data processing systems from being used by unauthorized persons.
h) Encryption and pseudonymisation of personal data, as appropriate, using recommended industry standard protocols to prevent data breach and unauthorized access,
i) Degausses the discarded storage media before returning to the warehouse to ensure that software-based overwriting shall be performed on media prior to their disposal. In cases where this is not possible (CD’s, DVD’s, etc.) physical destruction shall be performed.
j) Implements appropriate O&M security management and technical measures, including identity authentication and access control, change and event management, vulnerability management, configuration management, event logging, and continuously monitors cyber security events and threats, detects exceptions in a timely manner, and proactively takes measures to deal with them to ensure that personal data cannot be read, copied, altered or removed by unauthorized persons.
k) Implements protection mechanisms such as DDoS protection to protect networks from attacks, develops vulnerability management policies, evaluation standards, and management processes to manage security vulnerabilities throughout the lifecycle. In addition, regularly runs vulnerability scanning programs to detect potential security vulnerabilities and promptly take countermeasures.
l) Strictly selects business partners and service providers and incorporates personal data protection requirements into commercial contracts, audits, and appraisal activities.
Although we protect your personal data, you are responsible for safekeeping your login data including account ID, account name and passwords.
If you find that your account ID is being used by others without your permission, please promptly notify us. You have the right to request us to suspend any unauthorized use of your Account.
In summary, Huawei Cloud is committed to protecting your personal data. Nevertheless, no security measure is perfect and no product, service, website, data transfer, computing system, or network connection is absolutely secure.
To cope with possible risks, such as personal data breach, damage, and loss, Huawei Cloud has developed several mechanisms and control measures, clear rating standards of security incidents and vulnerabilities, and corresponding processing procedures. Huawei Cloud has established a dedicated emergency response team to implement security planning, loss reduction, analysis, locating, and remediation, and to perform tracking operations with related departments based on security incident response regulations and requirements.
6. How Long Huawei Cloud Retains Your Personal Data
We will retain your personal data for no longer than is necessary for the purposes set out in this Statement, unless otherwise required by laws or requested by you. The data storage period may vary depending on the processing purpose and the relevant Service.
We will maintain your account information as long as is necessary for us to provide the Services to you or to perform our obligations or exercise our rights under agreements related to the Services. You can choose to close your Account. After you close your Account, we will stop providing you with the Services and delete your relevant personal data within reasonable time, provided that we are not required to continue to process certain of your personal data by law, e.g. for accounting or bookkeeping purposes or to perform our obligations, or exercise our rights under agreements related to the Services.
7. How to Access and Control Your Personal Data
It is your responsibility to ensure that all personal data submitted to us is correct. We are dedicated to maintaining the accuracy and completeness of your personal data and keeping your personal data up-to-date based on the information you provide to us.
According to the applicable laws and regulations of some countries and/or regions, data subjects may have rights to make requests (hereinafter referred to as “requests”) of accessing, correcting, deleting or erasing the personal data retained by us.
You can easily amend and control the personal data relating to you, which we hold, as follows:
a) Account information: If you want to add or update personal data related to your Account, please access the Website and log in to your Account via Log in > My Account. For modification of information provided through Huawei ID, please refer to Statement About HUAWEI ID and Privacy.
b) Cookie: Regarding the management of Cookie, please see our Cookie Policy.
c) Messages: Please access the Website and log in to your Account's mailbox via Log in > My Account > unread messages. You can set your preferences in the upper right corner of your mailbox via Message Receive Management.
You may have the following rights regarding your personal data under applicable laws:
a) Right to access the personal data we hold about you and obtain copies thereof;
b) Right to request us to update or correct your personal data;
c) Right to request us to erase your personal data;
d) Right to object to our processing of your personal data;
e) Right to restrict our processing of your personal data;
f) Right to obtain your personal data and have us transfer it to a third party of your choice (data portability); and
g) Right to lodge a complaint with the competent data protection authority.
Please note that these rights are not absolute and may be restricted in accordance with applicable laws. If you need our assistance to exercise the rights above, please contact us as set out in Section 11 “How to Contact Huawei Cloud” below.
Generally, we will respond to you within 30 days, unless otherwise required by applicable laws. Depending on the complexity of your requests, we may extend the period by a further two months. In this case, we will inform you of the extension and its reasons within 30 days of receiving your request. Please note that under some circumstances, for example where we cannot verify your identity, where we are prohibited by law from giving effect to your request, or your request exceeds your rights under applicable laws, we may refuse your request. In this case, we will inform you in writing that your request is refused together with the reasons for our refusal.
You can change the authorized personal data collection scope or withdraw your consent, without affecting the lawfulness of the processing activities based on the consent and prior to such withdrawal. Your right to withdraw consent can be exercised by setting privacy options on your Account, disabling related Services, or deleting your Account. You may also seek help by contacting us as set out under Section 11 “How to Contact Huawei Cloud”.
You can delete your Account in the account-related Services. After you delete your Account, we will stop providing Services, and delete your personal data unless otherwise required by law. Your Account cannot be restored after deletion. You need to register a new Account if you want to use related Services again.
8. How Huawei Cloud Handles Personal Data of Children
Our Services are only intended for adults. Minors are not allowed to create their own user Account. If you are a minor, you may use our Services only with the involvement of a parent or guardian.
9. How Your Personal Data Is Transferred Internationally
Your personal data is stored on a server located in Singapore, and we serve you through our global resources. In order to provide the Services to you, your personal data may be transferred to or accessed by countries/regions where Huawei Cloud, Huawei Cloud’s affiliates, Huawei Cloud’s partners are located.
These countries/regions may have different data protection laws, which may impose less stringent data protection requirements. In such cases, we will ensure the transfer is in accordance with applicable laws and regulations (including by ensuring that overseas recipients are subject to confidentiality and data protection obligations where appropriate), as well as this Statement.
10. How This Statement Is Updated
We may update or modify this Statement from time to time according to changes in our Services or data processing. If we update this Statement, we will publish the latest version of the Statement on the Website or by otherwise notifying you. The modified terms will come into effect immediately upon posting or otherwise notified by us. You are advised to review this Statement periodically for any changes.
