《FCM儿童个人信息保护政策及监护人须知》

最新版本生效日期:2021年12月1日

FCM平台服务提供者(北京福莱森特康辉国际旅行社有限公司上海分公司或简称“我们”)深知保护儿童(指未满十四周岁的未成年人,下同)个人信息安全和隐私的重要性。在《FCM个人信息保护政策》的基础上,我们希望通过《FCM儿童个人信息保护规则及监护人须知》(以下简称“本政策”)说明我们在收集和使用儿童个人信息时对应的处理规则等相关事宜。您作为您孩子的父母或其他监护人(以下统称为“监护人”),请在您或您的孩子使用FCM的产品及服务(定义详见《FCM个人信息保护政策》,以下统称“我们的产品及服务”)前务必仔细阅读并透彻理解本政策,特别是以粗体/粗体下划线标识的条款应重点阅读,在确认充分理解并同意全部条款后再开始使用或允许您的孩子使用。

监护人特别说明:

您的理解和配合对我们保护您孩子的个人信息和隐私安全非常必要,为了维护您孩子的合法权益,我们希望您可以协助我们,确保您的孩子在您的同意和指导下使用我们的产品及服务和向我们提交个人信息。我们将根据本政策采取特殊措施保护我们获得的您孩子的个人信息。如果您不同意本政策的内容,请您立即停止向我们提交您孩子的个人信息或要求您的孩子立即停止访问/使用我们的产品及服务。

儿童特别说明:

任何儿童参加网上活动都应事先取得监护人的同意。如果您是儿童,请务必通知您的监护人共同阅读本政策,并在您使用我们的产品及服务、提交个人信息之前,寻求您的监护人的同意和指导。

本政策适用于我们在中华人民共和国境内通过网络从事收集、存储、使用、转移、分享和披露儿童个人信息等活动。本政策为在《FCM个人信息保护政策》基础上制定的特别规则,与《FCM个人信息保护政策》如有不一致之处,以本政策为准;本政策未载明之处,则参照适用《FCM个人信息保护政策》。

在您阅读完本政策后,如对本政策或与本政策相关的事宜有任何问题,可通过本政策“七、如何联系我们”章节所列的反馈渠道联系我们,我们会尽快为您作出解答。

本政策将帮助您了解以下内容:

一、我们如何收集和使用儿童个人信息

二、我们如何共享、转让、公开披露儿童个人信息

三、我们如何储存儿童个人信息

四、我们如何保护儿童个人信息

五、如何管理儿童个人信息

六、本政策的修订

七、如何联系我们

一、我们如何收集和使用儿童个人信息

(一)我们会严格履行法律法规规定的儿童个人信息保护义务与责任,遵循正当必要、知情同意、目的明确、安全保障、依法利用的原则,在征得监护人的同意后收集和使用儿童个人信息。您在使用我们的产品或服务中主动向我们提供您孩子的个人信息,例如您为您的孩子购买机票等商品,或您在我们为您提供的评论、社区及其他信息发布功能中分享的您孩子的照片、视频或其他信息,表示您已经同意我们收集和按照本政策的内容使用您孩子的个人信息。

(二)您或您的孩子在使用我们的产品及服务过程中,我们为向您或者您的孩子提供我们的产品及服务(如提供个性化展示或推荐以及为您的账户提供安全保障等)目的,我们可能还会收集和使用其他儿童个人信息,有关具体的使用目的、收集个人信息的范围以及拒绝提供相应信息的后果请您查阅《FCM个人信息保护政策》进行详细了解。

此外,我们也会通过Cookie、SDK等同类技术自动收集您或您孩子的个人信息,具体请您查阅《FCM个人信息保护政策》 “我们如何使用Cookie和同类技术”部分进行详细了解。如我们需要超出上述范围收集和使用儿童个人信息,我们将再次征得监护人的同意。

请您注意,绝大多数情形下我们无法识别且不会判断收集和处理的个人信息是否属于儿童个人信息,我们将按照《FCM个人信息保护政策》收集和处理用户的个人信息。

(三)征得授权同意的例外

根据相关法律法规规定,以下情形中收集儿童的信息无需征得儿童监护人的授权同意:

1、与我们履行法律法规规定的义务相关的;

2、与国家安全、国防安全、公共安全、公共卫生、重大公共利益有关的;

3、与犯罪侦查、起诉、审判和判决执行等有关的;

4、出于维护儿童的生命、财产等重大合法权益但又很难得到监护人同意的;

5、所收集的信息是儿童或监护人自行向社会公众公开的;

