Your privacy and security is important to us
We believe that your privacy is as important as our product quality. We treat your privacy as the
security
baseline of our products. From the beginning of designing a product, we lay emphasis on the
protection of
personal privacy, and require privacy protection throughout the process of product research and
development.
All your personal information stored on your mobile phone, including photos, SMS, contacts, chat
histories,
visited website information and information stored on the Cloud Service will be properly protected.
You will
be explicitly informed of all permissions to be obtained from your mobile phone and the methods
employed to
collect your personal data. In addition, where indicated, your explicit consent must be obtained.
You can
actively control your personal content and information that are shared.
We try our best to ensure
the security of your personal data
Your personal information is protected by encryption during transfer and storage. For
example, when you
use the Cloud Service, we adopt industry-leading cloud storage technologies and disaster
recovery
strategies that ensure your data is appropriately protected. We adopt industry mainstream
encryption
algorithms to ensure that your data can only be stored and transferred after encryption. No
one can view
your data except yourself.
We only
collect the minimum amount of data
In order to provide you with the necessary services or personalized user experiences, we
need to collect
and use some of your information. This may include your account number, device ID, phone
number, etc.
However, please rest assured that all our products must go through a privacy compliance
review at the
beginning of the design process. For information collection, we only allow products to
collect the minimum
information required for the purpose of that product's business functions. In addition, for
personalized
user experiences your explicit consent will be required in order to collect the information.
Your
personal data
Whether you are taking photos, sending SMS, or using the Cloud Service, we will never
disclose or sell
your data to any third-party organization without your permission.
You can
manage your personal data at any time
Only after being authorized by you in advance can an app installed on your OPPO device
access your
information, such as photos and contacts. You can control the permissions requested by an
installed app,
separately allowing an app to use some permissions or blocking the app from using a
particular permission.
For example, you can block an app from accessing and obtaining your personal data, such as
contacts, SMS,
and location data. Before being authorized, the app is unable to access these protected
resources and data
in your device.
We are committed to protecting your privacy
How we protect your privacy
The security of your personal information is important to us. Therefore, we are striving to develop
a variety
of products to ensure the security of your personal information throughout the product life cycle.
-
Secure keyboard
The system automatically switches to the OPPO Secure Keyboard when you need to enter
sensitive
information and connect to the Internet, or autocomplete words. This ensures that
your sensitive
information remains private.
-
Protection against unauthorized access
Protect your information from being leaked. Any access by an app to your call
history, contacts,
messages, and schedules requires your prior approval. Where no approval is given,
the respective
function will either be blocked or blank information is provided.
-
Private Safe
You can move photos, videos, audio and documents into the Private Safe, edit the
title by touching and
holding the album or file, and view private files after confirming your access
privilege through the
privacy password. This can help prevent the leaking of important personal files and
private data.
-
Prevent Background Recordings or Audio/Image
Even if you have generally granted an app the permission to use your microphone, you
will be prompted
via the status bar or any use of your microphone by an app running in the
background. When a
background app wants to use the camera, you will be requested to grant permission.
-
Screenshots & Screen Recordings Prevention
If you activate this feature, the system will block screenshots and screen
recordings when you use
functions that relate to your private information such as the Secure Keyboard and
Private Safe. The
screenshot action will then be intercepted, and you will be notified of such
blocking. The screen
recording action will only show a blank, black screen.
-
Payment Protection
During your payment process with an OPPO mobile phone, we will run automated checks
on the URLs
accessed when using the OPPO browser, as well as URLs contained in received
messages. This is to
recduce risks to your secure payments.
-
App Lock
Before enabling App lock, you need to set the privacy password first. When the app
is launched, you
can access the app only when you enter the correct privacy password, or use
fingerprint or facial
verification. After App Lock is enabled, the incoming notifications will be hidden
by default, and you
can view them only when you pass the identity verification. You can also choose the
lock timing, so
that if you choose "no verification before locking the screen", you won't need to
verify your identity
before the next time the screen locks, which is more convenient.
-
OPPO App Market
You can browse, download, install, update, and uninstall apps through the Oppo App
Market. These apps
are uploaded by developers. Any upload of an app musst pass an Oppo test where Oppo
provides a
security labal based on security scan reports and reported entries on the resource
details page. Users
can report any advertisements, paid features, viruses and other unsafe content in
the app at any time.
The App Market tightly controls app permissions. You can view which permissions are
used on the
details page of each app. This will help you clearly know which permissions are used
by the app.
Manage your privacy
OPPO provides a variety of tools and funtions to help you improve your privacy and manage it more
conviniently
Your priacy management tool
3D facial recognition
3D face recognition is a type of biometric identification technology that uses
artificial intelligence
to verify your identity based on the 3D recognition of your face. You can use this 3D
facial recognition
to verify your identity and unlock the device. In addition to traditional facial
information, 3D face
recognition also performs a 3D scan of the face to extract three-dimensional features
such as contours
and skin texture on a living object. This provides a higher level of biometric
recognition. 3D facial
recognition adopts secure image acquisition technology. The whole process, from image
acquisition to
feature extraction/matching, as well as unique features information storage is carried
out in a
completely isolated, secure and trusted environment. The unique features information is
always encrypted
by chip-level encryption algorithms to ensure that your personal identity information
will not be
intercepted, leaked or distorted.