11. How to Contact Huawei Cloud
Country/Region in Which You Are Registered |
Data Controller (Entity You Have Contracted With) |
Address |
South Africa |
Sparkoo Technologies South Africa (Pty) LTD. |
Building 17 - Huawei Office Park, 124 Western Service Road, Woodmead - Johannesburg, Gauteng, 2191 |
Chile |
Sparkoo Technologies Chile SpA |
ROSARIO NORTE 530 OF 1101 LAS CONDES |
Peru |
Sparkoo Technologies PERU S.A.C. |
Calle Las Begonias 415, Int. 2301, San Isidro, Lima 27, Perú |
Brazil |
Sparkoo Technologies Do Brasil Ltda. |
Avenida Doutor Chucri Zaidan, S/N, conjunto 252, Edifício EZ Towers, Vila São Francisco, São Paulo/SP, CEP 04711-130 |
Thailand |
Sparkoo Technologies (Thailand) Co., Ltd. |
No. 9, G Tower Grand Rama 9, Room No. GN01-04, 35th Floor, Rama 9 Road, Huaykwang Sub-district, Huaykwang District, Bangkok Metropolis |
Hong Kong |
Sparkoo Technologies Hong Kong Co., Limited |
7/F., Tower 6, The Gateway, No. 9 Canton Road, Tsimshatsui,Kowloon |
Countries other than the above |
Sparkoo Technologies Singapore Pte. Ltd. |
1 Changi Business Park Ave 1 #05-01/06 Singapore 486058 |
Data controller: If there are any conflicts between the table and the contracting party displayed in the Account Center, the information set out in the Account Center shall prevail.
We have set up a dedicated personal data protection department (or data protection officer). If you have any questions, comments, or suggestions, please contact us or submit them to our global offices. If you want to exercise your privacy rights, or wish to raise or consult us on any privacy issues please visit our Data Subject Right Portal: https://www.huaweicloud.com/intl/en-us/personal-data-request.html. You can also contact us by email [dposg@huaweicloud.com]. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.
If you are customers from Malaysia, please refer to our Privacy Statement in Malay at https://www.huaweicloud.com/intl/en-us/declaration/sa_prp_ms.html.
12. Additional Information for Certain Jurisdictions
We provide additional information about our controllers and data protection officers (as applicable), the privacy, collection, and use of personal information of prospective and current customers of Huawei Cloud Offerings located in certain jurisdictions.
Türkiye
You may have the following rights regarding your personal data under the Turkish law:
a) Right to access the personal data we hold about you and obtain copies thereof;
b) Right to request us to update or correct your personal data;
c) Right to request us to erase your personal data;
d) Right to object to our processing of your personal data;
e) Right to restrict our processing of your personal data;
f) Right to obtain your personal data and have us transfer it to a third party of your choice (data portability);
g) Right to learn whether your personal data are processed or not;
h) Right to demand for information as to if your personal data have been processed;
i) Right to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose;
j) Right to know the third parties to whom your personal data are transferred in country or abroad;
k) Right to request reporting of the operations carried out related to erasure of your personal data to third parties to whom your personal data have been transferred;
l) Right to object to the occurrence of a result against you by analyzing the data processed solely through automated systems; and
m) Right to lodge a complaint with the competent data protection authority.
V1003 May 2022
If you are customers from Malaysia, please refer to our Privacy Statement in Malay at https://www.huaweicloud.com/intl/en-us/declaration/sa_prp_ms.html.
Huawei Cloud ("Huawei Cloud", "we", "our" and "us") understands how important your privacy is to you and fully respects it. Please carefully read this Privacy Statement ("Statement") before you submit your personal data to us. This Statement applies to https://www.huaweicloud.com/intl/en-us/ ("Website"), and all products and services that contain or refer to this Statement (collectively “Services”). This Statement does not apply to Your Content that we process, store or host as a processor at Huawei Cloud.
“Your Content” refers to all data (including personal data), software, device, text, images, video, audio, photographs, third-party applications, information, materials, in any format, provided or made available by you and/or your end user that is transferred to, stored in, or processed by the Services. Our materials, data and information do not form part of Your Content.
This Statement describes how we collect, use and disclose your personal data, as well as our legal bases for processing, and the security measures implemented by us to protect your personal data. It also demonstrates your rights in connection with your personal data, and other related details you need to know before you provide personal data to us. We may inform you of product- or service-specific data collection which is not reflected in this Statement through supplementary policies or notices provided before the relevant collection of your personal data.
By interacting with us, using our Website, submitting information to us, or signing up for our Services, you agree and consent to Huawei Cloud (including its affiliates), as well as our third-party service providers, representatives and/or agents, collecting, using, and disclosing your personal data in the manner set forth in this Statement.
We have created this Statement to help you understand:
- 1. How Huawei Cloud Collects Your Personal Data
- 2. How Huawei Cloud Processes Your Personal Data
- 3. How Huawei Cloud Uses Cookie and Similar Technologies
- 4. How Huawei Cloud Shares Your Personal Data
- 5. How Huawei Cloud Protects Your Personal Data
- 6. How Long Huawei Cloud Retains Your Personal Data
- 7. How to Access and Control Your Personal Data
- 8. How Huawei Cloud Handles the Personal Data of Children
- 9. How Your Personal Data Is Transferred Internationally
- 10. How This Statement Is Updated
- 11. How to Contact Huawei Cloud
1. How Huawei Cloud Collects Your Personal Data
Personal data means any information (whether true or not) relating to an identified or identifiable natural person, including information that can identify an individual when taken in combination with other information to which we have or are likely to have access. We collect personal data from you in the course of your interaction with us for various purposes, such as providing you with the Services and maintaining the best possible operations of the Services. Your interaction with us may include: registering an account with the Website, subscribing to the Services, completing payment with us, contacting us when experiencing (technical) problems, browsing our Website and configuring your settings for your account.
If you provide us with any personal data relating to a third party (e.g. information of your employees and/or end users), by submitting such information to us, you represent and warrant to us that you have notified such third party of the terms of this Statement, and that such third party has consented to you disclosing his/her personal data to us for the collection, use and disclosure of their personal data by us as described in this Statement.
Depending on your use of the Services, we collect the following personal data:
a) Personal data provided through Huawei ID (which may be collected by our affiliate administering Huawei ID accounts and shared with us) to register user accounts, such as mobile phone number, email address, account name as required for registration. For more information about Huawei ID, please refer to Statement About HUAWEI ID and Privacy
b) Personal data provided when you manage your account information, contact us, use the Services, or request support or help from us, such as contact information (full name, email and mailing address, mobile phone number), business information (company name, industry, position), means of identification (passport or other ID information), payment information (such as bank account information including credit card number, expiry date and security code, invoice information, tax information), Services and technical support information (such as chat sessions or phone conversations, problem description, and other information you uploaded when you contact us for seeking assistance) and your signature.
c) Personal data obtained and collected automatically by us when you access and use the Services, such as your browser history, access date and time, browser information (including but not limited to fonts, types), your activities on the Website, hardware and software features, network link information (including but not limited IP address, port, network protocol), and other information about your use of services (such as service identification information and specifications, transaction information, billing information, O&M information).
d) Personal data that we legally obtain from business partners (“Partners” which join Huawei Cloud Network) or third parties. We may receive and collect personal data about you from publicly and commercially available sources as permitted by applicable laws and regulations.
