Last Updated: June 05, 2025
上次更新时间:2025年6月5日
Kempinski Hotels S.A. (Address: 10 Rue Henriette et Jeanne-Rath 1204 Genève, Switzerland) and its affiliates or subsidiaries, including but not limited to Key International Hotels Management Co Ltd. (Address: 12/F, NUO Center Office, No.2A Jiangtai Road Chaoyang District, Beijing, China) (hereafter collectively referred to as “Kempinski” or “We”), are committed to being responsible for processing your personal information.
凯宾斯基饭店股份有限公司(地址:瑞士日内瓦亨丽埃特和珍妮拉特大街10号)及其关联公司或分子公司,包括但不限于北京凯燕国际饭店管理有限公司(地址:中国北京市朝阳区将台路甲2号诺金中心写字楼12层)(以下合称“凯宾斯基”或“我们”),承诺将负责地处理您的个人信息。
Before you use or submit any personal information, please carefully review this Privacy Policy (this “Policy”). In particular, the terms marked in bold and underlined should be read more carefully. You should start using our products and/or services only after confirming that you fully understand and agree to all the terms of this Policy. We will continue to evaluate this Policy to reflect our personal information processing activities, and we may make changes to this Policy accordingly. Any changes will be made on this page, and you should check this page periodically for updates. If we make material changes to this Policy, we will provide you with notice when required by law.
在使用或提供任何个人信息之前,请您仔细阅读本隐私政策(以下简称“本政策”)。特别地,请您重点阅读我们以加粗下划线标识的条款,并在确保已充分理解和同意本政策全部条款之后再开始使用我们的产品和/或服务。我们会持续评估本政策,使其充分反映我们的个人信息处理活动,并且我们会根据服务的更新情况,适时修改本政策的条款。您应定期检查此页面以获取政策的更新。如果我们对本政策做出重大变更,我们会依照法律的要求向您发出通知。
This Policy contains the following sections:
本政策包含以下部分:
1. Application and definition 适用范围和定义 2
2. How we collect and use your personal information 我们如何收集和使用您的个人信息 4
4. Legal bases for processing your personal information 处理您个人信息的法律基础 14
5. How we use Cookies and similar technologies 我们如何使用 Cookie 和类似技术 15
6. How we store your personal information 我们如何保存您的个人信息 16
7. How we protect your personal information 我们如何保护您的个人信息 18
9. How we protect personal information of children 我们如何保护儿童个人信息 21
10. Links to other sites and services 其他网站和服务链接 21
1. Application and definition 适用范围和定义
This Policy governs and describes Kempinski’s practices (as a personal information processor under China’s data and privacy law) in connection with personal information that we collect and process through different channels available for guests in mainland China as mentioned in Section 2 below.
本政策描述了凯宾斯基(作为中国数据隐私法下的个人信息处理者)通过下述第二章节所描述的不同渠道收集和处理中国客人个人信息的实践。
This Policy applies to various products/services we provide to you through WeChat/Weibo official accounts, WeChat mini programs, websites, offline hotels and new forms that emerge with technological development (hereafter collectively referred to as “Services”). If we have provided you with a separate privacy policy for the Services we offer, then such separate privacy policy shall take precedence. Any matters not covered in such separate privacy policy shall be governed by this Policy.
本政策适用于我们通过微信/ 微博公众号、微信小程序、网站、线下酒店以及随着技术发展出现的新形态向您提供的各种产品/服务(以下统称“服务”)。如果我们针对我们提供的服务向您提供了单独的隐私政策,则该单独的隐私政策应优先适用。该等单独隐私政策未涵盖的任何事项应受本政策的约束。
This Policy does not apply to products/services provided by third parties within our Services. Personal information processing activities of third parties are subject to privacy policies or similar rules that provided to you separately by third parties. Please review such policies or rules before using third-party products/services.
本政策不适用于我们的服务中由第三方提供的产品/服务。第三方的个人信息处理活动受其单独向您提供的隐私政策或类似规则的约束。在使用第三方的产品/服务之前,请仔细阅读第三方提供的政策或规则。
Definitions of “personal information”, “sensitive personal information”, and “processing” in this Policy are set out as follows and are consistent with the definitions in the relevant laws.
本政策中的“个人信息”、“敏感个人信息”以及“处理”定义与相关法律中的定义一致,具体如下:
· Personal information: refers to various types of information recorded in electronic or other ways that is related to an identified or identifiable natural person, including but not limited to name, address, mobile phone number, and ID number, etc. but excluding anonymized information.
“个人信息”是指以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息,不包括匿名化处理后的信息。
· Personal information processor: refers to an organization or individual that independently decides on the processing purposes and processing methods during personal information processing activities.
“个人信息处理者”是指在个人信息处理活动中独立决定处理目的和处理方法的组织或个人。
· Sensitive personal information: refers to personal information that, if leaked or used illegally, may easily lead to an infringement upon the human dignity of a natural person or endangerment of the safety of his/her body or property, including information on biometric identification, religious beliefs, specific identity, health care, financial accounts, and personal whereabouts, and personal information of minors under the age of fourteen. Sensitive personal information is in bold, italic and underlined to draw your attention.
