JinkoSolar Privacy Notice

Preamble

JinkoSolar is an energy storage plant monitoring application. This Privacy Notice explains the processing of your personal data by JinKO Solar Co., Ltd. ("Jinko" or "we"), with its registered address at No.1 Yingbin Road, Shangrao Economic and Technical Development Zone, Jiangxi Province, China, tax identification number 91361100794799028G as the controller (Art. 4 no. 7 GDPR) and your rights under the GDPR.

I. Information we collect and use – purposes of processing

1. Processing for purposes to provide JinkoSolar services to users

We will collect and use the information you actively provide to enable you to use and receive the services as follows. The legal basis is Art. 6 (1) b) GDPR. :

1.1 When you register for the JinkoSolar Business services, we will collect and use your name, phone number or email. The purpose of collecting this information is to help you complete the functions of the JinkoSolar registration and protect the security of your account. If you do not provide such information, you may not be able to use our services normally.

1.2 During your use of JinkoSolar services, in order to ensure the normal operation of the services, optimize the user experience and protect your account security, we will collect the basic information necessary for JinkoSolar to provide services for you, including your device model, operating system, Unique Device Identifier (a string that the manufacturer assigns to your device to uniquely identify the device), login IP address, JinkoSolar version number, the method, type and status of network connection, network condition, device accelerators (such as gravity sensor), operation logs, service logs (your searches and views in JinkoSolar, service failures, referral URLs, etc.), and other information.

1.3 When you use the monitoring function, in order to allow you to see the complete monitoring data, we need to collect the serial number of the datalogger under the plant and the serial number of its sub-devices (such as inverters, meters, etc.). At the same time, our monitoring system will collect the uploaded data of the datalogger and its sub-devices every 5 minutes to complete the necessary data statistics and analysis functions.

1.4 When you create a plant, you need to enter the plant name, region, capacity, address, GPS location, etc. These information will be uploaded and stored in our server so that you can use it when you log in to JinkoSolar on other devices. You can also modify this information at any time.

1.5 When you make a call in the app, we will apply for the phone permission. The purpose of applying for this permission is only to help you hoist the phone dial pad and display the phone number, so that you can make phone calls in the APP, please rest assured, we will not obtain your phone number, call content, or make calls without your knowledge. If you refuse to authorize to provide, you will not be able to use this function, but it will not affect your normal use of other functions of the JinkoSolar.

1.6 When you navigate in the app, we will apply for location permission and collect the installed navigation APP in the phone device. The purpose of applying for this permission is only to help you hoist the navigation APP and transmit the location of the plant to the navigation APP, so that you can navigate to the location of the plant in the APP. If you refuse to authorize to provide, you will not be able to use this function, but it will not affect your normal use of other functions of the JinkoSolar.

1.7 When you contact our customer service, we may require you to provide the necessary personal information for authentication to ensure the security of your account. In order to provide services according to your demands, after your authorization, the human customer service personnel need to query or verify your relevant information within the scope of your authorization. We will take technical and management measures to ensure the security and confidentiality of your information as much as possible, and use these information within the necessary scope. We may also save your contact information (the phone number, WeChat account, QQ number or other contact information you use or provide), the record and content of your communication with us, and other necessary information in order to provide you with and record customer service.

2. Other purposes for which we process your personal data

2.1 To ensure the security of our services and to help us better understand how our Apps are performing, we may log information such as how often you use the Apps, crash data, overall usage, performance data, and the source of the Apps. We do not merge the information we store in our analytics software with any personally identifiable information you provide in the app. The legal basis is Art. 6 (1) f) GDPR.

2.2 To meet our legitimate interests (Art. 6 (1) f) GDPR), including the following:
- Enter into corporate transactions (e.g., restructuring, asset deals, merger)
- Protect our rights or property, enforce our terms of use and legal notices, and provide for the establishment, exercise, and defense of legal claims.

2.3 To process personal data to comply with the requirements of applicable laws, regulations, court orders or other binding decisions

3. Cookies

To ensure the proper and efficient functioning of our website or mobile application, we store small data files called cookies on your web browser or mobile application. The content of a cookie can only be retrieved or read by the server that created it. Each cookie is unique to your web browser or mobile application. Using cookies can help you save yourself from having to repeatedly fill in personal information, enter search content and steps and processes (example: form filling, search history). You can manage or delete cookies according to your preferences. Most browsers or mobile phone operating systems provide users with the function of clearing cached data. You can perform corresponding data clearing operations in the browser settings or mobile phone operating system settings. However, you may not be able to fully experience some of our convenience and security service functions.

Please understand that the functions and services we provide to you are constantly updated and developed. If a function or service does not inform you of the processing rules for collecting and using your information in the foregoing description, we will use page prompts, interactive procedures, The website announcement and other means will inform you of the scope, purpose and method of information collection separately, in order to obtain your consent.

