Privacy Policy

Update Date: January 3,2023

Effective Date: January 3,2023

With the following data protection policy, we would like to inform you about the types of your personal data we process, for what purposes and to what extent. The data protection policy applies to all processing of personal data carried out by us, both as part of the provision of our services and, in particular, on our websites and in mobile applications.

The following provisions apply to all users within the EU as well as the United Kingdom.

Controller

The Controller is the responsible person in terms of data protection and responsible for the adequate processing of the data. The details of the Controller are as follows: Zhejiang Haisu Information Technology Service Co., Ltd
No. 57 Jintong Road, Binhai Industrial Park,
Xiangshan, Ningbo, Zhejiang, 315712, P.R.China
Email: solarenergybccotizaciones@gmail.com

Zhejiang Haisu Information Technology Service Co., Ltd We value the protection of users' personal data.

When you use Haisu

services, we may collect and use your personal data. This Privacy Policy notice explains to you how we collect, use, share, store and protect your personal data. By using or continuing to use Sea

Speed’s monitoring services, you agree to our collection, storage, routine updates, use and sharing of your personal data in accordance with this policy.This policy will help you understand the following:

Content

1.Our Statement

2.Scope of application of this policy

3.How we collect and use your personal data

4.How we use cookies and similar, plugins, embedded features and similar technologies

5.How we share, transfer and publicly disclose your personal data

6.How we store your personal data

7.How we protect your personal data

8.How you manage your personal data

9.Your Rights

10.Terms of Use for Minors

11.Privacy Policy Amendments and Notices

12.Contact Us

1. Our Statement

Haisu appreciates the opportunity to provide you with products and services. Earning and maintaining your trust in us has always been our mission since Haisu was founded. We are committed to respecting and protecting the privacy and personal data you provide, and hope that you can understand our privacy protection policy, including how to collect, use and disclose your personal data.

We designate a dedicated team to manage your personal data protection, including systems, dispute resolution, training, liaison, etc., and report privacy protection-related matters directly to the board of directors and the general manager.

2. Scope of application of this policy

This policy applies to all functions and services of Solar Energy Cloud APP and Solar Energy Cloud website(solarenergycloud.com). Other Haisu products and services will use

the privacy policy of the relevant product or service.

3. How we collect and use your personal data

When registering for your monitoring account we will ask for consent and show our privacy policy. With that specific consent, Solar Energy Cloud will only collect and use your personal data for the following:

3.1 When you register for an account, the information we may collect includes: username, organization name, phone number, and email address. The above information is collected to help you create an account.

3.2 When you use the power station monitoring function, we will collect the information about the power station you add, including: power station name, power station type, power station status, power station location, power installed, real time power, yield today and fault data (e.g. alarm name, device name, occurrence time, report data), so that you can manage and monitor the power station.

3.3 When a version update is detected, we will read your application installation list to detect whether the corresponding application store is installed on your mobile phone is outdated or not.

3.4 When you use the functions and services we provide, we will collect your operations within the platform, location clicks and other information as relevant weblogs for the purpose of data security. This helps to improve our website and error analysis, etc. This includes your device information such as operating system, device model, device manufacturer, system version, Android ID, account information, date and time of access and IP address.

Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further storage is required for evidentiary purposes is excluded from deletion until final clarification of the respective incident.

3.5 Additional Features:

GPS location permissions adds additional features. You can create a power station and a power station map after enabling the location permission, requiring you to provide the location data of the power station before using it, or the location data of your mobile device when creating the power station. We will do so as necessary to safeguard our legitimate interests (Article 6 (1)(f) GDPR), or to provide you with our services (Article 6(1)(b) GDPR).

Camera and album permissions adds additional features. You can use this function after enabling the camera and album permissions to scan QR codes, upload avatars, upload plant pictures, etc.

Bluetooth permission adds additional features. You can perform near-end debugging of the device through Bluetooth after enabling the Bluetooth permission.

Permission to delete and create files in SD card. You can enable the file download function after you open the permission to delete and create files in the SD card.

When you enable the above permissions, you authorize us to access your mobile phone and the corresponding personal information to achieve the above functions. If you close the corresponding permissions, you cancel the corresponding authorization. We will not continue to collect and use your corresponding personal information, nor will we be able to provide you corresponding functions. The data that was collected before cancelling will remain within our system unless specifically requested to remove.