“敏感个人信息”是一旦泄露或者非法使用,容易导致自然人的人格尊严受到侵害或者人身、财产安全受到危害的个人信息,包括生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息,以及不满十四周岁未成年人的个人信息。对于敏感个人信息,我们将会以加粗斜体下划线的方式提请您注意。
· Processing: includes personal information collection, storage, use, processing, transmission, provision, disclosure and deletion, etc.
个人信息的“处理”包括个人信息的收集、存储、使用、加工、传输、提供、公开、删除等。
2. How we collect and use your personal information 我们如何收集和使用您的个人信息
We will only collect and process your personal information for the following purposes described in this Policy in accordance with the principles of lawfulness, legitimacy, necessity and good faith and in compliance with applicable laws and regulations.
我们将秉持合法、正当、必要原则,遵守适用法律法规的要求,基于下述目的收集和使用您的信息:
1. Basic Business Function 基础业务功能
Our basic business function is to provide you with Services related to hotel reservation. To enable us to provide you with basic business functions, you must authorize us to collect and use necessary information. If you refuse to provide the corresponding information, you will not be able to use our basic functions normally.
我们的基础业务功能是为您提供与酒店预订相关的服务。为向您提供基础业务功能相关服务,您必须授权我们收集、使用必要的信息。如果您拒绝提供相应信息,您将可能无法正常使用我们的服务。
1. Official WeChat Mini Program 官方微信小程序
When you make a booking through our official WeChat Mini Program, namely the “Kempinski Hotel Group(凯宾斯基酒店集团)” WeChat Mini Program, for the purpose of providing online hotel booking services to you, we will collect and use your personal information as follows:
当您通过我们的官方微信小程序(即“凯宾斯基酒店集团”微信小程序)预订酒店时,为向您提供在线酒店预订服务,我们将收集和使用您个人信息的情况如下:
· If you book domestic hotels (including hotels in Hong Kong, Macao, and Taiwan), we will collect and use your name, phone number, email address, payment method, and room reservation information (including order number, booking time, the city where the hotel is located, the name and room type of the hotel booked, check-in and check-out date, number of adults staying, and number of children staying).
如果您预订国内(含港澳台)酒店,我们会收集和使用您的姓名、联系方式、邮箱、支付方式和客房预订信息(包括订单编号、预订时间、预订酒店所在城市、酒店名称及房型、入住及离店日期、入住成人人数、入住儿童人数)。
· If you book overseas hotels, we will collect and use your name, phone number, email address, payment method, cardholder’s name, card type, card number, card expiration date, and room reservation information (including order number, booking time, the city where the hotel is located, the name and room type of the hotel booked, check-in and check-out date, number of adults staying, and number of children staying).
如果您预订海外酒店,我们会收集和使用您的姓名、联系方式、邮箱、支付方式、付款卡持卡人姓名、付款卡类型、付款卡卡号、付款卡有效期和客房预订信息(包括订单编号、预订时间、预订酒店所在城市、预订酒店名称和房型、入住及离店日期、入住成人人数、入住儿童人数)。
If you refuse to provide the above information, we will not be able to provide you with hotel reservation services through our official WeChat Mini Program.
如果您拒绝提供上述信息,我们将无法通过我们的官网微信小程序为您提供酒店预订服务。
2. Official Website 官方网站
When you make a booking through our official website (https://www.kempinski.com/cn), for the purpose of providing online booking services to you, we will collect and use your title (Mr./Ms., optional), name, country/region of residence, phone number, email address, payment method, cardholder’s name, card type, card number, card expiration date, and room reservation information (including order number, booking time, the city where the hotel is located, the name and room type of the hotel booked, check-in and check-out date, number of adults staying, and number of children staying). Among the above information, title (Mr./Ms.) and phone number are optional.
当您通过我们的官方网站(https://www.kempinski.com/cn)预订酒店时,为了向您提供在线酒店预订服务,我们将收集和使用您的称呼(先生/女士,选填)、姓名、居住国家/地区、联系方式(选填)、邮箱、支付方式、付款卡持卡人姓名、付款卡类型、付款卡卡号、付款卡有效期和客房预订信息(包括订单编号、预订时间、预订酒店所在城市、预订酒店的名称和房型、入住及离店日期、入住成人人数、入住儿童人数)。在上述信息中,称呼(先生/女士)和联系方式为选填信息。
Aside from the optional information mentioned above, if you refuse to provide the above information, we will not be able to provide you with hotel reservation services through our official website.
除了上述选填信息外,如果您拒绝提供上述信息,我们将无法通过我们的官方网站为您提供酒店预订服务。
3. Offline Booking 线下预订
When you fill out offline registration forms of temporary residence at our hotels, or when you arrive at the hotel and check in, for the purpose of providing on-site booking or check-in services to you, we may collect and use your name, date of birth (optional), certificate (such as passport or ID card) number, visa type, visa expiration, credit card information (including credit card number, expired date, card holder name and CV2), bank information for deposit, company contact name, gender (optional), nationality, private email address or business email address (optional), phone number (optional), membership number (if any, optional), company name (optional), job title (optional), private address or business address (optional) and payment method. Among the above information, date of birth, gender, email address, phone number, membership number, company name, job title, private address, business address are optional.