Many of the Services require personal data to operate. If you choose not to provide the data required, you may not be able to use those Services. For example, if you do not register an account on our Website by submitting your personal data, you cannot purchase the Services. In other cases, where providing personal data is optional, and you choose not to submit your personal data, you may be unable to use certain features of the Services, such as personalization. However, this will not affect your use of other features of the Services.
2. How Huawei Cloud Processes Your Personal Data
We process (which includes collecting, using and disclosing) your personal data for the following purposes:
a) Creating your account.
b) Fulfilling our obligations under a contract with you such as fulfilling your transaction or service requests, including orders, requests for changes or providing you with the requested information (such as materials on the Services, and white papers); delivering, activating, or verifying the Services; providing technical support. For example, for purposes of providing you with security services, we may need your IP address.
c) Contacting you, and sending you notices related to the provision of the Services.
d) Sending you information about the Services that may interest you; inviting you to participate in Huawei Cloud activities (including promotional activities), market surveys, or satisfaction surveys; or sending you marketing information. If you do not want to receive such information through messages, please refer to paragraph 7(c).
e) Using automated processes to tailor your Services experiences based on various data, including your personal data, and providing you with personalized user experience and content on such basis.
f) Improving the Services through internal audits, data analysis, and research.
g) Analyzing the efficiency of our business operations and evaluating market share.
h) Troubleshooting when you send us error reports.
i) Ensuring the security of the Services and our customers or users, executing and improving our loss prevention and anti-fraud programs.
j) Complying with and enforcing applicable legal or regulatory requirements, or industry standards.
k) Any other purposes which we may separately notify you and obtain your consent for.
We may disclose your personal data to a third party for the following purposes:
a) The disclosure is required in accordance with applicable laws and regulations.
b) The disclosure is necessary to protect rights or property of Huawei Cloud, our customers and/or the public. For example, we may disclose your personal data, when we believe disclosure is necessary or appropriate to prevent or defend cyber threat, fraud, physical harm, or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.
Please see “4. How Huawei Cloud Shares Your Personal Data” below for details on the third parties to whom we disclose your personal data.
We only disclose your personal data to the extent permitted by applicable laws and regulations, in accordance with this Statement, or in accordance with consent that you give us.
3. How Huawei Cloud Uses Cookie and Similar Technologies
To ensure our Website works correctly, we may at times place cookies on your computer or mobile device. Please see our Cookie Policy for details on the cookies and similar technologies we use and how they process your data.
4. How Huawei Cloud Shares Your Personal Data
Sharing means providing third parties with personal data, where such third parties would handle the personal data independently of us. We do not share your personal data with third parties without your consent, except in the following circumstances or as described in this Statement:
a) Third parties under your instruction. We may share your personal data with your express consent and/or in accordance with your instructions.
b) For compliance, fraud prevention and safety. We may share your personal data for compliance, fraud prevention and safety purposes.
c) Affiliates.We may share your personal data with our affiliates, for purposes of transactions support, Services support or security support. For example, we verify the global uniqueness of accounts before allowing them to be registered. Your information will be shared only for reasonable purposes and to the extent required by the Services.
d) Partners.We may share your personal data with our partners or enable partners to collect information (including your personal data) directly via the Services, such as your billing information and account information, for the purpose of implementing our Services and/or other reasonable purposes. Our partners may include:
1) Third-party providers, developers, platforms and social media networks. Some Services may be provided directly by third-party providers, developers or platforms. In such cases, we need to provide them with the relevant transaction information. For example, if you purchase third parties’ service via Marketplace, we need to share your personal data with them to fulfil the transaction. If you have enabled features or functionality that connect the Services to a third-party platform or social media network (such as by logging in to the Website using your account with the third-party, providing your access token for the Services to a third-party, or otherwise linking your account to a third-party’s services), we may disclose the personal data that you authorized us to share for this purpose. If you connect your account with Solution Provider’s account, we need to disclose the necessary information to them in order to facilitate the service. We do not control the third party’s use of your personal data.
2) Service providers and professional advisors.We may share your personal data with third party companies and individuals that provide services on our behalf or help us operate the Website and the Services (such as supply, infrastructure, hosting, customer support, payment, analytics, delivery, marketing, and database management services). We share such data only for purposes consistent with this Statement or under your authorization. For example, we need to share your order information with logistic service providers in order to arrange delivery, and we need to share your financial information with payment service providers (e.g. Worldpay, learn more about Worldpay Privacy Policy) in order to confirm and proceed with your payment instructions. We may disclose your personal data to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.
When we share your personal data with third parties, their responsibilities and obligations will be governed by contracts and we will require them to take appropriate measures to ensure the safety of the personal data processed.
5. How Huawei Cloud Protects Your Personal Data
We take the security of your personal data seriously. We take appropriate physical, organizational, and technical measures to protect your personal data. For example, we use encryption to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious data attacks; we deploy access control mechanisms to ensure that only authorized personnel can access your personal data; and we raise awareness among employees about the importance of protecting personal data through security and privacy protection training sessions. While we take the utmost care to protect your personal data, please note that no security measures are completely infallible. You can find more details on our security certification at Huawei Cloud Compliance Center. To this end, we take the following measures:
a) We take reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to what is necessary in relation to the purposes for which they are processed.
b) We use a range of technologies such as cryptographic technologies to ensure the confidentiality of data in transmission. We implement trusted protection mechanisms to protect data and data storage servers from attacks.
c) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. In addition, we control the number of authorized personnel and implement hierarchical permission management on them based on service requirements and personnel levels.
d) We strictly select business partners and service providers and incorporate personal data protection requirements into commercial contracts, audits, and appraisal activities.
e) We hold security and privacy protection training courses, tests, and publicity activities to raise employees' personal data protection awareness.
f) Although we protect your personal data, you are responsible for safekeeping your login data including account ID, username and passwords.
If you find your account ID is used by others without your permission, please promptly notify us. You have the right to request us to suspend any unauthorized use of your account.
In a word, Huawei Cloud is committed to protecting your personal data. Nevertheless, no security measure is perfect and no product, service, website, data transfer, computing system, or network connection is absolutely secure.
