This Privacy Policy will help you understand the following contents:
I. User Information Protection Guide and Product Introduction
The Industrial and Commercial Bank of China (“We” or “ICBC”, registered address: 55 Fuxingmennei Avenue, Beijing, China) attaches great importance to the protection of user information. When you use ICBC’s online products and/or services, we may collect and utilize your related information. Through the Mobile Banking Privacy Policy of Industrial and Commercial Bank of China, we hope to let you know how we collect, utilize, store and share the information when you use our products and/or services, and the way of access to, update, deletion and protection of such information that we provide to you.
Introduction to “ICBC Business” Products:
ICBC has developed a customized mobile banking App for overseas corporate customers, enabling customers to handle account inquiry, and generate and inquire about electronic receipts anytime and anywhere. Customers can also receive financial reminders sent by ICBC via the App. The App also has convenient functions such as fingerprint/face logon, providing corporate customers with secure and convenient mobile banking service experience. Enterprises can authorize operators to use corporate mobile banking services. This Privacy Policy is primarily a description of collection, use, storage and sharing of information and handling methods when authorized persons use our products and/or services.
The App applies to the corporate customers of overseas institutions, including ICBC Singapore Branch, Sydney Branch, ICBC (Asia), ICBC (Macau), ICBC (Thai), ICBC (New Zealand), ICBC (Europe) and Yangon Branch.
II. Information Collected by Us and Necessary Authority
When you use “ICBC Business” services, the App will collect, in a way set out below, the information provided by you when using such services or generated due to use of such services, so as to render services to you, optimize our services and ensure your account security:
2.1 When you use “ICBC Business” services, we will collect your account picture for account setting, as well as the following log information in order to ensure you use our services normally, safeguard the normal operation of our services, improve our services and protect your account security:
Equity model number, operating system, equity identifier, IP log-on address, way of network access, type and state, network quality data, operation log, service log, etc.
Such information is the basic information that must be collected to render services.
2.2 When you use “ICBC Business” services, we may require you to grant the following personal authorities to us in order to ensure you use our services normally, safeguard the normal operation of our services, improve our services and protect your account security:
Camera: QR code scanning and other functions.
Album: Storage of and access to QR code pictures and account pictures, and other functions.
Positioning: Getting a user’s location, automatically providing corresponding regional services and outlet map, and other functions
Fingerprint/FaceID: Log-on, micropayment instructions, limit setting authorization and other authentications.
Such authorization information is sensitive information. Refusal to provide such information will not only disenable you to use corresponding authorization functions, but also affect your normal use of other App functions.
2.3 According to relevant laws, regulations and regulatory rules, in the following circumstances, we may collect and use your related user information without your authorization or approval:
(1) Information directly relating to national security and defense and other national interests; information directly relating to public security, public health, public right to know and other major public interests;
(2) Information directly relating to crime detection, prosecution, judgment and execution of judgment;
(3) For the purpose of safeguarding your or other persons’ life, property, reputation and other major legitimate rights and interests, for which personal consent is hard to obtain;
(4) The user information collected is made public by you;
(5) The user information collected from the information disclosed to the public according to law, including legal news report, government information and other channels;
(6) Information necessary for signing and executing a contract according to your requirements;
(7) Information necessary for maintaining the safe and stable operation of products or services provided, e.g. finding and handling product or service failure;
(8) Other circumstances as stipulated by laws, regulations and regulatory rules.
Please make sure that the functions and services we provide to you will be updated and developed from time to time. If a certain function or service is not included in the above description and we have collected your information, we will inform you of the content, scope and purpose of information collection by page prompt, interactive process and announcement on website, and solicit your express consent or authorization.
III. Information Storage
We will properly store your user information according to relevant laws, regulations and regulatory rules of China and the countries (regions) where we operate.
Generally, we only keep your user information in accordance with laws, regulations and regulatory requirements and for a period necessary for realizing customer services, e.g.:
User account picture: If you need to use “ICBC Business” services, we will keep the account picture uploaded by you, and will delete it after you change your account picture.
In case of suspension of our products or services, we will inform you by notice, announcement, etc., and will delete your user information or make it anonymous within a reasonable time limit according to relevant laws and regulations.
IV. Information Security Protection
We strive to provide guarantee for users’ information security, so as to avoid information loss, improper use, and unauthorized access or disclosure.
We will take various security protection measures to ensure information security within a reasonable security level. For example, we will protect your user information by encryption technique (e.g. SSL), anonymous processing and other means.
We will constantly improve technical means to strengthen the security capability of the software installed to your devices, and prevent the leakage of your user information. For example, we will complete encryption of part of information in your local devices for the purpose of transmission security.
We will establish special management rules, processes and organizations to safeguard information security. For example, we will strictly restrict the scope of persons with access to information, and require them to observe confidentiality obligations and conduct audits.
If security events, including user information leakage, occur, we will initiate an emergency plan to prevent the deterioration of such events, and inform you by notice, announcement, etc.
V. Way of Information Use
In order to ensure service security and give us a better knowledge of the operating status of our application programs, we may record relevant information, including your application program use frequency, crash data, overall use condition, performance data and sources of application programs. We will not combine our information stored in the analysis software with any personal identity information that you provide to the application programs.
We will not use the “address list”, “photos” or information on other APIs with access to user data to create the database of your contact persons for self-use or distribution to a third party, nor will we collect other Apps installed in your device for the purposes of, among other, analyzing or launching advertising/marketing. Meanwhile, we will not contact you by the information collected via the “address list” or “photos”.
If we use your user information in excess of the purposes stated at the time of collection and the scope of direct or reasonable association, before using such information, we will inform you by online notice or other means and obtain your express consent or authorization.
