Alibaba.com Website Users Data Processing Terms

Alibaba.com网站用户数据处理条款

 

Effective as of: 8 February 2023

生效日期：2023年2月8日 

 

These Data Processing Terms (“Terms”), as maybe updated from time to time, shall be binding on you and/or the entity you representing (“Overseas Buyer” or “you”), in the capacity as overseas buyer on Alibaba.com Website (as well as the use of the relevant mobile applications (APP) and/or mobile-optimized websites (WAP)) (collectively, known as the “Alibaba.com Website”).

 

本文所示的数据处理条款（“条款”）对作为Alibaba.com网站（以及涉及到的移动端应用（APP）和/或移动端适用的网站（WAP））（合称 “Alibaba.com 网站”）境外买家的您和/或您代表的实体（下称“境外买家” 或“您”）具有约束力。请注意此条款可能会不时更新。

 

These Terms are entered into by and between Hangzhou Alibaba Advertising Co., Ltd (hereinafter known as “Alibaba.com” or “we” or “us”) and you as the Overseas Buyer. Details about you as a party hereto are as follows:

 

[(The company name you provided at the registration page)] being the overseas buyer, a company that is legally registered and continuously exists in [(The country/region you selected at the registration page)], having its address at [(The company address you provided)], agrees to accept these Terms. [(The name you provided at the registration page)] is the contact person of the overseas buyer, and [(The contact details you provided at the registration page)] is the contact details.

 

此条款是由杭州阿里巴巴广告有限公司（下称“Alibaba.com”或者“我们”）与您作为境外买家共同缔结。您作为此条款签署方的信息如下：

 

境外买家为【（您在注册页面填写的公司名称）】，一家在【（您在注册页面选择的国家 / 区域）】合法注册并有效存储的法律实体、联系人为【（您在注册页面填写的姓名）】、联系方式为【（您在注册页面填写的联系信息）】、联系地址为【（您提供的公司地址）】，您通过在线点击方式同意接受了此条款。

 

1.

Definitions:  The following terms used in these Terms shall have the following meanings:

定义：本条款所涉及到的数据处理术语应具有以下含义。

 

(1)

Each of “controller”, “processor”, “data subject”, “personal data” and “processing” (and “process”) shall have the meaning given in the EU Data Protection Law. Notwithstanding the aforesaid, in the event where the law applicable hereunder is any other Applicable Data Protection Law apart from the EU Data Protection Law, each of the aforementioned terms when referred to in these Terms shall be deemed as referring to the corresponding defined term under the Applicable Data Protection Law (if such corresponding defined term under the Applicable Data Protection Law is different from any of the aforementioned terms used pursuant to the EU Data Protection Law). For instances, both the terms “controller” and “processor” under the EU Data Protection Law shall, where applicable hereunder, be deemed as referring to the respective terms of “business” and “service provider” under the CCPA (as defined below);

“控制方”、“处理方”、“数据主体”、“个人数据”和“处理”应具有欧盟数据保护法规中规定的含义。同时，如果本协议适用的法律是除欧盟数据保护法规之外的其他任何适用的数据保护法规，本协议条款中提及的上述术语应被视为具有适用的数据保护法规下的相应含义（如果适用的数据保护法规所规定的此类术语的含义与欧盟数据保护法规所使用的含义不同）。例如，欧盟数据保护法规中的 “控制方”和“处理方”（如适用）应视为CCPA中的“商业主体”和“服务提供商”（定义如下）；

 

(2)

“Applicable Data Protection Law” means all worldwide data protection and privacy laws and regulations applicable to the personal data in question, including, where applicable, EU Data Protection Law and all analogous (present and future) privacy laws of other states, territories and countries including (without prejudice to the generality of the foregoing) the California Consumer Privacy Act 2018 (“CCPA”), the United Kingdom Data Protection Act 2018, the Personal Information Protection Law of the People's Republic of China, and Measures on Security Assessments of Cross-border Transfers of Data.