4. How we use cookies, plugins, embedded features and similar technologies

4.1 Cookies are small text files or other memory tags that store information on end devices and read information from the end devices. For example, to store the login status in a user account, a shopping cart content in an e-shop, the content accessed or functions used of an online offer. Cookies can further be used for various purposes, e.g. for purposes of functionality, security and comfort of online offers as well as the creation of analyses of visitor flows.

Notes on consent:

We use cookies in accordance with legal requirements. Therefore, we obtain prior consent from users except where it is not required by law. In particular, consent is not required if the storage and reading of information, including cookies, is absolutely necessary to provide the user with a telemedia service (i.e., our online offering) that they have expressly requested. The revocable consent is clearly communicated to the users and contains the information on the respective cookie use.

Notes on legal bases under data protection law:

the legal basis under data protection law on which we process users' personal data using cookies depends on whether we ask users for consent. If users consent, the legal basis for processing their data is their declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in a business operation of our online offer and improvement of its usability) or, if this is done in the context of the fulfilment of our contractual obligations, if the use of cookies is necessary to fulfil our contractual obligations. For what purposes the cookies are processed by us, we clarify in the course of this privacy policy or in the context of our consent and processing procedures.

Storage duration:

With regard to the storage duration, the following types of cookies are distinguished:

(1) Temporary cookies (also: session cookies): temporary cookies are deleted at the latest after a user has left an online offer and closed his end device (e.g. browser or mobile application).

(2) Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, user data collected with the help of cookies can be used for reach measurement. Unless we provide users with explicit information about the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.

General information on revocation and objection (opt-out): Users can revoke the consent they have given at any time and also file an objection to processing in accordance with the legal requirements in Art. 21 GDPR (further information on objection is provided as part of this privacy policy). Users can also declare their objection using the settings of their browser.

4.2 Content-Delivery-Network: We use a "content delivery network" (CDN). A CDN is a service with the help of which the content of an online offer, in particular large media files such as graphics or program scripts, can be delivered more quickly and securely with the help of regionally distributed servers connected via the Internet.

4.3Plugins and embedded functions and content: We incorporate into our online offering functional and content elements that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, graphics, videos or city maps (hereinafter uniformly referred to as "content").

The integration always requires that the third-party providers of this content process the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content or functionality. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer as well as be linked to such information from other sources.

Notes on legal basis: If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is the users' consent. Otherwise, users' data is processed on the basis of our legitimate interests (i.e. interest in efficient, economic and recipient-friendly services).

Further notes on processing processes, procedures and services:

Google Maps APIs and SDKs: interfaces to Google's map and location services that allow, for example, supplementing address entries, location determinations, distance calculations or provision of supplementary information on locations and other places; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://cloud.google.com/maps-platform; privacy policy: https://policies.google.com/privacy.

5. How we share, transfer and publicly disclose your personal data

5.1 Information Sharing

We will not share your personal data with third parties except in the following cases:

(1)Sharing with express consent: We share your personal data with other parties with your express consent.

(2)Sharing under statutory circumstances: We may share your personal data externally in accordance with laws and regulations, or the mandatory requirements of government authorities.

(3)Sharing with authorized partners: We may share your personal data with third-party service providers (as our data processors) as to provide you with Solar Energy Cloud services and information technology and maintenance support, or to improve our products and services. We will not share your personal personal data with third parties for any marketing purposes. These support services include push services and map services.

(4)Share with the installer who provides services for you: we may share with the installer who provides services for your power station, but we will only share the necessary power station and equipment information well as your necessary personal data. In order to provide better aftersales service for you, the installer is also bound by the purpose stated in this policy.

5.2 Business Transfers

In the future, new situations such as mergers, acquisitions, and transfers of our business may occur. In this case, your personal data will be transferred along with the business as part of the transaction. We will require new companies and organizations that hold your personal data to continue to be bound by this policy, otherwise we will require such companies and organizations to seek your authorization and consent again. We will carry out the above processing activities as necessary to safeguard our legitimate business interests (Article 6(1)(f) GDPR)

5.3 Disclosure to Third Parties and Transfer of Data Outside the European Economic Area

Disclosure to Third Parties and Transfer of Data Outside the European Economic Area

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities or companies, this is only done in accordance with the legal requirements.

Subject to express consent or contractually or legally required transfer, we only process or have the data processed in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en).

6. How We Store Your Personal Information

We store your personal information in accordance with laws and regulations until you delete your account/account data or you request to delete your personal data, unless otherwise required by laws and regulations.

