1.Personal Data
Personal data refers to information that can identify an individual when used alone or in combination with other information. Such data shall be provided by you when you use our websites, products or services and interact with us, or obtained by us through recording your interaction with our websites, products or services (e.g., via technologies like Cookies). The data we collect depends on the websites you visit or the products and services you use, which may include personal data such as name, address, email address and telephone number. We collect personal data for the purpose of contacting you to provide relevant services or send important notifications.
2.Privacy Policy
Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. and its global affiliates (hereinafter referred to as "NKF") fully recognize the importance of personal data to customers and users. Therefore, Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. attaches great importance to the protection of customers' and users' personal data, and has adopted a series of measures to ensure that relevant businesses comply with applicable personal data protection requirements (e.g., GDPR).
2.1 To effectively implement personal data protection requirements, Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. has taken a series of measures.
2.2 Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. adopts industry-recognized personal data protection methods and practices. For business scenarios subject to GDPR, we adopt Data Protection Impact Assessment (DPIA) to evaluate and mitigate personal data security risks in products and services.
2.2.1 We require full assessment of personal data involved in products and services, and DPIA must be conducted for all projects involving personal data;
2.2.2 Data inventories and data flow diagrams must be established for projects involving personal data;
2.2.3 Potential risks throughout the data processing process (including collection, use, storage, sharing, deletion, etc.) must be identified for projects involving personal data, and corresponding measures (administrative, physical and technical measures) shall be taken based on risk levels;
2.2.4 A corresponding report must be issued upon completion of DPIA.
2.3 Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. has implemented technical measures including intrusion detection, access control, encryption, data loss prevention, anti-spam, endpoint security protection and vulnerability scanning, and verifies the effectiveness of personal data protection measures through penetration testing.
2.4 Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. has established an emergency response mechanism for personal data breaches. In the event of a personal data breach, we will immediately activate the emergency response process, strive to minimize potential losses caused by the breach and ensure that affected individuals are duly notified.
2.5 Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. has established a continuous employee privacy policy training mechanism to ensure that every employee involved in GDPR accurately understands data protection legal principles based on their specific job responsibilities and strictly implements the company's applicable systems and processes.
2.6 To ensure compliance, Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. conducts necessary technical and process audits on personal data protection.
Personal data protection is not only a legal requirement but also a corporate social responsibility. Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. will continuously optimize products and services to ensure security and privacy, and reduce personal data protection risks for customers and users.
3.Policy Updates
Nanjing King-Friend Biochemical Pharmaceutical Co., Ltd. reserves the right to update or modify this Policy from time to time. In case of any changes to this Policy, the latest version will be posted here. If we make material changes to the Privacy Policy, we may also notify you of such changes through various channels, such as posting a notice on our website or sending you a separate notification.