“适用的数据保护法规”是指全球所有适用于个人数据的数据保护和隐私法律法规，包括适用的欧盟数据保护法规和其他国家与地区的所有类似（当前已实行和未来将要实行）的隐私法规，包括（在不与前述一般性的情况相矛盾的情境下）《加利福尼亚消费者隐私法》(“CCPA”）、《英国数据保护法》、《中华人民共和国个人信息保护法》和《数据出境安全评估办法》。

 

(3)

"EU Data Protection Law" means (i) the Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (the "GDPR"); (ii) the EU e-Privacy Directive (Directive 2002/58/EC); and (iii) any and all applicable national data protection laws made under or pursuant to (i), (ii) or (iii); in each case as may be amended or superseded from time to time.

“欧盟数据保护法规”是指（i）欧洲议会和理事会关于处理个人数据时对于自然人的保护和此类数据自由流动的第2016/679号条例（通用数据保护条例）（“GDPR”）；（ii）欧盟电子隐私指令（指令2002/58/EC）；和（iii）根据或依据（i）、（ii）或（iii）制定的任何和所有适用的国家数据保护法律；上述每种情况下所提及的法规可不时修订或更新。

 

2.

Disclosure of data:  Alibaba.com will be deemed as disclosing certain personal data to you in your course of using the Alibaba.com Website and/or the services available thereon when details of other users displayed and made available thereon for you contains of personal data. Such disclosure may entail cross border data transfer from Alibaba.com to you if you are located outside of the People’s Republic of China. The scope of the personal data involved shall vary depending on the type(s) of services you used on the Alibaba.com Website (the "Data"). To find out more on the scope of the Data involved for each type of the services available on the Alibaba.com Website, please refer to “A. Collection of Information” of the Privacy Policy on the Alibaba.com Website. Where you view the Data when using the Alibaba.com Website and the services made available thereon, you shall be deemed to have processed the Data in order for you to proceed with the relevant activities pursuant to which the Data is made available to you (the "Permitted Purpose"). For example, if you (as a buyer) view the Data of a seller when placing an order with the seller on Alibaba.com Website, you shall be deemed to process the Data of the seller strictly for the aforementioned purpose only. You shall limit your processing of the Data within the Alibaba.com Website and the Permitted Purpose, and shall not process it outside thereof (including downloading (unless so allowed by Alibaba.com Website) or obtaining a copy via any methods of the Data).

数据披露：在您使用Alibaba.com网站和/或网站所提供的服务的过程中，网站向您展示的其他用户的详细信息会包含个人数据。在这种情况下，Alibaba.com将会被视为向您披露了这些个人数据。如果您位于中华人民共和国境外，此类披露可能涉及从Alibaba.com向您进行跨境数据传输。所涉及的个人数据的范围因您在Alibaba.com网站上使用的服务类型而异（“数据”）。如需了解有关Alibaba.com网站上各类服务所涉及的数据范围的更多信息，请参阅Alibaba.com网站隐私政策的“A.信息收集”。如果您在使用Alibaba.com网站及其提供的服务时查看了数据，您应被视为对数据进行了处理，以便您完成数据披露所依据的相关活动（“约定目的”）。例如，如果您（作为买家）在Alibaba.com网站向卖家下单时查看了卖家的数据，则您应被视为仅出于上述目的而严格处理卖家的数据。您只能在Alibaba.com网站内出于实现约定目的而处理数据，不得在网站外处理数据（包括但不限于下载（网站功能支持的除外）或通过任何方法获取数据副本）。

 

3.

Relationship of the parties:  The parties acknowledge that Alibaba.com is a controller of the Data it discloses to you, and that you will process the Data as a separate and independent controller strictly for the Permitted Purpose. In no event will the parties process the Data as joint controllers.

各方关系：各方承认，Alibaba.com是向您所披露的数据的控制方，您将作为另一独立控制方，只能为实现约定目的进行数据处理。在任何情况下，双方均不得作为联合控制方处理数据。

 

4.

