ABB Smart Engineering Privacy Policy

ABB智慧工程隐私政策

更新日期：2023年8月29日

At ABB, respecting your data privacy rights is a top priority. This policy explains why and how we collect personal data about you, how we process such data, and what rights you have regarding your personal data.

在ABB，我们的首要任务是尊重您的数据隐私权。本政策解释了我们收集您个人数据的原因和方式，我们如何处理这些数据，以及您对您的个人数据拥有的权利。

Who controls your personal data

谁控制您的个人数据

ABB is responsible for your personal data. ABB refers to ABB Xiamen Smart Technology Co., Ltd. For the purposes of applicable data protection law, ABB Xiamen Smart Technology Co., Ltd. will be the controller of your data, as the entity providing the ABB BuildingPlus platform.

ABB对您的个人数据负责。ABB是指ABB （中国）有限公司，地址为：北京市朝阳区酒仙桥路10号恒通广厦。根据适用的数据保护法，作为提供ABB 智慧社区平台的实体，ABB （中国）有限公司将是您的数据的控制者。

Other subsidiary companies of ABB as listed in the Section “Parties we share your personal data with (in and outside the EU and EEA or outside the country where the ABB company that controls your data is located)” may also receive and process your personal data, either in the capacity of controller or processor and this Notice applies equally to them.

“我们与（欧盟和欧洲经济区内外或控制您的数据的ABB公司所在国以外）共享您的个人数据的各方”一节中列出的ABB的其他子公司也可能以控制者或处理者的身份接收和处理您的个人数据，本通知同样适用于他们。

The personal data we collect about you and how we get it

我们收集的关于您的个人数据以及我们如何获取这些数据

In order to facilitate the process, also including the account creation procedure the following categories of personal data are provided to ABB and stored on ABB Infrastructure with standard process:

为了促进该过程，还包括账户创建程序，以下类别的个人数据被提供给ABB，并以标准流程存储在ABB基础设施上：

• Nickname
• 昵称
• Personal Mobile Number
• 个人手机号码
• Email address
• 电子邮件地址
• Profile photo
• 个人资料照片
• Geolocation information
• 地理位置信息
• IP address and Device identifier
• IP地址和设备标识符

What we use your personal data for

我们使用您的个人数据的目的

• We use your personal data to:
• 我们使用您的个人数据：
• provide and administer ABB BuildingPlus Platform
• 提供和管理ABB 智慧社区平台
• create and manage your APP account or portal account
• 创建和管理应用程序帐户或门户帐户
• provide a better user experience when you use our applications and services
• 在您使用我们的应用程序和服务时提供更好的用户体验
• comply with applicable legal requirements
• 符合适用的法律要求

We only collect the personal data from you that we need for the above purposes. We may also anonymize your personal data, so it no longer identifies you and use it for various purposes, including the improvement of our services and testing our IT systems.

我们只针对上述目的收集您的个人数据。我们还可能对您的个人数据进行匿名处理，因此它不再识别您和用于各种目的的身份，包括改进我们的服务和测试我们的IT系统。

The legal basis on which we use your personal data

我们使用您个人数据的法律依据

We follow the principles of lawfulness, legitimacy, necessity, and good faith to process your personal data, and we use your personal data for the purposes described in this Notice based on one of the following legal bases, as applicable:

我们遵循合法、正当、必要和诚信的原则来处理您的个人信息，并且基于以下任何适用的合法基础，为本通知中所述之目的使用您的个人信息：

• We process your personal data on the basis of legal requirements, to fulfill our legal obligations resulting from the Personal Information Protection Law of the People's Republic of China and the regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and other legal acts relevant for the company, to which the request has been submitted, as well as legal obligations associated with the provision of services or which we are required by law to collect and process (mainly based on PRC applicable laws and regulations).
• 我们依据法律要求对您的个人信息进行处理，以履行《中华人民共和国个人信息保护法》、和欧洲议会和委员会于2016年4月27日关于在个人信息处理和该等资料自由移动方面保护自然人的法规2016/679、以及撤销指令95/46/EC（《通用数据保护条例》）和其他与公司（向该公司提交请求）相关的法律中产生的法律义务，以及与提供服务有关的或者法律要求我们对个人信息进行收集和处理的法律义务（主要基于适用的中华人民共和国法律法规）。
• We primarily collect and process your personal data to fulfil and perform our services provided to you. As part of our services, we need to process your personal data which are required by us to perform the services.
• 我们收集并处理您的个人信息，主要以履行和执行我们为您提供的服务。作为我们的服务的一部分，我们需要处理对我们进行服务所要求的您的个人信息。
• Your consent: we may occasionally ask you for specific and separate permission to process some of your personal data (in particular, the sensitive personal data) if other legal bases are not applicable, and we will only process your personal information in this way if you agree for us doing so.
• 您的同意：如果其他法律依据不适用，我们可能会偶尔向您请求特定和单独同意，来对您的一些个人信息进行处理（尤其是敏感个人信息），并且我们将只按照您同意的方式对您的个人信息进行处理。

