Letslink Privacy Agreement

Introduction

Your trust is critical to us and we understand how important personal information is to you. We will collect personal information from you within a reasonable and necessary scope in accordance with laws and regulations. We make every effort to prevent your information from being leaked, damaged or lost through reasonable and effective information security technologies and management processes. In consideration of this, Midea Platform Service Provider (or “We”) makes this Privacy Agreement and reminds you that:

This Agreement applies to all products and services provided by Midea Platform Service Provider to you through websites, Clients, applets and new forms emerging with the development of technology. The “Midea Platform” herein refers to Letslink for Clients operated by Midea Group Co., Ltd. and its affiliates.

This Agreement also applies where Midea Platform products or services are used in our products or services (e.g. logged in using Midea Platform account), but there is no separate privacy agreement. Where we and our affiliates have separate privacy agreements regarding the products or services they provide to you, the corresponding products or services will be subject to the corresponding privacy agreements. If the privacy agreements of a certain platform are incomplete, the relevant agreements applicable to the privacy policies/ agreements of other platforms can be referred to.

It should be noted that this Agreement does not apply to services provided to you by a third party, such as jumping to a third-party website, Client or applets via Midea platform, nor personal information provided by you to such third-party service provider.

Before using all products or services of Midea Platform, please carefully read and thoroughly understand this Agreement, especially the clauses marked in bold and underlined. You shall begin to use our Client after fully understanding and accept all clauses in the Agreement. If you have any questions about this Agreement, you may contact Midea Customer Service (400-889-9315) or contact us at any of the platforms provided by Midea.

If you are a minor under the age of 18, please read this agreement with your legal guardian and pay special attention to the terms of use for minors.

This Agreement is intended to provide you with the following information:

1 Our Role

Our Role: We are the controller of your data. This means that we have the right to decide how and for what purpose your personal information is handled. We understand that you care about how to use and share your data, we appreciate your trust and we will handle your information carefully and sensibly.

2 What Information Do We Collect From You

We collect your information legally, reasonably and necessarily. When providing a specific service to you, we will clearly inform you of the information to be collected and the purpose for responding to your specific service request. Depending on the service you choose, we may collect one or more of the following information under the following scenarios:

2.1 This App only aims at Midea’s overseas application. Letslink account and its initial passwords can be generated only upon maintaining information through TSP system, iService system, 4A, overseas channel management system or Midea iHR system by shopping guides, after-sales service personnel, engineers, outlet administrators, BU service personnel, a few salesmen, agents and secondary distributors of Midea overseas channels, market managers, sales personnel and other roles. Please log in with the account and its password, and you can change the password by yourself.

2.2 When you have successfully registered, you can view your personal information in the App Profile, including your name, account number, mobile phone number (blank if not provided for registration), email address (blank if not provided for registration), employee number and department title. You can view and modify your personal information, including your bank card number (for salary payment), birthday, ID card number, etc. in the profile.

2.3 In order to identify the abnormal status of the account or device, understand or optimize the suitability of the product and service, and provide application version upgrade or firmware version upgrade service, we will collect the information of your use and store it as web log information during your use of our products and services, including the hardware model, IESI number, IDFA, IMEI number or other unique device identifiers, MAC address, IP address, operating system version and settings of the device used to access the service.

2.4 When you copy an SMS verification code, share or receive shared password information, your clipboard function may be called to read or write relevant information. When reading the SMS verification code, it is used to automatically fill in the verification code when logging in by using the mobile phone number and verification code; when sharing or accepting information regarding the shared LetslinkApp password, it is used to write the password information into the clipboard, or the password shared by other applications of the monitoring equipment. The clipboard information will only be processed on your device and we will not store your clipboard information for any other routines.

2.5 When you enable the location function of the device or Midea platform and use the location-based check-in and user visit functions provided by us, we collect location information and photo information so that you can obtain relevant services without manually entering your geographic coordinates. We use technologies such as IP addresses, GPS, and other sensors that can provide relevant information (information about the nearby devices, WLAN access points, and base stations) for location. You can disable the location function through the system authorization to stop our collection of the information about your geographic location, and you will be unable to use the related functions or achieve the intended effect of the related services thereafter. Note: The purpose of collecting your current location information is to provide you with environmental services and fast equipment distribution network services, and your whereabouts will not be tracked.

