Introduction

Your trust is of paramount importance to us. We fully understand the significance of personal information and are committed to collecting and handling it within the scope permitted by applicable laws and regulations, and only to the extent reasonably necessary. We adopt reasonable and effective technical safeguards and administrative measures to ensure the security of your personal data and to prevent unauthorised access, disclosure, alteration, loss or destruction.

Accordingly, the provider of the Midea Group's domestic official website (hereinafter referred to as "Midea Website" or "we") has formulated this Privacy Policy (hereinafter referred to as the "Policy"), and hereby notifies you of the following:

This Policy applies solely to the official domestic website of Midea Group Co., Ltd. (website: https://www.midea.com/cn/).

Please note that this Policy does not apply to services provided by any third party. For example, if you are redirected to a third-party website via https://www.midea.com/cn/, the personal data you provide to such third party will be subject to their respective privacy policies, not this Policy. Additionally, if you access other Midea platforms (such as Midea recruitment portals) via this site, the Midea Website will not collect personal data submitted on those sites. Data collected by those platforms shall be governed by their own privacy policies and user agreements.

For the purposes of this Policy, "personal information" refers to data that can identify a specific individual, either directly or indirectly, through such data alone or when combined with other information.

We undertake to collect and process your personal data strictly in accordance with this Policy.

Please be advised that if you are an enterprise user, certain information such as your company email address and business contact details may not be deemed as personal information. Such data shall be protected in accordance with the agreement signed between both parties and shall not fall within the scope of this Policy.

Before agreeing to this Policy and using the products or services displayed on the Midea Website, you are required to carefully read and fully understand all terms set forth herein-particularly those that are emphasised in bold or underlined. Should you have any questions or concerns regarding this Policy, you may contact Midea customer service on 400-889-9315 or email our Data Protection Officer at mideadpo@midea.com.

If you are under the age of 18, please ensure this Policy is reviewed together with your legal guardian and pay particular attention to the section regarding the protection of minors.

This Policy explains:

1.       Our Role

2.       What Information We Collect

3.       How We Use Your Information

4.       When and How We Share Your Information

5.       How We Store Your Information

6.       How We Protect Your Information

7.       Your Rights

8.       Account Deletion by Data Subjects

9.       Protection of Minors' Information

10.    How to Contact Us

1. Our Role

We act as the service provider of the Website and the processor of your personal data. This means we are responsible for determining how your personal information is processed and for what purposes. We understand the importance you place on the use and handling of your data, and we commit to managing it with prudence and care.

2. Information We Collect

We collect your personal information in accordance with the principles of legality, legitimacy, and necessity. When providing specific services, we will clearly inform you of the types of information we collect and the purposes for which it is used. Depending on the services you use, we may collect one or more of the following types of information under the following circumstances:

2.1

When you browse our website, we may collect your IP address, device information, browser type, and geographic location (province-level).

2.2

Please note that individual items such as device identifiers or service log information cannot, by themselves, be used to identify a specific individual. However, where such non-personal data is combined with other information that enables identification of a natural person, or is otherwise linked to personal data, such data shall be deemed personal information for the duration of its combined use. Unless otherwise authorised or required by law, we will apply anonymisation or de-identification measures to such data.

2.3

If you click on “Midea Mall,” you will be redirected to [https://www.midea.cn/]. Services provided on this site are independent from those on the Midea Website, and we do not collect or process any personal data you provide through that website.

2.4

If you click on “Join Midea,” you will be redirected to [https://recruit.midea.com/recruitOut/ihr/home/index] or [https://careers.midea.com/schoolOut/home]. Services provided through these recruitment portals are also independent of the Midea Website, and we do not collect or process any personal data submitted therein.

2.6

To enhance the security of your experience on the Midea Website, and to protect you, other users, and the public from risks such as phishing, fraud, security vulnerabilities, computer viruses, cyberattacks, or other security incidents, we may use or integrate information such as device interaction data, network log information, and other data obtained through your authorisation or as permitted by law. Such information may be used for purposes of identity verification, incident detection, risk mitigation, and the recording, auditing, analysis, and handling of security events in accordance with applicable legal obligations.