How we share your personal data

我们如何共享您的个人数据

We only share your personal data with other ABB affiliates or third parties as necessary for the purposes described in this notice:

出于本通知所述目的，我们仅在必要时与其他ABB附属公司或第三方共享您的个人数据：

• ABB affiliates and subsidiaries (see the list of ABB subsidiaries), for the purposes described in this privacy notice. EU Model Clauses are in place to protect your personal data;
• ABB附属公司和子公司（参见ABB子公司列表），用于本隐私声明中描述的目的。欧盟示范条款旨在保护您的个人数据；
• ABB business partners, distributors, and agents located in EU and non-EU, for the purposes described in this privacy notice. EU Model Clauses are in place to protect your personal data;
• 出于本隐私声明所述目的，ABB在欧盟和非欧盟的业务合作伙伴、分销商和代理商。欧盟示范条款旨在保护您的个人数据；
• Potential or actual acquirers of ABB businesses or assets for the evaluation of the business or assets in question or for the purposes described in this privacy notice. EU Model Clauses and commercial contracts ensuring your data is only used to evaluate ABB’s business or assets or for the purposes described herein;
• ABB业务或资产的潜在或实际收购方，用于评估相关业务或资产，或用于本隐私声明中所述的目的。欧盟示范条款和商业合同，确保您的数据仅用于评估ABB的业务或资产或用于本文所述目的；
• Recipients as required by applicable law or legal process, to law enforcement or government authorities, etc. where required by applicable law or a legitimate request by government authorities, or a valid legal requirement. We will ensure, to the extent possible, that adequate protection is provided for your data when it is transferred out of the EU in these circumstances.
• 适用法律或法律程序要求的接收人，适用法律或政府当局的合法要求或有效法律要求所要求的执法或政府当局等。我们应尽可能确保在这些情况下将您的数据从欧盟转移出去时为其提供充分的保护。

Where we share your personal data with an affiliate or third party so that it is transferred to or becomes accessible from outside the European Union (“EU”) and the European Economic Area ("EEA") or outside the country where the ABB company that controls your data is located, we always put adequate safeguards in place to protect your personal data. Examples of these safeguards are an adequacy decision of the European Commission (read more here), Standard Contractual Clauses (read more here) and the Binding Corporate Rules that some of our suppliers have adopted (read more here). We have taken additional measures for the transfer of data from within to outside the EU, EEA and outside the country where the ABB company that controls your data is located to protect your personal data. If you would like an overview of the safeguards which are in place, please submit a request at www.abb.com/privacy.

如果我们与附属公司或第三方共享您的个人数据，以便将其传输至欧盟（“EU”）和欧洲经济区（“EEA”）以外的国家或控制您的数据的ABB公司所在国以外的国家，或从这些国家或地区获取这些数据，我们将始终采取适当的保护措施对您的个人信息进行保护。这些保障措施的例子包括欧盟委员会的充分性决定（在此处阅读更多）、标准合同条款（在此处查看更多）以及我们的一些供应商已经采用的具有约束力的公司规则（在这里阅读更多）。我们已采取额外措施，将数据从欧盟、欧洲经济区和控制您数据的ABB公司所在国的内部传输到外部，以保护您的个人数据。如果您想了解现有保障措施的概况，请访问www.abb.com/privacy提交请求。

Mobile function

移动权限功能

在您使用ABB智慧工程应用程序的过程中，APP可能会需要申请使用以下手机系统功能权限 ：

In the process of using ABB smart engineering applications, APP may need to apply for the following mobile phone system function permissions:

(1) 相机及相册功能：

Camera and album functions:

为了方便您快速扫描设备二维码绑定设备和设置头像，App需要通过手机相机进行拍照。

The App shall take photos through the mobile camera to facilitate you to quickly scan the QR code of the device, bind the device, and set the avatar.

