Preamble

Shanghai DeltaHealth Hospital Co., Ltd. (Address: 109 Xule Road, Xujing Town, Qingpu District, Shanghai; Telephone: 4008-210-277; hereinafter referred to as “we”) places great importance on the protection of customers' (hereinafter referred to as “you”) personal information and is committed to implementing this Privacy Policy to protect the security of customers' personal information. When you use the relevant functions or services on our official website, we will collect, use, store, share, transfer, and publicly disclose your personal information within the People's Republic of China (for the purposes of this Privacy Policy, excluding Hong Kong, Macao Special Administrative Region, and Taiwan) in accordance with the relevant provisions of this Privacy Policy and other relevant legal texts.

We strive to protect the security of our users' information to prevent loss, misuse, tampering, unauthorized access or disclosure. Currently, we have passed the national cybersecurity level protection (level III) classification, filing, and annual assessment. We will do our best to protect your personal information, but please understand that no security measures can be completely invulnerable.

This Privacy Policy is closely related to your use of our services. We recommend that you carefully read and understand the entire contents of this Privacy Policy, especially ensuring that you are fully aware of and understand the meaning of the bold text and the corresponding legal consequences, and on this basis, make your own appropriate choices. We may revise this policy from time to time and display the updated content on the official website of Shanghai DeltaHealth Cardiovascular Hospital. We recommend that you review this policy before using the official website. If you continue to access or use this official website, it means that you agree to our processing of your personal information in accordance with this policy.

We adhere to the following principles when processing your personal information: the principles of legality, legitimacy, necessity, and integrity; the principles of clear purpose, reasonableness, and direct relevance; the principle of minimal necessity; the principle of openness and transparency; the principle of quality assurance; and the principle of responsibility and protection of personal information security. At the same time, we strive to use plain, concise language, and highlight terms in this Privacy Policy that are of significant relevance to your rights and interests in bold type to draw your attention to them. If you have any questions, opinions, or suggestions regarding the content of this Privacy Policy, you can contact us through the contact information stated in this Privacy Policy.

This Privacy Policy will help you understand the following：

I. How we collect and use your personal information.

II. How we use Cookie and similar technologies.

III. How we entrust the processing, share, transfer, and publicly disclose your personal information.

IV. How we store and protect your personal information.

V. Your rights.

VI. Third party liability statement.

VII. Agreement on personal information of minors.

VIII. How this Privacy Policy is updated.

IX. How to contact us.

I. How we collect and use your personal information

Personal information refers to any information recorded in electronic or other forms that is related to identified or identifiable natural persons, excluding information that has been anonymized.

Sensitive personal information refers to personal information that, if leaked or used illegally, is likely to result in damage to an individual's dignity or harm to their personal or property safety. This includes information such as biometric data, religious beliefs, specific identities, medical and health information, financial account information, and location data, as well as personal information of minors under the age of 14.

(I) How we collect your personal information

1.When you use the search function, we will collect the search keywords you enter to search for and display relevant content for you. If you refuse to provide the aforementioned information, you may not be able to use the search function normally, but this will not affect your use of other functions or services on the website.

2. When you use the customer service function, we will collect your chat records with the customer service executive so that the customer service executive can understand and answer your questions. If you refuse to provide the aforementioned information, you may not be able to use the customer service function normally, but this will not affect your use of other functions or services on the website.

3. When you apply for a position on our official website, if you choose to upload your resume directly, we will collect your resume and relevant files you upload. If you choose to fill out your resume online, we will collect the information you provide, including your name, mobile phone number, email address, gender, date of birth, work experience, highest level of education, location (city), your current company, recommender's name, photo, job preferences (current salary, desired salary, desired city, earliest available start date), work experience (start and end dates, company name, title, job responsibilities), educational background (start and end dates, school name, major, degree), internship experience (start and end dates, company name, title, job responsibilities), project experience (start and end dates, project name, role, project description, responsibilities in the project), language proficiency (language type, proficiency level), self-description, award history (award date, Award Name). If you choose to scan the QR code to add HR WeChat and submit your resume, we will collect the information and resume you send to HR. The purpose of collecting the aforementioned information is to assist you in applying for relevant positions, contact you, and advance the recruitment process. If you refuse to provide such information, you will be unable to apply for positions or participate in subsequent recruitment processes, but this will not affect your use of other functions or services we provide.