当您在我们的酒店填写线下临时住宿登记表,或当您抵达酒店并在前台办理入住时,为了向您提供现场预订或入住服务,我们会收集和使用您的姓名、出生日期(选填)、证件(如护照或身份证)号码、签证类型、签证有效期、信用卡信息(包括信用卡号、有效期、持卡人姓名和CV2)、银行信息、公司联系人姓名、性别(选填)、国籍、私人邮箱或商务邮箱(选填)、联系方式(选填)、会员编号(如有,选填)、公司名称(选填)、职务(选填)、私人地址或商务地址(选填)以及支付方式。在上述信息中,出生日期、性别、邮箱、联系方式、会员编号、公司名称、职务、私人地址、商务地址均为选填信息。
Aside from the optional information mentioned above, if you refuse to provide the above information, we will not be able to provide you with on-site booking services.
除了上述选填信息外,如果您拒绝提供上述信息,我们将无法为您提供现场酒店预订服务。
4. Safety Guarantee and Service Provision安全保障和服务提供
To ensure the normal use and browsing of our online Services and to guarantee stability and security while you use our online Services, we may collect certain information through your browser or automatically through your device, including your device information (such as device model, operating system version, app version and build number), country and city, logs, IP address, and how you use our Services (such as page clicks and time spent).
为保障您正常使用和浏览我们的在线服务,并且确保您使用我们在线服务时的稳定和安全,我们可能会通过您的浏览器或自动通过您的设备收集特定信息,包括您的设备信息(如设备型号、操作系统版本、应用程序版本和构建号)、国家和城市、日志信息、IP地址,以及您如何使用我们的服务(如页面点击和停留时间)。
2. Additional Business Function 附加业务功能
Our additional business functions include hotel search, contact information addition, activities participation, customer support, customer survey, additional services at hotels, personalised marketing communications and special offers, etc. To enable us to provide you with additional business functions, you have the option to authorize us to collect and use personal information required for these additional functions. Refusing to provide such personal information may result in the inability to use these additional functions as intended, but it will not impact the use of basic functions of our Services.
我们的附加业务功能包括酒店查询、联系人信息添加、活动参与、客户支持、客户调研、其他酒店额外服务、个性化营销通讯及特别优惠等。为了向您提供附加业务功能服务,您可以选择是否授权我们收集和使用这些附加业务功能所需的个人信息。如果您拒绝提供此类个人信息,可能会导致您无法按预期使用这些附加业务功能,但不会影响您使用我们服务的基础业务功能。
1. Hotel Search 酒店查询
When you make a booking through our official WeChat Mini Program, for the purpose of facilitating your search for hotel information based on your location, you can authorize us to collect and use your location information. If you do not agree with us to process your location information, you can still search for hotel information by manually selecting a location.
当您通过我们的官方微信小程序预订酒店时,为了方便您根据您的所在位置查询酒店信息,您可以授权我们收集和使用您的位置信息。如您不同意我们获取您的位置信息,您可以通过手动选择位置的方式查询酒店信息。
2. Contact Information Addition 联系人信息添加
When you make a booking through our official WeChat Mini Program, for the purpose of facilitating your addition of booking information, you can add frequently used contact information and provide us with the name, phone number, email address and detailed address of your frequent contacts. If you prefer not to provide us with the above information, you can enter the relevant booking information yourself. Please note that if you provide us with personal information of others, please ensure that you have obtained their valid consent in accordance with applicable laws before providing us with their personal information, or that there is another legal basis for doing so.
当您通过我们的官方微信小程序预订酒店时,为了方便您添加预订信息,您可以添加常用联系人信息,并向我们提供常用联系人的姓名、联系方式、邮箱、详细地址信息。如您不愿意向我们提供上述信息,您可以自行输入相关预订信息。请注意,若您向我们提供他人的个人信息,请确保您在向我们提供个人信息前已经根据适用法律的规定获得了他人的有效同意,或具备其他合法性基础。
3. Activities Participation 活动参与
When you participate in marketing campaigns including but not limited to prize draws provided by our WeChat Official Account (i.e., “Kempinski Hotel Group (凯宾斯基酒店集团)”) and Weibo Official Account (i.e., “Kempinski Hotel Group_Kempinski (凯宾斯基酒店集团_Kempinski)”), for the purpose of providing you with incentive and sending you gifts, we may collect and use your name, contact details and mailing address. If you are not willing to provide us with the above information, we will be unable to provide you with incentive and gifts, but it will not affect your use of other Services provided by us.
当您参与我们官方微信公众号(即“凯宾斯基酒店集团”)及微博公众号(即“凯宾斯基酒店集团_Kempinski”)提供的市场运营活动(包括但不限于幸运抽奖等活动)时,为了向您提供奖励和寄送礼物,我们会收集和使用您的姓名、联系方式和邮寄地址。如果您不愿意向我们提供上述信息,我们将无法向您提供奖励和寄送礼物,但不影响您使用我们提供的其他服务。
4. Customer Support 客服支持
When you request customer support from us, for the purpose of ensuring the security of your account and personal information, we may need you to provide necessary personal information (such as name, phone number and email address) to verify your real identity. In addition, for the purpose of facilitating contact with you, assisting in resolving your issues promptly, or recording the solutions and handling results, we may retain records of your communications/calls and related content.