VI. Management of Personal Information
6.1 Inquiry about, correction, update and deletion of personal information. You can inquire about personal information related to the “ICBC Business” service through outlets of the Bank’s corresponding overseas institutions, and authorize an employee to file an application to an outlet for updating personal information, unless otherwise provided by laws, regulations and regulatory requirements. You can change various settings via the “ICBC Business” App to facilitate your handling of relevant services.
You can directly ask us to delete personal information in the following situations:
i. You believe that our processing of personal information violates laws, regulations and regulatory requirements.
ii. You believe that we have collected and used your personal information without your consent.
iii. You have no longer used our products or services, or you have cancelled your account.
6.2 Scope of inquiry and change of authorization. You can use a mobile phone to inquire about the permissions granted to the “ICBC Business” client to use your camera, album and positioning, or read your fingerprint/face ID, etc., and change or cancel the corresponding permissions at any time. Refusing to grant these permissions will prevent you from using the corresponding features in the client, but will not affect your normal use of other features of the client. Before you modify your personal information, we will verify your identity. After logging on to the “ICBC Business” client, you can perform the following operations.
Logon picture setting——Allow you to change account picture, and you may set by camera shooting or reading of phone album
Security device management——Allow you to bind, unbind and view security devices, etc.
Logon management——Provide you with the logon-related setting functions, including enabling or disabling the fingerprint/face and gesture password logon methods, modifying the logon password, setting the gesture password, etc.
Security certification management——You can enable or disable the fingerprint/face business certification method and set corresponding limits for it. If you choose to enable it, the system will save your fingerprint, face ID and other biological recognition information.
ICBC Messenger——You can enable or disable local ICBC Messenger message push. If you choose to enable it, the system will record your device information.
Account management——You can set an alias for an account in account management.
6.3 Cancellation of user. An enterprise’s authorized person may cancel your corporate banking channel via an outlet of ICBC. Please note that if you only delete the “ICBC Business” client in the mobile device without cancellation of e-banking, we will not cancel your user information and all the information about you will not be deleted.
6.4 Response to your above requests. If you cannot access, correct or delete your user information through the above methods, or you need to access, correct or delete other user information produced when you use our services or functions, or you believe that we have collected or used customer information in violation of laws, regulations and regulatory requirements or your agreement on collection or use of user information, you can directly contact us by calling the customer service hotline of ICBC’s overseas institution in the place where ICBC has launched the corporate mobile banking services or via the “Contact Us” function of the client. We will actively respond to your request to the extent permitted by laws, regulations and regulatory requirements. We may first verify your identity before responding to your request. We may reject some repeated requests or the requests that many bring risks to other persons’ legitimate rights and interests, or unrealistic requests.
Notwithstanding the above provisions, ICBC may not be able to respond to your requests in the following circumstances as per relevant laws, regulations and regulatory requirements:
1. Where it is related to the fulfillment of the obligations set out in laws, regulations and regulatory requirements by the controller of personal information;
2. Information directly relating to national security or defense;
3. Information directly relating to public security, public health and other major public interests;
4. Information directly relating to crime detection, prosecution, judgment and execution of judgment;
5. Where the controller of personal information has sufficient evidence that personal information owner has the subjective act of bad faith or abuses rights;
6. For the purpose of safeguarding the personal information owner’s or other persons’ lives, property and other major legitimate rights and interests, for which it is difficult to obtain personal consent;
7. Where response to personal information owner’s requests may result in serious damages to the legitimate rights and interests of personal information owner or other persons and organizations;
8. Where business secrets are concerned;
9. Other circumstances required by competent authorities or laws and regulations of the countries (regions) in which ICBC’s overseas institutions are located.
VII. Provision of Information
We will not share your user information with any third party, unless otherwise stated by laws, regulations and regulatory rules.
We will not make public the user information we collected. If we must disclose it to the public, we will inform you of its purpose, the type of information to be disclosed and sensitive information possibly involved, and solicit your express consent or authorization by online notice or other means.
Besides, according to relevant laws, regulations and regulatory rules, in the following circumstances, we are likely to share and make public user information without soliciting the authorization or consent of user information owner:
(1) Information directly relating to national security or defense;
(2) Information directly relating to public security, public health and other major public interests;
(3) Information directly relating to crime detection, prosecution, judgment and execution of judgment;
(4) For the purpose of safeguarding the user information owner’s or other persons’ life, property and other major legitimate rights and interests, for which personal consent is hard to obtain;
(5) The user information made public by the user information owner;
(6) The user information collected from the information disclosed to the public according to law, including legal news report, government information and other channels.
VIII. Use of Positioning Information
When you use “ICBC Business” services, we will collect the following log information in order to ensure you use our services normally, safeguard the normal operation of our services, improve our services and protect our accurate security. Such information is sensitive information, which can only be used to provide you with relevant services only if we obtain your authorization. Refusing to provide the information will only make you unable to use location-related functions, but will not affect your normal use of other functions of the App.
IX. Information Protection for Minors
“ICBC Business” provides financial services to overseas corporate users, and do not collect information on minors.
X. Notification and Modification
In order to provide you with better service, this Privacy Policy will also be updated from time to time with business development. However, without your explicit consent, we will not reduce your rights that you should enjoy under this Policy. We will post an update on the website or the App and notify you by means of a website announcement or other appropriate means before the entry into force.
XI. How to Contact Us
If you have any questions, comments or suggestions about this Privacy Policy or your user information, please use the “Contact Us” function of the client to understand the customer service channels of the Bank, and contact us by calling the customer service of ICBC’s overseas institutions or other means.