CMDB网站隐私声明
CMDB WEBSITE PRIVACY NOTICE
感谢您对CMDB(网址:https://cmdb.bgi.com/cmdb/,以下简称“本网站”或“CMDB”)的信任。作为面向全球用户提供CMDB数据库查询服务的网站,深圳华大生命科学研究院(地址:广东省深圳市盐田区北山路北山工业区11号楼;联系方式:[+ 86-755-36307888](以下简称“我们”)尊重您的隐私,并根据适用的法律法规保护您的个人信息(“个人信息”)。我们将在本《CMDB网站隐私声明》(以下简称“本声明”)中向您说明我们将如何处理您的个人信息,以及您在使用本网站过程中如何行使权利,以更好地保护您作为个人信息主体的权利。
Thank you for your trust on the CMDB (URL: https://cmdb.bgi.com/cmdb/, hereinafter referred to as "this Website" or "CMDB"). As a website providing CMDB database query services to users all over the world, Beijing Genomics Institute at Shenzhen(address: building 11, Beishan Industrial Zone, Beishan Road, Yantian District, Shenzhen, Guangdong Province, China; contact information: +86-755-36307888, hereinafter referred to as "we") respects your privacy and protects your personal information (“PI”) in accordance with applicable laws and regulations. We will explain to you how we will process your PI and how you exercise your rights in the process of using this Website, so as to better protect your rights as the subject of personal information in this CMDB Website Privacy Notice (hereinafter referred to as "this Notice").
在您注册和使用本网站之前,请仔细阅读并理解本声明。特别是,请注意加粗的条款,以确保您在使用本网站之前完全理解并同意处理您个人信息的规则。除非法律法规另有规定,如果您在我们更新本通知后继续使用本网站,您将受到本通知(包括更新后的版本)条款和条件的约束。
Please read and understand this Notice carefully before you register and use this Website. In particular, please pay attention to the terms marked in bold to ensure that you fully understand and agree to the rules for processing your PI before using this Website. Unless otherwise provided by laws and regulations, if you continue to use this Website after we update this Notice, you are bound by the terms and conditions of this Notice (including the updated version).
目录
Content
一、我们如何收集和处理个人信息How We Collect and Process PI
二、我们如何分享、转让和披露个人信息How We Share, Transfer and Disclose PI
三、经事先同意处理个人信息的例外情况Exceptions for Processing PI with Prior Consent
四、Cookies Cookies
五、如何存储个人信息How We Store PI
六、如何确保个人信息的安全How We Ensure the Safety of PI
七、我们如何保护您的权利How We Protect Your Rights
八、我们如何处理儿童的个人信息How We Process Children’s PI
九、本公告的适用范围Application of This Notice
十、更新Update
十一、联系我们Contact Us
一、我们如何收集和处理个人信息
I. How We Collect and Process PI
1、注册
1. Registration如果您注册成为本网站的用户,您至少需要向我们提供您的职称、真实姓名、单位、大学或研究机构电子邮件地址、电话号码、研究领域、使用数据库的目的等信息。您可以设置用户名和自己的密码,以完成用户注册和登录,并在密码丢失时检索密码。
If you register as a user of this Website, you need to at least provide us with your title, real name, organization, university or research institution e-mail address, phone number, research field, and the purpose of using the database. You set the user name and your own password to complete user registration and login and retrieve the password when the password is lost.
本网站提供访客模式,您无需注册即可浏览本网站,初步了解各种汇总统计信息,如等位基因频谱、变异类型等。
This Website provides a visitor mode, in which you can browse this website without registration to get a preliminary overview of various summary statistics, such as allele frequency spectrum, and variant type.
2. 网络与信息安全。
Network and information security
为提高您使用我们服务时的网络和信息安全性,更准确地防止网站欺诈,保护账户安全,我们可能会收集和处理您的网络行为(如点击频率)日志信息、访问本网站的IP地址信息、访问时间等数据,以确保您使用本网站时的信息和账户安全。
In order to improve the security of the network and information when you use our services, more accurately prevent website fraud and protect account security, we may collect and process your network behavior (such as click frequency) log information, IP address information of accessing this Website, access time and other data to ensure the security of your information and account when you use this Website.