当您向我们提出客服支持需求时,为了保障您账号及个人信息的安全,我们可能需要您提供必要的个人信息(如姓名、联系方式和邮箱)以验证您的真实身份。此外,为便于与您联系、尽快帮助您解决问题或记录相关问题的处理方案及结果,我们可能会保存您与我们的通信/通话记录及相关内容。
5. Customer Survey 客户调研
To enhance our service level and send you personalised communications tailored to your preferences and interests, we may conduct customer surveys with your consent. If you choose to participate in our customer surveys, we may collect information such as your name, phone number, email address, booking information, travel purpose, whether you’re traveling with children or pets, your favourite destinations, cuisine preferences, hobbies, sports, wellness activities, and events you enjoy during the survey process. If you are not willing to provide us with the above information, you may not be able to participate in our customer surveys, and we may not be able to send you personalised communications tailored to your preferences and interests according to customer survey results, but it will not affect your use of other Services provided by us.
为了提升我们的服务水平、向您发送符合您偏好和兴趣的个性化通讯,我们可能会在征得您同意的情况下开展顾客调研,如您愿意参加我们的顾客调研,我们可能会在开展顾客调研时向您收集您的姓名、联系方式、邮箱、酒店预订信息、出行目的、您是否携带儿童或宠物出行、您喜爱的目的地/饮食偏好/爱好/运动/健康养生活动以及您喜欢的活动等信息。如果您不愿意向我们提供上述信息,您可能无法参与我们的顾客调研,我们也可能无法向根据顾客调研情况向您发送符合您偏好和兴趣的个性化通讯,但不影响您使用我们提供的其他服务。
6. Additional Service Provided at a Hotel 使用酒店提供的额外服务
When you use additional services provided by hotels (such as hotel WIFI, restaurants, spa, and wellness services), in order to provide you with relevant services or handle your booking requests, we may collect and use your name, telephone number, email address. If you are not willing to provide us with the above information, we will be unable to provide you with additional hotel services, but it will not affect your use of other Services provided by us.
当您使用酒店提供的额外服务(如酒店WIFI、餐厅、水疗和健康养生服务等)时,为了向您提供相关服务或处理您的预订请求,我们会收集和使用您的姓名、联系方式和邮箱。如果您不愿意向我们提供上述信息,我们将无法为您提供相应酒店额外服务,但不影响您使用我们提供的其他服务。
7. Personalised Marketing Communications and Special Offers 个性化营销通讯及特别优惠
You have the option to agree or disagree to receive personalised marketing communications, newsletters and special offers from us. If you have already consented to receive our personalised marketing information by means of electronic communication, in order to send you communications that are tailored to your preferences and interests, help you learn about our offers and promotional activities, and provide you with a more personalised experience, we will process your booking information (including your previous and upcoming stay dates, aggregated booking data like your total number and average length of stays, revenues, booking lead time and preferred booking channel, hotel type and room category), membership information (including your membership details like membership number, membership level, relevant promotions, full name, email address, date of birth, home address, phone number, language preference for email communication and email marketing preferences), survey information (including travel purpose and whether you’re traveling with children or pets), preferences and interests information (including your preferences and interests like favorite destinations, cuisine preferences, hobbies, sports, wellness activities, and events you enjoy), and browsing information (including how you use and browse our Services), and send you marketing communications tailored to your preferences and interests via email and messaging platforms such as WeChat. You can withdraw your consent for receiving personalised marketing communications at any time. You can do this by clicking on the unsubscribe link included in each communication, or you can manage your preferences and withdraw your consent through the [“My” – “Personalised Communications” page of the official WeChat Mini Program], or you can contact us through the contact details listed at the end of this Policy to withdraw your consent to receive personalised marketing communications.
您可以选择是否同意我们向您发送个性化营销通讯、时事通讯及特别优惠信息。如您已经同意通过电子通信方式接收我们的个性化营销信息,为了向您发送符合您偏好和兴趣的个性化通讯、帮助您了解我们的优惠和促销活动、带给您更具个性化的体验,我们会处理您的预订信息(包括您以往和即将入住的日期、汇总的预订数据(如您入住的总次数和平均入住时长)、收入、预订提前时间以及您偏好的预订渠道、酒店类型和房型类别)、会员信息(包括您的会员详情,如会员号码、会员等级、相关促销活动、全名、邮箱、出生日期、家庭住址、联系方式、沟通和电子邮件营销偏好语言)、客户调研信息(包括出行目的以及您是否携带儿童或宠物旅行)、偏好和兴趣信息(包括您偏好的目的地、美食偏好、爱好、运动、健康养生活动以及您喜欢的活动)以及浏览信息(包括您如何使用和浏览我们服务),并通过电子邮件、微信等信息平台等方式向您发送符合您偏好和兴趣的营销信息。您可以随时撤回您对接收个性化营销通讯的同意,您可以通过点击每封通讯中包含的取消订阅链接,随时撤回对接收个性化营销通讯的同意,您还可以通过【官方微信小程序的“我的”-“个性化通讯”页面管理您的偏好并撤回对个性化营销通讯的同意】,或通过本政策末尾所列的联系方式与我们联系以撤回对接收个性化营销通讯的同意。
Below on page 23 is the Personal Information Collection List for more details of the personal information we collect.