Processing of personal data by overseas data recipients / Overseas Buyer: For the purposes of using the Alibaba.com Website and the services it provides (the Permitted Purpose as defined hereunder), you will be able to view the Data of other users and may download copies of other user’s data where necessary. If you store a copy of the Data in your country/region, which is the country/region you selected when you registered your account on the Alibaba.com Website, such storage shall be for a minimal time that is necessary to fulfill the Permitted Purpose and shall not be longer than one (1) year after you have fulfilled the Permitted Purposes. In which case, unless otherwise required by applicable laws or you have obtained separate consent from relevant data subjects on the data retention period, you shall delete or anonymize the data. In light of the aforesaid, the methods wherein you process Data herein are data collection, data storage, data use, and data deletion.

 

境外数据接收方 / 境外买家处理个人数据的方式：基于使用Alibaba.com网站及其提供的服务所需要（即本条款下所定义的约定目的），您会查看其他用户的数据，您也可能会下载数据副本。若您出于实现约定目的的需要，将数据副本存储于您所在的国家/地区，即您在Alibaba.com网站注册帐户时选择的国家/地区，存储时间为实现约定目的所必要的最短时间，且不超过您完成约定目的后的一（1）年（除非适用的法律另有要求或者您已就数据保留期获得相关数据主体的单独同意），届时您应删除或匿名化数据。因此，您对数据的处理方式为收集、存储、使用、删除。

 

5.

Compliance with law: Each party shall be individually and separately responsible for complying with the obligations that apply to it as a controller under the Applicable Data Protection Law. In particular (and without limitation):

遵守的法律：各方应各自遵守所适用的数据保护法规中适用于其作为控制方的义务。特别是（但不限于）：

 

(1)

Alibaba.com shall be responsible for complying with all necessary transparency and lawfulness requirements under the Applicable Data Protection Law in order to disclose the Data to you to process for the Permitted Purpose; and

为向您披露数据从而使得您能按照约定目的进行数据处理，Alibaba.com应负责遵守适用的数据保护法规下的所有必要性、透明度和合法性要求；以及

 

(2)

You shall be separately and independently responsible for complying with the Applicable Data Protection Law in respect of your processing of the Data you receive from Alibaba.com.

对从Alibaba.com所接收的数据，您应在数据处理过程中单独遵守适用的数据保护法规，独立承担所适用的责任。

 

6.

Security:  You shall implement technical and organisational measures to protect the Data (a) from accidental or unlawful destruction, and (b) loss, alteration, unauthorised disclosure of, or access to the Data (a "Security Incident"). Such measures shall have regard to the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons but shall include, as appropriate: (a) the pseudonymisation and encryption of personal data; (b) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services; (c) a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.

 

In the event where there is any Security Incident, you shall take appropriate measures in a timely manner to remedy or mitigate the impacts of the Security Incident and shall notify the competent authorities, in accordance to the Applicable Data Protection Law. You shall also inform by email the relevant data subject of the contact information of the designated personnel responsible for resolving the Security Incident, and act on the request of the data subject for exercising his or her rights in accordance to the Applicable Data Protection Law.

 

安全：您应实施技术和组织措施，以保护数据（a）免受意外或非法破坏，以及（b）丢失、更改、未经授权披露或访问数据（“安全事件”）。该等措施应考虑现有技术水平、实施成本、处理的性质、范围、背景和目的以及自然人因享有不同种类及程度的权利和自由所带来的风险。该等措施包括（视具体情况而定）：（a）个人数据的假名化及加密；（b）确保处理系统及服务的持续保密性、完整性、可用性及可复原性的能力；（c）定期测试、评估和评价确保处理安全的技术措施和组织措施有效性的流程。

 

若发生任何安全事件，您应及时采取适当措施以补救或减轻安全事件的影响，并应根据适用的数据保护法规通知主管部门。同时，您也应通过邮件向数据主体告知安全事件负责人的联系方式，并应根据适用的数据保护法规，对数据主体的行权请求采取行动。

 

7.

Data transfer to other third party:  You shall not in any way transfer, share and/or provide the Data (or any part thereof) to any other third party (including but not limited to any processor and/or subprocessor), unless you have met all of the following requirements:

数据传输至其他第三方：您不得将数据（或数据的任何部分）以任何形式提供给任何第三方(包括但不限于任何处理方以及/或者分包处理方)，除非同时符合以下要求：

 

(1)

Such transfer is strictly necessary for achieving the Permitted Purpose.

