隐私政策

《小迪工作室用户信息及隐私保护政策》

[以下称《小迪工作室用户信息及隐私保护政策》为“(本)政策”或“隐私政策”]

·《小迪工作室用户信息及隐私保护政策》由用户与小迪工作室共同缔结，本政策具有合同效力。
·欢迎用户访问小迪工作室~为保障用户在访问小迪工作室的隐私权，小迪工作室特此制定本政策，以向用户说明在访问小迪工作室时，我们如何收集、使用、储存和分享用户的信息，以及我们为用户提供的访问、更新、控制和保护这些信息的方式。
·我们可能会适时对本郑策进行修订。当本政策的条款发生重大变更时，请仔细阅读变更后的隐私政策。用户继续使用小迪工作室提供的服务，表示用户同意我们按照更新后的隐私政策收集、处理或使用用户的信息。

一、小迪工作室收集的信息
·我们向用户提供服务时会收集、储存或以其他合法方式使用下列与用户有关的信息。如果用户不提供相关信息，将无法享受我们提供的部分服务，或无法达到相关服务拟达到的效果。我们会出于以下目的，收集和使用用户以下的用户信息：
1.1 我们在用户主动提供的情况下收集以下信息：
1.1.1 用户评论时，需要输入名称、邮箱(必填项)和用户网站(选填项)。若用户拒绝提供上述注册所必须的信息，将会导致用户无法正常使用评论功能。
1.1.2 用户登录后台账号时，需要按照我们的指引完成一系列登录程序，在此过程中，用户需要向我们提供用户名和密码(必填项)用于匹配用户身份以完成登录。用户只有提供真实准确的上述信息，才能成功登录账号并进行小迪工作室后台管理；若用户拒绝提供上述注册所必须的信息，将会导致用户无法登录。
1.2 为向用户提供服务以及保护账号安全，我们会按照如下方式收集用户在使用服务时主动提供的或因为使用服务而产生的信息：
1.2.1 设备提交信息的IP地址。为保障用户正常使用我们的服务，维护基础功能的正常运行及保障用户的账号安全，我们会收集用户的移动设备、网页浏览器等终端设备的提交信息的IP地址。
1.2.2 用户评论的操作及内容。为使用户正常评论，同时用于批准以及防止恶意刷评，在获取用户的用户信息(见1.1.1)后，我们将处理用户提交的信息。

二、小迪工作室如何使用用户的信息
2.1 对于必要的用户信息，我们会用来提供小迪工作室服务的各项功能。
2.2 对非必要的用户信息，我们会用于以下用途，包括审核评论信息、用户调研访谈、用户回流邀请或其他活动邀请。用户可以随时取消用户就非必要的用户信息，向我们提供的授权。
2.3 如果我们将用户的信息用于本郑策中未载明的其他用途，会事先征求用户同意。但是，根据相关法律法规及国家标准，以下情形中，我们可能会共享、转让、公开披露用户信息而无需事先征得用户的授权同意：
1）与国家安全、国防安全等国家利益直接相关的；与公共安全、公共卫生、公共知情等重大公共利益直接相关的；
2）与犯罪侦查、起诉、审判和判决执行等直接相关的；
3）出于维护用户或其他用户的生命、财产、声誉等重大合法权益但又很难得到本人同意的；
4）所收集的用户信息是用户自行向社会公众公开的；
5）从合法公开披露的信息中收集用户信息的，如合法的新闻报道、政府信息公开等渠道；
6）根据用户要求签订和履行合同所必需的；
7）用于维护所提供的产品或服务的安全稳定运行所必需的，包括发现、处置产品或服务的故障；
8）为开展合法的新闻报道所必需的；
9）出于公共利益开展统计或学术研究所必要，且其对外提供学术研究或描述的结果时，对结果中所包含的用户信息进行去标识化处理的；
10）法律法规规定的其他情形。