2.6 When you use the after-sales order system, you will be required to fill in the customer information of those who report the failure and require repair, and then you will also be required to sign at the customer terminal for record and provide customer evaluation. Please inform and obtain the user's consent before collecting the relevant information, otherwise, you should not provide them to us.

2.7 When you use the function of retail management, you will be required to fill in the telephone number and address of the user for convenience to provide the delivery service. Please inform the user before collecting relevant information and obtaining the user's consent, otherwise, you should not provide them to us.

2.8 If you participate in Letslink related promotions and other activities, you will be required to fill in/ provide your name, mobile number and address in order to distribute and send rewards. If you participate in activities such as product trial, questionnaire survey and so on, in order to understand customer needs and screen our target customers for trial use, we may also need you to fill in/ provide your gender, age group, income range, family structure, current products at home, living preference and other information (subject to the specific activity page). By completing and submitting the relevant information and by participating in the activity, you will be deemed to have consented to our collection and use of the information for the above purposes. You can also choose not to participate in the activity and not provide the corresponding information required.

2.9 If you purchase goods from the online mall in LetslinkApp and require an invoice, you are required to fill in/ provide the following information for issuing/sending the invoice: if you choose to issue an electronic invoice-for enterprise, you are required to fill in the unit name and taxpayer identification number; if for VAT special invoice, you are required to fill in the company/unit name, taxpayer identification number, bank name, account number of the account opening bank, detailed address of the company/unit, telephone number of the company/unit as well as the name, telephone number and detailed address of the bill recipient.

2.10 To help us understand the operation status of any above platform, we may record information about the frequency and the place of your use, the crash data, overall status of use, performance data. We will not associate the information stored in the analysis software with any personal information about you.

2.11 It should be specially noted that information about a specific natural person will not be identified through individual equipment information and service log information. If we combine this information with others to identify a particular natural person, or use it in combination with other personal information, such non-personal information will be treated as personal information during the combined use and will be anonymized and de-identified unless authorized by you or otherwise provided by laws and regulations.

2.12 In addition, in order to realize online problem feedback of Letslink during use, you can fill in the problems you want to feedback on the “suggestion” in the APP and upload pictures. You can also leave your contact information there. By gathering the information, it will be more convenient for us to analyze and position problems, contact you for more information to resolve the problems, and keep track of the closed loop of service. If you do not provide such information, we may not be able to effectively locate and resolve your feedback.

2.13 We may also collect additional information, your responses to the questionnaire sent to us when you participate in the questionnaire, the information provided to us upon participation in the User Experience Program, various activities on the Midea Platform, and those you provide to us when you interact with us.

2.14 Letslink may call the permission of your device. The followings list the business functions corresponding to the calling rights, the purpose of our call, and the information asked by the calling rights.

Permission of Device Purpose of Corresponding Service Function and Calling Rights Asking or Not Whether User Can Close the Permission
Find the account number on the device Find the associated account number No No
Start-up Push by Oppo/ Huawei/ Xiaomi No No
Retrieving the Running Applications It is used to share necessary passwords with third-party applications, such as identifying whether WeChat can be started-up. No No
Making a call For Making calls to customers Yes Yes
Camera Used for attendance check-in, after-sales service forensics and uploading pictures during problem description Yes Yes
Turning on the flashlight Turn on the flashlight when the light for scanning is insufficient Yes No
Storage permission (permission to access album) Used for attendance check-in, after-sales service forensics and uploading pictures during problem description Yes Yes
Microphone (recording) Voice recording for information Yes Yes
Read SIM card information of phone Building a unique user identity code Yes Yes
Reading position information For check-in of attendance, customer visit and modification of customer address information Yes Yes
Turning on Bluetooth Bluetooth matching and Bluetooth equipment control for Internet of Things Yes Yes
Reading Address Book In order to realize the function of inviting family members, you are required to open this permission for device sharing after successful network matching of the device (to be modified) Yes Yes
Clipboard Quickly filling in the mobile phone verification code, writing or monitoring the shared password information for page jump in the App No No

You can choose to turn off some or all permissions in the App Settings or through Android/ IOS System Settings, thereby preventing us from collecting corresponding information. Permission display and shutdown patterns vary from device to device using Android/ IOS, please contact your device and system developer for details

2.15 In order to improve the security of your use of Letslink service, protect the personal and property security of you or other users or the public from infringement, to better prevent phishing website, fraud, network loophole, computer virus, network attack, network intrusion and other security risks, and to identify more accurately violation of laws and regulations or relevant agreement rules of Midea platform, we may use or integrate your account information, device interaction information, network log information and information that we have obtained your authorization or share according to law to comprehensively judge your account and transaction risks, authenticate, detect and prevent security incidents, and take necessary record, audit, analysis and disposal measures according to law.