6、从合法公开披露的信息中收集信息的,如合法的新闻报道、政府信息公开等渠道;

7、根据与您或您的孩子签订和履行相关协议或其他书面文件所必需的;

8、 用于维护我们的产品及服务的安全稳定运行所必需的,例如发现、处置我们的产品及服务的故障;

9、学术研究机构基于公共利益开展统计或学术研究所必要,且对外提供学术研究或描述的结果时,对结果中所包含的信息进行去标识化处理的;

10、法律法规规定的其他情形。

二、我们如何共享、转让、公开披露儿童个人信息

我们承诺对儿童个人信息进行严格保密,仅在符合本政策说明和您明确授权同意的情况下对外共享儿童个人信息。为了提升信息处理效率,降低信息处理成本,或提高信息处理准确性,我们可能会委托有能力的我们的关联公司或其他专业机构代表我们来处理儿童个人信息,具体请参见《FCM个人信息保护政策》的 “三、对外提供信息”关于我们如何共享、转让、公开披露您的个人信息的部分。

除了《FCM个人信息保护政策》“三、对外提供信息”关于我们如何共享、转让、公开披露您的个人信息的部分所述的内容外,对于儿童个人信息,我们还将会采取如下措施来保护儿童个人信息在共享、转让和公开披露过程中的安全:

1、如果为了本政策所述目的而需要将儿童个人信息共享至第三方,我们将评估该第三方收集儿童个人信息的合法性、正当性、必要性。

2、我们将要求第三方对儿童个人信息采取保护措施,并且严格遵守相关法律法规与监管要求。我们会要求接收儿童个人信息的第三方遵守严格的保密义务及采取有效的保密措施,禁止其将这些儿童个人信息用于未经儿童及其监护人授权的用途,并要求受托公司依法履行以下义务:

(1)按照法律、行政法规的规定和我们的要求处理儿童个人信息;

(2)协助我们回应儿童监护人提出的申请;

(3)采取措施保障信息安全,并在发生儿童个人信息泄露安全事件时,及时向我们反馈;

(4)委托关系解除时及时删除儿童个人信息;

(5)不得转委托;

(6)其他依法应当履行的儿童个人信息保护义务。

3、另外,我们会按照法律法规的要求征得您的同意,或确认第三方已经征得您同意。

三、我们如何储存儿童个人信息

(一)我们在中华人民共和国境内运营中收集和产生的儿童个人信息,将存储在中国境内。以下情形下,我们会在履行了法律规定的义务后,向境外的组织或个人提供儿童的个人信息:

1、适用的法律有明确规定;

2、获得您的明确授权;

3、您或者您的孩子通过互联网进行跨境交易等个人主动行为。

针对以上情形,我们会通过合同等形式确保以不低于本政策规定的程度保护儿童的个人信息。 

(二)我们会采取合理可行的措施,尽力避免收集和处理无关的儿童的个人信息。我们只会在达成本政策所述目的所需的期限内保留儿童的个人信息,除非法律有强制的留存要求。关于我们如何确定儿童个人信息存储期限请参见《FCM个人信息保护政策》“我们如何保护儿童个人信息安全”。如我们终止服务或运营,我们将及时停止继续收集儿童个人信息的活动,同时会遵守相关法律法规要求提前向监护人通知,并在终止服务或运营后对儿童的个人信息进行删除或匿名化处理,但法律法规或监管部门另有规定的除外。

四、我们如何保护儿童个人信息

我们非常重视儿童的隐私安全,并采取一切合理可行的措施,保护儿童个人信息:

(一)我们会严格控制儿童个人信息的访问权限,对可能接触到儿童个人信息的工作人员采取最小够用授权原则,并采取技术措施对工作人员处理儿童个人信息的行为进行记录和管控,避免违法复制、下载儿童个人信息。

(二)我们已制定儿童个人信息安全事件应急预案,我们会定期组织内部相关人员进行应急响应培训和应急演练,使其掌握岗位职责和应急处置策略和规程。在不幸发生儿童个人信息安全事件后,我们将按照法律法规的要求,及时向儿童及其监护人告知:安全事件的基本情况和可能的影响、我们已采取或将要采取的处置措施、儿童及其监护人可自主防范和降低风险的建议、对儿童及其监护人的补救措施等。我们将及时将事件相关情况以App推送通知、发送邮件/短消息等方式告知儿童及其监护人。难以逐一告知时,我们会采取合理、有效的方式发布相关警示信息。同时,我们还将按照监管部门要求,主动上报儿童个人信息安全事件的处置情况。若儿童及其监护人的合法权益受损,我们将承担相应的法律责任。