三、小迪工作室如何分享、转让或披露用户的信息
·除本政策规定的情形之外，我们不会主动分享、转让、披露用户的用户信息至小迪工作室以外的第三方，如存在其他分享、转让、披露用户的用户信息或用户需要我们将用户的用户信息分享、转让、披露至小迪工作室以外的第三方情形时，我们会直接或确认该第三方征得用户对上述行为的明示同意。
3.1 我们如何分享用户信息
我们遵照法律法规的规定，对用户信息的分享进行严格限制。除非第2.3条约定的情形，或者我们获得用户的明确同意，我们不会与其他任何公司、组织和用户分享用户的用户信息。基于以下情形，我们会征求用户对共享用户信息的授权同意：
3.1.1 我们可能会与我们的关联公司共享用户的用户信息。关联公司处理共享数据将受本政策约束，如需改变用户信息的处理目的，将再次征得用户的同意；
3.1.2 维护和改善我们的服务。我们可能向合作伙伴及其他第三方分享用户的信息，以帮助我们为用户提供更完善的服务；
3.1.3 为履行我们在本政策或我们与用户达成的其他协议中的义务的目的。
3.2 我们如何转让用户的用户信息
随着我们业务的持续发展，我们有可能进行合并、收购、资产转让或类似的交易，而用户的信息有可能作为此类交易的一部分而被转移。我们将告知用户相关情形，按照法律法规及不低于本政策所要求的标准继续保护或要求新的控制者继续保护用户的用户信息。
3.3 我们如何披露用户的用户信息
·我们仅会在以下情况下，且采取符合业界标准的安全防护措施的前提下，披露用户的信息：
1）获得用户明确同意后；
2）在法律、法律程序、诉讼或政府主管部门强制性要求的情况下，我们可能会公开披露用户的用户信息。
3.4 无需授权的分享、转让、披露
根据相关法律法规及国家标准，以下情形中，我们可能会共享、转让、公开披露用户信息无需事先征得用户的授权同意：
1）与国家安全、国防安全直接相关的；
2）与公共安全、公共卫生、重大公共利益直接相关的；
3）与犯罪侦查、起诉、审判和判决执行等直接相关的；
4）出于维护用户信息主体或其他用户的生命、财产等重大合法权益但又很难得到本人同意的；
5）用户信息主体自行向社会公众公开的；
6）从合法公开披露的信息中收集用户信息的，如合法的新闻报道、政府信息公开等渠道。
3.5 我们如何保留、储存和保护用户的信息
我们仅在本政策所述目的所必需期间和法律法规要求的时限内保留用户的用户信息。我们将采取以下手段保护用户的信息：
3.5.1 数据安全技术措施。我们使用各种安全技术和程序，以防信息的丢失、不当使用、未经授权阅览或披露。
3.5.2 请用户理解，我们将尽力确保或担保用户信息的安全，但互联网环境并非百分之百安全。由于技术的限制以及风险防范的局限，即便我们已经尽量加强安全措施，也无法始终保证信息百分之百的安全。希望用户能理解，用户接入及/或使用我们的产品或服务所用的系统和通讯网络，有可能因我们可控范围外的情况而发生问题。若因此发生用户信息泄露等安全事件，我们会启动应急预案，阻止安全事件扩大。安全事件发生后，我们会以公告形式告知用户安全事件的基本情况、我们即将或已经采取的处置措施和补救措施，以及我们对用户的应对建议。如果难以实现逐一告知，我们将通过公告方式发布警示。
3.5.3 信息存储的方式和期限。我们保证用户信息，将存储在承担运营商及本工作室内。未获得用户的明示授权、法律法规的明确规定，及/或相关主管机构的要求，我们不会将用户信息转移。我们会通过安全的方式存储用户的信息，包括本地存储（利用APP进行数据缓存）、数据库和服务器日志。我们保证只会在为实现服务目的所必需的时间内或法律法规规定的条件及期限下存储用户信息。在超出上述存储期限后，我们会对用户的用户信息进行删除或匿名化处理。但用户行使删除权、注销账号的或法律法规另有规定的除外（例如：《电子商务法》规定：商品和服务信息、交易信息保存时间自交易完成之日起不少于三年）。