Fingerprint unlock
Fingerprints are inherent physiological features of the human body, and are
characterized by uniqueness
and lifelong invariance. After the personal fingerprint information is extracted through
the enrolling
operation, it will be saved to the secure zone of the device through a powerful
encryption algorithm.
When unlocking the device, the fingerprint image is obtained when you lightly press the
fingerprint
icon/sensor, and this will then be comprehensively compared with the saved fingerprint
information. The
correct finger will unlock the device successfully. All the above steps are run in the
TrustZone, a
secure and isolated environment, and will not be affected by other Android apps.
We protect your account
Account registration
When you register an account, you are required to use a strong password with a length of
at least 6
characters (up to 16 characters), and the password needs to contain two of the following
options:
numbers, letters or symbols. This means you can use your account more conveniently and
safely.
Account login
In order to ensure the security of your account, two-factor authentication is required
when you login on
an unfamiliar device/new device. You can also verify the security of your account
through the device
that is already logged in to make your account more secure.
Login history
The login status of your account on other devices will be synced to your current device,
allowing you to
keep track of the security status of the account in real time. You can also remove
devices that are
logged in to the account.
Manage your privacy
Cloud Service
Cloud Service uses industry-leading cloud storage technology, disaster recovery
strategies and
encryption algorithms to ensure the safety of your data,it also takes multiple
protection measures to
ensure that personal information is not stolen.No one but you can see your data stored
in the cloud.
Data and privacy management platform
In order to give you more control over your personal information, we are gradually
introducing on the
account page a set of tools dedicated to your privacy management. With these tools, you
can access,
request data correction, obtain a copy of your personal data, and disable or delete your
account.
Privacy Notice
Last updated: 15 December 2021
To help you understand how we process your personal data, we have prepared a brief summary of our
Privacy
Notice. For more details, please see the full version of the Privacy Notice below. We recommend that
you also
read the full version of the Privacy Notice so that you fully understand how we handle your personal
data and
what options and rights you have in relation to your personal data.
| Key Points |
Summary |
| Who is responsible for collecting and using your data? |
Generally, OPPO is responsible for collecting and using your personal data. However, to
the extent you
are in Europe, the controller of your personal data is OROPE Germany GmbH. |
| Data we use |
We process data about you that you directly provide to us or that we collect when you
use our
Services. We may also receive personal data about you from third parties. |
| What we use it for |
We will use your personal data only when we have a lawful basis to do so, such as the
performance of
contract to provide you with Services, for our legitimate interest, with your consent or
to comply with
our legal obligations.
We may also process your personal data when you participate in promotional activities
such as prize
draws.
|
| How long we keep your data |
We will not keep your personal data for longer than we need it. In most cases, we will
keep your
personal data only for as long as necessary to use it for the purposes that we tell you
about.
Sometimes, though, the law requires us to keep it for longer. |
| Marketing |
We may send you information about Services or offers that you may be interested in. If
we need your
consent to do that, we will only do so with your consent and you can opt out of such
marketing
communications at any time. |
| Sharing your personal data with third parties |
We may share your personal data with other companies that are controlled by, or under
common control
with us, third parties such as our business partners and service providers or where we
are required to
do so by law. We will ensure that our business partners and service providers are
subject to appropriate
data protection obligations. |
| Security |
We take the security of your data very seriously. We have implemented various technical
and
organisational measures to protect your personal data. |
| Your rights |
Some data protection laws may grant you rights in relation to your personal data,
including, for
example, the right:
• to be informed of how we process your personal data;
• to access the personal data we hold about you and information about their
processing;
• to request that we delete or update inaccurate personal data; or
• to complain to the relevant regulator if you think that we have infringed any of your
rights.
If you are living in Europe, you will have specified rights further outlined in this
Privacy Notice.
|
| Children |
Our Services are aimed at users who are at least 18 years old. We try not to collect and
use
children’s data. |
| International transfer |
We are a global business, so we may transfer your personal data to other countries. We
will ensure
that we abide by storage localisation requirements and put appropriate legal safeguards
in place for
such transfers. |
| Updates |
We may update this Privacy Notice from time to time and will notify you of any updates
in an adequate
manner. |
| Contact us |
If you have any questions, you can contact us at https://www.oppo.com/en/privacy-feedback/. |
Privacy Notice
This Privacy Notice describes how we collect, use, disclose, transfer, store and otherwise
process
your
personal data when you are using our services, including our websites, our smartphones or
wearable
devices,
apps, online services and other products (hereinafter collectively referred to as
"Services"). Please read the
Privacy Notice carefully and familiarise yourself with our privacy practices before using our
Services or
providing your personal data.