4. In order to improve the security and reliability of our services and quickly identify and resolve service abnormalities, we may collect your access log information, such as your IP address, the name of the page you visited, the time you visited the page, the time you left the page, and the type of business involved in the visit. If you refuse to provide such information, you will not be able to use our services normally.

You can also refer to the “Personal Information Collection List” for a more intuitive understanding of the specific circumstances under which we collect your personal information.

(II) How we use your personal information

In order to comply with national laws and regulations and regulatory requirements, and to provide you with relevant functions and services, we will use your information in the following circumstances:

1. To fulfill the purposes described in “How we collect your personal information” in this Privacy Policy.

2. To report to relevant departments in accordance with laws, regulations, or regulatory requirements.

3. When we want to use information for purposes not specified in this Privacy Policy, we will ask for your consent again in accordance with the requirements of laws and regulations.

(III) Exceptions with consent

In accordance with relevant laws and regulations, we may collect and use your personal information without your consent in the following circumstances:

1. Necessary for us to fulfill our legal obligations or statutory duties.

2. Necessary for the conclusion and performance of a contract to which you are a party.

3. Necessary to respond to public health emergencies or to protect the life, health, and property safety of natural person in emergency situations.

4. Processing of personal information that you have voluntarily disclosed or that has been legally disclosed within a reasonable scope in accordance with the law.

5. Other circumstances specified by laws and administrative regulations.

II. How we use Cookie and similar technologies

(I) Cookie

To ensure the proper functioning of the website, we will store small data files called Cookie on your computer or mobile device. Cookie typically contains an identifier, the name of the site, and some numbers and characters. Cookie enables websites to store data such as your preferences or the functions and services you use. We will not use Cookie for any purpose other than those described in this Privacy Policy. You can manage or delete Cookie according to your preferences. You can clear all Cookie stored on your computer, and most web browsers have a feature that blocks Cookie. However, if you do so, you will need to manually change your settings each time you visit our website.

(II) Do Not Track

Many web browsers have a Do Not Track function that sends a Do Not Track request to websites. Currently, major internet standards organizations have not established policies on how websites should respond to such requests. However, if your browser has Do Not Track enabled, all of our websites will respect your choice.

III. How we entrust the processing, share, transfer, and publicly disclose your personal information

(I) Entrusting processing

If we engage our partners to process your personal information so that they can provide certain functions or services to you on our behalf, we will agree with our partners on the purpose, duration, processing methods, types of personal information, protection measures, and the rights and obligations of both parties, and will supervise our partners' personal information processing activities. If our partners use your personal information for purposes not entrusted by us, they will obtain your consent separately.

(II) Sharing

You can check the “Personal Information Sharing List” to see the specific details of how we share your personal information with third parties. We will only share your personal information for legitimate, reasonable, necessary, specific, and clear purposes, and will only share the personal information necessary to provide functions and services. We will require the recipient to keep the personal information strictly confidential and use it in accordance with the law. The recipient has no right to use the shared personal information for any other purpose, except as otherwise provided by laws and regulations or where the recipient has obtained your consent in accordance with the law.

2. We may share your personal information externally in accordance with laws and regulations, or in accordance with mandatory requirements from government agencies, regulatory authorities, or judicial authorities.

(III) Transfer

We generally do not transfer your personal information to third parties. In accordance with laws, regulations, and commercial practices, if we need to transfer personal information due to reasons such as merger, division, dissolution, or bankruptcy, we will inform you of the name and contact information of the recipient and require the recipient to continue to be bound by this notice and assume corresponding obligations and responsibilities. If the recipient changes the original purpose or method of processing, it shall obtain your consent again in accordance with laws and regulations.

