If you are customers from Malaysia, please refer to our Privacy Statement in Malay at https://www.huaweicloud.com/intl/en-us/declaration/sa_prp_ms.html

 

Huawei Cloud ("Huawei Cloud", "we", "our" and "us") understands how important your privacy is to you and fully respects it. Please carefully read this Privacy Statement ("Statement") before you submit your personal data to us. This Statement applies to https://www.huaweicloud.com/intl/en-us/ ("Website"), and all products and services that contain or refer to this Statement (collectively “Services”). This Statement does not apply to Your Content that we process, store or host as a processor at Huawei Cloud.

“Your Content” refers to all data (including personal data), software, device, text, images, video, audio, photographs, third-party applications, information, materials, in any format, provided or made available by you and/or your End User that is transferred to, stored in, processing on the Services. Our materials, data and information will not fall within the definition of Your Content.

 

Huawei Cloud Security

 

HUAWEI CLOUD Customer Agreement

 

This Statement describes how we collect, use and disclose your personal data, as well as our legal bases for processing, and the security measures implemented by us to protect your personal data. It also demonstrates your rights in connection with your personal data, and other related details you need to know before you provide personal data to us. We may inform you of product- or service-specific data collection which is not reflected in this Statement through supplementary policies or notices provided before the relevant collection of your personal data.

We have created this Statement to help you understand:

•       1. How Huawei Cloud Collects Your Personal Data
•       2. How Huawei Cloud Processes Your Personal Data
•       3. How Huawei Cloud Uses Cookie and Similar Technologies
•       4. How Huawei Cloud Shares Your Personal Data
•       5. How Huawei Cloud Protects Your Personal Data
•       6. How Long Huawei Cloud Retains Your Personal Data
•       7. How to Access and Control Your Personal Data
•       8. How Huawei Cloud Handles the Personal Data of Children
•       9. How Your Personal Data Is Transferred Internationally
•       10. How This Statement Is Updated
•       11. How to Contact Huawei Cloud

1. How Huawei Cloud Collects Your Personal Data

Personal data means any information relating to an identified or identifiable natural person. We collect personal data from you in the course of your interaction with us for various purposes, such as providing you with the Services and maintaining the best operation of the Services. Your interaction with us may include, registering an account with the Website, subscribing to the Services, completing payment with us, contacting us when experiencing (technical) problems, browsing our Website and configuring your settings for your account.

Depending on your use of the Services, we collect the following personal data:

a) Personal data submitted to us to register user accounts, such as mobile phone number, email address and others as required for registration.

b) Personal data provided when you contact us, use the Services, or request support or help from us, such as contact information (full name, email and mailing address, mobile phone number), business information (company name, industry, position), means of identification (passport or other ID information), payment information (such as bank account information including credit card number, expiry date and security code, invoice information, tax information), Services and technical support (such as chat sessions or phone conversations when you contract us for seeking assistance) and your signature. Some of the personal data provided may be recognized as sensitive personal data, such as financial information. The purpose of collecting such data is to verify your identification under the applicable law, to provide you with relevant consultancy or technical support, or to support you with the sending of bills and products, or registering of promotion activities. 

c) Personal data obtained and collected automatically by us when you access and use the Services, such as your browser history, access date and time, browser information (including but not limited to fonts, types), your activities on the Website, hardware and software features, and network link information (including but not limited IP address, port, network protocol).

d) Personal data that we legally obtain from business partners (“Partners” which join Huawei Cloud Partner Network) or third parties. We may receive personal data about you from publicly and commercially available sources as permitted by applicable laws and regulations.

Many of the Services require personal data to operate. If you choose not to provide the data required, you may not be able to use those Services. For example, if you do not register an account on our Website by submitting your personal data, you cannot purchase the Services. In other cases, where providing personal data is optional, and you choose not to submit your personal data, you may be unable to use certain features of the Services, such as personalization. However, this will not affect your use of other features of the Services.

2. How Huawei Cloud Processes Your Personal Data

We process your personal data for the following purposes:

a) Creating your account.

b) Fulfilling our obligations under a contract with you such as fulfilling your transaction or service requests, including orders, requests for changes or providing you with the requested information (such as materials on the Services, and white papers); delivering, activating, or verifying the Services; providing technical support. For example, for purposes of providing you with security services, we may need your IP address.

c) Contacting you, and sending you notices relevant for the provision of the Services.

d) Sending you information about the Services that may interest you; inviting you to participate in Huawei Cloud activities (including promotional activities), market surveys, or satisfaction surveys; or sending you marketing information.

e) Using automated processes to tailor your Services experiences based on various data, including your personal data, and providing you with personalized user experience and content on such basis.

f) Improving the Services through internal audits, data analysis, and research.

g) Analyzing the efficiency of our business operations and evaluating market share.

h) Troubleshooting when you send us error reports.

i) Ensuring the security of the Services and our customers or users, executing and improving our loss prevention and anti-fraud programs.

j) Complying with and enforcing applicable legal requirements or industry standards.