In addition to this Privacy Notice, specific privacy notices might apply depending on the
Services used. We will, in each case, provide you with the applicable privacy
notice.
The general provisions of Section A shall apply to you, regardless of your location. Section B
only applies to customers located in the European Union, Liechtenstein, Norway, the United
Kingdom or Switzerland ("Europe").
This Privacy Notice will help you understand the following:
-
I Responsibilities
-
We operate and offer our Services globally. However, our Services partially
differ depending on
where you live.
• OROPE Germany GmbH as Controller: If you live in Europe,
OROPE Germany GmbH, a
company
incorporated in Germany whose registered address is Graf-Adolf-Platz 15, 40213
Düsseldorf, is solely
responsible for any processing of your personal data, as described in this
Privacy Notice.
• In general, OPPO is responsible for and controls the processing of your
personal data with respect
to personal data collected by the Services outside of Europe, and is committed
to protecting and
respecting your privacy. To the extent that personal data localisation
requirements apply, we will
comply with these requirements. If you would like to better understand how we
process your personal
data in your jurisdiction, please contact us using the "Contact Us" section.
- The terms "OPPO", "we" and
"us" therefore refer to either OROPE Germany GmbH or the
relevant entity, depending
on where you live.
- Please note that, in relation to aftersales-services, we work
with authorised
exclusive distributors. These authorised exclusive distributors are responsible
for the processing
of personal data that you provide to them in connection with your requested
customer service, or in
connection with their marketing activities.
-
II How We Collect Personal Data and What Types
of
Personal Data We Collect
- The term personal data is broadly defined and means any
information relating to
an identified or identifiable individual. This means that not only the data
that, for example,
identifies you directly, such as your name or address, is personal data but also
other data, which
when combined with other information accessible to us, enables us to link that
data to you, for
example, an IP address.
- Our channels for collecting personal data include: 1. personal
data that you
provide to us directly; 2. personal data that we automatically obtain when you
interact with our
Services, such as information on your interactions with our Services or us,
and/or; 3. personal data
that we obtain about you from third parties.
- The personal data we collect depends on the environment in
which you interact
with us and the choices you make, including your privacy settings and the
features and Services you
use.
- 1. Personal Data Directly Provided by You
- You may provide personal data to us directly, in which case
you are generally
free to choose which personal data you want to provide to us. However, if some
personal data is
required for the performance of our Services and you choose not to provide that
personal data, we
may not be able to provide you with the Services you requested. Personal data we
directly collect
from you may, for instance, include the following:
- • If you order Services from us, or use a paid
Service: We may
collect your
delivery details, bank account number, credit card details, billing address and
other financial
information relating to the transaction, order number, name and contact details,
information about
purchase/return/refund requests or other requests and any other communication
records, so we can
process your order.
- • When you follow our social media accounts or
interact with us in
any other
way: We may collect your profile information, the content and
details of the timing of
the
communication exchanged or other personal data as required to respond to your
request. The data we
receive is dependent on your privacy settings with the social
network.
- • When you share
content
with others: Some of our Services allow you to communicate and
share content with others.
The
communicated or shared content shall be transmitted through and stored in our
system.
- •
When you
sign up for our User Experience Program: When participating in this
program, we may
collect your
device information (device identification data, configuration data, system and
app data, advertising
ID, IP address and time zone), your usage data (such as product function usage
statistics, product
upgrade statistics and data about app installation, uninstallation and error
logs), information
about the location of your device (to the extent you allow such location tracking separately; you may disable the collection of location data at any time via device level setting) and
your log information (such as the time and duration for which the service was
used, any search terms
that were entered using the service and information about device and software
events such as
reboots, upgrades, errors and crashes). This program may require a network
connection, and some data
can only be uploaded over Wi-Fi.
- • We may ask you to provide personal
data or collect it
under
other circumstances such as in connection with marketing: Such
activities include when
you enter
prize draws, use coupons or enter other competitions, participate in promotional
or marketing
activities organised by us or our business partners on our behalf, complete
questionnaires or
participate in user forums or blogs hosted by us or our business partners. To
this extent, we may
ask you to provide personal data such as your name, address, email address,
phone number and other
personal data as indicated in connection with such activities.
- • When
you subscribe to
our
newsletters: We may collect your name, email address and
information on how you interact
with our
promotional communication (such as whether or not you have opened the email or
tapped on an
accompanying link).
- • In some jurisdictions we may be required to
conduct real name
authentication for certain Services you might use: In such a case,
we will also collect
your full
name and details of your government-issued ID. If you refuse to provide such
personal data we may
not be able to provide you with the corresponding Services.
- 2. Personal Data We Automatically Collect About Your
Use of Our
Services
- In addition to the personal data you provide yourself, we may
also automatically
collect information about your use of our Services, particularly when you are
using your device. The
personal data we may collect includes the following:
- • Device
information: This
may
include the device name, device model, region and language settings, device
identification number
(IMEI number), device hardware information and status, IP address, MAC address,
operating system
version and the settings of the device used to access the Service.
