Privacy Policy of Róng Museum of Art

Version Date: 2026/09/10

 

This Privacy Policy applies to the products and services provided to you by Xingyao Future Art Museum, Nanshan District, Shenzhen (hereinafter referred to as “we” or “Róng Museum of Art”) through the official website of Róng Museum of Art (rongmuseumofart.org, hereinafter referred to as “the Website”). Róng Museum of Art values the protection of your personal information and privacy. This Privacy Policy is intended to explain how we collect, use, store, and protect relevant information when you visit and use the Website, as well as the rights you are entitled to under applicable laws, so as to better safeguard your rights and interests.

 

It should be specifically noted that this Privacy Policy does not apply to software, products or services provided to you by any third party. Where you access third-party software, products or services through links on the Website, you are bound by the relevant agreements or other documents of such third party, and such third party shall be responsible for its processing of your personal information in accordance with its relevant agreements or policies.

 

Before using our products and services, please read carefully and make sure that you fully understand all the rules and key points of this Privacy Policy (in particular the content presented in bold). Your agreement to this Privacy Policy indicates that you have understood and agreed that, in the relevant scenarios, we will process your relevant personal information in order to realize the operation of the relevant functions. However, this does not mean that we will process all of the personal information covered by this Privacy Policy as soon as you begin to use our products and services. Only when you use a specific function will we, in accordance with the principle of minimum necessity, process your relevant personal information for the purpose of providing services to you.

 

This Privacy Policy will help you understand the following:

1. How We Collect and Use Your Personal Information
2. How We Store Your Personal Information
3. How We Share, Transfer and Disclose Your Personal Information
4. How We Use Cookies and Similar Technologies
5. How We Protect Your Personal Information
6. Your Rights
7. Protection of Minors
8. Updates to This Privacy Policy
9. Contact Us

 

I.How We Collect and Use Your Personal Information

1. Principles of Collection and Use

In accordance with the requirements of relevant laws and regulations, we will strictly follow the principles of legality, legitimacy and necessity in processing the personal information that you actively provide, or that is generated, in the course of your use of our products and services, so as to provide you with better products and services. If you do not agree to provide certain information, you may be unable to use the relevant products and services properly, but this will not affect your proper use of other products and services.

 

Please be aware that, in the course of providing products and services to you, we will not actively collect your sensitive personal information unless you actively provide it to us (for example, financial account information). The proper provision of the products and services of the Website does not depend on the collection of sensitive personal information.

2. Overview of Collection and Use

We collect and use your personal information for the purposes set out below. You may also refer to “Appendix 1: List of Personal Information Collected” to this Privacy Policy for an overview of the personal information we collect.

1) Contact and Inquiry Responses

When you submit information to us through the “Contact Us” section of the Website or the email address specified on the Website, we may collect your email address and any other information that you voluntarily provide in your submission. Please note that such information is provided by you on a voluntary basis, and we remind you to avoid providing unnecessary personal information (including sensitive personal information).

 

Such information is primarily used to:

• Receive and process your contact, inquiry, or other requests;
• Contact you based on the information you provide;
• Assess the match between you and the position(s) for which we are recruiting;
• Handle other necessary matters related to the Website services.

 

We will only use the information you voluntarily provide to the extent necessary to achieve the purposes described above.

 

When you actively submit information to us, you shall ensure that the source of such information is lawful and that you have obtained the express consent of the rights holders concerned, so as to authorize us to carry out the necessary analysis and processing within the Website. If the information you actively provide infringes upon the personal information rights and interests of any third party, you shall bear the corresponding legal liability. We do not assume any obligation to review the legality of the information you actively provide; however, upon receipt of a complaint from a rights holder, we are entitled to delete the relevant content and suspend the provision of the relevant services in accordance with laws and regulations.

2) Website Operation and Security Assurance

When you visit the Website, the website server may automatically generate relevant access logs. Such log information may include the time of access, pages visited, referring sources, browser or device-related information, and technical logs generated during server operation.

 

Such information is primarily used to: maintain the normal operation of the Website, carry out troubleshooting, and maintain website security.