2.7

If you provide us with personal data relating to another individual, you must ensure that you have obtained appropriate authorisation before doing so. If we intend to use such information for purposes not specified in this Policy, or if we use it beyond its original purpose, or collect your personal data from a third party, we shall obtain your explicit consent in advance.

2.8

Exceptions to consent: You acknowledge and agree that your personal information may be collected or used without your prior authorisation under the following circumstances, and we may not respond to your request to rectify, delete, withdraw consent, or access such data:

• 2.8.1 Where required for national security or defence.
• 2.8.2 Where required for public safety, public health, or significant public interest.
• 2.8.3 Where required for judicial or administrative law enforcement purposes, including criminal investigations, prosecutions, trials, or judgments.
• 2.8.4 Where it is necessary to protect your or another individual’s life, property, or other major lawful rights and it is impracticable to obtain your consent.
• 2.8.5 Where you have voluntarily disclosed the information to the public.
• 2.8.6 Where the information is obtained from lawfully disclosed sources, such as legitimate news reports or government disclosures.
• 2.8.7 Where it is necessary for the performance of a contract or written agreement to which you are a party.
• 2.8.8 Where it is required to maintain the safe and stable operation of products and/or services, such as identifying or addressing system failures.
• 2.8.9 Other situations as provided by applicable laws and regulations.

3. How We Use Your Information

3.1

We endeavour to keep your personal information accurate and up to date, and we will store or delete such data securely. We collect and retain personal information solely to the extent necessary for the provision of our services. We will implement appropriate technical measures to protect your data against unauthorised access, misuse, or disclosure.

3.2

We may use your personal information for the following purposes:

• 3.2.1 To provide other services you request, as described at the time the data is collected.
• 3.2.2 To ensure the integrity and security of the information systems used to store and process your personal data.
• 3.2.3 For other purposes explicitly authorised by you.

3.3

The purposes outlined above represent our primary uses of your information. We may occasionally update our services and the way we use your data. Where we intend to use your data for a purpose not expressly covered by this Policy or beyond the scope of the original collection purpose, we will seek your renewed consent by means such as an updated agreement, pop-up notification, or revised privacy policy.

4. Circumstances Under Which We May Share Your Personal Information

We will not share your personal information with any company, organisation, or individual outside of Midea Group Co., Ltd. and its affiliated entities, except in the following circumstances:

4.1 Legal Obligations

We may share your personal information where such disclosure is required to comply with applicable laws and regulations, to resolve legal disputes, or in response to requests by administrative or judicial authorities made in accordance with the law.

4.2 With Your Explicit Consent

We may share your personal information with third parties upon obtaining your explicit authorisation and consent.

4.3 Sharing with Affiliated Companies

In order to facilitate the provision of products and services to you, or to protect the personal or property safety of other users or the public, we may share your personal information with our affiliated companies and/or their designated service providers. We will only share information that is strictly necessary, and such sharing will remain subject to the stated purposes under this Policy. If we intend to share your sensitive personal information, or if our affiliated companies alter the purposes for which your personal information is used or processed, we will again seek your explicit consent.

4.4 Sharing with Authorised Partners

We may engage authorised partners to provide certain services or perform functions on our behalf. We will only share your information for lawful, legitimate, necessary, specific, and explicit purposes as outlined in this Policy. These partners may only access the information necessary for the performance of their duties and are prohibited from using it for any other purpose. The use or further sharing of data by such partners does not require separate notification to you or your additional consent.

Our current authorised partner includes Baidu (China) Co., Ltd. and its affiliated companies, to whom we provide your device information and IP address.

4.5 Transfers of Personal Information

We will not transfer your personal information to any company, organisation, or individual unless:

• 4.5.1 Such transfer is conducted with your explicit consent; or
• 4.5.2 In the event of a merger, acquisition, restructuring, or bankruptcy involving the Website’s service provider, and where such event requires the transfer of personal information, we will require the receiving party to continue to be bound by the terms of this Privacy Policy. If they are unable to do so, we will ensure that they seek your renewed authorisation and consent.

5. How We Store Your Personal Information

Unless otherwise required by applicable law, we will retain your information as follows:

5.1

Personal data we collect will be retained for a maximum period of three (3) months. Upon expiry of this retention period, such data will be automatically deleted by our systems.