We may disclose your personal data to a third party for the following purposes:

a) The disclosure is required in accordance with applicable laws and regulations.

b) The disclosure is necessary to protect rights or property of Huawei Cloud, our customers and/or the public. For example, we may disclose your personal data, when we believe disclosure is necessary or appropriate to prevent or defend cyber threat, fraud, physical harm, or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.

Please see “How Huawei Cloud Shares Your Personal Data” below for details on the third parties to whom we disclose your personal data.

We only disclose your personal data to the extent permitted by applicable laws and regulations and in accordance with this Statement.

3. How Huawei Cloud Uses Cookie and Similar Technologies

To ensure our Website works correctly, we may at times place cookies on your computer or mobile device. Please see our Cookie Policy for details on the cookies and similar technologies we use and how they process your data.

4. How Huawei Cloud Shares Your Personal Data

Sharing means providing third parties with personal data, and the third parties and we would handle the personal data independently. We do not share your personal data with third parties without your consent, except in the following circumstances or as described in this Statement:

a) Third parties under your instruction. We may share your personal data under your explicit consent and within your instruction to the third parties indicated by you.

b) For compliance, fraud prevention and safety. We may share your personal data for the compliance, fraud prevention and safety purposes.

c) We may share your personal data with our affiliates, for purposes of transactions support, Services support or security support. For example, we verify the global uniqueness of accounts before allowing them to be registered. Your information may be shared only for explicit, and legitimate purposes, and the sharing is limited only to information required by our Services.

d) We may sometimes share your personal data with our partners or enable partners to collect information directly via the Services, such as your bill information and account information. The purpose of sharing the information is to implement our Services, and we may shall your personal data within lawful and necessary purpose, the scope of sharing shall be specified and limited to the purposes only. Our partners may include:

1)     Third-party providers, developers, platforms and social media networks. Some Services may be provided directly by third-party providers, developers or platforms. In this cases, we need to provide them with the relevant transaction information. For example, if you purchase third parties’ service via Marketplace, we need to share your personal data with them to fulfil the transaction. If you have enabled features or functionality that connect the Services to a third-party platform or social media network (such as by logging in to the Website using your account with the third-party, providing your access token for the Services to a third-party, or otherwise linking your account to a third-party’s services), we may disclose the personal data that you authorized us to share for this purpose. We do not control the third party’s use of your personal data.

2)     Service providers and Professional advisors. We may share your personal data with third party companies and individuals that provide services on our behalf or help us operate the Website and the Services (such as supply, infrastructure, hosting, customer support, payment, analytics, delivery, marketing, and database management services). We share such data only for purposes consistent with this Statement or under your authorization. For example, we need to share your order information with logistic service providers in order to arrange delivery, or we need to share your financial information with payment service providers in order to confirm and proceed your payment instructions.  We may disclose your personal data to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

When we share your personal data with third parties, their responsibilities and obligations will be governed by contracts and we will require them to take appropriate measures to ensure the safety of the personal data processed.

5. How Huawei Cloud Protects Your Personal Data

We take the security of your personal data seriously. We take appropriate physical, organizational, and technical measures to protect your personal data. For example, we use encryption to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious data attacks; we deploy access control mechanisms to ensure that only authorized personnel can access your personal data; and we raise awareness among employees about the importance of protecting personal data through security and privacy protection training sessions. While we take the utmost care to protect your personal data, please note that no security measures are completely infallible. You can find more details on our security certification at Huawei Cloud Security (https://www.huaweicloud.com/intl/securecenter/overallsafety.html). To this end, we take the following measures:

a) We take reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to what is necessary in relation to the purposes for which they are processed.

b) We use a range of technologies such as cryptographic technologies to ensure the confidentiality of data in transmission. We implement trusted protection mechanisms to protect data and data storage servers from attacks.

c) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. In addition, we control the number of authorized personnel and implement hierarchical permission management on them based on service requirements and personnel levels.

d) We strictly select business partners and service providers and incorporate personal data protection requirements into commercial contracts, audits, and appraisal activities.

e) We hold security and privacy protection training courses, tests, and publicity activities to raise employees' personal data protection awareness.

Although we protect your personal data, you are responsible for safekeeping your login data including account ID, username and passwords.

If you find your account ID is used by others without your permission, please promptly notify us. You have the right to request us to suspend any unauthorized use of your account.

In a word, Huawei Cloud is committed to protecting your personal data. Nevertheless, no security measure is perfect and no product, service, website, data transfer, computing system, or network connection is absolutely secure.

To cope with possible risks, such as personal data leakage, damage, and loss, Huawei Cloud has developed several mechanisms and control measures, clearly defined the rating standards of security incidents and vulnerabilities and corresponding processing procedures. Huawei Cloud has established a dedicated emergency response team to implement security planning, loss reduction, analysis, locating, and remediation, and to perform tracking operations with related departments based on security incident handling regulations and requirements.

