SineSunEnergy attaches great importance to the protection of your personal data and strictly abides by the applicable data protection laws and regulations, especially the EU General Data Protection Regulation (GDPR). The following information explains how we collect and use your personal data when you use our website or communicate with us directly. You can access this policy at any time on our website.

1. Data Controller

The website operator and data controller referred to in the GDPR is Shanghai SineSunEnergy Co.,Ltd.,(hereinafter referred to as "SineSunEnergy", "we", "our").

2. Your rights

2.1 You generally have the following personal rights, namely the right to demand:

• Access to personal data concerning you (Art. 15 GDPR)

• Provide some of your personal data in a commonly used machine-readable format to you or to another data controller (Article 20 GDPR)

• Update or correct your personal data to make it accurate (Art. 16 GDPR)

• Deletion of your personal data from our records in certain circumstances (Art. 17 GDPR)

• Restriction of the processing of your personal data in certain circumstances (Art. 18 GDPR)

You can also have the right:

2.2 Object to our processing of your personal data in certain circumstances (e.g. if we process your data for direct marketing purposes - Art. 21 GDPR).

2.3 These rights may be limited in certain circumstances, for example, where we can demonstrate that we have a legal requirement to process your data, or if providing you with such information would disclose another person’s personal data, or if we are legally Disclosure of this information is prohibited. In some cases, this may mean that we retain data even if you withdraw your consent.

2.4 If you wish to exercise your rights regarding your personal data, please send any information, data subject access requests or objections to data processing by email to info@sinesunenergy.com.

2.5 We hope that we will be able to satisfy any queries you may have about the way we process your data. If you still have unresolved concerns, you also have the right to lodge a complaint with a supervisory authority, in particular the data protection authority of the Member State in which you have your habitual residence or place of work, pursuant to Article 77 of the General Data Protection Regulation GDPR.

2.6 Finally, please note that if we need personal data to comply with a legal or contractual obligation, it must be provided: if it is not provided, we will not be able to manage our contractual relationship, or fulfill the obligations we have assumed.

3. International transfers and data security

3.1 Since we are a globally operating company, your data collected by us may be transferred and stored by us or our service providers worldwide. It may also be handled by employees working for SineSunEnergy or our suppliers outside the European Economic Area (eg in China). If the information is transferred outside the European Economic Area and in a country not subject to the European Commissions adequacy decision, the data is adequately protected by European Commission-approved standard contractual clauses, Privacy Shield certification or binding corporate rules for the supplier processor . Please let us know if you have any questions or would like to receive copies of relevant documents.

3.2 Our website may from time to time contain links to other websites. If you follow a link to these sites, please note that these sites have their own privacy policies and we are not responsible for the processing of data on these sites. Please check the policies of those sites before submitting any personal data to them.

3.3 We have implemented technical and organizational security measures to protect your data held by us against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Your data is transmitted in encrypted form; we use encrypted https protocol.

4. Collection of personal data in order to prevent the use of our website for informational purposes

4.1 If this website is used for informational purposes only, i.e. if you do not communicate with us other than using our website or otherwise transmitting information to us, we will collect data automatically transmitted by your browser in order for you to visit this website website. Such data is stored exclusively for system-related and statistical purposes (according to Art. 6 para. 1 lit. f GDPR GDPR based on our legitimate interests) and in exceptional cases to report criminal offenses (according to the " Article 6 paragraph 1 lit. e of the General Data Protection Regulation GDPR).

We may automatically collect the following data from you:

• Technical information, including the Internet Protocol (IP) address used to connect the computer to the network, device, browser and version type, and operating system and platform;

• and information about your visit, including full Uniform Resource Locators (URLs), page response times and download errors.

We may also collect personal data through cookies, as described below (see section 11 "Cookies Policy" below).

5. Collection and processing of personal data when contacting us and use for advertising purposes

5.1 We will collect and process your personal data if you explicitly provide us with it for contact purposes (e.g. your name, telephone number and e-mail address). Based on Art. 6 para. 1 lit. f GDPR, this personal data is only used to process your request.

5.2 Based on Art. 6 para. 1 a GDPR GDPR, your personal data will only be used for advertising purposes, subject to your prior consent. The data you provide to us to receive our subscription information will be stored by us until you unsubscribe and will be deleted in accordance with legal retention obligations.

6. Collection and processing of personal data for contract performance

6.1 We process your personal data (e.g. your name, email address, postal address, telephone number, country, business sector, company name, business interests) for the establishment and performance of contractual relationships and to comply with statutory requirements. The processing is based on Art. 6 para. 1 lit. a GDPR (Communications with customer contacts necessary for the performance of a contract to which the data subject is a party or measures at the request of the data subject prior to entering into a contract) . Furthermore, the processing is based on Art. 6 para. 1 lit. c GDPR, as we may have a statutory obligation to store personal data, for example in connection with tax, trade law or fraud prevention.

7. Collection and processing of personal data at the time of application

7.1 In addition, we collect your personal data when you apply for a job with us. We need to process this personal data to carry out the recruitment process, including setting up the electronic candidate file, managing your application, organizing interviews – in short, the information processing process is a necessary step in entering into an employment contract with you, which is based on the General Based on Art. 6 para. 1 lit. b of the Data Protection Regulation GDPR. You can find more detailed information on the processing of personal data in relation to your application in our [Applicant Privacy Notice], which we will provide to you separately in due course.

8. Personal Data Recipients/Category of Recipients

8.1 We may share your personal data with SineSunEnergy’s affiliates (referring to any company, business or other SineSunEnergy entity listed below to improve our customer relationship and process your country-specific requests.

8.2 Personal data may be shared with government agencies and/or law enforcement officials when required for the above purposes, if authorized by law, or for the legal protection of our legitimate rights and interests in accordance with applicable laws. Personal data may also be shared with third-party service providers (such as event partners, distributors, engineering, procurement and construction customers) who will process personal data on behalf of SineSunEnergy for the above purposes.

8.3 In addition, we use service providers for entrusted data processing, which we have instructed to carry out data processing within the scope of this privacy notice, e.g. within the framework of the technical infrastructure of our website (e.g. for e-mail marketing, event planning and management and website design and creation). In this case, our technical service providers may also be located outside the EU/EEA. Your data will also be adequately protected if it is transferred outside the European Economic Area, and in countries not subject to adequacy decisions by the European Commission, as described in section 3 above.

9. Retention period of personal data

9.1 If you are a customer, we will retain your data during any contractual relationship you have with us and, to the extent permitted, after the end of that relationship in accordance with applicable law in order to fulfill the obligations set out in this notice purpose of usage.

9.2 We process personal data with your consent and we will process it until you ask us to stop and for a short time thereafter (allowing us to carry out your request). We keep a record of the fact that you have asked us not to process your data so that we can honor your request in the future.

9.3 Data about your visit to our website and our processing of personal data for website security purposes, we will retain this data for a period of 6 months from your last visit to our website.

9.4 We may be required by law to store certain of your data for certain legal retention periods (in the case of invoices this may be up to ten years). In other cases, we may retain data for an appropriate period of time after any relationship with you has ended, to protect our legal interests (until the end of the statutory limitation period), or to administer our business (such as bookkeeping and tax obligations ).

10. Privacy Policy Updates

This Privacy Policy may be updated periodically. Any future changes we make to the Privacy Policy will be posted on this page and, where appropriate, notified to you by email. Please remember to review our Privacy Policy for any updates or changes.

11. Cookie Policy