To cope with possible risks, such as personal data leakage, damage, and loss, Huawei Cloud has developed several mechanisms and control measures, clearly defined the rating standards of security incidents and vulnerabilities and corresponding processing procedures. Huawei Cloud has established a dedicated emergency response team to implement security planning, loss reduction, analysis, locating, and remediation, and to perform tracking operations with related departments based on security incident handling regulations and requirements.
6. How Long Huawei Cloud Retains Your Personal Data
We will retain your personal data for no longer than is necessary for the purposes set out in this Statement, unless otherwise required by laws or requested by you. The data storage period may vary depending on the processing purpose and the relevant Service.
We will maintain your account information as long as is necessary for us to provide the Services to you or to perform our obligations or exercise our rights under agreements related to the Services. You can choose to close your account. After you close your account, we will stop providing you with the Services and delete your relevant personal data, provided that we are not required to continue to process certain of your personal data by law, e.g. for accounting or bookkeeping purposes or to perform our obligations, or exercise our rights under agreements related to the Services.
7. How to Access and Control Your Personal Data
It is your responsibility to ensure that all personal data submitted to us is correct. We are dedicated to maintaining the accuracy and completeness of your personal data and keeping your personal data up-to-date based on the information you provide to us.
According to applicable laws and regulations of some countries and/or regions, data subjects may have rights to make requests (hereinafter referred to as “requests”) of accessing, correcting, deleting or erasing the personal data retained by us.
You can easily amend and control the personal data we hold about you as follows:
a) Account information: If you want to add or update personal data related to your account, please go to the Website and log into your account via Log in>My Account. For modification of information provided through Huawei ID, please refer to Statement About HUAWEI ID and Privacy.
b) Cookie: Regarding the management of Cookie, please see our Cookie Policy.
c) Messages: Please go to the Website and log into your account's mailbox via Log in>My Account button> unread messages. You set your preferences in the upper right corner of your mailbox via >Message Receive Management.
You may have the following rights regarding your personal data under applicable laws:
a) Right to access the personal data we hold about you and obtain copies thereof;
b) Right to request us to update or correct your personal data;
c) Right to request us to erase your personal data;
d) Right to object to our processing of your personal data;
e) Right to restrict our processing of your personal data;
f) Right to obtain your personal data and have us transfer it to a third party of your choice (data portability); and
g) Right to lodge a complaint with the competent data protection authority.
Please note that these rights are not absolute and may be restricted in accordance with applicable laws. If you need our assistance to exercise the rights above, please contact us as set out in “11. How to Contact Huawei Cloud” below.
Generally, we will respond to you within 30 days, unless otherwise required by applicable laws. Depending on the complexity of your requests, we may extend the period by a further two months. In this case, we will inform you of the extension and its reasons within 30 days of receiving your request. Please note that under some circumstances, for example where we cannot verify your identity, where we are prohibited by law from giving effect to your request, or your request exceeds your rights under applicable laws, we may refuse your request. In this case, we will inform you in writing that your request is refused together with the reasons for our refusal.
You can change the authorized personal data collection scope or withdraw your consent, without affecting the lawfulness of the processing activities based on the consent and prior to such withdrawal. Your right to withdraw consent can be exercised by setting privacy options on your Huawei Cloud account, disabling related Services, or deleting your account. You may also seek help by contacting us as set out under “11. How to Contact Huawei Cloud”.
You can delete your account in the account-related Services. After you delete your account, we will stop providing Services, and delete your personal data unless otherwise stipulated by law. Your account cannot be restored after deletion. You need to register a new account if you want to use related Services again.
8. How Huawei Cloud Handles Personal Data of Children
Our Services are only intended for adults. Minors are not allowed to create their own user account.
9. How Your Personal Data Is Transferred Internationally
In order to provide the Services to you, we may store your personal data in countries/regions where Huawei Cloud, Huawei Cloud’s affiliate companies, or Huawei Cloud’s service providers or subcontractors are located. This means your personal data may be transferred to countries or regions outside the places where you are located or where we collect your personal data, and be accessed and stored in those jurisdictions.
These jurisdictions may have different data protection laws, which may impose less stringent data protection requirements. In such cases, we will ensure the transfer is in accordance with applicable laws and regulations (including by ensuring that overseas recipients are subject to confidentiality and data protection obligations where appropriate), as well as this Statement.
10. How This Statement Is Updated
We may update or modify this Statement from time to time according to changes in our Services or data processing. If we update this Statement, we will publish the latest version of the Statement on the Website, and it will take effect immediately upon its release. You are advised to review this Statement periodically for any changes.
11. How to Contact Huawei Cloud
We have set up a dedicated personal data protection department (or data protection officer). If you have any questions, comments, or suggestions, please contact us or submitting them to our global offices. If you want to exercise your privacy rights, or wish to raise or consult us on any privacy issues please visit our Data Subject Right Portal: https://www.huaweicloud.com/intl/en-us/personal-data-request.html. You can also contact us by email [dpo.sg@huawei.com]. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.
Note: Due to differences in local laws and languages, the local versions of this Privacy Statement may be different from this version. In the case of any conflicts, the local versions shall prevail.
V1002 December 2020
If you are customers from Malaysia, please refer to our Privacy Statement in Malay at https://www.huaweicloud.com/intl/en-us/declaration/sa_prp_ms.html
Huawei Cloud ("Huawei Cloud", "we", "our" and "us") understands how important your privacy is to you and fully respects it. Please carefully read this Privacy Statement ("Statement") before you submit your personal data to us. This Statement applies to https://www.huaweicloud.com/intl/en-us/ ("Website"), and all products and services that contain or refer to this Statement (collectively “Services”). This Statement does not apply to Your Content that we process, store or host as a processor at Huawei Cloud.
“Your Content” refers to all data (including personal data), software, device, text, images, video, audio, photographs, third-party applications, information, materials, in any format, provided or made available by you and/or your End User that is transferred to, stored in, processing on the Services. Our materials, data and information will not fall within the definition of Your Content.
HUAWEI CLOUD Customer Agreement
This Statement describes how we collect, use and disclose your personal data, as well as our legal bases for processing, and the security measures implemented by us to protect your personal data. It also demonstrates your rights in connection with your personal data, and other related details you need to know before you provide personal data to us. We may inform you of product- or service-specific data collection which is not reflected in this Statement through supplementary policies or notices provided before the relevant collection of your personal data.