- •
Log
information: This may
include when and how long the Service is used, search terms entered through the
Service and the
device error logs. The Android system on your smartphone and/or wearable is
designed in such a way
that your error or crash log will contain information collected at the time of
the event, which
allows us to analyse the reasons for the crash. Such information may sometimes
include your personal
data, such as phone number, email address, Google account or Facebook account.
However, we have
implemented security measures to ensure that this information is used only for
error log analysis
and not for personal identification or other purposes.
- • Location
information:
This may include
the GPS signal of the device or information about Wi-Fi access points and base
stations near you, or
the device location ID and network service provider ID when you access some
location-based services
(for example when you use the weather app). We will ask you if you want to
enable location-based
services for each of the various location-based apps. You can disable the
location settings of your
device from the device settings. If you disable location information, the
functionalities of the
apps that use location information to provide Services to you may be
impaired.
- •
Camera: To
ensure the camera app functions properly, we collect operational data (such as
how many times you
use the app and the number of photos taken), information about the photos taken
(such as the
photosensitivity and number of faces captured) and information about the
available space left on
your mobile phone.
- • Other information about your use of the
Service: This may
include the
version of the app or browser type being used, language settings, IP address,
device type, IMEI,
websites visited and how you interact with content provided through the Service.
- Please also see the Section "How We Use Cookies and Similar
Technologies" below
for further information on personal data that we automatically collect via
cookies and other
tracking technology when you visit our website.
- 3. Personal Data We Obtain From Third Parties
- We may obtain personal data about you from third parties. For
example, where
permitted by law, we may obtain data about you from public or commercial
sources, including your
activity on social networks you use, and may combine it with other information
received from you or
relevant to you. In particular, if you interact with us through a social media
site or third-party
service, such as when you like, follow or share OPPO content on Facebook,
Twitter or other sites, we
may receive information from the social network, including your profile
information, picture, user
ID associated with your social media account and any other information you
permit the social network
to share with third parties.
- 4. Types of Data Processed Locally on Your
Device
- For the avoidance of doubt and to ensure transparency about
the
processing of data, please note that the data set out in this section will only
be collected and
processed locally on your device and not uploaded to our servers. Therefore, we
will neither
access, collect nor otherwise process such data, nor will we be able to disclose
this information
to any third party or use it for any other purpose. This also means that this
data processing is
done by you only and is thus not subject to this Privacy Notice. If you want to
exercise your
rights in relation to such data or would like to modify or delete it, we will
not be able to
support you, except to provide information on how you can handle your data
yourself.
- • When you use facial and fingerprint
recognition: These
functionalities
enable rapid unlocking of your device with your pre-recorded facial or
fingerprint information. To
activate this function, you will need to provide your facial information or your
fingerprint
information captured from different angles. This type of information will be
encrypted and stored
using a unique secret key.
- • Photos information: The
"Photos" app uses local
image and video
recognition algorithms on your device to enable you to organise your photos and
videos. If you allow
the app to use your location information, the device will record latitude and
longitude information
for your photo and video files. If you do not want to record your location when
you take a photo,
you can disable this feature at any time in your device's settings. When you
search for a picture,
the device's technology will identify photos that match the search terms,
allowing you to quickly
view relevant photos.
- 5. Other Non-personal Data
- Non-personal data refers to information which cannot be
directly or indirectly
associated with any specific individual. We may process aggregated or otherwise
anonymised data.
- We collect non-personal data to understand users' preferences,
improve our
operational efficiency and optimise our websites and your product experience. If
the non-personal
data is combined with personal data, all such data will be treated as personal
data.
-
III How We Use Your
Personal Data
- 1. We will use your personal data for the following purposes:
- • to provide you with OPPO's Services, process your orders or
fulfil the
contract between you and OPPO;
- • to activate Services you have purchased,
your warranty service
and specific software licenses and provide notifications for software
updates;
- • to diagnose
product issues and provide other customer care and support Services;
- • to
conduct customer
surveys in order to enhance your user experience and improve our Services along
with their security
features;
- • to analyse the customer market on the basis of the country where
the users use our
Services;
- • to analyse the efficiency of our business operations;
- • to
analyse error logs to
improve phone quality and app functions;
- • to provide you with personalised
Services and to
recommend and display content and advertisements tailored to you through our
Services;
- • to allow
and manage your participation in prize draws, contests or similar promotional
activities held by
us;
- • to communicate with you and reply to your questions or comments
submitted through email or
our online platforms, including social media accounts;
- • to ensure the
functionality and safety
of our Services, verify your identity, conduct internal auditing and prevent and
investigate fraud,
cybersecurity threats or other improper use;
- • to enhance and develop our
Services, so as to
improve the product usage experience, user-friendliness, operational
performance, functions and
design;
- • to pursue or defend against legal claims;
- • to comply with our
legal obligations.