Relevant legal bases:

(1) Consent (Article 6(1)(a) GDPR) - The data subject has given consent to the processing of personal data relating to him or her for a specific purpose or purposes.

(2) Performance of a contract and pre-contractual requests (Article 6(1)(b) GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures carried out at the data subject's request.

(3) Legal obligation (Article 6(1)(c) GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.

(4) Legitimate interests (Article 6(1)(f) GDPR) - Processing is necessary for the purposes of the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

7. How We Protect Your Personal Information

The security of your personal data is of the utmost importance to us. We will strictly abide by relevant laws and regulations, and take reasonable and feasible measures recognized by the industry to protect your personal data. We will protect information from unauthorized access, disclosure, use, modification, and avoid damage or loss of information. Solar Energy Cloud will use encryption technology, such as Transport Layer Security (TLS), to protect your personal data during transmission. When we store your personal data, we use computer systems with limited access and these systems are deployed in facilities protected by physical security measures. In addition, we will hold security and privacy protection training courses from time to time to enhance employees' awareness of the importance of protecting personal data.

8. Managing Your Personal Information

We attach great importance to the management of your personal data, and do our best to protect your rights to access, correct, delete, withdraw consent, cancel your account, and report complaints, so that you can protect your privacy and information. Due to differences in operating systems, the following operation settings may be different; in addition, in order to optimize your experience, we may also adjust the operation settings, so the following guidelines are for reference only.

8.1 Access Personal Information

You have the right to access your avatar, username, mobile phone number, email address and other basic information. In order to access this information, go to the Solar Energy Cloud app and go to “Me”- “Setting”- “Account Information”.

In order to access your information on the desktop application go to www.solarenergycloud.com URL and enter your username and password. Once you login go to the top right-hand corner and click your avatar and click “My Info”.

8.2 Correct Personal data

You have the right to correct your avatar, username, mobile phone number, email address and other basic information.

8.3 Delete Personal data

You have the right to delete your account at any time. The ability to delete your account can be found within the Account Information section previously stated in section 8.1. After deleting your account, we will stop providing you with products and services, and delete or anonymize your personal data, unless otherwise provided by laws and regulations.

8.4 Withdraw Consent

In the process of providing services, we need you to grant us some device permissions, such as notification, photo album, camera, Bluetooth and other access permissions. You can turn off some or all of the permissions at any time in the settings of your device, thereby refusing us to collect your corresponding personal data. Permissions are displayed and closed differently in different devices and systems. For details, please refer to the instructions and guidelines of the device and system developers.

9.Your Rights

In addition, as a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

9.1 Right of objection:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

9.2 Right to withdraw consent:

You have the right to revoke any consent given at any time.

9.3 Right to information:

You have the right to request confirmation as to whether data in question is being processed and to information about this data, as well as further information and a copy of the data in accordance with the legal requirements.

9.4 Right to rectification:

You have the right, in accordance with the law, to request that data concerning you be completed or that inaccurate data concerning you be rectified.

9.5 Right to erasure and restriction of processing:

In accordance with the legal requirements, you have the right to demand that data concerning you be deleted without delay, or alternatively, in accordance with the legal requirements, to demand restriction of the processing of the data.

9.6 Right to data portability:

You have the right to receive data relating to you that you have provided to us in a structured, common and machine-readable format, or to request that it be transferred to another controller, in accordance with the law.

9.7 Complaint to supervisory authority:

In accordance with the law and without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a data protection supervisory authority, in particular a supervisory authority in the Member State where you usually reside, the supervisory authority of your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

10. Terms of Use for Minors

Our services are not intended for individuals under the age of 18. We do not knowingly collect or solicit any information from anyone under the age of 18 on this service. In the event that we learn that we have inadvertently collected personal information from a child under the age of 18, we will delete that information as quickly as possible.

11. Privacy Policy Amendments and Notices

We may revise the terms of this Privacy Policy from time to time, and these revisions form part of the Privacy Policy and have the same effect as this Privacy Policy, and we will not reduce your rights under this Policy without your express consent. After this Privacy Policy is updated, we will remind you through announcement messages within the monitoring platform or email or other appropriate means so that you can keep abreast of the latest version of this Privacy Policy.

12. Contact Us

We hope to address any concerns you may have about the way we handle your information. If you have any questions about how we process your data, suggestions or about the content of the privacy policy, please contact us by email at monitoring-mail.solarenergycloud.com.

To process other requests, please go to https://www.solarenergycloud.com and find the appropriate service contact email for your region and submit a request.