根据该隐私和数据保护政策，兰胜供应链（上海）管理有限公司（以下称“我们”，或“我们的”）可以通过我们的网站https://www.lanshengmed.com/（“我们的网站”）和以下指定的所有相关网站，可下载软件，移动应用程序（包括桌面应用程序，统称“我们的产品”）和由我们提供和该隐私政策链接显示的其他服务，和通过书面或口头方式与个人的所有其他沟通，例如邮件、聊天或电话（这里网站和产品，统称我们的“服务”）来收集、使用或处理个人数据。

我们致力于保护您在使用我们的网站和服务时授权给我们的个人信息，包括使用以下链接：

https://www.lanshengmed.com/ 以及其他公司网站，包括子域名。

定义

个人数据：是指那些与已识别或可辨识的自然人有关的任何信息（"数据主体"）;可辨识的自然人是指可以通过以下信息，比如姓名、身份证号码、位置数据、在线标识符或一个或多个因素，特别是自然人的物理、生理、遗传、心理、经济、文化或社会身份，被直接或间接识别的个人。

处理：是指在个人数据或个人数据集上无论是否通过自动化方式，执行的任何操作或一系列操作，例如收集、记录、组织、构建、存储、改编或变更、检索、咨询、使用、公开传输，传播或以其他方式提供排列或组合、限制、消除或破坏。

处理限制：是指标记以限制未来个人数据处理为目的存储的个人数据。

管理者：是指自然人或法人、公共机关、机构或其他机构，单独或与他人共同决定个人数据处理的目的和方式；如果该处理目的和方式是由协会或成员国法律决定的，则该管理者或其提名的具体标准可由协会或成员国法律规定。

处理者：是指代表管理者处理个人数据的自然人或法人、公共机关、机构或其他机构。

数据主体的同意：是指数据主体通过声明或确认操作来表示其任何肯定的、明确的、知情的和清晰的的意愿，即表示同意处理与他或她有关的个人数据。

1. 收集和使用信息

1.1我们通常收集的信息是：

xxx您通过我们的网站或您基于对我们产品和服务的要求直接提供给我们的信息，

我们接收您使用我们产品和服务的信息，包括但不限于我们的网站。

1.2我们可以通过几个不同的来源收集您的个人信息，包括但不限于：

软件产品/应用程序的网站表格和注册信息

书面表格

电话或电邮

引荐代理

现有客户或雇员

服务台请求单

在线协助和支持

社交媒体和社交网络

网站上的宣传组件和标识符

1.3我们可以收集和使用您的个人数据，用作下列用途：

履行合同义务或者履行在我们向您提供请求的产品和/或服务的过程中或与我们向您提供请求的产品和/或服务相关的义务；

确定您的身份；

响应、处理、评估查询、请求、申请、投诉、空位要求和反馈；

管理您与我们的关系；

向您发送营销信息，包括但不限于关于我们产品或服务的调查和问卷；

遵守任何适用的法律、法规、行为守则、指导方针、指示或规则，或协助任何政府和/或监管机构进行执法和调查；

您提供该信息的任何其他用途；

为本节中的上述用途，向任何附属第三方提供信息，包括我们的第三方服务提供商和代理人，和相关的政府和/或监管机构，包括欧洲或欧盟司法管辖区；

任何与上述有关或有联系的其他附带商业用途；

管理和改进我们应用程序和相关服务的特性和功能；

通过收集统计数据来分析应用程序的性能；

核实用户帐号、打击市场上的有害行为、维护我们的产品和服务的完整性、促进我们网站产品和服务的保障与安全。例如，我们使用个人信息与您联系，并调查可疑活动或违反我们的条款和政策以及侵犯知识产权的行为。

以上列出的用途条款甚至可能在您与我们关系（例如，依照合同）终止或以任何方式改变的情况下，在合理的时期内继续使用，（包括，在适用情况下，允许我们在与您的合同或其他合法的用途下强制执行我们的权利）。