(IV) Public disclosure

We will not publicly disclose your personal information, except with your consent in accordance with the law.

(V) Exceptions with consent

In accordance with relevant laws and regulations, we may share, transfer, or publicly disclose your personal information without your consent in the following circumstances:

1. Necessary for us to fulfill our legal obligations or statutory duties.

2. Necessary for the conclusion and performance of a contract to which you are a party.

3. Necessary to respond to public health emergencies or to protect the life, health, and property safety of natural person in emergency situations.

4. Processing of personal information that you have voluntarily disclosed or that has been legally disclosed by others within a reasonable scope in accordance with the law.

5. Other circumstances specified by laws and administrative regulations.

IV. How we store and protect your personal information

(I) Storage of personal information

1. In accordance with laws and regulations, personal information generated, collected, or obtained within the People's Republic of China will be stored within the People's Republic of China.

2. Except as otherwise provided by law or administrative regulations, we will only store your personal information for the shortest period necessary to achieve the purpose of processing. After the aforementioned storage period has expired, we will delete or anonymize your personal information. If the retention period specified by law or administrative regulations has not expired, or if the deletion or anonymization of personal information is technically difficult to achieve, we will cease all processing except for storage and the implementation of necessary security measures.

(II) Measures for the protection of personal information

1. We have adopted industry-standard security measures to protect your personal information and prevent unauthorized access, disclosure, use, modification, damage, or loss of data. For example, we use encryption technology to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious attacks on data; and we deploy access control mechanisms to ensure that only authorized personnel can access personal information.

2.The Internet is not an absolutely secure environment, and we will do our best to ensure the security of any information you provide to us. If our physical, technical, or administrative safeguards are breached, resulting in unauthorized access, disclosure, alteration, or destruction of information, and causing damage to your legal rights, we will bear the corresponding legal responsibility.

3. If we cease operations, we will promptly stop collecting your personal information, notify you of the cessation of operations by individual notification or public announcement, and delete or anonymize your personal information in our possession, unless otherwise provided by laws and regulations.

4. If an incident involving the security of personal information unfortunately occurs, we will promptly notify you of the relevant circumstances through email, letter, telephone, push notification, or other reasonable and effective means, or publish an announcement in accordance with applicable laws and regulations. Additionally, we will report the handling of the personal information security incident in accordance with applicable laws and regulations.

V. Your rights

In accordance with relevant laws and regulations of the People's Republic of China and other regulatory provisions, we guarantee you to exercise the following rights regarding your personal information:

(I) Accessing and copying your personal information

You have the right to access your personal information, except in cases where exceptions are provided for by laws and regulations. If you wish to access or copy the personal information generated or submitted by you during the use of our functions and services, please contact us through the contact information provided in this Privacy Policy. As long as it does not require excessive effort on our part, we will provide it to you within a reasonable scope, except where otherwise provided by laws and regulations.

(II) Correcting and supplementing your personal information

When you find that the personal information we have processed about you is incorrect or you need to update your personal information, you have the right to contact us through the contact information provided in this Privacy Policy for correction or supplementation.

(III) Deleting your personal information

In the following circumstances, you have the right to request us to delete your personal information through the contact information provided in this Privacy Policy:

1. The purpose of processing has been achieved, cannot be achieved, or your personal information is no longer necessary to achieve the purpose of processing.

2. We have stopped providing products or services, or the retention period has expired.

3. You withdraw your consent.

4. We have violated laws, administrative regulations, or agreements in processing personal information.

5. Other circumstances specified by laws and administrative regulations.

If the retention period specified by laws and administrative regulations has not expired, or if it is technically difficult to delete or anonymize personal information, we will cease all processing except for storage and the implementation of necessary security measures.

(IV) Transferring your personal information

You have the right to request that your personal information be transferred to a personal information processor designated by you. If such transfer meets the conditions specified by Cyberspace Administration of China, , such as the ability to verify your true identity, the transfer of personal information that you have consented to provide or that has been collected based on a contract, technical feasibility, and no harm to the legitimate rights and interests of others, we will provide a means of transfer. If the number of requests to transfer personal information clearly exceeds a reasonable range, we will charge the necessary fee based on the cost of transferring the personal information.