We have created this Statement to help you understand:
- 1. How Huawei Cloud Collects Your Personal Data
- 2. How Huawei Cloud Processes Your Personal Data
- 3. How Huawei Cloud Uses Cookie and Similar Technologies
- 4. How Huawei Cloud Shares Your Personal Data
- 5. How Huawei Cloud Protects Your Personal Data
- 6. How Long Huawei Cloud Retains Your Personal Data
- 7. How to Access and Control Your Personal Data
- 8. How Huawei Cloud Handles the Personal Data of Children
- 9. How Your Personal Data Is Transferred Internationally
- 10. How This Statement Is Updated
- 11. How to Contact Huawei Cloud
- How Huawei Cloud Collects Your Personal Data
Personal data means any information relating to an identified or identifiable natural person. We collect personal data from you in the course of your interaction with us for various purposes, such as providing you with the Services and maintaining the best operation of the Services. Your interaction with us may include, registering an account with the Website, subscribing to the Services, completing payment with us, contacting us when experiencing (technical) problems, browsing our Website and configuring your settings for your account.
Depending on your use of the Services, we collect the following personal data:
a) Personal data submitted to us to register user accounts, such as mobile phone number, email address and others as required for registration.
b) Personal data provided when you contact us, use the Services, or request support or help from us, such as contact information (full name, email and mailing address, mobile phone number), business information (company name, industry, position), means of identification (passport or other ID information), payment information (such as bank account information including credit card number, expiry date and security code, invoice information, tax information), Services and technical support (such as chat sessions or phone conversations when you contract us for seeking assistance) and your signature. Some of the personal data provided may be recognized as sensitive personal data, such as financial information. The purpose of collecting such data is to verify your identification under the applicable law, to provide you with relevant consultancy or technical support, or to support you with the sending of bills and products, or registering of promotion activities.
c) Personal data obtained and collected automatically by us when you access and use the Services, such as your browser history, access date and time, browser information (including but not limited to fonts, types), your activities on the Website, hardware and software features, and network link information (including but not limited IP address, port, network protocol).
d) Personal data that we legally obtain from business partners (“Partners” which join Huawei Cloud Partner Network) or third parties. We may receive personal data about you from publicly and commercially available sources as permitted by applicable laws and regulations.
Many of the Services require personal data to operate. If you choose not to provide the data required, you may not be able to use those Services. For example, if you do not register an account on our Website by submitting your personal data, you cannot purchase the Services. In other cases, where providing personal data is optional, and you choose not to submit your personal data, you may be unable to use certain features of the Services, such as personalization. However, this will not affect your use of other features of the Services.
- How Huawei Cloud Processes Your Personal Data
We process your personal data for the following purposes:
a) Creating your account.
b) Fulfilling our obligations under a contract with you such as fulfilling your transaction or service requests, including orders, requests for changes or providing you with the requested information (such as materials on the Services, and white papers); delivering, activating, or verifying the Services; providing technical support. For example, for purposes of providing you with security services, we may need your IP address.
c) Contacting you, and sending you notices relevant for the provision of the Services.
d) Sending you information about the Services that may interest you; inviting you to participate in Huawei Cloud activities (including promotional activities), market surveys, or satisfaction surveys; or sending you marketing information.
e) Using automated processes to tailor your Services experiences based on various data, including your personal data, and providing you with personalized user experience and content on such basis.
f) Improving the Services through internal audits, data analysis, and research.
g) Analyzing the efficiency of our business operations and evaluating market share.
h) Troubleshooting when you send us error reports.
i) Ensuring the security of the Services and our customers or users, executing and improving our loss prevention and anti-fraud programs.
j) Complying with and enforcing applicable legal requirements or industry standards.
We may disclose your personal data to a third party for the following purposes:
a) The disclosure is required in accordance with applicable laws and regulations.
b) The disclosure is necessary to protect rights or property of Huawei Cloud, our customers and/or the public. For example, we may disclose your personal data, when we believe disclosure is necessary or appropriate to prevent or defend cyber threat, fraud, physical harm, or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.
Please see “How Huawei Cloud Shares Your Personal Data” below for details on the third parties to whom we disclose your personal data.
We only disclose your personal data to the extent permitted by applicable laws and regulations and in accordance with this Statement.
- How Huawei Cloud Uses Cookie and Similar Technologies
To ensure our Website works correctly, we may at times place cookies on your computer or mobile device. Please see our Cookie Policy for details on the cookies and similar technologies we use and how they process your data.
- How Huawei Cloud Shares Your Personal Data
Sharing means providing third parties with personal data, and the third parties and we would handle the personal data independently. We do not share your personal data with third parties without your consent, except in the following circumstances or as described in this Statement:
a) Third parties under your instruction. We may share your personal data under your explicit consent and within your instruction to the third parties indicated by you.
b) For compliance, fraud prevention and safety. We may share your personal data for the compliance, fraud prevention and safety purposes.
c) We may share your personal data with our affiliates, for purposes of transactions support, Services support or security support. For example, we verify the global uniqueness of accounts before allowing them to be registered. Your information may be shared only for explicit, and legitimate purposes, and the sharing is limited only to information required by our Services.
d) We may sometimes share your personal data with our partners or enable partners to collect information directly via the Services, such as your bill information and account information. The purpose of sharing the information is to implement our Services, and we may shall your personal data within lawful and necessary purpose, the scope of sharing shall be specified and limited to the purposes only. Our partners may include:
1) Third-party providers, developers, platforms and social media networks. Some Services may be provided directly by third-party providers, developers or platforms. In this cases, we need to provide them with the relevant transaction information. For example, if you purchase third parties’ service via Marketplace, we need to share your personal data with them to fulfil the transaction. If you have enabled features or functionality that connect the Services to a third-party platform or social media network (such as by logging in to the Website using your account with the third-party, providing your access token for the Services to a third-party, or otherwise linking your account to a third-party’s services), we may disclose the personal data that you authorized us to share for this purpose. We do not control the third party’s use of your personal data.
2) Service providers and Professional advisors. We may share your personal data with third party companies and individuals that provide services on our behalf or help us operate the Website and the Services (such as supply, infrastructure, hosting, customer support, payment, analytics, delivery, marketing, and database management services). We share such data only for purposes consistent with this Statement or under your authorization. For example, we need to share your order information with logistic service providers in order to arrange delivery, or we need to share your financial information with payment service providers in order to confirm and proceed your payment instructions. We may disclose your personal data to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.
When we share your personal data with third parties, their responsibilities and obligations will be governed by contracts and we will require them to take appropriate measures to ensure the safety of the personal data processed.