- 2. When we want to use the personal data for other purposes
not covered by this
Privacy Notice, we will inform you thereof and ensure that said use of your
personal data is lawful.
- 3. We do not make any decisions involving the use of
algorithms or profiling
that produces legal effects or other effects that significantly affect you.
-
IV How We Use Cookies and
Similar Technologies
- We use cookies and similar tracking technologies on our
website and other
Services.
- 1. What Are Cookies?
- Cookies are small text files that are transferred from our
Services and
stored on your device. Our Services may use "cookies" and other technologies
such as pixel tags
and web beacons (collectively referred to as "Cookies").
Cookies may be stored on
your computer.
Cookies not set by us will not be accessible to us.
- 2. How We Use Cookies
- We and our third-party partners use Cookies to better
understand the
functionality of our mobile software on your device, and to monitor and analyse
how you use and
interact with our Services so that we can continue to improve them (such as to
evaluate information
on how often you use the Services, events that occur on our Services and where
an app was
downloaded). We do not link information that we store in analytics software to
any personal data you
may submit through our mobile apps.
- We and our third-party partners also use Cookies to analyse
trends, manage
websites, track user activity across these websites and collect aggregate
demographic information
about our user base.
- 3. Types of Personal Data We Collect
- This information may include Internet protocol (IP) addresses,
browser type,
Internet service provider (ISP), referring/exit pages, files viewed on our site
(such as html pages
and graphics), operating system, date/time stamp and/or touch stream data.
- 4. Third-Party Tracking and Online
Advertising
- We partner with third parties to display advertisements on our websites and apps or to manage our advertisements on other sites. Our third-party partners may use cookies or similar tracking technologies to provide advertisements to you based on your browsing activities and interests. If you wish to opt out of interest-based advertising, you can manage Cookies as described in the following paragraph, click here , or if located in the European Union click here. Please note that opting out of interest-based advertising does not mean you will no longer see advertising on your device – it just means that adverts may no longer be tailored to your interests.
- 5. Clear/Disable Cookies
- Depending on your mobile device and operating system, you may
not be able to
delete or block all cookies. Please note that if you choose to refuse all
cookies, you may not be
able to use the full functionality of our Services. These settings will
typically be found in the
"Options" or "Preferences" menu of your browser.
- See the instructions below on how to manage cookies in some
common web browsers:
- •
Microsoft Internet Explorer
•
Microsoft Edge
•
Mozilla Firefox
•
Google Chrome
•
Safari for macOS
•
Safari for iOS
- For more information about cookies and instructions on how to
configure your
browser to accept, delete or reject cookies, see www.allaboutcookies.org.
- Please note that deleting or blocking cookies may not be
effective for all types
of tracking technologies, such as Local Storage Objects (LSOs) like HTML5.
- If the "Do Not Track" function is enabled in your
browser, we will
respect your choice.
- Where required by law, we will provide you with further
information about
cookies.
-
V How Long We Keep Your Personal Data
- We will only store your personal data for as long as necessary
to achieve the
collection purposes set out in this Privacy Notice, unless a longer retention
period is required by
law. If we are required by law to store your personal data beyond this period
(such as for tax and
commercial law reasons), we will delete the personal data at the end of this
storage period.
- After the expiry of the aforementioned retention periods, we
will delete or
anonymise your personal data.
- To determine the appropriate retention period for personal
data, we consider the
amount, nature and sensitivity of the personal data, the potential risk of harm
from unauthorised
use and disclosure of your personal data, the purposes for which we process the
personal data and
the applicable legal requirements.
- If, after you sign up for our promotional emails, you
unsubscribe from receiving
our promotional emails, we will delete your personal data from our mailing
lists. However, we will
continue to store your email address in a blocklist to ensure that you will not
receive any further
communication.
-
VI How We Disclose Your Personal Data
- At times OPPO may make certain personal data available to
other companies that
are wholly or jointly controlled by us ("Affiliates") and other
third parties that
work with OPPO in
order to provide Services to you. Your personal data will not be shared with
third parties for their
own independent marketing purposes.
- • Affiliates: Your personal data may be
shared with OPPO's
Affiliates for the
purpose of rendering our Services to you. If Affiliates wish to process data for
a different
purpose, they must first seek your consent, unless another lawful basis
exists.
- • Service
providers and partners: Some of our Services will be provided with
the assistance of
third parties.
We may also share some personal data with our partners in particular so as to
deliver you a better
service and improve your user experience. For example, when you use the security
centre app,
third-party service providers are used to scan for viruses and free up storage
space on your phone,
and we engage third-party service providers to provide you with enhanced
customer service. We may
also rely on service providers to identify and serve targeted advertisements,
provide email
services, provide tax and accounting services, organise competitions and deliver
web hosting or
analytics services. Any such service providers will, through appropriate data
processing agreements,
be bound to only process personal data on OPPO's behalf and under our
instructions, unless such
service providers act as independent controllers.