如需了解关于我们收集您个人信息的更多详细信息,您可以在下方第23页阅读个人信息收集清单。
3. How we entrust others to process, share, transfer and make public your personal information 我们如何委托处理、共享、转让和公开披露您的个人信息
1. How we entrust others to process your personal information 我们如何委托第三方处理您的个人信息
In order to achieve the purposes above, we may entrust third-party service providers (including but not limited to software service providers, data analysis service providers, technical service providers and legal service providers) to assist us in providing relevant operation and service support. For companies, organizations and individuals who we entrust to process your personal information, we ask them to handle your personal information in accordance with our instructions, this Policy and applicable laws.
为了实现上述目的,我们可能需要委托第三方服务供应商(包括但不限于软件服务供应商、数据分析服务供应商、技术服务供应商以及法律服务供应商)以帮助我们实现相关操作和提供服务支持。对于受我们的委托处理个人信息的公司、组织和个人,我们会要求他们按照我们的要求、本政策以及适用法律的要求来处理个人信息。
2. How we share your personal information 我们如何共享您的个人信息
We may share your personal information under the following circumstances:
我们将在以下情形下共享您的个人信息:
1. Sharing with your consent
在获取同意的情况下共享
After obtaining your consent, or in accordance with your request to share your personal information to third parties, we will share your personal information with third parties.
在获得您的有效同意后,或按照您提出的向第三方共享您个人信息的要求,我们会向第三方共享您的个人信息。
2. Sharing under legal obligation
在法定情形下共享
We may share your personal information as required by applicable laws and regulations, for the resolution of litigation, or in response to requests from administrative or judicial authorities in accordance with the law.
我们可能会根据法律法规规定、诉讼争议解决需要,或按行政、司法机关依法提出的要求,对外共享您的个人信息。
3. Sharing necessary for the conclusion and fulfilment of contracts where you are a party
为订立、履行您作为一方当事人的合同所必需的情况下的共享
In cases where it is necessary to conclude and fulfil contracts where you are a party, your personal information may be shared with necessary third parties. We will only share the personal information necessary for the conclusion and fulfilment of contracts where you are a party.
在为订立、履行您作为一方当事人的合同所必需的情况下,您的个人信息可能会与必要的第三方共享,我们只会共享与订立、履行您作为一方当事人的合同所必需的个人信息。
4. Sharing with our affiliates
与我们的关联公司共享
To facilitate the provision of Services to you through our affiliates, including but not limited to Kempinski hotels, Nuo hotels and Bristoria hotels, your personal information may be shared with them. We will only share the necessary personal information and will be bound by the processing purposes, methods, and scope of personal information as stated in this Policy.
为便于我们通过关联公司向您提供服务,您的个人信息可能会与我们的关联公司(包括但不限于凯宾斯基酒店、诺金酒店及毕思图酒店)共享。我们只会共享必要的个人信息,且受本政策中所声明处理目的、处理方式和个人信息范围的约束。
5. Sharing with our business partners
与我们的合作方共享
Some of our Services are provided by third parties. At the same time, in order to provide you with more professional and secure Services, meet your needs and improve your user experience, our Services may integrate third-party Software Development Kits (SDKs). We will only share your personal information for legitimate, proper, necessary, specific, and explicit purposes, and only share the personal information necessary to provide Services. Furthermore, we will require our business partners to take adequate measures to protect your personal information.
我们的部分服务由第三方提供,同时,为了给您提供更专业和安全的服务、满足您的需求、提升您的使用体验,我们的服务中可能会接入第三方软件工具开发包(SDK),我们仅会出于合法、正当、必要、特定、明确的目的共享您的个人信息,并且只会共享提供服务所必要的个人信息。此外,我们会要求合作方对您的个人信息采取足够的保护措施。
6. Other circumstances
其他情形
We may share your personal information under other circumstances provided by applicable laws and regulations.
我们可能会在适用的法律法规规定的其他情况下共享您的个人信息。
Below on page 29 is the Third-Party Personal Information Sharing List for more details on the specific circumstances under which we share your personal information with third parties.
如需了解关于我们与第三方共享您个人信息的更多详细信息,您可以在下方第29页阅读第三方个人信息共享清单。
3. How we transfer your personal information 我们如何转让您的个人信息
If we need to transfer personal information due to reasons such as merger, division, dissolution or bankruptcy, we will inform you of the name and contact details of the recipient of your personal information. The recipient will continue to fulfil this Policy and other legal obligations. If the recipient changes the original purpose and method of processing, they will re-obtain your consent.