二、我们如何分享、转让和披露PI
How We Share, Transfer and Disclose PI
1.第三方共享Third-party sharing
除以下情形,我们不会向任何公司、组织及个人分享您的个人信息:
We will not share your PI with any company, organization or individual, except in the following cases:
1)我们已事先取得您的同意或授权;
We have obtained your prior consent or authorization;
2)我们可能会与委托合作伙伴等第三方共享您的个人信息。但我们只会出于合法、正当、必要、特定、明确的目的共享您的个人信息,并且只会共享提供服务所必需的个人信息。我们的合作伙伴无权将共享的个人资料用于任何其他目的。我们委托的合作伙伴包括供应商、服务提供商和其他合作伙伴。我们将与支持我们业务的供应商、服务提供商、电子邮件验证服务提供商、顾问或代理以及其他合作伙伴共享信息,以支持本网站的服务。这些支持包括提供技术基础设施服务、提供客户服务、提供邮箱验证服务和提供法律咨询服务。我们要求这些服务提供商仅将您的信息用于向我们提供服务的目的,而不得用于其自身利益;
2) We may share your PI with third parties such as entrusted partners. However, we will only share your PI for legal, legitimate, necessary, specific, and clear purposes, and only share the PI necessary to provide services. Our partners are not authorized to use the shared PI for any other purpose. Our entrusted partners include suppliers, service providers and other partners. We will share information to suppliers, service providers, email verification service providers, consultants or agents and other partners supporting our business to support the services on this Website. These supports include providing technical infrastructure services, providing customer services, providing mailbox verification services, and providing legal advisory services. We require these service providers to use your information only for the purpose of providing services to us, and not for their own interests;
3)共享给个人信息属于“三、处理个人信息的例外情况”。
Sharing PI belongs to "the circumstances specified in [III. Exceptions for Processing PI with Prior Consent]"
我们将与上述第三方签订严格的保密协议/条款,要求他们按照我们的指示和本通知处理个人信息,并采取任何其他相关的保密和安全措施。在使用敏感的个人敏感数据时,我们要求第三方采用数据脱敏和加密技术,更好地保护您的个人信息。
We will sign strict confidentiality agreements / terms with the aforementioned third parties to require them to process PI in accordance with our instructions, this Notice and take any other relevant confidentiality and security measures. In the use of sensitive PI, we require third parties to adopt data desensitization and encryption technology to better protect your personal information.
2.转移Transfer
我们不会将您的个人信息转让给任何公司、组织或个人,但以下情况除外:
We will not transfer your PI to any company, organization or individual, except for the following circumstances:
1)我们已事先取得您的同意或授权;
We have obtained your prior consent or authorization;
2)因合并、分立、解散、破产等原因需要转让PI的,我们将告知接收方的姓名或联系方式。我们将要求接收方继续遵守本通知及其他法律义务。如果接收方改变原有的处理目的和处理方式,将再次征得您的同意;
If we need to transfer PI due to merger, division, dissolution, or bankruptcy, we will inform you of the name or contact information of the recipient. We will require the receiving party to continue to comply with this Notice and other legal obligations. If the receiving party changes the original processing purpose and processing method, it will obtain your consent again;
3)个人信息的转让属于“三、处理个人信息的例外情况” 。
The transfer of PI belongs to "the circumstances specified in [III. Exceptions for Processing PI with Prior Consent].
3. 信息披露Disclosure
我们只会在以下情况下,并采取行业标准的保障措施,才会公开披露您的个人信息:
We will only publicly disclose your PI under the following circumstances and adopting industry-standard safeguard measures:
1)我们事先获得您的单独同意或授权;
We have obtained your separate consent or authorization in advance;
2)如果您的个人信息必须根据适用法律的要求、强制性行政执法或司法要求提供,我们可能会根据您所要求的个人信息类型和披露方式公开披露您的个人信息;
If your PI must be provided according to the requirements of applicable laws, mandatory administrative law enforcement or judicial requirements, we may publicly disclose your PI according to the type and disclosure method of PI required;
3) 个人信息的公开披露属于“三、处理个人信息的例外情况”。
The public disclosure of PI belongs to "the circumstances specified in [III. Exceptions for Processing PI with Prior Consent]".
