1. Cross-Border Data Transfer Overview

When you use our feedback service, the personal information you submit (including contact email, feedback content, attachment URLs, etc.) may be transferred to and processed on servers located outside your country of residence. This is because our service providers and partners may be located in different countries or regions.

2. Purposes of Transfer

The purposes of cross-border data transfers include:

• Processing and responding to your submitted feedback and suggestions
• Providing customer support services
• Conducting data backups and disaster recovery
• Performing service analysis and improvements

3. Destination Countries / Regions

Your data may be transferred to servers in the following countries and regions:

4. Data Protection Measures

4.1 Contractual Safeguards

We enter into Data Processing Agreements (DPAs) with all third parties that receive data, clearly defining data protection obligations and ensuring a level of protection comparable to that of your jurisdiction.

4.2 Standard Contractual Clauses

For transfers to countries without an "adequacy decision," we use regulator-approved Standard Contractual Clauses (SCCs) as a safeguard mechanism.

4.3 Technical Safeguards

• All cross-border transfers use TLS 1.3 encryption
• Data is encrypted both in transit and at rest
• Strict access controls and audit logging are implemented

4.4 Organizational Safeguards

• Regular assessment of recipients' data protection practices
• Designation of a Data Protection Officer (DPO) to oversee compliance
• Established data breach emergency response procedures

5. Your Rights

Regarding cross-border transferred data, you have the following rights:

• Right to be Informed: Know which countries/regions your data is transferred to
• Right of Access: Obtain information about the cross-border transfer
• Right to Withdraw Consent: Withdraw your consent to cross-border transfers at any time
• Right to Complain: Lodge a complaint with a data protection supervisory authority

6. Legal Basis

The legal bases for our cross-border data transfers include:

• Necessity for the performance of a contract with you
• Your explicit consent
• Compliance with legal obligations
• Our legitimate interests (provided your rights and freedoms are not overridden)

7. Data Retention and Deletion

Cross-border transferred data will be retained for the period necessary to fulfill the purposes of processing. When you withdraw consent or request deletion, we will remove your data from our systems, notify relevant third parties to delete their copies, and confirm completion within a reasonable timeframe.

8. Contact Us

If you have any questions about this Cross-Border Data Transfer Notice or wish to exercise your rights, please submit your request through the Feedback Center or contact our Data Protection Officer (DPO).