(三)如您希望了解更多,请查阅《FCM个人信息保护政策》“我们如何保护儿童个人信息”章节,详细了解我们如何采取了哪些措施保护儿童个人信息。

五、如何管理儿童个人信息

(一)为了您或您的孩子在使用我们的产品及服务期间可以更加便捷地访问和管理您孩子的个人信息,同时保障注销账户的权利,我们在客户端中为您和您的孩子提供了相应的操作设置,您和您的孩子可以按照《FCM个人信息保护政策》中的“我们如何保护您的信息”章节指引进行操作。

(二) 下列情形下,您或您的孩子可以通过《FCM个人信息保护政策》 “如何联系我们”所列的渠道联系我们,要求删除相应的儿童个人信息:

1、我们违反法律、行政法规的规定或者双方的约定收集、存储、使用、对外提供儿童个人信息的;

2、超出目的范围或者必要期限收集、存储、使用、对外提供儿童个人信息的;

3、您撤回同意的;

4、您或您的孩子通过注销等方式终止使用产品或者服务的。

六、本政策的修订

我们可能会根据我们的产品及服务的更新情况及法律法规的相关要求适时修改本政策的条款,该等修改构成本政策的一部分,我们会在专门页面上展示最新修改版本。由于我们的用户较多,对于重大变更,我们还会提供更为显著的通知(包括通过网站或客户端首页公示的方式进行通知甚至向您提供弹窗提示),具体详见《FCM个人信息保护政策》“本政策如何更新”的规定。

七、如何联系我们

如您和您的孩子对本政策存在任何疑问,或对于儿童个人信息处理存在任何投诉、意见,请通过以下渠道联系我们,我们将在收到问题、意见或建议,并验证监护人和/或儿童身份后的十五天内回复您的请求:

1、如对本政策内容、儿童个人信息有任何疑问、意见或建议,您可通过FCM客服(北京+86 1058292929,上海+86 2122111888,广州+86 2081133901)与我们联系;

2、如发现个人信息可能被泄露,您可以通过客服投诉举报;

3、您可以通过(dpo@fcm.asia)与我们的个人信息保护专职部门联系,办公地址:(上海市普陀区长寿路309号旭辉企业大厦1502-1503室)

需注意的是,我们可能不会回复与本政策或与个人信息保护无关的问题。

FCM Children’s Personal Information Protection Policy and Guardian’s Notice

Latest version effective date: December 1, 2021

FCM platform service provider (Flight Centre - Comfort Business Travel Service Co., Ltd Shanghai Branch or "we" hereinafter) is well aware of the importance of protecting the personal information safety and privacy of the children (minors under the age of 14, the same below). On the basis of FCM Personal Information Protection Policy, we intend to explain the corresponding handling rules and other related matters when we collect and use children's personal information through FCM Children’s Personal Information Protection Policy and Guardian’s Notice (hereinafter referred to as the “Policy"). As your child's parent or other guardian (hereinafter referred to as the "guardian"), please carefully read and thoroughly understand this Policy, especially the terms in bold/in bold and underlined, before you and any child under your guardianship use FCM's products and services (see the definition in FCM Personal Information Protection Policy for details, hereinafter referred to as "our products and services"), and be sure that you have fully understood and agreed to all the terms before deciding whether to allow yourself and the child to use our products and services.

Special notes for the guardians:

Your understanding and cooperation are vital to us in protecting the personal information and privacy of the child under your guardianship. We hope you can assist us in ensuring that, in order to safeguard children's legitimate rights and interests, any children under your guardianship can only use our products and services and provide personal information to us with your permission or guidance. We will take special measures as stated in this Policy to protect the personal information of the child under your guardianship. If you do not agree to the terms of this Policy, please promptly stop providing us with the personal information of the child under your guardianship or ask the child to stop accessing/using our products and services immediately.

Special notes for children:

Any children participating in online activities should obtain prior consent of the guardian. If you are a child, please have your guardian read these terms with you and be sure to seek your guardian’s consent and guidance before you use our products and services or provide your personal data to us.

This Policy applies to the online collection, storage, use, transfer, sharing and disclosure of children’s personal information that are conducted within the territory of the PRC. This Policy is a special version of rules formulated on the basis of FCM Personal Information Protection Policy. In case of any inconsistency with FCM Personal Information Protection Policy, this Policy shall prevail. Where this Policy does not specify, the FCM Personal Information Protection Policy shall apply.