6. How Long Huawei Cloud Retains Your Personal Data

We will retain your personal data for no longer than is necessary for the purposes set out in this Statement, unless otherwise required by laws or requested by you. The data storage period may vary depending on the processing purpose and the relevant Service.

We will maintain your account information as long as is necessary for us to provide the Services to you or to perform our obligations or exercise our rights under agreements related to the Services. You can choose to close your account. After you close your account, we will stop providing you with the Services and delete your relevant personal data, provided that we are not required to continue to process certain of your personal data by law, e.g. for accounting or bookkeeping purposes or to perform our obligations, or exercise our rights under agreements related to the Services.

7. How to Access and Control Your Personal Data

It is your responsibility to ensure that all personal data submitted to us is correct. We are dedicated to maintaining the accuracy and completeness of your personal data and keeping your personal data up-to-date based on the information you provide to us.

According to applicable laws and regulations of some countries and/or regions, data subjects may have rights to make requests (hereinafter referred to as “requests”) of accessing, correcting, deleting or erasing the personal data retained by us.

You can easily amend and control the personal data we hold about you as follows:

a) Account information: If you want to add or update personal data related to your account, please go to the Website log into your account via Log in>My Account.

b) Cookie: Regarding the management of Cookie, please see our Cookie Policy.

c) Messages: Please go to the Website and log into your account’ mailbox via Log in>My Account button> unread messages. You set your preferences in the upper right corner of your mailbox via >Message Receive Management.

You have the following rights regarding your personal data:

a) Right to access the personal data we hold about you and obtain copies thereof;

b) Right to request us to update or correct your personal data;

c) Right to request  us to erase your personal data;

d) Right to object to our processing of your personal data;

e) Right to restrict our processing of your personal data;

f) Right to obtain your personal data and have us transfer it to a third party of your choice (data portability); and

g) Right to lodge a complaint with the competent data protection authority.

Please note that these rights are not absolute and may be restricted in accordance with applicable laws. If you need our assistance to exercise the rights above, please contact us as set out in “How to Contact Huawei Cloud” below.

Generally, we will respond to you within one month, unless otherwise required by applicable laws. Depending on the complexity of your requests, we may extend the period by further two months. In this case, we will inform you of the extension and its reasons within one month of receiving your request. Please note that under some circumstances, for example where we cannot verify your identity, or your claim exceeds your rights under applicable laws, we may refuse your request. In this case, we will inform you in writing that your request is refused together with the reasons for our refusal.

You can change the authorized personal data collection scope or withdraw your consent, without affecting the lawfulness of the processing activities based on the consent and prior to such withdraw. Your right of withdrawing consent can be exercised by setting privacy options on your Huawei Cloud account, disabling related Services, or deleting your account. You may also seek help through “12.How to Contact Huawei Cloud”.

You can delete your account in the account-related Services. After you delete your account, we will stop providing Services, and delete your personal data unless otherwise stipulated by law. Your account cannot be restored after deletion. You need to register a new account if you want to use related Services again.

8. How Huawei Cloud Handles Personal Data of Children

Our Services are only intended for adults. Minors are not allowed to create their own user account.

9. How Your Personal Data Is Transferred Internationally

In order to provide the Services to you, we may store your personal data in countries/regions where Huawei Cloud, Huawei Cloud’s affiliate companies, or Huawei Cloud’s service providers or subcontractors are located. This means your personal data may be transferred to countries or regions outside the places where you are located or where we collect your personal data, and be accessed and stored in those jurisdictions.

These jurisdictions may have different data protection laws, which may have less stringent data protection laws or without any relevant laws. In such cases, we will ensure the transfer is in accordance with applicable laws and regulations where the data is located, as well as this Statement.

10. How This Statement Is Updated

We may update or modify this Statement from time to time according to changes of our Services or data processing. If we update this Statement, we will publish the latest version of the Statement on the Website, and it will take effect immediately upon its release. You are advised to review this Statement periodically for any changes. If we make any substantial changes to this Statement (any change of personal data we collect or we use for), we will notify you through appropriate channels and obtain your prior consent.

11. How to Contact Huawei Cloud

We have set up a dedicated personal data protection department (or data protection officer). If you have any questions, comments, or suggestions, please contact us or submitting them to our global offices. To obtain the complete list of Huawei offices, please contact us by the following email address:privacy@huaweicloud.com.

If you want to exercise your privacy rights, or have any privacy issues for which you need to lodge a privacy complaint, or want to consult us regarding general data protection, please visit our Data Subject Right Portal: https://www.huaweicloud.com/intl/en-us/personal-data-request.html. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.

Note: Due to differences in local laws and languages, the local versions of this Privacy Statement may be different from this version. In the case of any conflicts, the local versions shall prevail.