- How Huawei Cloud Protects Your Personal Data
We take the security of your personal data seriously. We take appropriate physical, organizational, and technical measures to protect your personal data. For example, we use encryption to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious data attacks; we deploy access control mechanisms to ensure that only authorized personnel can access your personal data; and we raise awareness among employees about the importance of protecting personal data through security and privacy protection training sessions. While we take the utmost care to protect your personal data, please note that no security measures are completely infallible. You can find more details on our security certification at Huawei Cloud Security (https://www.huaweicloud.com/intl/securecenter/overallsafety.html). To this end, we take the following measures:
a) We take reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to what is necessary in relation to the purposes for which they are processed.
b) We use a range of technologies such as cryptographic technologies to ensure the confidentiality of data in transmission. We implement trusted protection mechanisms to protect data and data storage servers from attacks.
c) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. In addition, we control the number of authorized personnel and implement hierarchical permission management on them based on service requirements and personnel levels.
d) We strictly select business partners and service providers and incorporate personal data protection requirements into commercial contracts, audits, and appraisal activities.
e) We hold security and privacy protection training courses, tests, and publicity activities to raise employees' personal data protection awareness.
Although we protect your personal data, you are responsible for safekeeping your login data including account ID, username and passwords.
If you find your account ID is used by others without your permission, please promptly notify us. You have the right to request us to suspend any unauthorized use of your account.
In a word, Huawei Cloud is committed to protecting your personal data. Nevertheless, no security measure is perfect and no product, service, website, data transfer, computing system, or network connection is absolutely secure.
To cope with possible risks, such as personal data leakage, damage, and loss, Huawei Cloud has developed several mechanisms and control measures, clearly defined the rating standards of security incidents and vulnerabilities and corresponding processing procedures. Huawei Cloud has established a dedicated emergency response team to implement security planning, loss reduction, analysis, locating, and remediation, and to perform tracking operations with related departments based on security incident handling regulations and requirements.
- How Long Huawei Cloud Retains Your Personal Data
We will retain your personal data for no longer than is necessary for the purposes set out in this Statement, unless otherwise required by laws or requested by you. The data storage period may vary depending on the processing purpose and the relevant Service.
We will maintain your account information as long as is necessary for us to provide the Services to you or to perform our obligations or exercise our rights under agreements related to the Services. You can choose to close your account. After you close your account, we will stop providing you with the Services and delete your relevant personal data, provided that we are not required to continue to process certain of your personal data by law, e.g. for accounting or bookkeeping purposes or to perform our obligations, or exercise our rights under agreements related to the Services.
- How to Access and Control Your Personal Data
It is your responsibility to ensure that all personal data submitted to us is correct. We are dedicated to maintaining the accuracy and completeness of your personal data and keeping your personal data up-to-date based on the information you provide to us.
According to applicable laws and regulations of some countries and/or regions, data subjects may have rights to make requests (hereinafter referred to as “requests”) of accessing, correcting, deleting or erasing the personal data retained by us.
You can easily amend and control the personal data we hold about you as follows:
a) Account information: If you want to add or update personal data related to your account, please go to the Website log into your account via Log in>My Account.
b) Cookie: Regarding the management of Cookie, please see our Cookie Policy.
c) Messages: Please go to the Website and log into your account’ mailbox via Log in>My Account button> unread messages. You set your preferences in the upper right corner of your mailbox via >Message Receive Management.
You have the following rights regarding your personal data:
a) Right to access the personal data we hold about you and obtain copies thereof;
b) Right to request us to update or correct your personal data;
c) Right to request us to erase your personal data;
d) Right to object to our processing of your personal data;
e) Right to restrict our processing of your personal data;
f) Right to obtain your personal data and have us transfer it to a third party of your choice (data portability); and
g) Right to lodge a complaint with the competent data protection authority.
Please note that these rights are not absolute and may be restricted in accordance with applicable laws. If you need our assistance to exercise the rights above, please contact us as set out in “How to Contact Huawei Cloud” below.
Generally, we will respond to you within one month, unless otherwise required by applicable laws. Depending on the complexity of your requests, we may extend the period by further two months. In this case, we will inform you of the extension and its reasons within one month of receiving your request. Please note that under some circumstances, for example where we cannot verify your identity, or your claim exceeds your rights under applicable laws, we may refuse your request. In this case, we will inform you in writing that your request is refused together with the reasons for our refusal.
You can change the authorized personal data collection scope or withdraw your consent, without affecting the lawfulness of the processing activities based on the consent and prior to such withdraw. Your right of withdrawing consent can be exercised by setting privacy options on your Huawei Cloud account, disabling related Services, or deleting your account. You may also seek help through “12.How to Contact Huawei Cloud”.
You can delete your account in the account-related Services. After you delete your account, we will stop providing Services, and delete your personal data unless otherwise stipulated by law. Your account cannot be restored after deletion. You need to register a new account if you want to use related Services again.
- How Huawei Cloud Handles Personal Data of Children
Our Services are only intended for adults. Minors are not allowed to create their own user account.
- How Your Personal Data Is Transferred Internationally
In order to provide the Services to you, we may store your personal data in countries/regions where Huawei Cloud, Huawei Cloud’s affiliate companies, or Huawei Cloud’s service providers or subcontractors are located. This means your personal data may be transferred to countries or regions outside the places where you are located or where we collect your personal data, and be accessed and stored in those jurisdictions.
These jurisdictions may have different data protection laws, which may have less stringent data protection laws or without any relevant laws. In such cases, we will ensure the transfer is in accordance with applicable laws and regulations where the data is located, as well as this Statement.
- How This Statement Is Updated
We may update or modify this Statement from time to time according to changes of our Services or data processing. If we update this Statement, we will publish the latest version of the Statement on the Website, and it will take effect immediately upon its release. You are advised to review this Statement periodically for any changes. If we make any substantial changes to this Statement (any change of personal data we collect or we use for), we will notify you through appropriate channels and obtain your prior consent.
- How to Contact Huawei Cloud
We have set up a dedicated personal data protection department (or data protection officer). If you have any questions, comments, or suggestions, please contact us or submitting them to our global offices. To obtain the complete list of Huawei offices, please contact us by the following email address:privacy@huaweicloud.com.
If you want to exercise your privacy rights, or have any privacy issues for which you need to lodge a privacy complaint, or want to consult us regarding general data protection, please visit our Data Subject Right Portal: https://www.huaweicloud.com/intl/en-us/personal-data-request.html. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.
Note: Due to differences in local laws and languages, the local versions of this Privacy Statement may be different from this version. In the case of any conflicts, the local versions shall prevail.
Last Updated: December 2020
You can see what is updated in Huawei Cloud Privacy Statement History Version.