四、如何管理用户的信息
4.1 删除用户的信息
在以下情形下，用户可以向我们提出删除用户信息的请求：
1）如果我们处理用户信息的行为违反法律法规；
2）如果我们收集、使用用户的信息，却未征得用户的同意；
3）如果我们处理用户的信息的行为违反了本政策；
4）如果用户不再使用小迪工作室服务；
5）如果我们不再向用户提供小迪工作室服务。
·用户可以通过官网获取联系方式联系我们，我们会在11.4514个工作日内答复用户的请求。如我们决定响应用户的删除请求，我们还将同时通知从我们获得用户用户信息的第三方，要求其及时删除，除非法律法规另有约定，或该第三方获得了用户的单独授权。
4.2 改变用户授权同意的范围或撤销用户的授权同意
·如果该等授权同意并非使用小迪工作室服务所必需，用户可以通过官网获取联系方式联系我们，对部分用户信息改变或撤销用户的授权同意。我们会在11.4514个工作日内答复用户的请求。
·当用户撤销授权同意后，我们将不再处理相应的用户信息，但用户撤销授权同意的决定，不会影响此前基于用户的授权而开展的用户信息处理。
4.3 响应用户的上述请求
4.3.1 为保障安全，用户可能需要证明用户的身份。我们可能会先要求用户验证自己的身份，然后再处理用户的请求。我们将在11.4514个工作日内作出答复。对于用户合理的请求，我们原则上不收取费用，但对多次重复、超出合理限度的请求，我们将视情收取一定成本费用。对于那些无端重复、需要过多技术手段（例如：需要开发新系统或从根本上改变现行惯例）、给他人合法权益带来风险或者非常不切实际（例如：涉及备份磁带上存放的信息）的请求，我们可能会予以拒绝。
4.3.2 在以下情形中，我们将无法响应用户的请求：
1）与用户信息控制者履行法律法规规定的义务相关的；
2）与国家安全、国防安全直接相关的；
3）与公共安全、公共卫生、重大公共利益直接相关的；
4）与刑事侦查、起诉、审判和执行判决等直接相关的；
5）用户信息控制者有充分证据表明用户信息主体存在主观恶意或滥用权利的；
6）出于维护用户信息主体或其他用户的生命、财产等重大合法权益但又很难得到本人同意的；
7）响应用户信息主体的请求将导致用户信息主体或其他用户、组织的合法权益受到严重损害的；
8）涉及商业秘密的。

五、Cookies政策
·Cookie是一种可让网站服务器将数据存储于客户端或从客户端中读取数据的中立技术。安全的Cookie技术可以为您在上网时提供更为便捷的服务。通过使用cookies，小迪工作室向用户提供简单易行的网络体验。
·我们可能通过cookies收集和使用您的信息，并将该等信息储存。我们使用自己的cookies用于记住用户的身份以及用于登录。

六、隐私政策变更
·我们可能会适时对政策进行修订。当条款发生变更时，我们会通过公告形式向用户展示变更后的隐私政策。

七、其他规定
7.1 如本政策中的任何条款无论因何种原因完全或部分无效或不具有执行力，本政策的其余条款仍应有效并且有约束力以及具有执行力。
7.2 本政策所有条款的标题仅为方便阅读，本身并无实际涵义，不能作为本政策及相关条款涵义解释的依据。
7.3 小迪工作室不行使、未能及时行使或者未充分行使本协议或者按照法律法规规定所享有的权利，不应被视为放弃该权利，也不影响小迪工作室在将来行使该等权利。
7.4 小迪工作室保留对本政策的修改，增补，删除、更新的有关权利。
7.5 本政策的订立、履行、解释及争议的解决均适用中华人民共和国法律并排除其他一切冲突法的适用。本协议订立于南京市秦淮区。如双方就本政策的内容或其执行发生任何争议，双方应友好协商解决；协商不成时，双方同意交由南京市人民法院管辖并处理。