After reading this Policy, if you have any questions or concerns related to this Policy, you can contact us through the feedback channels listed in “Section VII. How to Contact Us" of this Policy, and we will reply as soon as possible. 

This policy will help you understand the following sections:

I.How we collect and use children's personal information

II.How we share, transfer and disclose children's personal information

III.How we store children's personal information

IV.How we protect children's personal information

V.How to manage children's personal information

VI.Revision of this Policy

VII.How to contact us

I. How we collect and use children's personal information?
II.How we share, transfer and disclose children's personal information

We promise to keep children's personal information strictly confidential and share children's personal information with external parties only in accordance with this Policy and your explicit authorization and consent. In order to improve efficiency, reduce costs, or improve accuracy of information processing, we may entrust competent affiliated companies or other professional agencies to process children's personal information on our behalf. For more information, please refer to the "Providing Information to the External Parties" section in the FCM Personal Information Protection Policy.

1.We will implement the duty and responsibility of protecting children's personal information in strict accordance with relevant laws and regulations, uphold the principles of legitimate necessity, informed consent, clear purpose, safety and security, and use in accordance with the law, and collect and use children's personal information with the consent of the guardian. By actively providing us with the personal information of any child under your guardianship when using our products or services, such as purchasing air tickets and other products for the child, or sharing the child's photos, videos or other information in the comments, community and other information release functions we provide to you, you acknowledge that you have agreed to our collection and use of the child's personal information in accordance with the contents of this Policy. 

2.As you and the child under your guardianship are using our products and services, we may also collect and use other personal information of the child for the purpose of providing our products and services to you or the child (such as providing personalized display or recommendation and providing security for your account). For details about the purpose, scope of collecting personal information and the consequences of refusing to provide corresponding information, please refer to the FCM Personal Information Protection Policy.

In addition to the contents described in the "Providing Information to the External Parties" section of the FCM Personal Information Protection Policy, we will also take the following measures to protect the safety of children's personal information in the process of sharing, transfer and disclosure:

In addition, we will automatically collect the personal information of you or the child under your guardianship through cookies, SDK and other similar technologies. For more information, please refer to the "How do we use cookies and similar technologies" section in the FCM Personal Information Protection Policy. We will obtain additional consent from the guardian if we need to collect and use the personal information of the child under your guardianship beyond the above scope.

Please note that in cases where we cannot identify or will not try to determine whether the personal information collected and processed belongs to a child, we will collect and process the personal information in accordance with FCM Personal Information Protection Policy.

3.Exceptions with authorized consent

According to relevant laws and regulations, it is not necessary to obtain the authorization and consent from the child's guardian to collect the information of the child in the following situations:

1)Related to the performance of our obligations in compliance with laws and regulations;

2)Related to national security, national defense security, public security, public health and major public interests;

3)Related to criminal investigation, prosecution, trial and sentence execution;

4)Where it is difficult to obtain the consent of the guardian in order to protect the life, property and other major legitimate rights and interests of the child;

5)Where the information collected is disclosed to the public by the child or the guardian;

6)Where information is collected from legally publicly disclosed sources, such as legal news reports, government information disclosure and other channels;

7)Where it is necessary to sign and perform relevant contract or other written documents with you or the child under your guardianship;

8)Where it is necessary to maintain the safe and stable operation of the products and services provided, such as discovering and disposing of product or service failures;

9)Where it is necessary for an academic research institution to conduct statistics or academic research based on the public interest, and provide the results of academic research or description to external parties. At the time of the result, the personal information contained in the result is de-identified;

10)Other circumstances stipulated by laws and regulations.

1.If it is necessary to share children's personal information to a third party for the purposes set forth in this policy, we will evaluate the legitimacy, justification, and necessity of the collection of such data by the third party.

2.We will require the third party to take protective measures for children's personal information and strictly abide by relevant laws and regulations and regulatory requirements. We will require the third party receiving children's personal information to comply with strict confidentiality obligations and take effective measures to prohibit such information from being used for purposes not authorized by the children and their guardians. The entrusted party is obligated to:

1)process the children's personal information in accordance with laws, administrative regulations, and our requirements;

2)assist us in responding to any requests the guardians make;

3)take measures to ensure information security and promptly report to us in the event of any leakages of children's personal information;

4)promptly delete the children's personal information when the entrustment is terminated;

5)not entrust any third party with the tasks entrusted to itself; and

6)perform any other obligations that it shall perform to protect children's personal information according to the law.

3.In addition, we will obtain your prior consent or confirm that the third party has obtained your consent as required by laws and regulations.