II. Storage of Information

2.1 Where information is stored

We will store the collected personal information of users in the United States.

2.2 Information storage duration

In general, we will keep your personal information for a period that is necessary to fulfill the purposes described above, for example:

Phone number or email: We'll keep your phone number or email (including the number or email used for registering your JinkoSolar account and that linked to the account) during your use of JinkoSolar services to ensure your normal use of the services, such information will be deleted with the deletion of your JinkoSolar account.

Plant information: When you create plant, we need to save your plant information to ensure that you can use the monitoring function normally. When you delete your plant information, we will delete the corresponding information.

In the event that we discontinue providing our products or services, we will notify you of such change by sending a notification, posting an announcement, or other means, and delete or anonymize your personal information without undue delay ("Anonymization" refers to the irreversible erasure or removal of sensitive personal information that leads to the information owner being identified. Any anonymized information shall not be considered as personal information.).

III. Information Security

We are committed to protecting users' information against theft, improper use, unauthorized access, or leakage.

We will use efforts not less than a reasonable degree of care to protect the security of user information. For example, we will use encryption technologies (such as SSL), data anonymization, and other methods to protect your personal information.

We will enhance the security of the software installed on your device using ever-improving technical means to prevent your personal information from leakage. For example, we will perform partial information encryption on your device for secure data transmission; collect the information about the apps installed or the processes running on your device, or the data stored in the device memory to defend against viruses, Trojans, or other malicious programs or websites; analyze and use the data such as unique device identifiers, login IP addresses, operation logs, and location information to take measures or issue alerts to prevent against illegal acts including Internet scam, account theft, and impersonation, and to carry out security inspection.

We have the relevant management policies, processes, and teams in place to ensure information security. For example, we strictly restrict personnel who can access the information, require them to comply with confidentiality obligations, and conduct personnel audits.

In the event of information leakage or any other incident related to information security, we will make immediate response to such incident to avoid the worsening of the incident and prevent it further affecting more users, and will notify you of the incident by sending you a notification or posting an announcement.

We will take all possible technical measures to protect your information but makes no guarantee or warranty that our technical measures will eliminate all security risks.

IV. Information Sharing

4.1 In order to do a good job in after-sales service of device, device manufacturers and their distributors can access your plant through the device library, products and other functions. The specific operation method is to click "Check System" in the device list of the device library and product. We will use read-only permission authorizes the plant to the device manufacturer and its distributors. You can also see the authorized device manufacturers and their distributors in the plant detail - authorization information. If you do not want these businesses to see your plant, you can delete these businesses in the plant detail - authorization information. If you do not want these device manufacturer and its distributors to access your plant by clicking "Check System", you can open it in the plant detail - authorization information - authorization settings "Plant authorization restrictions" so that device manufacturers and their distributors cannot access your plant unless you actively authorize plant to them.

4.2 Regarding the usage and transferal of Data, users have following rights:
1) Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
2) Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
3) Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
4) Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
5) Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
6) Have the right to refuse the controller to process its personal data. When this happens, processing activities must be suspended.
7) Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.
8) Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

4.3 In order to ensure the realization of some independent functions and enable you to use and enjoy more services and functions, we will embed third-party SDKs in the application, and the SDKs will not share your personal information to the Third Parties and the information will only be stored in our own server. For more information on the purpose, method and scope of SDK processing of personal information, please see the listed:
1) AutoNavi positioning SDK
The AutoNavi positioning SDK supports the AutoNavi Software Co., Ltd. to obtain the user’s geographic location with SDK native collection. These locations include geographic location (approximate location source, precise location source), WIFI information, running application list, sensor information, network operator, SIM information, MAC address. When users create power station and edit power station, etc., this third-party SDK will help provide the accuracy and success rate of location services, track, troubleshoot, diagnose, and count various problems in the service to ensure the safe and normal operation of products and services.
2) FCM SDK
The FCM SDK is embedded for the purpose of message pushing by Google LLC. It shares device information, geographic location and network information with SDK native collection, and only be used when pushing notifications or messages to users.
3) JPush SDK
The JPush SDK is embedded for the purpose of message pushing by Shenzhen Hexunhuagu Information Technology Co., Ltd. as well. It shares device information, geographic location and network information with SDK native collection, and only be used when pushing notifications or messages to users.

4.4 With the continuous development of our business, JinKO may conduct mergers, divisions and other transactions. If it involves the transfer of personal information, we will inform you of the relevant circumstances, and continue to protect or require new processors to continue to protect your personal information.

4.5 In addition to the recipients of personal mentioned above, we also use other companies to process personal data on our behalf, for example for hosting, technical support of our website, sending newsletters or for analysis and advertising purposes. Such service providers only process the data on our behalf as so-called processors, e.g. Solarman and Alibaba.