小迪工作室

更新日期：2023年8月28日
最新版本生效日期：2023年8月28日

→ X-Ray Studio User Information and Privacy Protection Policy Privacy Policy

{hereinafter referred to as the “X-Ray Studio User Information and Privacy Protection Policy” as the “(this) Policy” or “Privacy Policy”}

·The “X-Ray Studio User Information and Privacy Protection Policy” is jointly signed by the user and X-Ray Studio, and this policy has contractual effect.
·Welcome to X-Ray Studio~In order to protect users’ privacy rights when accessing X-Ray Studio, X-Ray Studio hereby formulates this policy to explain to users how we collect, use, store, and share user information when accessing X-Ray Studio, as well as the ways we provide users with access, update, control, and protection of this information.
·We may revise this policy in due course. When there are significant changes to the terms of this policy, please carefully read the revised privacy policy. By continuing to use the services provided by X-Ray Studio, the user agrees that we will collect, process, or use the user’s user information in accordance with the updated privacy policy.

1、 Information collected by X-Ray Studio
·When providing services to users, we will collect, store, or use the following information related to users in other legal ways. If users do not provide relevant information, they will not be able to enjoy some of the services we provide or achieve the desired results of the relevant services. We will collect and use user information for the following purposes:
1.1 We collect the following information on the user’s initiative:
1.1.1 When users comment, they need to enter the name, email (mandatory), and user website (optional). If the user refuses to provide the necessary information for registration, it will result in the user being unable to use the comment function normally.
1.1.2 When logging into the backend account, users need to follow our instructions to complete a series of login procedures. During this process, users need to provide us with their username and password (required items) to match their identity to complete the login. Users can only successfully log in to their account and manage the background of X-Ray Studio by providing truthful and accurate information mentioned above; If the user refuses to provide the necessary information for registration, it will result in the user being unable to log in.
1.2 In order to provide services to users and protect account security, we will collect information voluntarily provided by users during or as a result of using the service as follows:
1.2.1 IP address for device submission information. To ensure the normal use of our services by users, maintain the normal operation of basic functions, and ensure the security of users’ accounts, we will collect the IP addresses of submission information from users’ mobile devices, web browsers, and other terminal devices.
1.2.2 Operation and content of user comments. To enable users to comment normally, as well as to approve and prevent malicious comments, we will process the information submitted by users after obtaining their user information (see 1.1.1).

2、 How does X-Ray Studio use user information
2.1 For necessary user information, we will use it to provide various functions of X-Ray Studio services.
2.2 For non essential user information, we will use it for the following purposes, including reviewing comment information, conducting user research interviews, inviting users to return, or inviting other activities. Users can cancel the authorization provided to us for non essential user information at any time.
2.3 If we use the user’s information for other purposes not specified in this Zheng Ce, we will seek the user’s consent in advance. However, according to relevant laws, regulations, and national standards, in the following situations, we may share, transfer, and publicly disclose user information without obtaining the user’s authorization and consent in advance:
1) Directly related to national security, national defense security, and other national interests; Directly related to major public interests such as public safety, public health, and public information;
2) Directly related to criminal investigation, prosecution, trial, and execution of judgments;
3) For the purpose of safeguarding the significant legitimate rights and interests of users or other users’ lives, property, reputation, etc., but it is difficult to obtain personal consent;
4) The collected user information is publicly available to the public by the user themselves;
5) Collecting user information from legally disclosed information, such as legitimate news reports, government information disclosure, and other channels;
6) Necessary for signing and fulfilling contracts according to user requirements;
7) Necessary for maintaining the safe and stable operation of the provided products or services, including identifying and handling malfunctions in the products or services;
8) Necessary for conducting legitimate news reporting;
9) It is necessary to conduct statistical or academic research in the public interest, and when providing academic research or descriptive results to the public, the user information contained in the results is de identified;
10) Other situations stipulated by laws and regulations.