5.2

Once anonymised and de-identified, your personal information may be converted into data that is no longer associated with you as an individual. The storage and utilisation of such data by the Midea Website does not require your additional consent.

6. How We Protect Your Personal Information

6.1

We implement reasonable and practicable industry-standard technical and organisational security measures to protect your personal information from unauthorised access, public disclosure, misuse, alteration, destruction, or loss. These measures include:

• SSL encryption for data transmission between your browser and our servers.
• HTTPS secure browsing protocols on the Midea Website.
• Encryption technologies to enhance data confidentiality.
• Trusted protection mechanisms to guard against malicious attacks.
• Access control measures to ensure only authorised personnel can access personal data.
• Employee training programmes to increase awareness of data privacy and security best practices.

6.2

Please note that no method of internet transmission or electronic storage is completely secure. We strongly recommend that you do not transmit sensitive personal information using any communication method not endorsed by the Midea Website.

6.3

In the unfortunate event of a personal information security incident, we will promptly notify you in accordance with legal and regulatory requirements. Such notice may include: a general description of the incident, its potential impact, the remedial measures taken or to be taken, recommended actions you may take to mitigate risk, and any compensatory measures we will provide. We may notify you by email, letter, telephone, or push notification. Where it is impracticable to notify each individual affected, we will take reasonable and effective means to issue a public announcement. Additionally, we will report the handling of such incidents to the competent regulatory authorities as required.

7. Your Rights

You have the right to manage and exercise control over your personal information. These rights include, but are not limited to:

7.1 Right of Access

You have the right to access and obtain a copy of your personal information held by us.

• 7.1.1 If you wish to access or request information regarding the personal data we have collected about you, you may contact us at: mideadpo@midea.com.

7.2 Right to Rectification

If you believe that the personal information, we hold about you is inaccurate or incomplete, you have the right to request its rectification or supplementation.

• You may submit such requests via mideadpo@midea.com.

7.3 Right to Erasure

You have the right to request the deletion of your personal information under the following circumstances:

• 7.3.1 If our processing of your personal data is in violation of applicable laws and regulations.
• 7.3.2 If we have collected and/or used your personal information without obtaining your explicit consent.
• 7.3.3 If our handling of your personal information materially breaches our agreement with you.

Should we decide to honour your request for deletion, this will not affect your ability to continue browsing and using our website and services.

8. Protection of Personal Information of Minors

8.1

Our products and services are primarily intended for adult users. Where we collect personal information of minors with the explicit consent of their legal guardians, we will only process or disclose such information when legally permitted, when explicitly authorised by the legal guardian, or when it is necessary to protect the minor.

8.2

In the event that we discover that personal information of a minor has been collected without prior consent from a legal guardian, we will make every reasonable effort to promptly delete the relevant data. If a legal guardian believes that a minor has submitted personal information to the Midea Website without their authorisation, they may contact us so that we can ensure its deletion and unsubscribe the minor from any applicable Midea services.

9. How to Contact Us

9.1

If you have any questions, comments, or suggestions regarding this Privacy Policy, or if you wish to exercise any of your rights as outlined herein, or discuss any matter relating to the protection of personal information, you may contact our designated data protection department through the following means:

Midea Group Co., Ltd.
Address: Midea Headquarters Building, Beijiao Town, Shunde District, Foshan, Guangdong Province, China
Email: mideadpo@midea.com

9.2

To ensure the security of your personal information, we may ask you to submit a written request or otherwise verify your identity. In general, we will respond to your request within fifteen (15) days. If you are dissatisfied with our response, particularly if you believe your lawful rights and interests have been infringed by our personal information processing activities, you may lodge a complaint with the appropriate regulatory authorities, such as the Cyberspace Administration, Ministry of Industry and Information Technology, Public Security Bureau, or Market Supervision Authority.

9.3

If you are still dissatisfied with our response, or if you believe that our processing of your personal information has violated your legal rights and interests, you may also seek redress by initiating legal proceedings with a court of competent jurisdiction at the location of the defendant.

Midea Group Co., Ltd.

Version dated April 24, 2024

Effective as of April 24, 2024