(2) 获取应用列表 - 仅Android:

Acquire APP list - Android only:

为了方便您能够快速进入不同的手机品牌应用市场进行APP 更新，我们需要获取应用列表。此列表仅用于APP升级跳转至相应品牌的应用商城APP。

We shall obtain the App list to facilitate your quick access to different mobile phone brand application markets for App updates. This list is only used for upgrading the App and jump to the App store of the corresponding brand.

(3) 文件读写功能 - 仅Android:

File read/write function - Android only:

为了让您可以使用头像上传等相关功能，我们需要调用您设备的文件读写权限。

We shall call the file read/write permission of your device to enable you to use related functions, such as avatar upload.

(4）获取设备标识符（Android ID）

Acquire device identifier (Android ID)

用于用户账户登录功能。

It is used for user account login function.

当您使用ABB智慧工程应用程序中的智能家居功能时：

When you use the smart home function in ABB Smart Engineering Application:

当您在ABB智慧工程应用程序进行智能设备连接时，我们将收集您的登录账号信息、手机相关信息、连接的智能设备信息以及房间设置信息，具体如下：

We will collect your login account information, mobile phone related information, connected smart device information and room setting information when you connect smart devices in ABB smart engineering applications, as follows:

• 登录账号信息：ABB智慧工程应用程序账号、个人电话号码
• Login account information: ABB smart engineering application account, personal phone number
• 手机相关信息：硬件设备标识(imsi、imei、meid、设备硬件序列号、SIM 卡标识、OAID、Mac 地址、Android ID)、IP地址、Cookies、证书、手机型号、系统版本信息、系统语言、手机所设置的国家或地区、应用商店的版本号、手机屏幕尺寸及分辨率、CPU 及显示设备相关信息
• Mobile phone related information: hardware device identification (imsi, imei, meid, device hardware serial number, SIM card identification, OAID, Mac address, and Android ID), IP address, Cookies, certificate, mobile phone model, system version information, system language, country or region where the mobile phone is set, version number of the App store, mobile phone screen size and resolution, CPU and display device related information
• 通过 Wi-Fi 连接/LAN连接的智能设备：Wi-Fi信息（SSID、BSSID、 Wi-Fi 的 Mac 地址）、设备 Mac 地址、设备 ID
• Smart devices connected via Wi-Fi connection/LAN: Wi-Fi information (SSID, BSSID, Mac address of Wi-Fi), device Mac address, and device ID
• 通过蓝牙连接的智能设备：设备蓝牙 Mac 地址、设备 ID
• Smart devices connected via Bluetooth: device Bluetooth Mac address, device ID
• 通过 Zig-bee 方式连接的智能设备：设备 Mac 地址、设备 ID
• Smart devices connected through Zig bee: device Mac address, and device ID
• 家庭/房间设置信息：当您选择将智能设备按照家庭/房间设置进行命名（例如父母的家、客厅的开关），那么我们将收集您提供的智能设备的家庭/房间设置信息。家庭/房间设置信息是完全可选的，您也可以选择不按照家庭/房间设置进行命名，这不会影响您使用我们的服务。
• Home/room setting information: we will collect the home/room setting information of the intelligent device you provide when you choose to name the intelligent device according to the home/room settings (such as the switch of parents' home and living room). The family/room setting information is completely optional. You can also choose not to name it according to the family/room setting, which will not affect your use of our service.

第三方SDK使用说明

Third-party SDK Instructions

在某些特定使用场景下，我们可能会使用具有相应业务资质及能力的第三方服务商提供的软件服务工具包(简称“SDK”)或其他类似的应用程序来为您提供服务，由第三方服务商收集您的必要信息。我们将审慎对这些合作方的安全保障能力进行综合评估，并要求其遵循合作法律协议。我们会对合作方获取信息的软件工具开发包(SDK)、应用程序接口(API) 进行严格的安全监测，以保护信息安全。涉及嵌入第三方 SDK 情形逐项列举如下：

In some specific use scenarios, we may use software service kits ("SDKs") or other similar applications provided by third-party service providers with corresponding business qualifications and capabilities to provide services for you, and the third-party service providers will collect your necessary information. We will carefully conduct a comprehensive assessment of the security capabilities of these partners and require them to comply with the cooperation legal agreement. We will strictly monitor the security of software tool development kits (SDKs) and application program interfaces (APIs) that partners obtain information to protect information security. The situations involving embedded third-party SDK are listed as follows:

（1）百度地图

Baidu Maps

SDK名称:百度地图

SDK Name: Baidu Maps

使用目的:获取设备位置，向用户展示最近的小区列表

Purpose: to obtain the device location and display the nearest cell list to the user

使用场景:用户申请钥匙时，展示最近的小区列表

Usage Scenario: when a user applies for a key, the nearest cell list is displayed

数据类型: 位置信息

Data Type: Location Information

所属机构:北京百度网讯科技有限公司

Affiliated institution: Beijing Baidu Netcom Science and Technology Co., Ltd.