3、 How does X-Ray Studio share, transfer, or disclose user information
·Except for the circumstances specified in this policy, we will not actively share, transfer, or disclose user information to a third party other than X-Ray Studio. If there are other sharing, transfer, or disclosure of user information or if the user needs us to share, transfer, or disclose user information to a third party other than X-Ray Studio, we will directly or confirm that the third party has obtained the express consent of the user for the above actions.
3.1 How to Share User Information
We strictly restrict the sharing of user information in accordance with laws and regulations. Unless otherwise agreed in Article 2.3 or with the explicit consent of the user, we will not share user information with any other company, organization, or user. Based on the following circumstances, we will seek authorization and consent from users to share user information:
3.1.1 We may share user information with our affiliated companies. The processing of shared data by affiliated companies will be subject to this policy. If the purpose of processing user information needs to be changed, the consent of the user will be obtained again;
3.1.2 Maintain and improve our services. We may share user information with partners and other third parties to help us provide users with more comprehensive services;
3.1.3 For the purpose of fulfilling our obligations under this policy or other agreements reached with users.
3.2 How Do We Transfer User Information
With the continuous development of our business, we may engage in mergers, acquisitions, asset transfers, or similar transactions, and user information may be transferred as part of such transactions. We will inform users of the relevant situation and continue to protect their user information in accordance with laws, regulations, and standards not lower than those required by this policy, or require new controllers to continue to protect their user information.
3.3 How do we disclose user information
·We will only disclose user information under the following circumstances, and under the premise of adopting safety protection measures that comply with industry standards:
1) After obtaining the explicit consent of the user;
2) We may publicly disclose user information in cases of law, legal proceedings, litigation, or mandatory requirements from government authorities.
3.4 Unauthorized sharing, transfer, and disclosure
According to relevant laws, regulations, and national standards, in the following situations, we may share, transfer, and publicly disclose user information without obtaining prior authorization and consent from the user:
1) Directly related to national security and national defense security;
2) Directly related to public safety, public health, and major public interests;
3) Directly related to criminal investigation, prosecution, trial, and execution of judgments;
4) For the purpose of safeguarding the significant legitimate rights and interests of the user information subject or other users’ lives, property, etc., but it is difficult to obtain personal consent;
5) The user information subject makes it publicly available to the public on its own;
6) Collecting user information from legally disclosed information, such as legitimate news reports, government information disclosure, and other channels.
3.5 How do we retain, store, and protect user information
We will only retain user information for the period necessary for the purposes stated in this policy and within the time limit required by laws and regulations. We will take the following measures to protect user information:
3.5.1 Data security technical measures. We use various security technologies and procedures to prevent information loss, improper use, unauthorized reading or disclosure.
3.5.2 Please understand that we will do our best to ensure or guarantee the security of user information, but the internet environment is not 100% secure. Due to technological limitations and risk prevention limitations, even if we have tried to strengthen security measures, we cannot always ensure 100% information security. We hope users can understand that the systems and communication networks used by users to access and/or use our products or services may encounter problems due to situations beyond our control. If a security incident such as user information leakage occurs as a result, we will initiate an emergency plan to prevent the expansion of the security incident. After a security incident occurs, we will inform users of the basic situation of the security incident, the measures we are about to take or have taken to address and remedy it, as well as our response suggestions to users in the form of a notice. If it is difficult to achieve individual notification, we will issue warnings through announcements.
3.5.3 Information storage methods and deadlines. We guarantee that user information will be stored in the responsible operator and our studio. We will not transfer user information without explicit authorization from the user, clear provisions of laws and regulations, and/or requirements from relevant regulatory authorities. We will store user information in a secure manner, including local storage (using APP for data caching), databases, and server logs. We guarantee that we will only store user information for the time necessary to achieve the service objectives or under the conditions and deadlines stipulated by laws and regulations. After the above storage period is exceeded, we will delete or anonymize the user’s user information. Except for cases where users exercise the right to delete or cancel their accounts, or where laws and regulations provide otherwise (for example, the Electronic Commerce Law stipulates that the storage time of goods and service information and transaction information shall not be less than three years from the date of transaction completion).