此类传输对于约定目的的实现具有绝对必要性。

 

(2)

You have notified Alibaba.com and the relevant data subjects of the relevant information related to the third party, including but not limited to the name and contact information of the third party, the purpose and method of processing, the scope of the Data involved, and the procedures for the relevant data subjects to exercise their rights.

您已将接收数据的第三方的相关信息告知了Alibaba.com和相关数据主体，相关信息包括但不限于第三方的名称或者姓名、联系方式、处理目的、处理方式、数据的种类以及相关数据主体依据所适用的数据保护法规向该第三方行使权利的程序等。

 

(3)

You have obtained the consent from Alibaba.com and separate consent from the relevant data subjects in accordance to the Applicable Data Protection Law. The form of the consent shall be in accordance with the requirements of the Applicable Data Protection Law. In the event where it involves sensitive personal data, you shall notify the relevant data subjects of the necessity and impact of the data transfer.

您已按照所适用的数据保护法规的要求，取得了Alibaba.com的授权及数据主体的单独同意。授权及同意的形式应符合所适用的数据保护法规的要求。如果传输的数据涉及到敏感个人数据，您应也向数据主体告知传输敏感个人数据的必要性及影响。

 

(4)

You have entered into a written agreement with the third party to ensure that the third party will process the Data according to a standard which is not lower than that as set forth hereunder and in accordance with the Applicable Data Protection Law, and will assume joint and several liability for any damage that may be caused by the data transfer.

您已与第三方达成书面协议，以确保第三方将根据不低于本协议规定的标准和适用的数据保护法规处理数据，并对数据传输可能造成的任何损害承担连带责任。

 

(5)

You have provided Alibaba.com with a copy of the written agreement entered into with the third party.

您已向Alibaba.com提供与第三方达成的书面协议副本。

 

8.

Cooperation:  In the event that you receive any correspondence, enquiry or complaint from a data subject, regulator or other third party (“Correspondence”) related to (a) the disclosure of the Data by Alibaba.com to you for the Permitted Purpose; or (b) your processing of the Data, you shall promptly inform Alibaba.com giving full details of the same, and you shall cooperate reasonably and in good faith in order to respond to the Correspondence in accordance with any requirements under the Applicable Data Protection Law. In the event where (a) there is any substantial change of control in you or change in your business scope; (b) any of the following has occurred which may cause risks to the security of a data subject: (i) any change in the data protection laws and policies, and cybersecurity environment, in your territory; (c) there is a force majeure event, you shall notify Alibaba.com and the data subjects without undue delay when any such event has taken place or when you are aware that such event may take place and shall immediately take appropriate technical and organizational measures (including but not limited to deletion, pseudonymization, anonymization and/or access control (as applicable)) to ensure that the security of the Data and the legitimate interests of Alibaba.com and the relevant data subjects are safeguarded.

合作：如果您从数据主体、监管机构或其他第三方收到与（a）Alibaba.com出于约定目的向您披露数据；或（b）您对数据的处理相关的任何信函、询问或投诉（“信函”），您应立即通知Alibaba.com，并提供相关详细信息。您应本着诚信的原则进行合理合作，以便根据适用的数据保护法规的任何要求回复信函。如果（a）您的控制权发生重大变化或业务范围发生变化；（b）发生以下任何可能对数据主体的安全造成风险的情况：（i）您所在地区的数据保护法律和政策以及网络安全环境发生任何变化；（c） 如果发生不可抗力事件，您应在任何此类事件发生时或您意识到此类事件可能发生时立即通知Alibaba.com和数据主体并立即采取删除/去标识化/匿名化/访问控制等技术和管理措施（根据具体的场景判断适用的措施）保障数据的安全，确保Alibaba.com与数据主体的合法权益免于收到损害。

 

9.

Location:  You shall process the Data in a territory where you are based in (which shall be the same as the territory you have chosen when registering your account on the Alibaba.com Website).