2.16 If the information you provide contains personal information about other users, you need to ensure that you are legally authorized before providing us with such personal information. Your prior consent will be obtained if we use the information for other purposes not covered by the Agreement, or if we use information collected for a specific intent for other intents, or if we voluntarily obtain your personal information from a third party.

2.17 Exception To Authorized Consent: You fully understand and agree that your authorized consent is not required for our collection, use, sharing, transfer and public disclosure of your personal information in the following circumstances, and we may not respond to your requests for correction/ modification, deletion, cancellation, withdrawal of consent, request for information:

2.17.1Those relating to national security and national defense security;

2.17.2Those relating to public safety, public health or major public interests;

2.17.3Those relating to the judicial or administrative enforcement of criminal investigation, prosecution, trial and enforcement of sentences;

2.17.4Those for which your consent is difficult to be obtained even in order to protect your or other personal life, property and other important legitimate rights and interests;

2.17.5Personal information that you disclose to the public by yourself;

2.17.6Personal information collected from legal and public disclosure, such as from channels of legal news reports, government information disclosure and others.

2.17.7Those as may be necessary to enter into and perform any agreement or other written document with you;

2.17.8Those that are necessary to maintain the safe and stable operation of the provided products and/ or services, for example, finding and settling the faults of the products and/ or services;

2.17.9Those necessary for lawful news reporting;

2.17.102.17.10 Those necessary for an academic research institution to carry out statistical or academic research based on the public interest, and when providing the results of academic research or description to the public, the personal information contained in the results will be de-identified;

2.17.11Other circumstances specified by laws and regulations.

3 How Do We Use Your Information

3.1 We will keep your personal data up to date, securely store or destroy it, minimize the collection and retention of the data necessary for our service to you, protect your personal information from disclosure, abuse, unauthorized access and disclosure, and take appropriate technical measures to protect your personal information.

3.2 We will use your information for the following purposes:

3.2.1 Providing you with services (after-sales tickets, distributor orders, customer service, etc.) in accordance with the contract we have signed with you.

3.2.2 Fulfilling your transaction or service request, including fulfilling an order; delivering, activating, or validating a product or service; participating in online or offline activities; making changes or providing the information requested by you (e.g., marketing materials for products or services, white papers); and providing technical support.

3.2.3 Sending you information about products and services you may be interested in; inviting you to participate in e-commerce events (including promotions), market surveys, or satisfaction surveys; or sending you marketing messages. If you do not want to receive such information, you can unsubscribe according to the un-subscription settings provided by the platform.

3.2.4 Providing additional services as the requirements stated in our information collection.

3.2.5 Maintaining the integrity and security of our data technology systems that store and process your personal information.

3.2.6 Executing or protecting our agreements or contracts with you.

3.2.7 Detection and investigation of leaks, illegal activities and fraud.

3.2.8 Contacting you to resolve the problem.

3.2.9 Other uses approved by you.

3.2.10 Upon requirement by other laws and regulations (e.g. confirming your age to prevent us from collecting data on underage children, performing records required by government agencies, etc.);

3.3 It is important to note that the above uses cover the main ways in which we use your information. We may provide users with more diverse services from time to time by updating web pages, App versions, applet versions, or device firmware. When we intend to use the information for other purposes not specified in the Agreement, or to use the information collected for a specific intent for other intents, we will seek your consent again in the form of signing agreements, pop-up prompts, site announcements, updating the agreement, etc.

4When Do We Share Your Information

We will not share your personal information with companies, organizations and individuals outside Midea except:

4.1Sharing under statutory circumstances: We may share your personal information with others as required by laws and regulations, litigation dispute resolution, or as required by the administrative and judicial authorities according to law.