三、处理个人信息的例外情况 Exceptions for Processing PI with Prior Consent
个人信息的处理包括收集、存储、使用、处理、传输、提供、披露和删除。请注意,在以下情况下,我们不需要您的同意即可处理个人信息:
The processing of PI includes the collection, storage, use, processing, transmission, provision, disclosure, and deletion. Please be aware that in the following scenarios, we do not need your consent to process PI:
1)因订立和履行合同所必需,而你本人是该合同的当事人;
Necessary for the conclusion and performance of a contract to which you are a party to the contract;
2)履行法定职责或法定义务所必需的;
Necessary for the performance of legal duties or legal obligations;
3)应对突发公共卫生事件或者在突发公共卫生事件中保护自然人生命健康和财产安全所必需的;
Necessary for responding to public health emergencies or protecting the life, health and property safety of natural persons in emergencies;
4)在合理的目的下处理您披露的个人信息或其他合法披露的个人信息;
Processing PI that is disclosed by yourself or other legally disclosed PI within reasonable purpose;
5)法律、行政法规规定的其他情形。
Other circumstances stipulated by applicable laws and administrative regulations of the PRC.
四、Cookies
为了保证本网站的正常运行,本网站会在电脑或移动设备上存储cookies的小数据文件。cookie是由网络服务器存储在计算机或移动设备上的纯文本文件。cookie的内容只能由创建它的服务器检索或读取。每个cookie对于您的web浏览器或移动应用程序都是独一无二的。cookie通常包含标识符、站点名称以及一些数字和字符。在cookie的帮助下,网站可以存储用户偏好和其他数据,以改善用户体验。我们使用cookie的目的如下:
In order to ensure the normal operation of this Website, this Website stores small data files of cookies on computers or mobile devices. Cookies are plain text files stored on a computer or mobile device by a network server. The contents of a cookie can only be retrieved or read by the server that created it. Each cookie is unique to your web browser or mobile application. Cookies usually contain identifiers, site names, and some numbers and characters. With the help of cookies, the website can store user preferences and other data to improve the user experience. We use cookies for the following purposes:
1. 有了cookie,网站可以保存设置,比如语言、字体大小和电脑或移动设备的其他浏览偏好。这意味着用户不需要在每次访问时重新配置用户首选项。
With cookies, the Websites can save settings, such as language, font size and other browsing preferences of computers or mobile devices. This means that users do not need to reconfigure user preferences each time they visit.
2. 用户登录认证。当您访问本网站时,我们会为您生成一个单独的ID,并记录您的用户ID、组织身份、登录状态、姓名、电子邮件地址和手机号码来识别您的身份。
User login authentication. When you visit this Website, we will generate a separate ID for you and record the user ID, organization identity, login status, name, email address and mobile phone number to identify your identity.
3. “会话cookie”用于在提交在线数据时跟踪您的输入,并允许系统在页面或选择之间识别用户。我们还使用会话cookie来提供您通过点击按钮或填写web表单等操作请求的信息。会话cookie总是在浏览会话结束后过期。
2.
"Session cookie" is used to track your input when submitting online data and allow the system to identify users between pages or selections. We also use session cookies to provide the information you request through actions such as clicking a button or filling out a web form. Session cookies always expire after the browsing session ends.
在大多数情况下,您可以通过调整浏览器设置来禁用cookie和其他数据收集技术,从而管理cookie首选项。请注意,如果您选择删除或拒绝cookies,或清除本地存储,可能会影响本网站的功能、可用性和性能。
In most cases, you can manage cookie preferences by adjusting settings on your browser to disable cookies and other data collection technologies. Please note that if you choose to delete or reject cookies, or clear local storage, it may affect the function, availability, and performance of this Website.
五、如何储存个人信息 How We Store PI
1. 位置Location
我们将按照适用法律的规定将在中华人民共和国(以下简称“中国”)境内收集到的您的个人信息存储在国家基因库位于中国境内的私有云服务器上,并依法对这些信息严格保密。目前没有在境外提供个人信息的情况,但如果未来因业务需要需要在中国境外提供个人信息,我们将严格遵守适用法律法规的相关规定。
We will store your PI collected within the People's Republic of China (“China”) in the private cloud server of the national gene bank located in China in accordance with the provisions of applicable laws, and strictly keep these information confidential according to laws. There is currently no case of providing PI overseas, but if it is necessary to provide PI outside China due to business necessity in the future, we shall strictly abide by the relevant provisions of applicable laws and regulations.