4.6 Furthermore, we transmit personal data to third parties if this is required by law, if this is necessary for the exercise and defense of legal claims or if third parties provide certain ser-vices for us (e.g., lawyers, tax consultants).

V. Your Rights

You can request information about your stored data. If you have provided personal data on the basis of a contract or consent, you have the right to receive this data in a standard and machine-readable format.

You can also request the deletion, correction or restriction of the processing of your data.

You can revoke your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal.

You can object to the processing of data processed on the basis of our legitimate interests at any time under the conditions of the GDPR.

JinkoSolar is designed in such a way that you can easily access, change, or delete your personal information and withdraw your consent regarding the use of your personal information and delete your account by following the steps below. The Report feature is also available in JinkoSolar for you to submit feedback, to which we will respond quickly. The operation procedures may vary with different operating systems or different JinkoSolar versions. We may adjust the operation procedures from time to time to optimize user experience. Therefore, the following procedures are for reference only. If you still have any questions about the ways and means of exercising relevant rights, you can contact us through the methods disclosed in Article 8 of these Rules.

5.1 Access and copy personal information

5.1.1 Access basic information such as avatar, name, etc.:

1) After entering JinkoSolar, tap "Me";
2) Tap avatar bar;
3) Access your information.

5.1.2 Access phone number, email, username, password:

1) After entering JinkoSolar, tap "Me";
2) Tap "Settings";
3) Tap "Account Security";
4) Access your information.

5.1.3 Access and copy personal information:

1) After entering JinkoSolar, tap "Me";
2) Tap "Settings";
3) Tap "View and Export My Information";
4) Tap "Export My Information", to make a copy of your personal information and send it to the email address you specify.

5.1.4 Access Third Party Sharing Checklist:

1) After entering JinkoSolar, tap "Me";
2) Tap "Settings";
3) Tap "Third Party Sharing Checklist";

5.2 Delete personal information

5.2.1 Delete plant:

1) After entering JinkoSolar, enter the plant detail, tap "…" icon in the upper right corner;
2) Tap "Delete";

5.3 Change personal information

5.3.1 Change avatar, name:

1) After entering JinkoSolar, tap "Me";
2) Tap avatar bar;
3) Make changes.

5.3.2 Change phone number, email, username, password:

1) After entering JinkoSolar, tap "Me";
2) Tap "Settings";
3) Tap "Account Security";
4) Make changes.

5.4 Function and permission management

5.4.1 Deauthorize to other businesses:

1) After entering JinkoSolar, enter the plant detail - authorizations;
2) Tap "Delete" in the list of authorized businesses;

5.4.2 System Permissions:

1) After entering JinkoSolar, tap "Me";
2) Tap "Settings";
3) Tap "System Permissions";
4) Tap "Go to system settings";

5.5 Delete account

5.5.1 Delete JinkoSolar account:

1) After entering JinkoSolar, tap "Me";
2) Tap "Settings";
3) Tap "Account Security";
4) Tap "Account Cancellation".

5.6 Privacy feature settings

5.6.1 Set whether device manufacturers and their distributors can access your plant through the device library and products:

1) After entering JinkoSolar, enter the plant detail - authorizations;
2) Tap "Authorization settings" ;
3) Tap to open "Authorization Restriction", then the device manufacturer and its distributors will not be able to access your plant through the device library and products;
4) Tap to close "Authorization Restriction", then the device manufacturer and its distributors can access your plant through the device library and products;

VI. Amendments

This Policy may be updated, revised, amended, or modified as appropriate from time to time. In the event of any updates, changes, or amendments to any provisions in this Policy, we will provide you with the changed Policy by pushing a notification, showing a pop-up, or other means when you log in to JinkoSolar or the web version.

VII. Others

Under certain specific services or functions of the JinkoSolar, we may also inform you of the purpose, method or scope of processing personal information through interactive copywriting, product interface or pop-up window. In case of inconsistency, the content notified separately shall prevail.

VIII. Contact us

We have set up a dedicated personal information protection team and person in charge of personal information protection. If you have any questions, complaints or suggestions about this privacy policy or personal information protection, you can contact us in any of the following ways:
Send your question to: G_ESS.Service@jinkosolar.com or contact us under the address set out above.
You can also contact our representative in the EU: JinKO Solar GmbH, Freisinger Str. 9, 85716 Unterschleißheim

We will review the issue as soon as possible and respond within fifteen days of receiving your complaint feedback.

In case of questions and in case of possible concerns about the data processing, you can also contact a supervisory authority in the EU, e.g.. Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach Germany (https://www.lda.bayern.de/de/kontakt.html).