除了我们能够以特定用途处理您在本节中提供的个人资料，我们也可以在为遵守我们的法律义务而必须处理的情况下，或为了保护您的切身利益或其他人的切身利益时，处理您的个人数据。

我们与代表我们提供服务的公司合作来提供服务，例如处理信息进程和传递，发布应用程序信息，交付通过应用程序提供的内容和服务和我们网站的服务，或使用应用程序和上述服务执行统计分析。这些服务提供商将会被提供有限的信息访问权限，这是提供服务的合理必要条件，并且我们也将要求这些第三方遵守这一隐私政策，或者在类似的隐私政策下操作。

我们不向第三方出售、租借、出租或免费分发我们的邮件列表。

1.4未成年人的个人信息和隐私

我们认识到保护未成年人信息的重要性，我们不会故意收集18岁以下未成年人的任何个人信息。我们的网站和服务仅针对18岁及以上的成年人，我们不承担任何不遵守这一要求的责任。

如果我们意识到我们已经收到18岁以下的访客的个人信息，我们将尽快删除，并不会使用这些信息。

1.5. 收集其他信息

我们可以收集关于使用我们的软件应用程序、访问我们的网站或使用其他服务的非个人信息，包括您点击的链接、您下载的软件或信息，以及与使用我们的产品或服务相关的其他操作。我们还可以收集一些必要的技术信息，用于运作和更新我们的产品/服务；以及收集关于使用这些产品/服务的匿名统计信息，和关于我们产品的任何错误报告。

2. Cookies

Cookies是一些小的文本文件，包含您每次访问某个网页留在您硬盘上的一串数字和字母。当您再次访问相同网站时，这些文件可以识别您的浏览器。Cookies可以存储用户设置和其他信息。您可以设置浏览器拒绝所有cookies或在收到cookie时通知您。但请注意，有些网站功能或服务如果不接受cookies可能无法正常工作。以这种方式收集的任何数据都不能用于单独识别网站用户。Cookies不能用于运行程序或将病毒发送至您的计算机。

3. 个人数据的保护

我们努力确保提供给我们的信息得到保护，包括在传输过程中和收到信息的时候。我们将采用适当的管理、技术和物理保障措施来保护个人数据不受意外或非法损坏、意外丢失、未经授权的变更、未经授权的披露和访问、滥用以及任何其他非法形式的个人数据处理。这包括，例如，防火墙，密码保护和其他访问和授权控制。

然而，没有任何互联网传输方式，或电子存储方法，可以保证百分之百安全。我们不能保证或担保您发送给我们的任何信息的安全性，您需要自己承担风险。我们也不能保证，如果违反我们的任何物理、技术或管理的安全措施，这些信息不会被访问、破坏、更改或披露。如果您认为您的个人数据已经泄露，请与我们联系。

4. 保留个人资料

根据法律、我们的合法利益或最佳商业惯例，我们可以针对不同用途，分不同时段保留数据。其他法定义务、法律程序和调查也可能需要保留某些数据。

5. 更改隐私和数据保护政策

5.1我们保留随时修改和更新部分或全部隐私和数据保护政策的权利，并在我们的网站上发布新版本。

5.2我们鼓励您定期检查我们的隐私政策，以保持最新的变更信息。

5.3我们可以通过电子邮件或我们网站上的信息传递系统通知您该政策的更改。

6. 您的权利

您有权确认我们是否可以处理您的个人数据，以及我们在哪里，访问个人数据，以及一些额外的信息。这些附加信息包括处理目的、有关个人数据的类别和个人数据的接收者的详细信息。提供他人的权利和自由不受影响，我们将向您提供您的个人数据副本。