2. 期限Period
对于您在用户注册时提供的个人信息和您的博客信息,我们将在必要的期限内保存这些个人信息,以便向您提供本网站的服务。如果您停用您的帐户,我们可能会出于系统安全和文件管理等原因,在必要的时间内继续保存您的个人资料,并在不再需要继续保存时及时删除,但根据适用法律法规需要保留的除外。
For the information you provide during user registration and your weblog information, we store such PI within the necessary period to provide you with services on this Website. If you deactivate your account, we may continue to store your PI for a necessary period of time for reasons such as system security and file management, and delete it in time when it is no longer necessary to continue to store, except for those that need to be retained according to applicable laws and regulations.
如果我们终止服务或运营,我们将提前通知您,并在服务或运营终止后对您的个人信息进行删除或匿名化处理,但适用法律法规另有要求或为履行我们的合规义务而需要保留您的个人信息的除外。
If we terminate the service or operation, we will notify you in advance and delete or anonymize your PI after the termination of the service or operation, unless otherwise required by applicable laws and regulations or required to retain your PI in order to fulfill our compliance obligations.
六、如何确保个人信息的安全How We Ensure the Safety of PI
本网站采用符合行业标准的安全保护措施保护您的个人信息,避免未经授权或非法访问、利用、处理或修改您提供的个人信息,避免侵权或泄露上述个人信息。
This Website uses security protection measures in line with industry standards to protect your personal information, avoid unauthorized or illegal access, utilization, processing, or modification of the PI you provide, and avoid infringement or disclosure of the above personal information.
在发生个人信息安全事件时,我们会按照法律法规的要求,及时通过邮件告知您:安全事件的基本情况和可能产生的影响、我们已经采取或将要采取的处置措施、您可以独立防范和降低风险的建议、以及为您提供的补救措施。当难以亲自告知时,我们将采取合理有效的方式,根据监管部门的要求,发布公告,报告用户PI安全事件的处置情况。
In case of PI security incidents, we will promptly inform you by e-mail in accordance with the requirements of laws and regulations: the basic situation and possible impact of security incidents, the disposal measures we have taken or will take, the suggestions you can independently prevent and reduce risks, and the remedial measures for you. When it is difficult to inform personally, we will take a reasonable and effective way to publish the announcement and report the disposal of users’ PI security events according to the requirements of the regulatory authorities.
七、我们如何保护您的权利 How We Protect Your Rights
根据适用的法律法规、科研规范和伦理原则,我们保证您对您的个人信息行使以下权利:此外,如果适用法律法规规定您对您的个人信息享有其他权利,我们也将严格遵守适用法律法规的规定。
In accordance with applicable laws and regulations, scientific research norms and ethical principles, we guarantee you to exercise the following rights to your PI. In addition, if applicable laws and regulations provide that you have other rights to your PI, we will also strictly abide by the provisions of applicable laws and regulations.
1. 查阅、复印、更正和补充 Access, copy, correct and supplement
除法律法规另有规定外,您有权进入本网站的“个人资料”界面查阅、复制、更正和补充您的个人资料。
Unless otherwise stipulated by laws and regulations, you have the right to access the "Profile" interface of this Website to access, copy, correct and supplement your PI.
2. 删除 Delete
在以下情况下,您可以要求我们删除您的个人信息:
You can request us to delete your PI in the following cases:
1)撤回同意;
If you withdraw your consent;
2)如果我们的处理目的已经实现、无法实现或不再需要实现;
If our processing purpose has been achieved, cannot be achieved or is no longer necessary to be achieved;
3)如果您停用您的账号,或者我们停止提供产品或服务,或者存储期限已过;
If you deactivate your account, or we stop providing products or services, or the storage period has expired;
4)违反法律、行政法规或协议处理您的个人信息的;
If we deal with your PI in violation of laws, administrative regulations or agreements;
5)法律规定的其他情形。
Other circumstances stipulated by applicable laws.