- • Purchasers and
third parties in
connection
with a business transaction: Where a merger, acquisition,
bankruptcy liquidation or
similar action
takes place, we may transfer or disclose your personal data to a limited, but
necessary extent to
the applicable third party.
- • Law enforcement, regulators and other
parties for legal
reasons: We
may also disclose your personal data to third parties as required by law, or if
we reasonably
believe that such action is necessary (a) to comply with a subpoena or other
legal proceedings,
legal actions or government agency requests; (b) when we believe in good faith
that a disclosure is
necessary to comply with the law and the reasonable requests of law enforcement;
(c) to protect and
exercise our legal claims, rights and property; (d) to protect your rights,
property or personal
safety or that of others; (e) to investigate fraud and (f) to protect the
security or integrity of
our Services.
- • The public, when posted in certain public
spaces: Some of our
Services allow you
to connect and interact with others. Your profile information or information
that you post in a
forum or on a blog, including personal data, will be accessible to other users
or the general public
by default when you create it. Such content will be accessible by the general
public or the members
of the Service depending on the Service used.
- • Otherwise with
consent: We may
disclose your personal data to certain other third parties with your consent.
-
VII How Your Personal Data Is Transferred
Globally
- 1. We leverage our resources and servers around the world to
provide Services.
We have data centres in France, Singapore, India and Indonesia, which means that
in compliance with
applicable laws, your personal data might be transferred to or accessed from
countries or regions
outside of where you use our Services.
- 2. Please note that different countries or regions offer
different levels of
data protection. This means that your personal data could be stored in a country
that offers a level
of protection that may, in certain instances, be less protective of your
personal data than the
country or region in which you are located. However, in such cases, we will take
measures to ensure
that the personal data we collect is processed in accordance with this Privacy
Notice and applicable
laws, and that your personal data is adequately protected. For example, we might
ask your permission
to transfer your personal data across borders, and we will implement adequate
security measures
(such as encryption and de-identification where feasible) and sign the necessary
data
transmission/sharing agreements with the recipients of your personal data prior
to the transfer
taking place. We will also specifically ensure that we comply with laws that
require us to store
data locally within a specific country or region.
-
VIII How We Protect Your Personal Data
- 1. The security of your personal data is very important to us. We have taken
reasonably practical,
technical and organisational measures in accordance with industry standards to
protect personal data
collected in connection with our Service and prevent it from accidental or
unlawful destruction,
loss, alteration, unauthorised disclosure or access. However, please note that
while we have taken
reasonable measures to protect your personal data, no websites, Internet
transmissions, computer
systems or wireless connections are absolutely secure. In particular:
- • Where appropriate, we will de-identify your personal data to mitigate the risk
that other
organisations or individuals may identify you on the basis of that personal
data. We may also
implement full security encryption during storage and transmission to prevent
your personal data
from unauthorised access, use or disclosure (such as by using SSL to encrypt
many Services). We
regularly review practices regarding personal data collection, storage and
processing (including
physical security measures) to prevent unauthorised access to or tampering with
our various systems
and your personal data.
- • We only allow OPPO employees and personnel of
authorised service
companies to access such personal data on a need-to-know basis, in order to
process such personal
data or provide relevant Services to you. These employees and external personnel
are subject to
strict contractual confidentiality obligations. If they fail to perform these
obligations, they may
be held liable and/or their relationship with OPPO may be terminated.
- • When
transmitting and
storing special categories of personal data, we use extra security measures,
such as encryption of
the transmitted content. We also use technical measures to process your personal
biometric
information so that we only need to store essential data (such as basic
parameters necessary to
identify a person, but not the raw facial and fingerprint data).
- • We
carefully select our
business partners and service providers and ensure that they are sufficiently
bound to protect
personal data and will be subject to privacy audits and assessments.
- • We
conduct security and
privacy protection training, testing and other activities to enhance employee
awareness of and
proficiency in personal data protection.
- • We use international and
industry-recognised standards
to protect your personal data and actively pursue relevant security and privacy
protection
accreditation.
- 2. In case of a personal data security incident, we will act
in accordance with
applicable law and notify you and/or the competent data protection authority of
any such security
incident where required, and take measures to mitigate any risks arising
therefrom.
-
IX Your Rights Regarding Your Personal Data
-
1. Subject to applicable laws in your jurisdiction, you may have specific rights
regarding your
personal data. This may include the following rights in particular:
-
• The right to be informed: OPPO is publishing this Privacy
Notice to keep you
informed as to how we
handle your personal data and what options and rights you have regarding your
personal
data.
- • The right to access: If you wish to access your
personal data, some of our Services provide an interface through which you may
directly search for or
access certain personal data. You may also request access to the personal data
we hold about you and information about its processing by contacting us using
the "Contact Us"
section.
- • The right to
rectification: If you find that the personal data we process about
you is inaccurate or
incomplete,
you are entitled to ask us to make rectifications without undue delay and
request the completion of
your personal data where appropriate.
