● No Data Misuse: We will never use collected data for purposes unrelated to our services. We will not share or transfer data to third parties without authorization. When sharing is necessary, we will strictly fulfill our notification obligations and obtain explicit consent from data subjects.We will also impose data protection obligations on recipients and monitor their compliance.
● No Hidden Rules: We will comprehensively, clearly, and accessibly disclose data processing rules, avoiding obscure or confusing language. This ensures data subjects can easily access and clearly understand the details of how their data is processed, safeguarding their right to make informed decisions.
● No Evasion of Responsibility: We proactively accept supervision from regulatory authorities, industry organizations, and the public. In the event of a data security incident, we will immediately activate our emergency response, promptly notify affected parties, take remedial measures, and assume corresponding legal responsibilities.
● Continuous Improvement: We regularly conduct self-assessments and improvements on data privacy protection. Combining technological advancements and regulatory updates, we continuously enhance our data protection framework and privacy protection capabilities, practicing the principle of “Privacy by Default.”
Compliance as the Foundation, Transparency as the Priority We uphold core data protection principles, honor Sungrow’s privacy commitments, and establish clear data storage standards. This ensures the entire data processing lifecycle is traceable and auditable, effectively safeguarding subject rights to know and to control.
Lawfulness and Fairness
Data Minimization
Security Safeguards
Transparency
Accountability
We solemnly make the following privacy commitments, accepting public supervision with an open and transparent approach, and upholding our responsibility and accountability to data subjects.
Data Storage Region Statement
We adopt a region-isolated data storage architecture to comply with global privacy regulations. Data for Chinese Mainland services resides on compliant domestic cloud servers; EU, Australia and India regional services leverage local AWS regions for in-jurisdiction storage; data for Rest of the World users is hosted on Alibaba Cloud in Hong Kong SAR. All cross-border data transfers follow local statutory requirements.
Multi-Level Protection
Multi-level access protection & end-to-end multi-layer encryption
Redundant Backups
Multi-copy redundant backup & isolated disaster recovery
24/7
24/7 dedicated security operation
To comply with global privacy regulations, we implement a standardized full-cycle privacy compliance workflow for all regional business systems.
Rights at the core, efficiency as the priority We fully respect and safeguard the various rights enjoyed by data subjects in accordance with the law, strictly comply with regulatory requirements such as the GDPR, and have established a convenient, efficient, and standardized mechanism for responding to data subject rights requests. This ensures that data subjects can easily exercise their rights, receive timely feedback, and that their legitimate rights and interests are effectively protected.
Right to be Informed
Right of Access
Right to Rectification
Right to Erasure
Right to Data Portability
Data Subject Rights Response Channel