3. 禁用 Deactivate
您可以随时停用您的注册帐户。帐号停用后,本网站将停止为您提供产品或服务,您的个人信息将被删除或采取适用法律规定的合理措施,帐号停用后将无法恢复。除非法律法规另有规定,否则建议进行备份。
You can deactivate your registered account at any time. After the account is deactivated, this Website will stop providing you with products or services, your PI will be deleted or reasonable measures specified by applicable laws will be taken, and the account cannot be recovered after the account is deactivated. It is recommended that you make a backup, unless otherwise specified by laws and regulations.
4.撤回 Withdrawal
你可以撤回你的同意。当您撤回同意后,我们将不再处理相应的个人信息。但是,您撤回同意的决定不会影响先前基于您同意的个人信息处理。
You may withdraw your consent. When you withdraw your consent, we will no longer process the corresponding PI. However, your decision to withdraw your consent will not affect the previous PI processing based on your consent.
5. 其他权利和回应Other rights and responses
您可以联系cmdb@service.genomics.cn来行使您的上述权利以及其他权利,例如:携带权。为安全起见,您可能需要提供书面请求或以其他方式证明您的身份。在处理您的请求之前,我们可能需要要求您验证您的身份。我们通常在15个工作日内回复。
You can contact cmdb@service.genomics.cn to exercise your above rights as well as other rights, e.g. right of portability. For security, you may need to provide a written request or otherwise prove your identity. We may need to ask you to verify your identity before processing your request. We usually reply within 15 working days.
在下列情况下,我们可能无法回应您的要求:
We may not be able to respond to your request if the request is:
1)与我们履行法律法规规定的义务有关的;
related to our performance of our obligations under laws and regulations;
2)直接关系国家安全和国防安全的;
directly related to national security and national defense security;
3)直接关系公共安全、公共卫生和重大公共利益的;
directly related to public safety, public health and major public interests;
4)与侦查、起诉、审判、判决执行直接有关的;
directly related to criminal investigation, prosecution, trial and execution of judgment;
5)我们有充分证据证明用户存在主观恶意或者滥用权利;
we have sufficient evidence to show that users have subjective malice or abuse of rights;
6)为保护用户或者其他个人的生命、财产等重大合法权益,难以征得用户或者其他个人同意的;
for the purpose of safeguarding the life, property and other major legitimate rights and interests of users or other individuals, but it is difficult to obtain their own consent;
7)响应用户请求将对用户或者其他个人、组织的合法权益造成严重损害的;
responding to the user's request will cause serious damage to the legitimate rights and interests of the user or other individuals and organizations;
8)涉及商业秘密的。
involving trade secrets.
八、我们如何处理儿童的个人信息 How We Process Children’s PI
1. 本通知中儿童的定义将根据适用法律确定。根据中国相关法律法规,儿童是指不满14周岁的未成年人,其个人信息属于敏感个人信息。
The definition of children in this Notice will be determined in accordance with applicable laws. According to relevant laws and regulations of China, children refer to minors under the age of 14, and their PI belongs to sensitive PI.
2. 我们的服务对象一般是成年研究人员。如果您是适用法律规定的儿童,您的监护人应阅读并同意本通知。您可以在您的监护人同意的情况下使用我们的服务或向我们提供您的个人资料。在征得您的监护人同意的情况下收集您的个人信息,我们将在以下情况下处理您的个人信息:适用法律法规允许的情况下,或监护人明确同意的情况下,或为保护儿童个人信息的权益。
Our services are generally for adult researchers. If you are a child under applicable laws, your guardian should read and agree with this Notice. You can use our services or provide us with your PI with the consent of your guardian. In the case of collecting your information with the consent of your guardian, we will process your PI under the following circumstances: where permitted by applicable laws and regulations, or with the explicit consent of the guardian, or in order to protect the rights and interests of the child's PI.
3. 如果儿童在未经监护人同意的情况下使用本网站服务并提供个人信息,监护人有权与我们联系,拒绝进一步处理该儿童的个人信息,或要求本网站删除该儿童的个人信息,我们将尽快删除相关个人信息。
If a child uses the services of this Website and provides PI without the consent of the guardian, the guardian has the right to contact us and refuse further processing of the child's PI, or ask this Website to delete the child’s PI, and we will try to delete the relevant PI as soon as possible.