如果我们因合并、分立、解散、被宣告破产的原因需要转移个人信息的,我们会向您告知您个人信息接收方的名称或者姓名和联系方式。接收方将继续履行本政策及其他法定义务。接收方变更原先的处理目的、处理方式的,会重新取得您的同意。
4. How we make public your personal information 我们如何公开披露您的个人信息
We may publicly disclose your personal information only in the following circumstances and under the premise of adopting security measures:
我们仅会在以下情况,且采取安全防护措施的前提下,才可能公开披露您的个人信息:
1. Based on your needs or choice, or with your separate consent;
根据您的需求或主动选择,或在您单独同意的情况下;
2. When required by laws and regulations, mandatory administrative enforcement, or judicial requirements to publicly disclose your personal information;
法律法规、强制性的行政执法或司法要求公开披露您的个人信息;
3. Other circumstances provided by applicable laws and regulations.
适用法律、行政法规规定的其他情形。
4. Legal bases for processing your personal information 处理您个人信息的法律基础
In most circumstances, we rely upon your consent to process your personal information. While under the relevant laws, we do not require your consent to process (including but not limited to, the collection, storage, use, processing, transmission, provision, disclosure, and deletion) your personal information when:
在多数情形下,我们处理您的个人信息需要基于您的同意。但是根据相关法律,我们在下列情形下处理(包括但不限于收集、储存、使用、加工、传输、提供、披露和删除)您的个人信息时,不需要您的同意:
1. the processing is necessary for the conclusion or performance of a contract to which you are a contracting party;
为订立、履行您作为一方当事人的合同所必需;
2. the processing is necessary to fulfill statutory functions or statutory obligations;
为履行法定职责或者法定义务所必需;
3. the processing is necessary to respond to public health emergencies or protect the life, health or property safety of natural persons under emergency circumstances;
为应对突发公共卫生事件,或者紧急情况下为保护自然人的生命健康和财产安全所必需;
4. personal information is processed within a reasonable scope to conduct news reporting, public opinion-based supervision, or other activities in the public interest;
为公共利益实施新闻报道、舆论监督等行为,在合理的范围内处理个人信息;
5. the personal information that has been disclosed by the individuals themselves or other personal information that has been legally disclosed is processed within a reasonable scope in accordance with this Law; or
依照法律规定在合理的范围内处理个人自行公开或者其他已经合法公开的个人信息;或
6. under any other circumstance as provided by any law or administrative regulation.
法律、行政法规规定的其他情形。
5. How we use Cookies and similar technologies 我们如何使用 Cookie 和类似技术
When you make a booking through our official website, we may collect information from you through Cookies. You can click here to view our Cookie Policy for more details. We also include web beacons in HTML-formatted email newsletters in order to count how many newsletters (or particular articles, links, etc.) are being accessed, and on our website to count users who have visited these pages.
当您通过我们的官方网站预订酒店时,我们可能会通过Cookies收集您的个人信息。您可以通过点击此处查看我们的Cookie政策以了解更多详情。我们还会在HTML格式的邮件通讯中嵌入网络信标,以统计有多少通讯(或特定文章、链接等)被访问,以及在我们的网站上统计访问过这些页面的用户数量。
6. How we store your personal information 我们如何保存您的个人信息
1. Retention Period 保存期限
We only retain your personal information within the minimum period which is necessary for the fulfillment of the purposes stated in this Policy. Meanwhile, we will also store your personal information with adherence to the mandatory provisions about the retention period rising from applicable laws and regulations. For example, the PRC E-commerce Law stipulates that the retention period for product and service information, transaction information shall not be less than three years from the date of completion of the transaction. The PRC Civil Code stipulates that the limitation period for filing a lawsuit with the People’s Court to protect civil rights is three years. We determine the retention period for personal information mainly based on the following criteria and adopt the longer one:
我们仅在实现本政策所述目的所需的最短期限内保留您的个人信息。同时,我们还将根据相关法律法规中有关保留期限的强制性规定存储您的个人信息。例如《中华人民共和国电子商务法》规定商品和服务信息、交易信息保存时间自交易完成之日起不少于三年,《中华人民共和国民法典》规定向人民法院请求保护民事权利的诉讼时效期间为三年。我们判断个人信息的保存期限主要参考以下标准并以其中较长者为准:
1. To complete the transaction related to you, maintain corresponding transaction and business records, and respond to your potential inquiries or complaints;
完成与您相关的交易、维护相应交易及业务记录,应对您可能的查询或投诉;
2. To ensure the security and quality of the Services we provide to you;
保证我们为您提供服务的安全和质量;
3. The longer retention period agreed upon by you;
您同意的更长的留存期间;
4. Whether there are any special agreements or laws and regulations regarding the retention period.
是否存在保留期限的其他特别约定或法律法规规定。
Upon the expiration of the retention period, we will delete your personal information or anonymize it in accordance with the requirements of applicable laws.
当保存期限届满后,我们会根据适用法律的要求删除或匿名化处理您的个人信息。
2. Storage Location and Cross-Border Data Transfer 保存地点及跨境数据传输
Personal information collected and generated during our operations in China will be stored within the territory of China (for the purpose of this Policy only, excluding Hong Kong, Macao, and Taiwan). We may transfer your personal information outside the territory of China under the following circumstances:
我们将在中国境内运营过程中收集和产生的个人信息保存在中国境内(仅就本政策而言,不包括香港、澳门及台湾),在以下情况下,我们可能会将您的个人信息传输出中国境外:
1. With your separate consent;
获得您的单独同意;
2. When you, as a party, engage in cross-border transactions through our Services, or it is necessary to conclude and perform other contracts where you are a party (such as booking overseas hotels);
您作为一方当事人通过我们的服务进行跨境交易,或订立、履行其他您作为一方当事人的合同所必需(如:预订境外酒店);
3. Other circumstances in accordance with applicable laws and regulations
其他法律、行政法规规定的情形。
Where your personal information is transferred to another jurisdiction outside mainland China, your personal information will be secured by appropriate safeguards as set forth under applicable laws. We will also require the overseas recipient to strictly protect your personal information. To the extent required under applicable laws and regulations, we will obtain separate consent from you before the transfer of your personal information.