(V) Changing the scope of your consent and withdrawing consent

You may grant or withdraw your consent to our collection and use of your personal information at any time, in whole or in part. After you withdraw your consent, we will no longer continue to collect, process, or use your corresponding personal information, and we will be unable to provide you with certain services and functions. However, your decision to withdraw consent will not affect our previous processing of your personal information based on your consent.

(VI) Ensuring that your personal information rights requests are responded to

If you wish to exercise other statutory rights related to your personal information, please contact us through the contact information provided in this Privacy Policy.

To ensure the security of your personal information, you may be required to submit a written request or prove your identity in another manner. We reserve the right to process your request only after verifying your identity. Unless there are special circumstances, we will accept and process your request within 15 working days.

In principle, we do not charge you for reasonable requests. However, for repeated requests that exceed reasonable limits, we will charge a certain cost depending on the circumstances. We reserve the right to refuse requests that are unnecessarily repetitive, require excessive technical means, pose a risk to the legitimate rights and interests of others, or are highly impractical.

If you are dissatisfied with the security of our personal information protection or find problems, you can make a complaint or report through the contact information stated in this Privacy Policy. If there are no special circumstances, we will accept and deal with your complaints and reports within 15 working days.

VI. Third party liability statement

Please note that the third-party websites you visit and the services provided by third parties through our access (if any) are subject to their own privacy policies, not this Privacy Policy. When you visit third-party websites or use third-party services, we recommend that you review and understand their privacy policies. If you find that these third-party websites or services pose a risk, we recommend that you terminate the relevant operations to protect your legal rights and interests.

VII. Agreement on personal information of minors

1. Our functions and services are primarily intended for adults. If you are a minor, please have your parents or legal guardian read this Privacy Policy and use our functions and services or provide us with your information only with the consent of your parents or legal guardian. In cases where we collect your information with the consent of your parents or legal guardian, we will only use or disclose such information as permitted by law, with the explicit consent of your parents or legal guardian, or when necessary to protect your rights and interests. If your legal guardian does not consent to your use of our functions and services or provision of information to us in accordance with this Privacy Policy, please immediately cease using our functions and services and promptly notify us so that we may take appropriate measures.

2. If you are the parent or guardian of a minor, please read this Privacy Policy carefully. If you have any questions about the processing of the personal information of the minor under your guardianship, please contact us using the contact information provided in this Privacy Policy.

VIII. How this Privacy Policy is updated

1. In accordance with the laws and regulations and the needs of providing functions, services, and business operations, we may revise this Privacy Policy in whole or in part. You will be notified of the revised content through appropriate means. In particular, we will provide more prominent notifications for significant changes.

2. Significant changes referred to in this Privacy Policy include:

（1）Our name and contact details.

（2）Purpose and method of processing personal information, types of personal information processed, and retention period.

（3）Methods and procedures for exercising your legal rights.

（4）Other matters that must be disclosed in accordance with laws and administrative regulations.

3. You have the right to choose whether to continue to authorize us to collect, process, and use your personal information. Please make an appropriate choice based on a thorough understanding of our revised Privacy Policy. If you do not agree with the revised Privacy Policy, you have the right to and should immediately stop using our functions and services.

IX. How to contact us

If you have any questions, opinions, or suggestions regarding this Privacy Policy, please contact us using the following methods:

Name: Shanghai DeltaHealth Hospital Co., Ltd.

Address: 109 Xule Road, Xujing Town, Qingpu District, Shanghai

Telephone: 4008-210-277

In general, we will receive and process your questions, opinions, or suggestions within 15 business days.

If you are dissatisfied with our response, especially if our processing of your personal information has infringed upon your legal rights and interests, you can file a complaint or report with the legal and compliance department via whistleblowing@deltahealth.com.cn or file a lawsuit with the court with jurisdiction over the defendant's place of residence.

Personal Information Collection List

Personal Information Sharing List