4.2Sharing when express consent has been obtained: With your express consent, we will share your personal information with third parties.

4.3Sharing with Affiliates: Your personal information may be shared with our affiliates and/ or their designated service providers to enable us to provide you with products and services, identify the account anomalies, and protect other users or the public of their personal and property security. We will only share the necessary personal information, subject to the purpose stated in the Agreement, and will seek your authorization and consent again if we share your personal sensitive information or if an Affiliate changes the purpose for which personal information is used and processed.

4.4Sharing with authorized partners: We may entrust authorized partners to perform certain services for you or perform functions on our behalf. We will only share your information for the legal, proper, necessary, specific and express purposes stated in the Agreement, and the authorized partner will have access only to the information necessary for the performance of its duties and may not use such information for any other purposes. The use and sharing of such processed data need not be notified to you separately and your consent will not be required.

Currently, our authorized partners include those of the following types:

4.4.1Authorized partners for advertising and analysis services. Please be aware that in order to provide you with more convenient, high-quality, personalized products and/ or services to enhance your experience, we may entrust these partners with information relating to advertising coverage and effectiveness, but your personally identifiable information will not be provided, or such information will be de-identified by us so that you will not be identified. Such partners may combine this information with other data legally available to them to execute advertising services or decision-making recommendations that we have commissioned.

4.4.24.4.2 Suppliers, service providers and other partners. We will send information to suppliers, service providers and other partners that support our business, including technical infrastructure services commissioned by us, analyzing how we use our services, measuring their effectiveness, providing customer service, payment facilities, or conducting academic study and research.

To enable you to use the above services and functions, an authorized partner's SDK or other similar application will be embedded in our application.When you use Letslink WeChat and QQ sharing functions, your device information and network status will be obtained.

For the use of the third-party SDK, we will authorize partners to obtain relevant business information based on the premise that the user's personal data is not synchronized. At the same time, we will conduct strict security checks on third party SDK application program interfaces (APIs), software tool development kits (SDKs), and sign strict data protection commitments/ agreements with our partners to handle personal information in accordance with our purpose, service description, the Privacy Agreement and any other relevant confidentiality and security measures.

4.5About Third Party SDK Management

In order to provide you with more professional and secure core business functions and additional business functions, third-party SDK products will be connected to our products or services. Third-party SDK will not collect your information until you agree to the Privacy Agreement. If you would like to know more about the third party SDKs we are accessing, please read the Letslink third party SDK list.

4.6 We will not transfer your personal information to any company, organization or individual, except:

4.6.1Transferring upon express consent: We will transfer your personal information to other parties upon your express consent;

4.6.2In case of a merger, internal and external business reorganization, acquisition or bankruptcy liquidation of platform service provider, or other situations involving merger, acquisition or bankruptcy liquidation, if personal information transfer is involved, we will require new company and organization holding personal information of you to continue to be bound by the Agreement, otherwise, we will require such company, organization and individual to seek your authorization and consent again.

4.7We currently do not engage in any form of user profiling activity-a technique for automatically processing your personal information, including using your personal information to construct a description of your characteristics, to evaluate or predict certain matters related to you. We currently also don't use your data to perform any fully automated decisions-an automated decision made through unattended technology. However, we may analyze processed data that does not identify you, such as anonymous profiling of users, to improve our products and services.

5 Public Disclosure

We will disclose your personal information to the public only if:

5.1 With your prior consent.

5.2 Disclosure Based on Law: We may disclose your personal information publicly when required by law, legal proceedings, litigation or governmental authorities.

6 How Do We Store Your Information

6.1 Storage of Personal Information

Your information we collect will be stored on our servers located in Hong Kong, China and Nanhai, Shunde District, Foshan City. In principle, we will not synchronize the data to other regions, but where necessary (e.g. when overseas users use Letslink), O & M colleagues in China may have the right to process relevant information.

6.2 Cross-border Transmission of Personal Information

Depending on our global business needs, we may transfer your data to our offices in other countries around the world. In international data transmission, we will ensure that your personal information is protected by applying the security levels required by relevant laws and regulations. When you transfer your data to countries where this level of protection cannot be guaranteed, we have further enhanced IT security measures to protect your personal information and have signed standard data protection provisions with the data sender, which requires the transferor to be held accountable.

6.3 While you are using Letslink products or services, we will keep them for you on an ongoing basis.

6.4 We will back up the collected information regularly according to Letslink's data backup policy.

6.5 When you are an employee of our suppliers and partners, you cannot cancel the account number on this platform. When you stop working with us, we will withdraw your rights to login and freeze your account. As required by law, we will continue to retain your personal data in the background, but we will not use it for purposes other than those specified in the Agreement.

6.6 After anonymization and desensitization, your personal information will form usable circulating data. Letslink does not need to obtain your consent for the storage and use of the data.

6.7 When our products or services stop from operating, we will notify you in the form of push notice, announcement, etc., and delete your personal information or anonymize it within a reasonable period of time.

7 How Do We Protect Your Information

7.1 We have taken reasonable and practicable security measures that meet industry standards to protect your information from unauthorized access, public disclosure, use, modification, damage or loss of personal information. For example, data exchange between your browser and server is protected by SSL protocol encryption; we also provide HTTPS protocol secure browsing to sites on the U.S. platform; encryption technology will be used to improve the security of personal information as well as the trusted protection mechanisms to protect personal information from malicious attacks; we will deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we will conduct security and privacy protection training sessions to enhance employees' awareness of the importance to protect personal information.

7.2 Internet is not an absolutely secure environment, and when using Letslink products or services, we strongly recommend that you do not send your messages in a way that is not recommended by Letslink. You can connect and share with each other through our services. When you create a communication, transaction or share through our service, you can choose who you want to communicate, trade or share as a third party or which internal person who can see your transaction content, contact method, exchanged information or shared content, etc.

7.3 If unfortunately, incidents of personal information security occur, we will inform you of the basic information and possible impact of the security incident, the disposal measures we have taken or will take, the suggestions on your own prevention and risk reduction, the remedial measures for you, etc. according to the requirements of laws and regulations. We will inform you of the incident by mail, letter, telephone, push notice, etc. If it is difficult to inform the subject of personal information one by one, we will make a reasonable and effective announcement. At the same time, we will also report the handling of personal information security incidents as required by the regulatory authorities.

7.4 You will fully understand and agree that we have the right to examine whether the identity information provided for the user registration is true and valid, and actively take reasonable measures such as technology and management to ensure the security and effectiveness of the user's account; you have the obligation to keep the account number and password properly and use the account number and password correctly and safely. If any party fails to fulfill the above obligations, resulting in loss of account number and password, theft of account number and other circumstances, thus causing damage to the civil rights of the user and others, it shall bear the legal liabilities arising therefrom.

7.5 If you discover that your Letslink account and password are fraudulently used or misused, or in any other means not authorized by you, you should notify and inform us immediately in the required and effective manner. You shall provide valid personal identity information consistent with your registered identity information when you notify. After receiving your valid request and verifying your identity, corresponding measures will be taken according to your requirements or in combination with the specific situations (including but not limited to suspending the login and use of the account, unbundling and deleting the intelligent device bound by the account number, etc.). You shall bear the loss caused to you and other users due to taking corresponding measures according to your request. If you do not provide valid identity information or if the personal valid identity information provided by you is inconsistent with the registered identity information, we have the right to refuse your request, and you shall be responsible for any loss caused thereby.

7.6 We attach great importance to and are committed to protecting your personal information security. We have applied a series of techniques to protect your personal information and minimize the risks of misuse, unauthorized access, unauthorized disclosure and unreachable access. Security measures used include, but are not limited to, data desensitization, data encryption, firewalls, and data access authorization controls.

At present, we have obtained the following professional certifications:

ISO/ IEC 27001 Information Security Management System Certification;

ePrivacy Privacy Authentication.

At the same time, we regularly check and update the security mechanisms used to protect data to provide effective protection against data misuse. If you believe that the security of your data is compromised, or if you would like more information about our data protection measures, please contact our Data Protection Office using the contact information provided in the last section of the Privacy Agreement

8 Your Enjoyable Rights

You have the right to manage your information, including:

8.1 To access your personal information:

8.1.1 Account information: If you want to access or edit the personal information in your account, change your password, etc., you can log in to your account and access or edit it through settings.

8.1.2 Other personal information (such as check-in for attendance, order bill and other services used): you can access the personal information generated in the process of using our products or services on the corresponding service page;

8.2 To correct your personal information

You have the right to ask us to make corrections or supplements when you find that we have made errors in processing your personal information. You can make corrections or supplements or contact us directly by visiting the page for Personal Information Settings.

8.3 To delete your personal information

In the following cases, you can contact the customer service of Midea Platform to request deletion of personal information:

8.3.1 If we deal with personal information in violation of laws and regulations.

8.3.2 If we collect and use your personal information without your express consent.

8.3.3 If our handling of personal information constitutes a material breach of our agreement with you.

8.3.4 If products or services we provide are not required by you permanently.

8.3.5 If we share or transfer your personal information with others without your express consent, you have the right to ask us and the third party to delete it.

8.3.6 If we disclose your personal information publicly in violation of our agreement with you, you have the right to require us to immediately stop the public disclosure and issue a notice requiring the relevant recipient to delete the relevant information.

If we decide to respond to your deletion request, we will stop providing you with the product or service and delete your personal information as required by applicable law.

8.4 Copy of Personal Information

If you need a copy of your personal information, please contact us by contact information stated in Article 11.

8.4.1 If you want to change the scope of your authorization, you can modify personal permission settings via your mobile device according to the routine in the App “My Settings-Privacy Security Protection-Privacy Settings”。

8.4.2 Once you withdraw your consent or authorization, we will not be able to continue to provide you with the services corresponding to your withdrawal of consent or authorization, nor will we process your personal information accordingly. However, your decision to withdraw your consent or authorization will not affect our handling of personal information previously based on your consent or authorization.

9 Account Cancellation of Personal Information Owner

9.1 If you need to cancel your account, please contact us through the contact information in Article 11 to cancel the account of the owner of your personal information.

9.2 After you cancel your account, we will stop providing you with products or services, and at your request, unless otherwise required by law, we will delete your personal information within 15 working days.

10 How to Protect Minors' Information

10.1 Our products and services are mainly for suppliers and partners of the Midea, but not for ordinary users or consumers.In the case of collecting the personal information of minors with the consent of the legal guardian, we shall only use or publicly disclose the legally collected personal information of the minor only if permitted by law, with the explicit consent of the legal guardian or upon the necessity for the protection of the minor.

10.2 If we find that the personal information of a minor has been collected without the prior consent of the legal guardian, we will try to delete the relevant data as soon as possible. If the legal guardian has reason to believe that a minor has submitted personal information to Letslink without their prior consent, please contact us to ensure that such personal information is deleted and that the minor cancels any applicable Letslink platform services.

11 How Do You Contact Us

11.1 If you have any questions, comments or suggestions regarding this Privacy Agreement, or if you wish to exercise any rights, or if you have any requests to discuss with us, please contact our department dealing with personal information protection at:

11.1.1 Midea Platform Service Provider LetsLink:

11.1.2 Address: Midea Headquarters Building, No.6, Midea Avenue, Beijiao Town, Shunde District, Foshan City, Guangdong Province

11.1.3 Email: MideaDPO@midea.com

11.2 For security purposes, you may need to provide a written request or otherwise prove your identity. Normally, we will reply within 15 days. If you are not satisfied with our reply, especially if our personal information processing activities have harmed your legal rights and interests, you can also complain or report to the regulatory authorities such as Netcom, Telecom, Public Security and Municipal Supervision.

11.3 If you are unsatisfied with our reply, especially if you believe that our personal information processing activities have harmed your legitimate rights and interests, you may also seek a solution by filing a lawsuit in a court of competent jurisdiction in the place where the defendant is domiciled.

12 Renewal of Terms

12.1 In order to provide you with better service and better user experience, the Agreement will be changed according to business adjustment, laws, regulations or policies. If you continue to use any of our services or visit our relevant websites after an adjustment or change to the Privacy Agreement, we believe that you have fully read, understood and accepted the amended Privacy Agreement and are bound by it.

12.2 This Privacy Agreement is updated at least every 12 months, and this version was updated on November 30, 2021.

Letslink

Version of November 30, 2021

Effective on November 30, 2021