在跨境传输您个人信息的情况下,我们会根据适用法律的要求,通过适当的安全措施来保护您的个人信息。我们还会要求境外接收方严格保护您的个人信息。在适用法律法规要求的情况下,我们会在跨境传输您的个人信息之前获得您的单独同意。
If you need to exercise your rights related to personal information protection as stipulated by applicable laws against the overseas recipient, you can contact the overseas recipient via contact information mentioned in https://www.kempinski.com/en/contact-us.
如果您需要向境外接收方行使适用法律规定的个人信息保护权利,您可以通过https://www.kempinski.com/en/contact-us.中提及的方式与其取得联系。
7. How we protect your personal information 我们如何保护您的个人信息
We strive to maintain the appropriate standards of security and we have put in place robust technical and organisational measures for the protection of your personal information in accordance with the current state of the art technologies, especially to protect the data against loss, falsification or access by unauthorised third persons. However, the transmission of information via the internet is not completely secure. So, whilst we will do our best to protect your personal information, we cannot guarantee the security of your data transmitted to our servers. Once we have received your personal information we will use strict procedures and security features to prevent unauthorised access. Our internal processing takes place inside a VPN which is firewalled against the open internet and inside of which any kind of communication is processed in an encrypted way. As far as third parties (i.e. external companies) are rendering data processing services for us, we have committed them to the compliance with our data privacy regulations. The external service providers are supervised by our Global Data Protection Manager in terms of compliance with these regulations.
我们努力维护适当的安全标准,并且采取了目前最先进的技术和组织措施来保护您的个人数据,特别是防止数据丢失或者被未经授权的第三人篡改或访问。但是,通过互联网传输信息并非百分之百安全。所以,虽然我们会尽最大努力保护您的个人数据,但我们不能保证传输到我们服务器的您的数据的安全性。当我们收到您的个人数据后,我们将使用严格的规程和安全功能来防止未经授权的访问。我们的内部数据处理在设有屏蔽开放互联网的防火墙的VPN中进行,并且其中的任何通信都以加密方式处理。就为我们提供数据处理服务的第三方(即,外部公司)而言,我们已要求他们必须遵守我们的数据隐私规定。我们的全球数据保护经理会监督外部服务提供商遵守这些规定的情况。
Where a personal information security incident occurs, we will inform you as required by the laws and regulations via mail, letter, telephone, pushed notification or other available means. Where it is difficult to inform the subjects of the personal information one by one, we may publish an announcement on our Services. Where required by law, we will also report the treatment result of the personal information security incident.
如不幸发生个人信息安全事件,我们将按照法律法规的要求及时向您告知相关情况,难以逐一告知您时,我们会采取合理、有效的方式发布公告。同时,我们还将按照法律法规和监管部门要求,上报个人信息安全事件的处置情况。
8. Your rights 您的权利
According to applicable law, you may have the following rights regarding your personal information:
根据相关法律,您对您的个人信息享有如下权利:
1. the right to know and the right to decide on the processing of your personal information;
您对您的个人信息的处理享有知情权、决定权;
2. the right to restrict or refuse the processing of your personal information by others;
您有权限制或者拒绝我们对您的个人信息进行处理;
3. the right to access, consult and duplicate your personal information;
您有权访问、查阅、复制您的个人信息;
4. the right to request personal information processors to correct or supplement your personal information where you discover the information is incorrect or incomplete;
若您发现您的个人信息不准确或者不完整的,您有权请求我们进行更正、补充;
5. the right to withdraw your consent to the processing of personal information based on your consent (but please note that your withdrawal of consent does not affect the validity of the processing of personal information that has been carried out based on your consent before the withdrawal);
对基于您同意而进行的个人信息处理活动,您有权撤回同意(但请您注意,您撤回同意的,不影响撤回前基于您同意已进行的个人信息处理活动的效力);
6. the right to request the transfer of personal information to your designated personal information processors;
您有权请求将个人信息转移至您指定的其他个人信息处理者;
7. the right to delete your personal information under specific circumstances;
您有权在特定情况下要求我们删除您的个人信息;
8. the right to cancel your account.
您有权注销您的账号。
You can access your order details (including order number, the name of hotel, check-in and check-out date, payment method, booking time) through the “My” page of the official WeChat Mini Program. If you want to withdraw your authorization for us to process your location information, you can manage the location information permission by clicking on the “…” in the upper right corner of the official WeChat Mini Program and then clicking on the “Settings”. If you want to withdraw your consent for receiving personalised marketing communications, you can click on the unsubscribe link included in each communication, or you can manage your preferences and withdraw your consent through the [“My” – “Personalised Communications” page of the official WeChat Mini Program]. You can also contact us via the contact information provided in this Policy to exercise your rights above. To protect the security of your personal information, we need to verify your identity in order to respond to your rights request(s), and we may not be able to respond to the request(s) for rights related to personal information that are not from you or authorized by you (for example, requests to consult personal information of someone else).