地点： 您应在您所在的地区（与您在Alibaba.com网站注册帐户时选择的地区相同）处理数据。

 

10.

Deletion or return of Data:  You shall process the Data only when you conduct activities on the Alibaba.com Website for the Permitted Purpose. In certain circumstances where you keep a separate copy of the Data outside of the Alibaba.com Website, you shall, within one (1) year upon your completion of the Permitted Purpose or after the Permitted Purpose no longer exists, delete or anonymize the Data, unless otherwise required by any applicable laws or you have obtained separate consent from the relevant data subjects on the data retention period.Upon termination or expiry of your agreement with Alibaba.com (or its affiliates), you shall return, destroy or anonymize the Data received (including all copies) in your possession, and provide any confirmation and/or audit report as a proof thereof.

数据删除或归还：您只能在Alibaba.com网站内出于实现约定目的而处理数据。在特定情况下，如果您在Alibaba.com网站之外保存数据副本，则您应在完成约定目的后不超过1年删除或匿名化数据，除非适用的法律另有要求或者您已就数据保留期获得相关主体的单独同意。在您与Alibaba.com（或其附属公司）的协议终止或到期后，您应归还、销毁或匿名您所拥有的数据（包括所有副本），并提供任何确认和/或审计报告作为证据。

 

11.

Indemnity:  You shall indemnify Alibaba.com and/or any data subject from and against all loss, cost, harm, expense (including reasonable legal fees), liabilities or damage (“Damage”) suffered or incurred by Alibaba.com and/or any data subject as a result of your breach of these Terms. In the event that you breach any of these Terms, you shall promptly inform Alibaba.com giving full details of the breach, including but not limited to reasons for the breach, categories of the Data affected and possible impacts. You shall also take effective remedial measures within seventy-two (72) hours after the breach to avoid any form of loss to Alibaba.com and/or the relevant data subjects.

赔偿：您应赔偿Alibaba.com及/或数据主体因您违反本文所示条款的规定而遭受或招致的所有损失、成本、损害、费用（包括合理的法律费用）、责任或损害（“损害”）。在您违约时，您应立即将违约细节通知Alibaba.com，违约细节包括但不限于违约原因、受影响的数据种类及可能的影响，并于违约行为发生后的72小时内采取有效补救措施避免对Alibaba.com及/或数据主体造成任何形式的损失。

 

12.

Governing Law; Jurisdiction:  These Terms shall be governed by the laws of the People’s Republic of China, and the parties hereby submit to the exclusive jurisdiction of the Yuhang Basic People’s Court of Hangzhou.

适用法律；管辖权:本文所示条款应受中华人民共和国法律管辖，协议双方特此接受杭州市余杭区人民法院的专属管辖。

 

13.

Term: These Terms shall come into effect immediately on the day when you enter into these Terms with Alibaba.com and shall be valid for a period of three (3) years. These Terms shall be renewed automatically for succeeding terms of one (1) year each unless either party gives written notice to the other party at least thirty (30) days prior to the expiration of any term of its intention not to renew. Notwithstanding the aforesaid, all obligations stipulated hereunder including but not limited to data processing and data safety shall survive.

有效期：本条款应在您与 Alibaba.com签订本条款之日立即生效，且有效期为三年。本条款在有效期届满后自动续期一年，且每次到期后均继续自动续约一年，直至任一方在任一有效期届满日前至少三十（30）天，通知另一方该方意向不再续约。但本条款约定的关于数据的处理、安全保障等相关义务，并不因本条款到期而终止。

 

14.

Miscellaneous:  In relation to the processing of Data, to the extent there is any conflict or inconsistency between these Terms and any other terms of any other contracts between you and Alibaba.com (or its affiliates), these Terms shall prevail. If there is any conflict between the English version and another language version of these Terms, the English version shall prevail.

其他：关于数据处理，如果本文所示条款与您和Alibaba.com（或其附属公司）之间的其他合同的任何条款之间存在任何冲突或不一致，则以本文所示条款为准。如果本文所示条款的英文版本与其他语言版本之间存在任何冲突，应以英文版本为准。