- • You can opt out of the User
Experience Program at
any
time through your device settings or by contacting us: (please
refer to the section
"Contact Us"
below). After you opt out of the Program, we will delete or anonymise all data
collected from your
device for the Program.
- • Unsubscribe from marketing
communications: If you no
longer wish to
receive marketing communications, you may unsubscribe from such communications
at any time using the
method provided in each promotional message.
- 2. You may also have further legal rights concerning your
personal data,
depending on the jurisdiction in which you are located. In this respect, please
see the
GDPR-specific Section if you live in Europe.
- 3. If you wish to make a request, you can submit it through
our Data Subject
Requests platform ("DSR platform"), which is accessible through
https://www.oppo.com/en/privacy-feedback/.
- 4. Please note that, in the interest of security, we may ask
you to verify your
identity before processing your request.
- 5. Certain jurisdictions might entitle you to refer the
complaint to the
relevant regulatory authority if you are not satisfied with the response you
received.
- 6. In principle, we do not charge a fee for responding to your
reasonable
request. However, for multiple and repetitive requests that exceed a reasonable
limit, we may charge
a reasonable fee to cover some of our costs, depending on the nature of the
request. We are entitled
to refuse requests in whole or in part, and we may refuse requests that are
manifestly unfounded,
unreasonably repetitive or that require disproportionate technical effort (for
instance, requests
that require the development of new systems). In addition, we may not respond to
requests that
directly concern significant issues of public interest or may cause serious
damage to the legitimate
rights and interests of you or other individuals or entities.
-
X How We Process Children's Personal Data
-
1. Our Services are mainly intended for adults. A child should not use our
Services without his/her
legal guardian's consent. We treat anyone less than 18 years of age (or the
equivalent minimum age
for full legal capacity in the relevant jurisdiction) as a child.
-
2. If we discover that a child's personal data has been collected, we will
delete the corresponding
data as soon as possible.
-
3. If you believe that we might have any personal data concerning a child,
please contact us using
the "Contact Us" section.
-
XI Third-Party Websites
-
1. OPPO Services may contain links to third-party websites, products and
services. You can choose
whether to access websites or accept products and services provided by third
parties or not. For
example, the "Follow us" function on our official website provides links to our
official social
media accounts (such as Facebook, Instagram, LinkedIn and Twitter) where you can
view marketing or
promotional information published by OPPO.
-
2. We do not control third-party privacy and data protection policies and do not
accept any
responsibility or liability for such policies. At the same time, such third
parties are not bound by
this Privacy Notice. Therefore, before submitting personal data to third
parties, we strongly
recommend that you refer to the privacy protection practices of such third
parties.
-
XII How This Privacy
Notice Is Updated
-
We reserve the right to update or modify this Privacy Notice from time to time.
We will, as
appropriate, send you notifications of material updates to this Privacy Notice
in a form we deem
appropriate and we will update the "last updated" date at the start of this
Privacy Notice.
-
XIII Contact Us
-
If you have questions or concerns regarding our Privacy Notice or practices,
please submit your
request through our DSR platform (https://www.oppo.com/en/privacy-feedback/)
-
or, if you are located in Europe,
-
OROPE Germany GmbH
Graf-Adolf-Platz 15, 40213 Düsseldorf, Germany
Att:
Compliance Officer
- If you have an unresolved privacy or data use concern that we
have not addressed
satisfactorily, please contact our U.S.-based third-party dispute resolution
provider (free of
charge) at https://feedback-form.truste.com/watchdog/request.
-
I Legal Bases for the Processing of Personal
Data
-
Our processing of your personal data as described in the Section "How We Use
Your Personal Data" is
based on the following legal grounds:
- 1. Consent: We may process your personal data
with your
consent. In
particular, we may ask for your consent to participate in promotional
activities, such as to send
you promotional messages or enable you to participate in the User Experience
Program and certain
Services, including services through which we collect location information. You
have the right not
to provide consent, or to withdraw it at any time. The withdrawal of your
consent does not affect
the lawfulness of our use of your personal data before your withdrawal. If you
have granted us
consent to use your personal data, we will use it only for the purposes
specified in the consent
declaration. Please note that to the extent our processing is based on your
consent and you deny
your consent or withdraw it, we may not be able to provide the service relating
thereto. Besides
from that, neither the initial denial nor a withdrawal will have any negative
consequences for
you.
- 2. Perform or enter into a contract with you:
- We rely on this legal basis in particular in the following
cases:
- • to
provide you with OPPO's Services, process your orders or fulfil the contract
between you and
OPPO;
- • to activate Services you have purchased, your warranty service and
specific software
licenses and provide notifications for software updates;
- • to allow and
manage your participation
in prize draws, contests or similar promotional activities held by us; and
- •
to diagnose product
issues, repair customer equipment and provide other customer care and support
Services.
- 3. Compliance with a legal obligation: OPPO
may be obliged to
process personal data to comply with our legal obligations, for example where
OPPO is required to
retain data for tax law or commercial purposes.