您可以通过官方微信小程序的“我的”页面查看您的订单详情(包括订单编号、酒店名称、入住及离店日期、支付方式、预订时间)。如果您想撤回对我们处理您的位置信息的授权,您可以点击官方微信小程序右上角的“…”,然后点击“设置”来管理位置信息权限。如果您想撤回对接收个性化营销通讯的同意,您可以点击每条通讯中的取消订阅链接,也可以通过官方微信小程序的[“我的”-“个性化通讯”页面]管理您的偏好并撤回同意。您也可以通过本政策中提供的联系信息与我们联系,以行使上述权利。为保障您的个人信息安全,我们需要核实您的身份以响应您的权利请求,我们可能无法响应非本人或非经本人授权的个人信息相关权利请求(例如请求查看他人的个人信息)。
Additionally, the rights above are subject to limitations and exceptions under applicable law. For example, we will only respond to personal information transfer requests that meet all of the following conditions: 1) where the true identity of the person making the request can be verified; 2) where the personal information requested for transfer is the personal information that the individual has agreed to provide or has been collected on the basis of a contract; 3) where the transfer of personal information is technically feasible; and 4) where the transfer of personal information does not damage the legitimate rights and interests of others. In addition, If the number of requests for transfer of personal information significantly exceeds a reasonable range, we may charge necessary fees based on the costs of transferring personal information. We will respond to and comply with your request(s) consistent with applicable within 15 working days. If you have unresolved concerns, you also have the right to complain to relevant supervisory authorities or where applicable, file a lawsuit with the court in accordance with applicable law.
此外,上述权利可能会受到相关法律的额外限制。例如,我们只对符合以下所有条件的个人信息转移请求做出回应:1) 能够验证请求人的真实身份;2) 请求转移的是本人同意提供的或者基于合同收集的个人信息;3) 转移个人信息具备技术可行性;(4) 转移个人信息不损害他人合法权益。此外,如果请求转移个人信息的次数等明显超出合理范围,我们可能会根据转移个人信息的成本收取必要费用。我们将在合理可行的情况下在15个工作日内根据相关法律回应并响应您的请求。如果您仍有未解决的问题,您也有权向相关监管机构投诉,或根据相关法律向法院提起诉讼。
9. How we protect personal information of children 我们如何保护儿童个人信息
We do not knowingly collect personal information from children under the age of 14 without parental/guardian consent. If you are the parent or guardian of your child and believe that we have personal information of your child without parental/guardian consent, or if you wish to withdraw such consent, please contact us via the contact information provided in this Policy and we will delete such information.
在未经父母或监护人同意的情况下,我们不会故意收集14岁以下儿童的个人信息。如果您认为我们拥有未经父母或监护人同意的儿童个人信息,或者如果您是该儿童的父母或监护人并希望撤回同意,请通过本政策中提供的联系信息与我们联系,我们将删除相关个人信息。
For more information about our practices related to the processing of information of children under the age of 14 can be found in our Child Guest Privacy Notice. If you are a child under the age of 14, before using our Services, you and your parent/guardian should carefully read our Child Guest Privacy Notice. Only after obtaining your parent/guardian’s consent to our Child Guest Privacy Notice, can you use our Services or provide us with your personal information under the guidance of your parent/guardian.
更多有关我们如何处理14岁以下儿童个人信息的实践,请参阅我们的《儿童隐私声明》。如果您是未满14周岁的儿童,在使用我们的服务之前,您和您的父母/监护人应仔细阅读我们的《儿童隐私声明》。只有在获得父母/监护人对我们的《儿童隐私声明》的同意后,您才能在父母/监护人的指导下使用我们的服务或向我们提供您的个人信息。
10. Links to other sites and services 其他网站和服务链接
Our Services may contain links to third-party websites, applications and other services. Please be aware that we are not responsible for the privacy practices of such other sites and services. We encourage you to be aware when you leave our Services and to read the privacy statements of each and every site you visit that collects your information.
我们的服务可能会包含第三方网站、应用程序和其他服务的链接。请注意,我们不对此类其他网站和服务的隐私做法负责。我们建议您在离开我们的服务时注意并阅读您访问的每个收集您信息的网站的隐私声明。
11. Updates 更新
This Policy may be updated periodically. We will update the date at the top of its first page accordingly and encourage you to check for changes that we have made. On some occasions, we may also actively advise you of specific data handling activities or significant changes to this Policy, as required by applicable law. We encourage you to visit this Policy regularly to read the latest version.
本政策可能会定期更新。我们将相应地更新第一页顶部的日期并希望您查看我们所做的变更。根据适用法律的要求,在某些情况下我们可能会主动告知您特定的数据处理活动或本隐私政策的重大变更。我们鼓励您定期访问本政策以阅读最新版本。
12. Contact us 联系我们
If you have questions about this Policy or wish to contact us for any reason in relation to our personal information processing, please contact our Global Data Protection Manager at [email protected].
如果您对本政策有疑问,或因任何涉及到个人信息处理的问题希望与我们联系,请联系我们的全球数据保护经理,电子邮箱地址:[email protected]。