 

We will only use such log information to the extent necessary to achieve the purposes described above.

3. Other Rules on Collection and Use

Where it is necessary for the provision of services and we indirectly obtain your personal information from a third party, we will, prior to such collection, require the third party to undertake that the source of the personal information is lawful and compliant, require the third party to inform you of the content of the information to be shared, and provide the personal information only after your consent has been obtained in accordance with the law. At the same time, we will strictly comply with the requirements of laws and regulations and with our arrangements with the third party in protecting and processing your personal information.

 

Please understand that the functions and services we provide to you are continuously updated and developed. If a function or service is not covered by the foregoing description but collects your information, we will separately explain to you the content, scope and purpose of the collection by means of page prompts, website announcements or other means, in order to obtain your consent.

 

In accordance with relevant laws and regulations, we may collect and use your personal information without your consent under the following circumstances:

 

(1) where it is necessary for the conclusion or performance of a contract to which you are a party;

 

(2) where it is necessary for the performance of statutory duties or statutory obligations;

 

(3) where it is necessary for coping with a public health emergency, or for the protection of the life, health and property safety of a natural person in an emergency;

 

(4) where such acts as news reporting and supervision by public opinion are carried out for the public interest, and your personal information is processed within a reasonable scope;

 

(5) where personal information that you have disclosed yourself, or that has otherwise already been lawfully disclosed, is processed within a reasonable scope in accordance with the Personal Information Protection Law;

 

(6) other circumstances provided by laws and administrative regulations.

 

II. How We Store Your Personal Information

1. Retention Period

At present, we retain your personal information only for the period necessary to provide our products and services. Upon expiry of the necessary period, we will delete or anonymize your personal information.

 

We determine the necessary retention period of personal information primarily on the basis of the following criteria: (1) ensuring the security and quality of the services we provide to you; (2) the period reasonably necessary to ensure the security of the Website and related services, and to handle your inquiries, complaints or disputes; and (3) any mandatory retention periods prescribed by applicable laws and regulations or otherwise required for compliance with other legal obligations (for example, the Cybersecurity Law of the People’s Republic of China requires that relevant network logs be retained for no less than six months).

 

2. Storage Location

The personal information that we collect within the territory of the People’s Republic of China is stored within the territory of China. Where cross-border transfer is required, we will act in accordance with national laws and regulations and the requirements of the relevant regulatory authorities, so as to provide adequate protection for your personal information.

 

III. How We Share, Transfer and Disclose Your Personal Information

1. Sharing

We treat your information with a high degree of diligence. Except as expressly provided otherwise by laws and regulations, we will not share your information with any company, organization or individual other than Róng Museum of Art without your separate consent. You understand and acknowledge that we may share your personal information with our affiliates and third parties (such as authorized partners with whom we cooperate). At present, our authorized partners primarily include suppliers, service providers and other partners.

 

We will share your personal information only for lawful, legitimate, necessary, specific and explicit purposes, and will share only such personal information as is relevant to the services provided by the third party. Unless separately authorized by you or otherwise provided by laws and regulations, our partners have no right to use the shared personal information for any other purpose. We will enter into data protection agreements with third-party partners, requiring them to adopt relevant confidentiality and security measures when processing personal information, and specifying their responsibilities and obligations in protecting your personal information.

2. Entrusted Processing and Joint Processing

In order to better provide services to you, we may, with your consent, entrust third-party partners to process your personal information. We will entrust third-party partners to process your information only for lawful, legitimate, necessary, specific and explicit purposes. Third-party partners primarily include technical service providers; please refer to Appendix 2 for the specific list. We will strictly limit the entrusted party’s purposes of information processing and require the entrusted party to adopt adequate data security safeguards. If a third-party partner uses your information for any purpose that we have not entrusted, it shall separately obtain your consent. The partners we entrust will process your information on the premise of complying with generally accepted industry security technologies. For scenarios involving entrusted processing of personal information, we will, in accordance with laws and regulations, require the entrusted partner (whether a company, organization or individual) by written agreement or other means to comply with strict confidentiality obligations and to adopt effective confidentiality measures, to process your information only in accordance with our instructions and within the entrusted scope, and we will supervise the entrusted party’s personal information processing activities. Where you actively leave your contact details, address information or other personal information with a specific third-party partner so that it may contact you, that partner will process your personal information directly. In joint processing scenarios, we will likewise enter into agreements meeting the requirements of laws and regulations with the relevant partner and perform the relevant personal information protection obligations.

3. Transfer

We will not transfer your personal information to any company, organization or individual other than Róng Museum of Art, except in the following circumstances:

1. having obtained your express authorization or consent in advance;
2. satisfying the requirements of laws and regulations or legal procedures, or mandatory governmental requirements or judicial rulings;
3. if we or our affiliates are involved in a merger, division, liquidation, or acquisition or sale of assets or business, your personal information may be transferred as part of such transaction. We will ensure the confidentiality of such information at the time of transfer, inform you of the name and contact details of the recipient, and require the new organization holding your personal information to continue to be bound by this Privacy Policy; failing which, we will require that organization to seek your authorization and consent afresh.
4. Public Disclosure

 

We will publicly disclose your personal information only in the following circumstances:

1. having obtained your separate consent;
2. based on laws and regulations, legal procedures, litigation, or mandatory requirements of competent governmental authorities.
3. Exceptions to Obtaining Prior Authorization and Consent for Sharing, Entrusted Processing and Joint Processing, Transfer and Public Disclosure of Personal Information

 

Please understand that, in the following circumstances, no prior authorization or consent from you is required for sharing, transferring or publicly disclosing your personal information:

1. where it relates to the performance by a personal information processor of obligations provided by laws and regulations;
2. where it is directly related to national security or national defense security;
3. where it is directly related to public security, public health or major public interests;
4. where it is directly related to criminal investigation, prosecution, trial or enforcement of judgments;
5. where it is for the purpose of safeguarding the life, property or other major lawful rights and interests of the personal information subject or other individuals, but it is difficult to obtain the individual’s authorization and consent;
6. where the personal information has been disclosed to the public by the personal information subject on its own initiative;
7. where the personal information is collected from lawfully and publicly disclosed information, such as lawful news reports or government information disclosure channels;
8. other circumstances provided by laws and regulations.

 

In accordance with the law, the sharing or transfer of anonymized personal information, where it is ensured that the data recipient cannot restore and re-identify the personal information subject, does not constitute external sharing, transfer or public disclosure of personal information, and the retention and processing of such data will not require separate notice to, or consent from, you.

 

You may also refer to “Appendix 2: List of Third-Party Information Sharing / Entrusted Processing” to this Privacy Policy for further details.

IV. How We Use Cookies and Similar Technologies

 

To ensure the proper operation of the Website, we store small data files known as Cookies on your computer or mobile device. Cookies typically contain an identifier, the site name and certain numbers and characters. The primary function of Cookies is to facilitate your use of the products and services of the Website.

 

When you use our services, we may use Cookies or similar technologies to collect your language preference. Such information is collected by Cookies and similar technologies as necessary for your use of our services, in order to simplify your repeated operations and to improve our products and services. We undertake to use Cookies and similar technologies only within the scope of the purposes described in this Privacy Policy. If your browser so permits, you may, through your browser settings, manage or refuse (in whole or in part) Cookies or similar technologies, or delete Cookie or similar technology files already stored on your computer or other devices, so that we are unable to track your personal information in whole or in part. For details on how to change your browser settings, please refer to the relevant settings page of the browser you use.

 

V. How We Protect Your Personal Information

 

We take the security of your personal information seriously and will take reasonable technical and administrative measures to protect relevant information against unauthorized access, use, disclosure, alteration, or destruction.

 

However, please note that the Internet environment is not absolutely secure. Although we will take reasonable security measures, we cannot guarantee that information transmitted or stored through the Internet will be completely secure.

 

In the event of a personal information security incident that results in the unauthorized disclosure, publication, alteration or loss of personal information and thereby prejudices your lawful rights and interests, we will promptly activate our contingency plan, take reasonable remedial measures, and inform you and report to the regulatory authorities in a timely manner in accordance with the law, so as to minimize to the greatest extent possible the impact on your personal information and other rights and interests.

 

VI.Your Rights

To the extent provided by applicable laws and regulations, you have corresponding rights regarding our processing of your personal information, including but not limited to:

• The right to inquire about and understand whether we process your personal information;
• The right to obtain a copy of your personal information;
• The right to request correction or supplementation of your personal information where permitted by law;
• The right to request deletion of your personal information where permitted by law;
• The right to change the scope of your consent or to withdraw your consent;
• The right to transfer your personal information;
• The right to restrict or refuse the processing of your personal information. Please note that, where you restrict or refuse our processing of your relevant personal information, you may be unable to properly use some or all of the services we provide;
• The right to raise questions, provide comments, or submit complaints regarding the processing of personal information.

 

If you wish to exercise any of the above rights or have any questions regarding this Privacy Policy, you may contact us through the contact information provided this Privacy Policy.

 

For security reasons, the exercise of the above rights requires you to submit a written request or otherwise verify your identity. We will need to verify your identity before processing your request. In principle, we do not charge a fee for your reasonable requests; however, for repeated requests that exceed reasonable limits, we may charge a certain cost fee as appropriate. We may refuse requests that are unreasonably repetitive, require excessive technical means (for example, requiring the development of new systems or a fundamental change to existing practices), create risks to the lawful rights and interests of others, or are highly impractical (for example, involving information stored on backup tapes).

 

Please understand that, in the following circumstances, we will be unable to respond to your above requests in accordance with the requirements of laws and regulations:

• where it is directly related to national security or national defense security;
• where it is directly related to public security, public health or major public interests;
• where it is directly related to criminal investigation, prosecution, trial or enforcement of judgments;
• where we have sufficient evidence that you have acted with subjective malice or abused your rights (for example, where your request would endanger public security or the lawful rights and interests of others, or where your request exceeds the scope that can be covered by general technical means and commercial cost);
• where responding to the request of the personal information subject would cause serious harm to the lawful rights and interests of you or of other individuals or organizations;
• where trade secrets are involved;
• where it relates to our performance of obligations provided by laws and regulations;
• other circumstances provided by laws and regulations.

 

 VII. Protection of Minors

The Website is primarily intended to provide information about Róng Museum of Art and related website services, and is not directed at providing products or services to minors under the age of 18.

 

If we discover that a minor has provided personal information to us, we will take measures to delete such information as soon as possible. If you discover that we have collected a minor’s personal information without having obtained the verifiable consent of the guardian in advance, you may contact us using the contact information set out in this Privacy Policy. We will take the necessary measures to delete the relevant information of that minor held by us.

 

VIII.Updates to This Privacy Policy

We may update this Privacy Policy from time to time as the functions of the Website, service content, and applicable laws and regulations change.

 

If there are material changes to this Privacy Policy, we will publish the updated version at an appropriate location on the Website and indicate the update date.

 

IX.Contact Us

If you have any questions, comments, or complaints regarding this Privacy Policy, personal information protection, or related data processing matters, you may contact us through the following contact email: inquiries@rongmuseumofart.org. We will process and respond to relevant requests within the timeframe required by applicable laws and regulations:

 

 

Appendix 1: List of Personal Information Collected

Scenario of Personal Information Collection	Personal Information Collected
Contact and Inquiry Responses	The email address you voluntarily provide and other personal information you voluntarily provide in your submission
Website Operation and Security Assurance	Access logs (which may include the time of access, pages visited, referring sources, and browser or device-related information) and technical logs generated during server operation

 

 

Appendix 2: List of Third-Party Information Sharing / Entrusted Processing

 

In order to provide you with complete products and services, we may share your personal information with, or entrust its processing to, the following third parties. We have entered into data processing agreements with each third party, requiring them to strictly protect your personal information.