隐私政策与个人信息保护
Privacy Policy & Personal Data Protection
最后更新：2025年1月 / Last Updated: January 2025
1. 概述 / Overview
华鼎中瑞文化协会（以下简称"我们"）非常重视您的个人信息保护。本隐私政策说明了我们如何收集、使用、存储和保护您的个人信息。
Hua Ding Chinese-Swedish Cultural Association (hereinafter referred to as "we") highly values the protection of your personal information. This privacy policy explains how we collect, use, store, and protect your personal information.
2. 信息使用目的 / Purpose of Information Use
我们使用您的个人信息仅用于以下目的：
We use your personal information only for the following purposes:
- 提供会员注册和管理服务
- Providing membership registration and management services
- 管理会员会费和支付
- Managing membership fees and payments
- 组织和管理协会活动
- Organizing and managing association activities
- 与您沟通协会相关事务
- Communicating with you about association matters
- 遵守法律义务
- Complying with legal obligations
Important: We do not use your personal information for commercial marketing or sell it to third parties.
3. 数据安全措施 / Data Security Measures
我们采取以下技术和管理措施保护您的个人信息：
We implement the following technical and administrative measures to protect your personal information:
3.1 密码安全 / Password Security
- 所有密码使用行业标准的哈希算法加密存储
- All passwords are encrypted using industry-standard hashing algorithms
- 我们无法查看或恢复您的原始密码
- We cannot view or recover your original password
3.2 访问控制 / Access Control
- 严格的权限管理系统：只有管理员可以访问所有会员信息
- Strict permission management: only administrators can access all member information
- 普通用户只能查看和修改自己的信息
- Regular users can only view and modify their own information
- 所有数据访问都经过身份验证
- All data access is authenticated
3.3 数据传输安全 / Data Transmission Security
- 使用HTTPS加密传输（生产环境）
- HTTPS encrypted transmission (production environment)
- 敏感信息在传输过程中受到保护
- Sensitive information is protected during transmission
3.4 数据库安全 / Database Security
- 数据库存储在位于德国法兰克福的云服务器环境中，符合欧盟GDPR要求
- Database is stored in a cloud server environment located in Frankfurt, Germany, compliant with EU GDPR requirements
- 所有数据存储和处理都在欧盟境内进行
- All data storage and processing takes place within the EU
- 定期备份数据以防止数据丢失
- Regular data backups to prevent data loss
- 使用软删除机制保护已删除数据
- Soft delete mechanism to protect deleted data
3.5 验证码保护 / Verification Code Protection
- 使用reCAPTCHA防止机器人注册
- reCAPTCHA to prevent bot registration
- 验证码有时效性限制（通常为10分钟）
- Verification codes have time limits (typically 10 minutes)
- 发送频率限制（防止滥用）
- Send frequency limits (to prevent abuse)
4. 数据存储和保留 / Data Storage and Retention
数据存储位置 / Data Storage Location
您的所有个人信息存储在位于德国法兰克福的云服务器上。 该服务器符合欧盟《通用数据保护条例》（GDPR）的所有要求，确保您的数据受到最高级别的法律保护。
All your personal information is stored on cloud servers located in Frankfurt, Germany. These servers comply with all requirements of the EU General Data Protection Regulation (GDPR), ensuring your data receives the highest level of legal protection.
- 您的个人信息存储在安全的MySQL数据库中，服务器位于德国法兰克福
- Your personal information is stored in a secure MySQL database on servers located in Frankfurt, Germany
- 所有数据存储和处理都在欧盟境内进行，完全符合GDPR要求
- All data storage and processing takes place within the EU, fully compliant with GDPR requirements
- 数据保留期限：只要您是会员，我们将保留您的信息
- Data retention period: We will retain your information as long as you are a member
- 如果您注销账户，我们将根据法律要求保留必要信息
- If you cancel your account, we will retain necessary information as required by law
5. 您的权利 / Your Rights
根据欧盟《通用数据保护条例》（GDPR）和瑞典数据保护法，您享有以下权利：
Under the EU General Data Protection Regulation (GDPR) and Swedish data protection laws, you have the following rights:
5.1 访问权 / Right to Access
- 您可以随时登录账户查看您的个人信息
- You can log in to your account at any time to view your personal information
- 您可以请求我们提供您个人数据的副本
- You can request a copy of your personal data
5.2 更正权 / Right to Rectification
- 您可以随时登录账户修改您的个人信息
- You can log in to your account at any time to modify your personal information
- 如果发现信息有误，请及时更新
- If you find any incorrect information, please update it promptly
5.3 删除权 / Right to Erasure
- 您可以请求删除您的账户和个人信息
- You can request deletion of your account and personal information
- 请联系管理员处理删除请求
- Please contact the administrator to process deletion requests
5.4 数据可携权 / Right to Data Portability
- 您可以请求以结构化格式导出您的数据
- You can request to export your data in a structured format
- 请联系管理员获取数据导出
- Please contact the administrator for data export
6. 数据共享 / Data Sharing
- 我们不会向第三方出售、交易或出租您的个人信息
- We do not sell, trade, or rent your personal information to third parties
- 我们不会与第三方共享您的个人信息，除非：
- We do not share your personal information with third parties, except:
- 法律要求或法院命令
- Legal requirements or court orders
- 保护我们的权利和财产
- To protect our rights and property
7. Cookie使用 / Cookie Usage
我们仅使用必要的Cookie来确保网站正常运行：
We only use essential cookies necessary for the website to function properly:
- 会话Cookie：用于维护您的登录状态
- Session cookies: Used to maintain your login status
- 安全Cookie：用于安全功能
- Security cookies: Used for security features
We do not use cookies for analytics, advertising, or personalization.
8. 儿童隐私 / Children's Privacy
我们收集的儿童信息（如孩子的人口号、姓名等）仅用于会员管理目的，由家长或监护人提供。 我们不会直接向儿童收集信息。
Children's information we collect (such as personal numbers, names, etc.) is only used for membership management purposes and is provided by parents or guardians. We do not directly collect information from children.
9. 联系我们 / Contact Us
如果您对本隐私政策有任何疑问、意见或请求，请通过以下方式联系我们：
If you have any questions, comments, or requests regarding this privacy policy, please contact us:
- 邮箱 / Email: Huading.csca@gmail.com
- 组织编号 / Organization Number: 802501-4815
10. 政策更新 / Policy Updates
我们可能会不时更新本隐私政策。重大变更将在网站上发布通知。 建议您定期查看本页面以了解最新信息。
We may update this privacy policy from time to time. Significant changes will be announced on the website. We recommend that you review this page regularly to stay informed.