III.How we store children's personal information

1.Children's personal information collected and generated in connection with our operations in the People's Republic of China will be stored in China. We will provide children’s personal information to the recipient outside the borders after fulfilling our legal obligations under the following circumstances:

1)There are explicit provisions in applicable laws

2)Your explicit authorization has been obtained

3)You or the child under your guardianship conduct cross-border transactions or other personal initiative actions through the Internet.

Under the above circumstances, we will ensure that the children’s personal information is protected, through contracts and other means, with at least the same degree of care as that stipulated in this Policy.

IV.How we protect children's personal information

We will take reasonable and feasible measures and do our utmost to avoid collecting irrelevant children’s personal information. We will retain children’s personal information only for the period necessary to achieve the purposes stated in this Policy, unless a longer retention period is compulsorily required by law. For more information on how we determine the storage period of children's personal information, please refer to the “Storage of Information” section in the FCM Personal Information Protection Policy. If we terminate the service or operation, we will promptly stop the activities of continuing to collect children's personal information. At the same time, we will comply with the relevant laws and regulations to inform the guardians in advance, and after the termination of the service or operation, children's personal information will be deleted or anonymized, except as otherwise stipulated by laws and regulations or regulatory authorities.

We take children's privacy protection seriously, and will take all reasonable and feasible measures to protect children's personal information.

1.We strictly control access to children's personal information, apply the principle of least privilege to employees who may have access to children's personal information, and take technical measures to record and manage the employees' processing actions in order to prevent illegal copying and downloading of children's personal information.

2.We have developed an emergency response plan for children's information security incidents, and we regularly organize relevant internal personnel to carry out emergency response training and emergency drills to enable them to master job responsibilities and emergency response strategies and procedures. Where a children's information security incident occurs, we will, in accordance with the requirements of laws and regulations, promptly inform the children and their guardians of the basic information and possible impact of the security incident, the measures we have taken or will take, suggestions on how the children and their guardians can independently prevent and reduce risks, remedial measures for the children and their guardians, etc. We will promptly inform the children and their guardians of the incident-related information by app push notification, email, SMS, etc. Where it is difficult to inform all children and their guardians one by one, we will publish relevant warning information in a reasonable and effective way. At the same time, we will report the handling of children's information security incident in accordance with the requirements of regulatory authorities. If the legitimate rights and interests of children and their guardians are damaged, we will bear corresponding legal responsibilities.

3.For more information, please refer to the “Protection of minors” section in the FCM Personal Information Protection Policy to learn about the measures we have taken to protect children's personal information.

V.How to manage children's personal information

1.In order to facilitate convenient access to and management of the personal information of the child under your guardianship when you and the child are using our products and services, and to guarantee your right to cancel the account, we provide you and the child with corresponding operation settings of the client so that you and the child can follow the guidance in the “Your rights” section of the FCM Personal Information Protection Policy.

2.You and the child under your guardianship may contact us through the channels described in the "Contact us" section of the FCM Personal Information Protection Policy to request the deletion of the child's personal information if:

1)We collect, store, use or disclose children's personal information in violation of laws, administrative regulations or the agreement between both parties;

2)We collect, store, use or disclose children's personal information beyond the scope of purpose or necessary retention period;

3)You withdraw your consent;

4)You or the child under your guardianship cease using our products or services by cancelling the account or other similar actions.

VI.Revision of this Policy

We may modify the terms of this Policy from time to time according to the update of our products and services and the relevant requirements of laws and regulations. Such modifications constitute a part of this Policy and we will publish the latest version on a special page. Due to our large number of users, we will also provide more noticeable notifications (including announcements on our official website or the homepage of our client and even pop-up prompts). For more information, please refer to the "Policy Update" section in the FCM Personal Information Protection Policy.

VII.How to contact us

If you and the child under your guardianship have any questions concerning this Policy, or have any complaints about or comments on the processing of children's personal information, please contact us through the following channels. We will reply to your request within 15 days after receiving your questions, comments or suggestions and verifying the identity of the guardian and/or the child:

1.If you have any questions, comments or suggestions concerning the contents of this Policy and children's personal information, you can contact us through FCM customer service (Beijing + 86 1058292929, Shanghai + 86 212211888, Guangzhou + 86 2081133901);

2.If you discover that the personal information may be leaked, you can submit a complaint/report through the customer service;

3.you can contact our personal information protection department through dpo@fcm.asia or its office address at 9/F, Influx Center, No. 1388, North Shaanxi Road, Putuo District, Shanghai, P.R. China.

It should be noted that we cannot ensure a response to questions regarding topics unrelated to this Policy or personal information protection.