GDPR Supplement (EU Data Protection Addendum)
This GDPR Supplement applies to individuals located in the European Economic Area (EEA), the United Kingdom, and Switzerland, and forms part of our Privacy Policy.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the data controller is:
🗺️ #2 Pu Chang Lu Road, Pukou District, Nanjing, Jiangsu, China, 211800
2. Legal Bases for Processing
We process personal data in accordance with Article 6 of the GDPR, based on one or more of the following legal grounds:
- Contractual necessity (e.g. responding to inquiries, providing quotations, fulfilling orders)
- Legitimate interests (e.g. business communication, customer relationship management, fraud prevention)
- Legal obligations (e.g. customs, tax, accounting, export compliance requirements)
- Consent, where applicable (e.g. optional marketing communications)
3. Categories of Personal Data
The categories of personal data we may process include:
- Business contact information (name, company, job title, email, phone number)
- Company and transaction-related information
- Technical data (IP address, browser type, access logs)
We do not intentionally collect special categories of personal data as defined in Article 9 of the GDPR.
4. Data Retention
Personal data is retained only for as long as necessary to:
- Fulfill business and contractual obligations
- Comply with legal and regulatory requirements
- Resolve disputes and enforce agreements
Retention periods may vary depending on applicable laws and business needs.
5. International Data Transfers
As an international trading company, your personal data may be transferred to and processed in countries outside the EEA.
Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other lawful transfer mechanisms recognized under the GDPR
6. Data Subject Rights
Under the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
To exercise these rights, please contact us using the details provided above.
7. Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
8. Complaints
You have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or where an alleged infringement of the GDPR has occurred.
9. Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals, as defined under Article 22 of the GDPR.
10. Contact
For GDPR-related questions or requests, please contact:
