PrivacY Statement

Tianrun and its businesgi€egments, units, divisions, and all other operating entities
wherever
where
located, including controlled joint ventures, partnerships and other business arrangements
has either a controlling interest or effective management control (collectively, 1v€",
"ouf, "us")
in accordance
care about your privacy and are committed to processing your personal information
(EU)
with fair information practices and applicable data privacy laws, including Regulation
20161679 (the General Data Protection Regulation)'

Types of Personal Data Collected

We collect the following types of Personal Data about you:

o Demographiclnformation
r Emergency Contact Information
o Dependentlnformation
o Education Information
o Employmentlnformation
o Financial Information

Gollection and Use of Personal lnformation

We may collect your personal information to administer our employment or contractual

directly
relationship between your employer with you. We may collect personal information, either
from you or from thiid parties including your legal employer, public databases, social media
platfoims, recruitment companies, business service providers, or staffing agencies. We may
paper-based data
collect, use and transfer your personal information through automated and/or
processing for
processing systems. We have established routine processing functions (such as
regular payroll and benefits administration). We also process personal information on
an
for a particular new
occasional or ad hoc basis (such as when an employee is being considered
position, or in the context of changes to an employee'S marital status)

please note that providing certain information necessary for the performance of your
is
requirement,
employment contract. In some cases, providing data to us may also be a statutory
provide your
e.g. in order to prepare documentation relevant for tax purposes. lf you do not
personal information to us, we may either not be able to conduct the employment relationship with
you or, at least, you may not be able to participate in certain processes such as feedback or
career development (which may also not be in line with your contract with us).

Where you provide us with personal information relating to individuals other than
you (e.g'
to them
members of yourfamily), you confirm that you have provided a copy of this Privacy Notice
so they understand how we may use their personal information.

Processing Purposes
We process personal information for the following purposes:
4
. performance of your employment contract
. workforce administration, payroll, compensation and benefit programs;
. workforce planning, recruitment and staffing;
. performance management, learning and development;
o advancement and succession planning;
. legal defense and compliance, including compliance with government authority requests
for information, liens, garnishments and tax compliance;
. workplace management, such as travel and expense programs and internal health and
safety programs and managing grievances and disciplinary issues;
. the administration of operational activities, including production related activities;
o the administration of information systems;
o internalreporting; J

o audit;
. to protect our business, our workforce, and the public against injury, theft, legal liability'
fraud, abuse, or threat to the security of our networks, communications, systems,
facilities and infrastructure, including monitoring communications sent on our systems
and any other use of our systems where we have a legitimate reason to do so as and
permitted under local law; and other legal and customary business-related purposes.

Sensitive Personal Information

We may process sensitive personal information if we are required to do so to comply with

applicable law. This may include personal information such as health data (including data
on
illness or accidents at work, occupational diseases, information on disability, data contained
in
origin, sexual
the medical certificates), biometric information, information on racial and ethnic
processed or
orientation or religious beliefs. Sensitive personal information will not be collected,
having
transferred, except where adequate privacy protection mechanisms are in place and after
first obtained your informed consent, if required by law.

Disclosing Personal Data to Third Parties

We may disclose your personal information for legitimate purposes to third party service
providers who perform services on our behalf for the aforementioned purposes.

Retention of Personal Data

your personal information will be retained as long as necessary to achieve the purpose for which
it was collected, usually for the duration of any contractual relationship and for any period
general
thereafter as legally required or permitted by applicable law. For example in Poland, the
years. Our
retention period for employee Personal Data processed for labour law purposes is 10
retention policies reflect applicable statute of limitation periods and legal requirements.
lnternational Transfers of Personal Data
4l
Your personal information may be transferred outside of the country where you work, including to
countries that do not provide the same level oJ protection for your personal information. We are
committed to protecting the privacy and confidentiality of personal information when it is
transferred

lf you are a resident of the EEA, we may transfer your personal information to countries that have
not been found by the European Commission to provide adequate protection. Where such
transfers occur, we will ensure that adequate protection exists either through appropriate
contractual arrangements or as required by law. Further information about those arrangements is
available from us on request.

lnformation Security

We take precautions to protect personal information from loss, misuse, and unauthorized access,
disclosure, alteration, and destruction. We have taken appropriate technical and organizational
measures to protect the information systems on which your personal information is stored, and
we contractually require our suppliers and service providers to protect your personal information.

Your Personal Information Rights

Access, Gorrection and Transmission. You may reasonably access the personal information
pertaining to you that is on file with us. You also have the right to request that we correct
incomplete, inaccurate or outdated personal information. To the extent required by applicable law,
you may also request that we transmit personal information you have provided to us to you or to
another company. Obiection. We respect your right to object to any uses or disclosures of your
personal information that are not (i) required by law, (ii) necessary for the fulfillment of a
contractual obligation (your employment contract), or (iii) required to meet our legitimate interest
as an employer (such as general human resource administration disclosures for auditing and
reporting purposes, internal investigations, management of network and information systems
securi$, or protection of our assets). lf you do object, we will work with you to find a reasonable
solution. You may also withdraw your consent at any time in relation to our processing of personal
information based on your consent. Please note however that the withdrawal of consent will not
affect the laMulness of processing based on your consent before its withdrawal. Deletion. You
may request the deletion of your personal information as provided by applicable law. This applies,
for instance, where your information is outdated; where the processing is not necessary or is
unlaMul; where you withdraw your consent to our processing based on such consent; or where
we determine we should accommodate an objection you have raised to our processing. In some
situations, we may need to retain your personal information pursuant to our legal obligations or
for the establishment, exercise or defense of legal claims. Restriction of processing. Similarly,
and where provided by applicable law, you may request that we restrict processing of your
personal information while we are answering your request or complaint pertaining to (i) the
accuracy of your personal information, (ii) our legitimate interests to process such information, or
(iii) the lawfulness of our processing activities. You may also request that we restrict processing
of your personal information if you wish to use the personal information for litigation purposes.
You may exercise these rights free of charge by contacting our Privacy ffice as described below.
However, we may charge a reasonable fee or refuse to act on a request if it is manifestly
unfounded or excessive in particular because of its repetitive character. We will normally comply
with your request within a month (though in some cases, we may take an additional two months).
ln some situations, we may refuse to act or may impose limitations on your rights if, for instance,
your request is likely to adversely affect the rights and freedoms of us or others, prejudice the
execution or enforcement of the law, interfere with pending or future litigation, or infringe
applicable law. In all cases, you have a right to file a complaint with the Data Protection Authority
in the place where you live or work, or in the place where you think an issue in relation to your
data has arisen. You can find the relevant Data Protection Authority name and contact details in
your jurisdiction at http://ec.europa.eu/iustice/dataprotection/bodies/authorities/index en.htm

Contact Us

lf you have any questions about this Privacy Statement or if you believe that your personal
information is not handled in accordance with the applicable law or this Privacy Statement, or if
you want to exercise your rights, please contact zhanqfano26701@ooldwind.com.cn .

Gonsent

By signing below, you agree to the terms and conditions of this Privacy Statement and authorize
us and its affiliates to process your Personal Data.