V1001 Aug. 2019
If you are customers from Malaysia, please refer to our Privacy Statement in Malay at https://www.huaweicloud.com/intl/en-us/declaration/sa_prp_ms.html
Huawei Cloud understands how important your privacy is to you and fully respects it. Please carefully read and understand this Privacy Statement ("Statement") before you agree to submit your personal data to us. This Statement applies to https://www.huaweicloud.com/intl/en-us/ ("Website"), and all products and services that display or refer to this Statement. This Statement does not apply to Content that you choose to be processed, stored or hosted at Huawei Cloud. We do not access or process Your Content for any purpose without your consent, unless this is required by applicable laws and regulations.
Content means software (including machine images), data, text, audio, video, or images that you process, store, or host by our products or services in connection with your account, and any computational results that you derive from the foregoing, when you use our products or services. This does not include account information that you provide to us in connection with the creation or administration of your account. Please refer to the links below to see your rights and obligations of Content and how we handle your Content.
HUAWEI CLOUD Customer Agreement
This Statement describes how we collect, use and disclose your personal data, and legal bases and security measures for data processing. It also demonstrates your rights to control your personal data when we process your personal data, and other related details you need to know before you provide personal data for us. However, it may not address all possible data processing scenarios. We may inform you of product- or service-specific data collection through supplementary policies or notices provided before collection.
This Statement is an important part of HUAWEI CLOUD Customer Agreement. Once you agree to HUAWEI CLOUD Customer Agreement, you have accepted all provisions in this Statement.
We create this Statement to help you understand:
· 1. How Huawei Cloud Collects Your Personal Data
· 2. How Huawei Cloud Processes Your Personal Data
· 3. How Huawei Cloud Uses Cookies
· 4. How Huawei Cloud Protects Your Personal Data
· 5. How to Access or Control Your Personal Data
· 6. How Huawei Cloud Handles Personal Data of Children
· 7. Third Party Providers and Their Services
· 8. How Your Personal Data Is Transferred Internationally
· 9. How This Statement Is Updated
· 10. How to Contact Huawei Cloud
1. How Huawei Cloud Collects Your Personal Data
1.1 Personal Data
Personal data means any data that, either on its own or jointly with other data, can be used to identify a natural person. We collect personal data from you in the course of your interaction with us with various purposes, such as providing you with our products or services and maintaining the best operation of our products or services. Your interaction with us may include, registering an account with this Website, subscribing to our products or services, completing payment with us, contacting us when handling some problems, browsing our Website and configuring your settings for our Website or your account.
According to your use of this Website and the products or services offered by us, the personal data we collect mainly includes the following:
a) Personal data submitted to us to register user accounts with this Website, such as user name and email address.
b) Personal data provided when you contact us, use our products or services, or obtain support or help from us, such as address, post code, name, passport or other ID information, bank account information, mobile phone number, name of your company, industry, position, invoice information, tax information and signature.
c) Personal data obtained and collected automatically by us when you access and use this Website or services provided by this Website, such as your browse history, access date and time, browser information you use (including but not limited to fonts, types, etc.), your actions on the Website, hardware and software features, and network link information (IP address, port, network protocol, etc.).
d) Personal data that we legally obtain from business partners (“Partners” which join Huawei Cloud Partner Network) or third parties. We may receive personal data about you from publicly and commercially available sources as permitted by applicable laws and regulations.
Many of our products or services require some personal data to operate. If you choose not to provide data necessary to operate, you may not be able to use that products or services. For example if you do not register an account on our Website and submit your personal data, you cannot purchase our products or services. In some other cases, where providing the data is optional, and you choose not to submit personal data, you may be unable to use some features of products or services, like personalization, but this will not affect your using of other products or services offered by us.
1.2 Non-personal Data
Non-personal data refers to data that cannot be used to identify an individual. For example, we may collect aggregated statistics, such as the number of visitors to the Website. We collect this data to understand how people use our Website, products and services. This allows us to improve products or services to better satisfy users’ needs. We may, at our own discretion, collect, use, process, transfer, or disclose non-personal data for other purposes.
We endeavor to keep your personal data and non-personal data separate, and use each independently. If personal data is combined with non-personal data, it will be treated as personal data.
2. How Huawei Cloud Processes Your Personal Data
We may not use your personal data except in the following cases:
a) Creating an account.
b) Fulfilling your transaction or service requests, including fulfilling orders; delivering, activating, or verifying products or services; fulfilling your requests for changes or providing you with the requested information (such as marketing materials for products and services, and white papers); and providing technical support.
c) Contacting you; sending you information about products and services that may interest you; inviting you to participate in Huawei Cloud activities (including promotional activities), market surveys, or satisfaction surveys; or sending you marketing information. If you do not want to receive these types of information, you can opt out at any time (Please refer to 5. How to Access or Control Your Personal Data).
d) Sending you important notices.
e) Providing you with personalized user experience and content.
f) Improving our products and services through internal audits, data analysis, and research.
g) Analyzing the efficiency of our business operations and evaluating market share.
h) Troubleshooting when you send us error reports.
i) Ensuring the security of our products, services and customers or users, executing and improving our loss prevention and anti-fraud programs.
j) Complying with and enforcing applicable legal requirements or industry standards.
We may not disclose your personal data to a third party except in the following cases:
a) The disclosure is mandatorily required in accordance with applicable laws and regulations.
b) We may disclose your personal data within the most limited scope, when appropriate, for protecting rights or property of Huawei Cloud, our customers and the public. For example, we may disclose your personal data, when we believe disclosure is necessary or appropriate to prevent or defend cyber threat, fraud, physical harm, or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.
c) We may disclose your personal data to our associate companies, our affiliates, service providers, subcontractors, partners or successors to enable them to provide transaction support, service support or security support for you. In this case, we ensure these companies shall guarantee the same personal data protection standard as this Statement, and shall not use personal data for other purposes.
We only disclose your personal data to the extent permitted by applicable laws and regulations and pursuant to this Statement. We do not provide, sell, and rent your personal data for or to any third party unconcerned unless otherwise permitted by you or specified in this Statement.
3. How Huawei Cloud Uses Cookies
To ensure our Website works correctly, we may at times place a small piece of data known as a cookie on your computer or mobile device. A cookie is a text file stored by a web server on a computer or mobile device. The content of a cookie can be retrieved or read only by the server that creates the cookie. The text in a cookie often consists of identifiers, site names, and some numbers and characters. Cookies are unique to the browsers or mobile applications you use, and enable websites to store data such as your preferences.