您有权要求对您的任何不准确的个人资料进行纠正，并考虑处理目的，和完成任何不完整的个人数据。

在某些情况下，您有权要求删除您的个人数据，如果您确定收集或处理个人数据的相关目的已不再需要个人数据；您可以撤消对基于该处理用途而授权的权限；您反对在适用的数据保护法的某些规则下进行处理（确定个人数据被非法处理的情况下）。然而，还包括除外责任。一般除外责任包括：在行使言论和信息自由的权利、遵守法律义务或建立、行使或辩护法律诉讼以及出于公共利益考虑时，必须进行处理的情况。

在某些情况下，您有权限制处理您的个人数据，例如，当您对个人数据的准确性提出质疑时；非法处理但您反对删除时；我们不再需要个人数据用于我们的处理用途，但是您需要用个人数据来建立、行使或辩护法律索赔时；在这个异议验证之前，您反对处理时。在此基础上，处理受到限制时，我们可以继续存储您的个人资料，我们只会处理它用于建立、行使或辩护法律诉讼，来保护另一个自然人或法人的权利，或出于重要的公共利益的原因。

您有权在与您特定情况相关的方面反对我们处理您的个人数据，但只包括以下情况：处理的法律依据是必要的；执行公共利益行使的任务或行使赋予我们的任何官方权力或我们和第三方追求的合法利益。如果您提出这样的反对意见，我们将停止处理个人信息，除非我们可以证明我们拥有有说服力的合法理由来处理您的利益、权利和自由，或者是为了建立、行使或辩护法律诉讼而进行处理。

您有权反对我们处理您的个人数据进行直接市场营销（包括为直接市场营销而进行概要分析）。如果您提出这样的反对意见，我们将停止为此处理您的个人数据。

您有权反对因以下原因处理您的个人资料：以科学或历史研究的目的，或出于与您的特殊情况有关的统计目的，除非是出于公共利益的原因而执行任务时必须要求进行处理。

您有权获得提供给我们的个人信息：

基于授权的处理；

通过自动化的方式进行处理，您有权以结构化的、常用的和机器可读的格式从我们那里接收您的个人数据。然而，这一权利不适用于对他人的权利和自由产生不利影响的时候。

如果您认为您个人信息的处理违反了数据保护法，您拥有向负责数据保护的监管机构提出申诉的法律权利。

在某种程度上，我们处理个人信息的法律基础是授权，您有权随时撤销该授权，在这种情况下，我们可能无法向您提供我们服务的一些特性和功能。撤销许可将不会影响在撤销请求之前处理的合法性。

7. 违反通知

如果发生未经授权的入侵或侵入我们的系统，可能会影响您的个人数据安全，我们将在实际可行的情况下立即通知您，我们将采取一切必要的措施和行动，以避免未来发生类似的现象。

According to the privacy and data protection policy, LanSheng Medical Supply Chain （Shanghai）Co., Ltd. (hereinafter referred to as "we" or "our") can https://www.lanshengmed.com/ ("our website") and all relevant websites specified below, downloadable software, mobile applications (including desktop applications, collectively referred to as "our products") and other services provided by us and linked to this privacy policy, as well as all other communications with individuals through written or oral means, such as email, chat or telephone (the websites and products here are collectively referred to as our "Services") Use or process personal data.

We are committed to protecting the personal information you authorize to us when using our website and services, including the use of the following links:

https://www.lanshengmed.com/ And other company websites, including sub-domain names.

definition

Personal data: refers to any information related to identified or identifiable natural persons ("data subjects"); Identifiable natural person refers to an individual who can be identified directly or indirectly through the following information, such as name, ID card number, location data, online identifier or one or more factors, especially the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.

Processing: refers to any operation or a series of operations performed on personal data or personal data set, whether by automated means or not, such as collection, recording, organization, construction, storage, adaptation or change, retrieval, consultation, use, public transmission, dissemination or otherwise providing arrangement or combination, restriction, elimination or destruction.

Processing restriction: refers to the personal data marked to restrict future personal data processing.