九、本公告的适用范围 Application of this Notice
1. 本通知仅适用于本网站提供的服务。如果您通过第三方跳转到本网站或通过本网站访问第三方网站并使用其提供的服务,第三方隐私声明所作的承诺与本网站无关。请注意,我们无法控制第三方处理的产品、服务或PI。
This Notice is only applicable to the services provided on this Website. If you jump to this Website through a third party or visit a third party's website through this Website and use the services provided by it, the commitment made by the third party's privacy notice has nothing to do with this Website. Please note that we have no control over the products, services or PI processed by third parties.
2. 您的个人信息在使用第三方产品或服务过程中的保护不适用于本通知。本通知也不适用于您选择提供给第三方的任何信息。建议您咨询或联系该等第三方以获取其隐私声明的详细信息。如果您发现这些由第三方创建的网页或第三方开发的应用存在风险,建议您终止相关操作,以保护您的合法权益。
The protection of your PI in the process of using third-party products or services does not apply to this Notice. This Notice also does not apply to any information you choose to provide to third parties. It is recommended that you consult or contact such third parties to obtain details about their privacy notices. If you find that these web pages created by third parties or applications developed by third parties are at risk, it is recommended that you terminate relevant operations to protect your legitimate rights and interests.
十、更新
X. Update
1. 为了给您提供更好的服务,同时随着公司业务的发展,本通知将不断更新。未经您的同意,我们不会减少您在本通知项下的权利。我们将通过本网站发布更新版本,并通过网站公告或其他适当方式提醒您本通知的任何更新。
1. In order to provide you with better service and with the development of our business, this Notice will be updated. Without your consent, we will not reduce your rights under this Notice. We will issue an updated version through this Website and remind you of any updates to this Notice through website announcements or other appropriate ways.
2. 对于重大变更,我们可能会提供更重要的通知(我们可能会通过包括但不限于电子邮件、短信或网站页面上的特别通知等方式解释本政策的具体变更)。
2. For material changes, we may provide more significant notices (we may explain the specific changes of this policy by including but not limited to email, SMS or special notices on the website page).
3. 本通知中提及的重大变更包括但不限于:
Material changes referred to in this Notice include but are not limited to:
1) 服务模式发生重大变化。如加工圆周率的目的、加工圆周率的种类、加工圆周率的方法等;
Significant changes have taken place in our service model. Such as the purpose of processing PI, the type of PI processed, the processing method of PI, etc.;
2)股权结构、组织结构等发生重大变化。如因经营调整、破产、并购等导致的所有者变更;
We have undergone significant changes in ownership structure, organizational structure, etc. Such as owner change caused by business adjustment, bankruptcy, M & A, etc.;
3) 个人信息共享、转让或公开披露的主要对象发生变化;
The main objects of PI sharing, transfer or public disclosure have changed;
4)您参与个人信息处理的权利及其行使方式发生重大变化;
Significant changes have taken place in your right to participate in PI processing and the way in which you exercise it;
5) 当负责确保PI安全的责任部门、联系方式和投诉渠道发生变化时;
When the responsible department, contact information and complaint channels responsible for ensuring PI security change;
6) 当PI保护影响评估报告表明存在高风险时;
When the PI protection impact assessment report indicates that there is a high risk;
4. 我们还将存档本公告的历史版本(https://cmdb.bgi.com/cmdb/license),供您参考。We will also archive the historical version of this Notice (https://cmdb.bgi.com/cmdb/license) for your reference.
十一、联系我们 Contact Us
如果您对本通知有任何疑问、意见或建议,您可以向深圳华大声明科学研究院CMDB团队(地址:深圳市盐田区北山工业区11号楼)发送书面请求或发送电子邮件至cmdb@service.genomics.cn。一般情况下,我们会在15个工作日内回复。在正式处理您的请求之前,我们可能需要核实您的身份。
If you have any questions, comments, or suggestions about this Notice, you may send a written request to the address of the CMDB team of Beijing Genomics Institute at Shenzhen(address: building 11, Beishan Industrial Zone, Yantian District, Shenzhen) or email cmdb@service.genomics.cn. Generally, we will reply within 15 working days. Before formally addressing your request, we may need to verify your identity.