- 4. Legitimate interests: The processing of
your personal data
may also be
necessary for OPPO's legitimate interests. In particular, such cases may include
the following:
- •
to conduct customer surveys to enhance your user experience;
- • to analyse the
customer market on
the basis of the country where you use our Services, including the number of
users for product
marketing and promotion;
- • to analyse the efficiency of our business
operations;
- • to analyse
error logs to improve phone quality and app functions;
- • to provide you with
personalised
Services and to recommend and display content and advertisements tailored to you
through our
Services;
- • to communicate with you and reply to your questions or comments
submitted to us by
any means;
- • to ensure the functionality and safety of our Services;
- • to
verify your
identity;
- • to conduct internal auditing and to prevent and investigate
fraud, cybersecurity
threats or other improper use;
- • to enhance and develop our Services,
including relevant security
features, so as to improve the product usage experience, user-friendliness,
operational performance,
functions and design;
- • to pursue or defend against legal claims.
- Your
personal data will only
be processed on the above grounds after we have appropriately assessed and
balanced our interests
against your right to privacy.
-
-
-
II Additional Information on How Your Personal
Data Is
Transferred Globally
-
In case your personal data is transferred to jurisdictions located outside of
Europe, we will ensure
that appropriate safeguards exist and are applied, such as:
- 1. the recipient of the personal data is located within a
country that benefits
from an "adequacy" decision of the European Commission;
- 2. the recipient has signed a contract based on "model
contractual clauses"
approved by the European Commission, obliging them to protect your personal
data;
- 3. or in the absence of the above appropriate safeguards, we
will ask you for
your explicit consent for the cross-border transfer of your personal data or
take any other measures
that are recognised as providing a sufficient level of protection for your
personal data.
- For more information about the safeguards relating to personal
data transfers
outside of Europe, please submit your request via our DSR platform
(https://www.oppo.com/en/privacy-feedback/).
-
III Additional Information on Cookies and
Other Tracking
Technology
-
If you wish to obtain detailed information on the use of cookies and other
tracking technology,
please read our Cookies Statement.
-
IV Additional Information on Your Rights
Regarding Personal
Data
-
Subject to the legal requirements under the GDPR, you have the following rights:
-
• The right to access: You may request access to the personal
data we hold about
you.
- • The right
to rectification: If you find that the personal data we process
about you is inaccurate or
incomplete, you are entitled to ask us to make rectifications without undue
delay and to request the
completion of your personal data where appropriate.
- • The right to
erasure: You
can submit a
request to us to delete personal data, and we shall have the obligation to erase
it without undue
delay in some circumstances – for example, if we do not have a legal reason to
continue to process
the personal data to the extent required by applicable laws and regulations.
Please note in so far
as you delete all the data that is contained in your device, this does not mean
that you have
deleted all data that OPPO collects and processes about you. Therefore, we
encourage you to contact
us (please refer to the section "Contact Us" above) to request that your personal
data is
deleted.
- • The right to restriction of processing: You have
the right, in
certain circumstances,
to request OPPO to temporarily restrict the processing of your personal data,
such as where the
accuracy of that personal data is contested by you, while we verify the accuracy
of that personal
data. We will keep just enough data, or process such data as is necessary to
ensure that we comply
with your restriction request in the future.
- • THE RIGHT TO
OBJECT: You have the
right to object
to any processing justified by legitimate interests based on grounds relating to
your particular
situation at any time. Should you decide to object to the processing of your
personal data, we will
stop processing personal data that concerns you, unless we can demonstrate
compelling reasons for
continuing to process your personal data that override your interests, rights
and freedoms, or in
the case that we establish, exercise or defend our legal claims. You can object
to direct marketing
activities at any time for any reason whatsoever.
- • The right to data
portability: You have the
right to obtain a copy of your personal data in a structured, commonly-used and
machine-readable
format and transmit such data to another provider or have such data transmitted
to another provider
under certain circumstances.
- • The right to withdraw
consent: If you have given
us your consent
to process your personal data but change your mind later, you have the right to
withdraw your
consent at any time. The withdrawal of your consent does not affect the
lawfulness of our use of
your personal data before your withdrawal. If you want to withdraw your consent
with regard to
receiving promotional communications, you can unsubscribe through the method
described in each
promotional message. If you withdraw your consent, we may no longer be able to
provide you with the
corresponding Service.
- • The right to lodge a
complaint: You have the right to
lodge a complaint
with a competent supervisory authority about the way we handle or process your
personal data, or
file a lawsuit in a court with jurisdiction. Information about how to contact
your local data
protection supervisory authority is available here.
-
V Contact Details of the
Data Protection Officer
-
You can submit your request through our Data Subject Rights platform
(https://www.oppo.com/en/privacy-feedback/),
or you can also contact our data protection officer at:
-
Collegium Auditores GmbH
Datenschutz OROPE
Wilhelmstrasse 74, 53721
Siegburg, Germany