Administrator: refers to the natural person or legal person, public authority, institution, or other institution that decides the purpose and method of personal data processing independently or jointly with others; If the purpose and method of such treatment are determined by the laws of the association or member states, the specific criteria for the nomination of the administrator or his / her may be prescribed by the laws of the association or member states.

Processor: refers to the natural person or legal person, public authority, institution, or other institution that processes personal data on behalf of the manager.

Consent of the data subject: it refers to the data subject expressing any affirmative, explicit, informed, and clear intention through declaration or confirmation, that is, agreeing to process personal data related to him or her.

1. Collect and use information

1.1 the information we usually collect is:

• the information you provide directly to us through our website or based on your requirements for our products and services,

• we receive information about your use of our products and services, including but not limited to our website.

1.2 we can collect your personal information from several different sources, including but not limited to:

• website forms and registration information of software products/services

• written form

• telephone or email

• referral agency

• existing customers or employees

• service desk request

• online assistance and support

• social media and social networks

• promotional components and identifiers on the website

1.3 we can collect and use your data for the following purposes:

• performing contractual obligations or performing obligations in the process of providing you with the requested products error services or in connection with our providing you with the requested products error services;

• identify yourself;

• respond, process, and evaluate queries, requests, applications, complaints, vacancy requirements, and feedback;

• manage your relationship with us;

• send you marketing information, including but not limited to surveys and questionnaires about our products or services;

• comply with any applicable laws, regulations, codes of conduct, guidelines, instructions, or rules, or assist any government and/or regulatory authority in law enforcement and investigation;

• any other purpose for which you provide this information;

• provide information to any affiliated third parties, including our third-party service providers and agents, and relevant government and/or regulatory bodies, including European or EU jurisdictions, for the above purposes in this section;

• any other incidental commercial use related to or connected with the above;

• manage and improve the features and functions of our applications and related services;

• analyze the performance of applications by collecting statistical data;

• verify user accounts, combat harmful behaviors in the market, maintain the integrity of our products and services, and promote the protection and security of our website products and services. For example, we use personal information to contact you and investigate suspicious activities or violations of our terms and policies and intellectual property rights.

The use terms listed above may even continue to be used for a reasonable period if your relationship with us (for example, according to the contract) is terminated or changed in any way (including, where applicable, allowing us to enforce our rights under the contract with you or other legal uses).

In addition to our ability to process the personal data you provide in this section for specific purposes, we can also process your data when necessary to comply with our legal obligations, or to protect your vital interests or the vital interests of others.

We cooperate with companies providing services on our behalf to provide services, such as processing information process and delivery, publishing application information, delivering content and services provided through the application and services of our website, or performing statistical analysis using the application and the above services. These service providers will be provided with limited access to information, which is a reasonable and necessary condition for providing services, and we will also require these third parties to comply with this privacy policy or operate under similar privacy policies.

We do not sell, rent, rent or distribute our mailing list to third parties for free.

1.4 personal information and privacy of minors

We recognize the importance of protecting the information of minors, and we will not intentionally collect any personal information of minors under the age of 18. Our website and services are only for adults aged 18 and above, and we do not assume any responsibility for not complying with this requirement.

If we realize that we have received the personal information of visitors under the age of 18, we will delete it as soon as possible and will not use it.

1.5. Collect other information

We can collect non personal information about using our software applications, visit our website, or use other services, including the links you click, the software or information you download, and other operations related to using our products or services. We can also collect some necessary technical information for operating and updating our products/services; And collect anonymous statistical information about the use of these products/services, and any error reports about our products

2. Cookies

Cookies are small text files that contain a string of numbers and letters left on your hard disk every time you visit a web page. When you visit the same website again, these files can identify your browser. Cookies can store user settings and other information. You can set the browser to reject all cookies or notify you when you receive cookies. However, please note that some website functions or services may not work properly if cookies are not accepted. Any data collected in this way cannot be used to identify website users alone. Cookies cannot be used to run programs or send viruses to your computer.