官网链接:https://lbsyun.baidu.com/

Official Website: https://lbsyun.baidu.com/

（2）涂鸦SDK

Tuya SDK

SDK名称：涂鸦SDK 列表

SDK Name: Tuya SDK List

使用目的：实现智能家居设备配置

Purpose: to achieve smart home device configuration

使用场景： 实现智能家居设备配网操作

Usage Scenario: realize the operation of smart home equipment distribution network

数据类型：位置信息、网路信息、移动设备信息、智能设备信息、智能设备相关信息

Data Type: location information, network information, mobile device information, intelligent device information, and intelligent device related information

所属机构：杭州涂鸦信息技术有限公司

Affiliated Institution: Hangzhou Tuya Information Technology Co., Ltd

官网链接:https://www.tuya.com

Official Website: https://www.tuya.com

账户管理

Account Management

账户注册：用户可通过上一级账户为其创建账户，在创建账户过程中，需要核验账户所有者手机，以确保该账户是应账户所有人需求创建。首次登录，用户需要修改密码，以确保账户的安全性。

Account registration: users can create accounts for them through a higher-level account. The account owner's mobile phone needs to be checked to ensure that the account is created as required by the account owner during the account creation process. For the first login, the user needs to change the password to ensure the security of the account.

账户注销：当用户确认不再使用ABB 智慧社区平台所提供的服务时，可联系上一级账户为其注销账户。施工员可在ABB 智慧工程应用中点击账户注销按钮获取账号注销途径。 您亦可直接联系ABB 为您注销账户。

Account cancellation: The user can contact the higher-level account to cancel his/her account while confirming that he/she no longer uses the services provided by the ABB smart community platform. Constructors can click the account cancellation button in the ABB smart engineering application to obtain the account cancellation method. You can also contact ABB directly to cancel your account.

How long we keep your personal data

我们保留您的个人数据多长时间

We will only retain your personal data obtained via the application as long as our legitimate interest or your consent remains valid. In general, although there may be limited exceptions due to local legal requirements (such as tax or commercial law), we will keep your personal data collected in application and used for process for a period of up to 3 years after your last use of ABB BuildingPlus platform service. After this time, we will securely delete your personal data. If necessary to meet legal or regulatory requirements and/or resolve disputes, we may keep some of your personal data after this time.

只要我们的合法权益或您的同意仍然有效，我们将仅保留您通过应用程序获得的个人数据。通常，尽管由于当地法律要求（如税法或商法），可能有受限的例外情况，但我们将在您最后一次使用ABB 智慧社区平台服务后的3年内，将您的个人数据保存在应用程序中并用于处理。在此之后，我们将安全删除您的个人数据。如果需要满足法律或法规要求和/或解决争议，我们可能会在这段时间后保留您的部分个人数据。

Your data privacy rights

您的数据隐私权

Depending on the jurisdiction in which you are located and in which your personal data is processed, you may have the following rights:

根据您所在的司法管辖区和处理您个人数据的司法管辖权，您可拥有以下权利：

• The right of data access: You have a right to obtain a copy of the personal data we hold about you, subject to certain exceptions.
• 数据访问权：您有权获得我们持有的关于您的个人数据的副本，但某些例外情况除外。
• The right of data rectification: You always have a right to ask for immediate correction of inaccurate or incomplete personal data.
• 数据更正权：您始终有权要求立即更正不准确或不完整的个人数据。
• The right of data erasure: You have the right to request that personal data be erased when it is no longer needed, where applicable law obliges us to delete the data or the processing of it is unlawful. You may also ask us to erase personal data where you have withdrawn your consent or objected to the data processing. However, this is not a general right to data erasure – there are exceptions.
• 数据删除权：如果适用法律要求我们删除数据或处理数据是非法的，您有权要求在不再需要时删除个人数据。您也可以要求我们删除您撤回同意或反对数据处理的个人数据。然而，这不是数据消除的一般权利 – 也有例外。
• The right to restrict data processing: You have the right to restrict the processing of your personal data in specific circumstances. Where that is the case, we may still store your information, but not use it further.
• 限制数据处理的权利：您有权在特定情况下限制处理您的个人数据。在这种情况下，我们仍可能存储您的信息，但不会进一步使用。
• The right to data portability: You have the right to receive your personal data in a structured, machine-readable format for your own purposes, or to request us to share it with a third party.
• 数据可移植性权利：您有权出于自己的目的以结构化、机器可读格式接收您的个人数据，或要求我们与第三方共享。
• The right to object to the data processing: You have the right to object to our processing of your personal data based on the legitimate interests, where your data privacy rights outweigh our reasoning for legitimate interests.
• 反对数据处理的权利：如果您的数据隐私权超过了我们对合法利益的推理，您有权反对我们基于合法利益处理您的个人数据。
• The right to withdraw consent: Where ABB has asked for your consent to process personal data, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• 撤回同意的权利：如果ABB要求您同意处理个人数据，您可以随时撤回您的同意。撤回同意不会影响撤回前基于同意的处理的合法性。

Please note that the rights described above are not absolute, and that your request cannot always be met entirely. For example, sometimes we cannot delete or restrict the processing of your personal data as we may have legal obligations or contractual obligations to keep certain such personal data.

请注意，上述权利不是绝对的，无法一直满足您的要求。例如，有时我们无法删除或限制处理您的个人数据，因为我们可能有法律义务或合同义务保留某些此类个人数据。

You may request to enforce your data privacy rights by contacting at support.cndex@cn.abb.com.

您可以通过以下方式请求强制执行您的数据隐私权：support.cndex@cn.abb.com。

Update of Policy

隐私政策的更新

We are continually working to improve our products, services, and technology to bring you a better experience with our products and services. As new services and business processes change, we may update our privacy policy to inform you of specific changes. We will not limit your rights under this policy without your express consent. We will post any changes to this policy on a dedicated page.

为给您带来更好的产品和服务体验，我们持续努力改进我们的产品、服务及技术。在新的服务及业务流程变更时，我们可能会更新我们的隐私政策以告知您具体的变化。但未经您明确同意，我们不会限制您按照本政策所享有的权利。我们会在专门页面上发布对本政策所做的任何变更。

We will also provide more prominent notice of significant changes (including notice through our BuildingPlus client posting or by providing you with a pop-up alert).

对于重大变更，我们还会提供更为显著的通知（包括我们会通过ABB 智慧社区平台客户端公示的方式进行通知或向您提供弹窗提示）。

Significant changes within the meaning of this policy include but are not limited to.

本政策所指的重大变更包括但不限于：

• Significant changes in the business model of the product. Such as the purpose of handling personal information, the type of personal information held, and the way personal information is used.
• 产品的业务模式发生重大变化。如处理个人信息的目的、处理的个人信息类型、个人信息的使用方式；
• Changes in the subject of privacy policy caused by business restructuring, transaction mergers and acquisitions, and changes in the original processing purposes and processing methods by the new subject recipient.
• 业务调整、交易并购引起的隐私政策的主体变更，新主体接收方变更原先的处理目的、处理方式；
• Changes in the primary recipients of personal information sharing or public disclosure.
• 个人信息共享或公开披露的主要对象发生变化；
• Significant changes in the rights of users to personal information and the manner in which they are exercised.
• 用户个人信息权利及其行使方式发生重大变化；
• Changes in the contact information and complaint channel of the person in charge of handling personal information protection.
• 处理个人信息保护负责人的联络方式及投诉渠道发生变化时；
• When the personal information protection impact assessment report indicates the existence of products that have a significant impact on the rights and interests of individuals.
• 个人信息保护影响评估报告表明产品存在对个人权益有重大影响时。

Contact and further information

联系方式和更多信息

If you have any questions about how we use your personal data or wish to make a complaint about how we handle it, you may contact us at support.cndex@cn.abb.com. We will reply to your inquiries or complaint within 15 working days of receipt.

如果您对我们如何使用您的个人数据有任何疑问，或希望投诉我们如何处理，您可以通过support.cndex@cn.abb.com联系。 我们将在收到您的询问或投诉后15个工作日内回复。