4、 How to manage user information
4.1 Deleting User Information
In the following situations, users can request us to delete user information:
1) If our behavior in handling user information violates laws and regulations;
2) If we collect and use user information without obtaining the user’s consent;
3) If our handling of user information violates this policy;
4) If the user no longer uses X-Ray Studio services;
5) If we no longer provide X-Ray Studio services to users.
·Users can contact us through the official website for contact information, and we will respond to their requests within 11.4514 working days. If we decide to respond to a user’s deletion request, we will also notify the third party who obtained the user’s user information from us and require them to delete it in a timely manner, unless otherwise agreed by laws and regulations, or if the third party has obtained separate authorization from the user.
4.2 Changing the scope of user authorization or revoking user authorization
·If such authorization consent is not necessary for using X-Ray Studio services, users can contact us through the official website to change or revoke their authorization consent for some user information. We will respond to the user’s request within 11.4514 working days.
·When a user revokes their authorization consent, we will no longer process the corresponding user information. However, the decision to revoke their authorization consent will not affect the previous user information processing based on their authorization.
4.3 Responding to the above requests from users
4.3.1 To ensure security, users may need to prove their identity. We may first require users to verify their identity before processing their requests. We will provide a response within 11.4514 working days. For reasonable requests from users, we do not charge fees in principle, but for requests that are repeated multiple times and exceed reasonable limits, we will charge a certain cost according to the situation. We may refuse requests that are unfounded, require excessive technical means (such as developing new systems or fundamentally changing existing practices), pose risks to the legitimate rights and interests of others, or are highly impractical (such as involving information stored on backup tapes).
4.3.2 In the following situations, we will not be able to respond to user requests:
1) Related to the fulfillment of obligations stipulated by laws and regulations by the user information controller;
2) Directly related to national security and national defense security;
3) Directly related to public safety, public health, and major public interests;
4) Directly related to criminal investigation, prosecution, trial, and execution of judgments;
5) The user information controller has sufficient evidence to indicate that the user information subject has subjective malice or abuse of rights;
6) For the purpose of safeguarding the significant legitimate rights and interests of the user information subject or other users’ lives, property, etc., but it is difficult to obtain personal consent;
7) Responding to the request of the user information subject will cause serious damage to the legitimate rights and interests of the user information subject or other users or organizations;
8) Involving trade secrets.

5、 Cookies Policy
·Cookies are a neutral technology that allows website servers to store data on or read data from clients. Secure cookie technology can provide you with more convenient services while surfing the internet. By using cookies, X-Ray Studio provides users with a simple and easy online experience.
·We may collect and use your information through cookies and store it. We use our own cookies to remember the user’s identity and to log in.
6、 Privacy Policy Changes
·We may revise the policy in a timely manner. When there are changes to the terms, we will display the changed privacy policy to users through announcements

7、 Other regulations
7.1 If any provision of this policy is completely or partially invalid or unenforceable for any reason, the remaining provisions of this policy shall remain valid, binding, and enforceable.
7.2 The titles of all clauses in this policy are for convenience only and have no actual meaning, and cannot be used as a basis for the interpretation of the meaning of this policy and related clauses.
7.3 Failure of X-Ray Studio to exercise, timely exercise, or fully exercise the rights enjoyed by this agreement or in accordance with laws and regulations shall not be deemed as a waiver of such rights, nor shall it affect X-Ray Studio’s future exercise of such rights.
7.4 X-Ray Studio reserves the right to modify, supplement, delete, and update this policy.
7.5 The formulation, performance, interpretation, and dispute resolution of this policy shall be governed by the laws of the People’s Republic of China and shall exclude the application of all other conflict laws. This agreement is made in Qinhuai District, Nanjing City. If there is any dispute between the parties regarding the content or implementation of this policy, both parties shall resolve it through friendly consultation; If negotiation fails, both parties agree to submit it to the jurisdiction and handling of the Nanjing People’s Court.

X-Ray Studio
Updated on August 28, 2023
Latest version effective date: August 28, 2023