3. Protection of personal data

We strive to ensure that the information provided to us is protected, including during transmission and when receiving information. We will adopt appropriate management, technical and physical safeguards to protect personal data from accidental or illegal damage, accidental loss, unauthorized change, unauthorized disclosure and access, abuse, and any other illegal form of personal data processing. This includes, for example, firewalls, password protection, and other access and authorization controls.

However, there is no Internet transmission method or electronic storage method that can guarantee 100% security. We cannot guarantee or guarantee the security of any information you send us, and you need to bear the risk yourself. We also cannot guarantee that such information will not be accessed, destroyed, changed, or disclosed if any of our physical, technical, or administrative security measures are violated. If you think your data has been leaked, please contact us.

4. Keep personal data

According to the law, our legitimate interests, or best business practices, we can retain data for different purposes and different periods. Other statutory obligations, legal procedures, and investigations may also require the retention of certain data.

5. Change privacy and data protection policies

5.1 we reserve the right to modify and update part or all of our privacy and data protection policies at any time and publish new versions on our website.

5.2 we encourage you to check our privacy policy regularly to keep the latest change in information.

5.3 we can notify you of the change of this policy through email or the information delivery system on our website.

6. Your rights

You have the right to confirm whether we can process your data, where we are, access to personal data, and some additional information. This additional information includes the processing purpose, the category of the personal data, and the detailed information of the recipient of the personal data. The rights and freedoms of providing for others will not be affected, and we will provide you with a copy of your data.

You have the right to request correction of any inaccurate personal data, consider the purpose of processing, and complete any incomplete personal data.

In some cases, you have the right to request the deletion of your data, if you determine that the relevant purpose of collecting or processing personal data no longer requires personal data; You can revoke the authorization based on the processing purpose; You object to the processing under certain rules of the applicable data protection law (if it is determined that personal data is illegally processed). However, it also includes exclusions. The general exclusions include situations that must be dealt with when exercising the right to freedom of speech and information, complying with legal obligations or establishing, exercising, or defending legal proceedings, and in the public interest.

In some cases, you have the right to restrict the processing of your data, for example, when you question the accuracy of your data; Illegal processing but you object to deletion; We no longer need personal data for our processing purposes, but when you need to use personal data to establish, exercise or defend legal claims; Before this objection verification, when you object to processing. On this basis, when processing is restricted, we can continue to store your data, and we will only process it for establishing, exercising, or defending legal proceedings to protect the rights of another natural or legal person, or for important public interests.

You have the right to object to our processing of your data in aspects related to your specific situation, but only in the following cases: the legal basis for processing is necessary; To perform tasks performed in the public interest or to exercise any official powers granted to us or legitimate interests pursued by us and third parties. If you raise such objections, we will stop processing personal information unless we can prove that we have convincing legal reasons to process your interests, rights, and freedoms, or establish, exercise, or defend legal proceedings.

You have the right to object to our processing of your data for direct marketing (including summary analysis for direct marketing). If you raise such objections, we will stop processing your data for this purpose.

You have the right to object to the processing of your data for the following reasons: for scientific or historical research purposes, or statistical purposes related to your special situation unless it is necessary to request processing when performing tasks for reasons of public interest.

You are entitled to the personal information provided to us:

• authorization-based processing;

• through automated processing, you have the right to receive your data from us in a structured, commonly used, and machine-readable format. However, this right does not apply when it adversely affects the rights and freedoms of others.

If you think that the processing of your personal information violates the data protection law, you have the legal right to appeal to the regulatory authority responsible for data protection.

To some extent, the legal basis for our processing of personal information is an authorization. You have the right to revoke this authorization at any time. In this case, we may not be able to provide you with some features and functions of our services. Revoking the license will not affect the legitimacy of processing before revoking the request.

7. Notice of violation

In case of unauthorized intrusion or intrusion into our system, which may affect your data security, we will notify you immediately as far as practicable, and we will take all necessary measures and actions to avoid similar phenomena in the future.