Like many other websites or Internet service providers, we use cookies to improve user experience. To be specific, the purposes are as follows:
a) Cookies allow websites to remember your settings such as language, font size on your computer or mobile device, or other browser preferences. This means that a user does not need to reset preferences for every visit.
b) We may count some data of advertising of Huawei Cloud, such as the times that advertising pops up on the Website and the situation of clicking advertising on other websites.
c) Authentication. When you visit the Website, we may create a unique ID to identify you. If cookies with this function are not used, the Website will treat you as a new visitor every time you load a web page. For example, if you are redirected to another web page from the Website you are already logged in to and then return to the Website, it will not recognize you and you must log in again.
d) Statistics and analysis. For instance, we use cookie to count the number of visitors of the Website and to learn about sources of your visiting.
e) Security. We use cookie to secure the operation of the Website.
Third parties may set their cookies on our Website, like Google and Baidu. They use these cookies to receive IP, your configuration information about your browser and your access on our Website, but do not collect your personal identity information. You can learn more about how these third parties use cookies by visiting their sites.
You can manage or delete cookies based on your own preferences. For details, visit AboutCookies.org (https://www.aboutcookies.org/). You can clear all the cookies stored on your computer, and most web browsers provide the option of blocking cookies. However, by doing so, you have to change the user settings every time you visit our Website. Find out how to manage cookie settings for your browser here:
4. How Huawei Cloud Protects Your Personal Data
We take personal data security seriously. We will take appropriate physical, organizational, and technical measures to protect your personal data against unauthorized access, disclosure, use, modification, damage or loss. For example, we use encryption to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious data attacks; we deploy access control mechanisms to ensure that only authorized personnel can access personal data; and we raise awareness among employees about the importance of protecting personal data through security and privacy protection training sessions. While we take the utmost care to protect your personal data, please note that no security measures are completely infallible. You can find more details of our security compliance at Huawei Cloud Security (https://www.huaweicloud.com/intl/securecenter/overallsafety.html).
We will retain your personal data for no longer than is necessary for the purposes stated in this Statement, unless otherwise extending the retention period is required by laws or requested by you. The data storage period may vary with scenario, product, and service. The standards we use to determine the retention period are as follows: the time required to retain personal data to fulfill business purposes, including providing products and services; maintaining corresponding transaction and business records as required by laws; ensuring the security of systems, products, and services; handling possible user queries or complaints and locating problems; whether the user agrees to a longer retention period; and whether the laws, contracts, and other equivalencies have special requirements for data retention; etc. We will maintain your account information as long as your account is necessary for service provision. You can choose to deregister your account. After you deregister your account, we will stop providing you with products and services through your account and delete your relevant personal data, provided that deletion is not otherwise stipulated by special legal requirements.
Although we protect your personal data, you are responsible for safekeeping your data including accounts and passwords.
If you find your account or password is used by others without your permission to log in to this Website, please notify us of this case promptly. You have the right to request us to suspend any unauthorized use of your account or password.
In case of any data breaches we found on your personal data we collected, stored and processed, we may inform you and/or the competent authority through publishing an announcement on Huawei Cloud website, sending you an email or other reasonable means according to the requirements of applicable laws and/or from competent authority. If your personal information is leaked due to reasons attributable to us, we will make reasonable efforts to notify you in a timely manner after confirming the consequence and root causes of the data breach.
5. How to Access or Control Your Personal Data
It is your responsibility to ensure that all personal data submitted to us is correct. We are dedicated to maintaining the accuracy and completeness of personal data and keeping the data up-to-date.
Subject to applicable laws and regulations, you may: (1) have the right to access any personal data about you that we hold; (2) request us to update or correct your data; (3) ask us to remove your data; (4) refuse or restrict us to process your data; and (5) obtain copies of your personal data. If you need our assistance to exercise the rights above, please contact us through ”10. How to Contact Huawei Cloud”. Generally, we will respond to you within one month, unless otherwise required by applicable laws. Considering the complex of your request, the period may be extended by two months, and we will inform you the reason within one month when we receive your request. Please note that under some circumstances, including without limitation where your identity cannot be verified, or your claim is beyond the scope of rights, or other circumstances under laws and regulations, your requests may be refused. We may inform you in writing through the email mentioned in “10. How to Contact Huawei Cloud” that your request is refused together with the reason. Where you find any breach of this Statement, you can also raise a concern or lodge a complaint with a data protection authority or other officials with jurisdiction.
Here are some instructions for you to control your personal data collected by us:
a) Account information: If you want to add or update personal data related to your account, please go to the Website and follow steps: Log in>My Account.
b) Cookies: Regarding the management of Cookies, please refer to Section 3. How Huawei Cloud Uses Cookies.
c) Message: Please go to the Website and follow steps: Log in>My Account> mail box on the upper right corner>Message Receiving Management.
6. How Huawei Cloud Handles Personal Data of Children
Our products, websites, and services are primarily intended for adults. Children are not allowed to create their own user account without the consent of parents or guardians. Where a child's personal data is collected with parental consent, we will only use or disclose this data if applicable laws and regulations permit it, if explicit permission is given by parents or guardians, or if it is necessary to protect the child.
If children provide us with their personal data without their parental consent, the parents or guardians can contact us to stop the collection, use, or disclose of their personal data.
If we learn that it has collected a child's personal data without first obtaining verifiable parental consent, we will take steps to delete the data within the shortest possible time period.
7. Third Party Providers and Their Services
To improve your service experience, you may be served content or web links from third parties other than us. We do not have control over such third parties. You can choose whether to access or use links, content, products, and services offered by third parties.
We have no control over the privacy and data protection policies of third parties, which are not governed by this Statement. Before submitting your personal data to third parties, please refer to their respective privacy protection policies.
8. How Your Personal Data Is Transferred Internationally
In order to provide services to you, we store your personal data in countries/regions where Huawei Cloud, Huawei Cloud associated companies, or Huawei Cloud’s service providers or subcontractors are located. This means your personal data may be transferred to countries or regions where you are located, or jurisdictions which are outside the places where we collect your personal data, and be accessed and stored in the jurisdictions. These jurisdictions may have different data protection laws. In such cases, we will ensure that an adequate level of protection is afforded to your data as required by applicable laws and regulations where the data is located, as well as this Statement.
9. How This Statement Is Updated
We may update or modify this Statement from time to time according to changes of our services or data processing. If we update this Statement, we will publish the latest version of the privacy statement on this Website, and it will take effect immediately upon its release. You are advised to review this Statement periodically for any changes. If we make any substantial changes to this Statement (any change of personal data we collect or we use for), we may notify you through appropriate channels and obtain your prior consent.
10. How to Contact Huawei Cloud
If you want to contact us, please contact us in the following way: hws_security@huawei.com.