Privacy policy

This English version is for reference; the Chinese version prevails.

Effective date: [TO CONFIRM: effective date]
Last updated: [TO CONFIRM: date of update]

Beijing Guiyudi Technology Co., Ltd. (北京瑰域迪科技有限公司, “we”, “us”) operates the e.art website (the “Site”) and is the China representative of UK Creative Ideas Ltd, the registry of the .ART top-level domain. We take your personal information seriously and process it in accordance with the Personal Information Protection Law, the Cybersecurity Law, the Data Security Law and other laws and regulations of the People’s Republic of China.

This policy explains what personal information we process when you visit the Site, why, how long we keep it, how we protect it and what rights you have. Each processing activity is described in detail in Personal information protection; cookies are covered in the Cookie notice.

Who we are

The personal information handler for the Site is:

Beijing Guiyudi Technology Co., Ltd. (北京瑰域迪科技有限公司)
Address: Room 705, Yingu Building, 9 Beisihuan West Road, Haidian District, Beijing (北京市海淀区北四环西路9号银谷大厦705室)
Phone: +86 10 6253 0092
E-mail: enquiry@e.art

Scope of this policy

This policy applies to the e.art website. The Site provides information about .ART domains and the .ART community. It does not provide domain registration services itself and offers no public user registration or login.

.ART domains are registered through accredited registrars (see the list of registrars). Information you submit during registration is processed by the registrar under its own service agreement and privacy policy and under the .ART registry policies; this policy does not apply to it. Other websites linked from the Site (such as registrars and art.art) have their own privacy policies; please read them before use.

What personal information we process

We process only the personal information necessary for the following purposes:

Newsletter: the e-mail address you provide when you subscribe, the time of your consent, the version of the consent text and the time you unsubscribe. Processed only after you tick the consent box (not ticked by default).
Visit statistics: page views, pages viewed per visit, referring page, device type and coarse location. The analytics system is self-hosted, uses no cookies, does not store full IP addresses and does not track you across websites.
Server logs: IP address, time of access, URL requested and browser identifier (user agent), for network security and operation of the Site.
Correspondence: when you contact us or submit a report by e-mail, we process your e-mail address and the content of your message in order to reply and handle your request.
Editor accounts: login names and password hashes of the Site’s editors, for internal administration only.

We do not intentionally collect sensitive personal information, we do not use personal information for automated decision-making or profiling, and we do not sell personal information.

How we use personal information

E-mail addresses are used only to send you the .ART newsletter and for no other purpose.
Visit statistics are used only to understand how the Site is used and to improve its content and structure.
Server logs are used only for security, troubleshooting and compliance with the statutory obligation to retain network logs.
Correspondence is used only to answer enquiries and handle complaints and reports.

If we need to use personal information for any other purpose, we will inform you in advance and obtain your consent again as required by law.

We do not sell, rent or share your personal information with third parties, and we do not disclose it publicly, except as follows:

Entrusted processing: to send the newsletter we may engage an e-mail delivery provider [TO CONFIRM: name of the e-mail delivery provider] to send it on our behalf. We agree with the provider on the purpose, method, duration and protection measures and supervise its processing; the provider may not use your information for any other purpose.
Where required by law: we may provide necessary personal information as required by laws and regulations or by competent authorities acting in accordance with the law.

If personal information has to be transferred because of a merger, division, dissolution or similar event, we will inform you of the recipient’s name and contact details and require the recipient to continue to meet the obligations of this policy.

Storage location and cross-border transfer

The Site runs on servers in mainland China, and personal information we collect in China is stored in mainland China. We do not currently provide personal information outside China.

If it ever becomes necessary to provide personal information outside China (for example to UK Creative Ideas Ltd), we will first inform you of the overseas recipient’s name, contact details, purpose and method of processing, the types of personal information and how you can exercise your rights, obtain your separate consent, and complete the procedures required by the Personal Information Protection Law, including a personal information protection impact assessment and a security assessment, certification or standard contract.

Retention

Newsletter data: until 30 days after you unsubscribe, then deleted.
Raw visit statistics: 13 months; after that only aggregate data containing no personal information is kept.
Server logs: at least six months as required by the Cybersecurity Law; deleted after [TO CONFIRM: exact period, e.g. 180 days].
Correspondence: [TO CONFIRM: retention period] after the request has been handled.
Editor accounts: until the editor stops using the account.

When the retention period expires, or in other cases provided by law, we delete the personal information or anonymise it. Where a retention period required by laws or administrative regulations has not yet expired, or deletion is technically difficult, we stop all processing other than storage and necessary security measures.

How we protect personal information

The whole Site is served over encrypted HTTPS.
Personal information is stored on servers in mainland China, and access is limited to staff who need it to perform their duties.
Editor passwords are stored only as hashes.
The Site embeds no third-party scripts, fonts, maps or videos, so visiting it does not send your information to third-party websites.
We maintain an incident response plan. If personal information is or may be leaked, altered or lost, we will take remedial measures immediately and notify the competent authorities and you as required by law.

No internet environment is completely secure and we cannot guarantee absolute security, but we will keep improving our protection measures.

Your rights

Under the Personal Information Protection Law you have the right to:

know about and decide on the processing of your personal information, and restrict or refuse it;
access and copy your personal information;
where the conditions are met, request that your personal information be transferred to a handler you designate;
correct or complete inaccurate or incomplete personal information;
request deletion of your personal information;
withdraw your consent (unsubscribe from the newsletter): every newsletter contains an unsubscribe link, or you can tell us by e-mail; withdrawal does not affect processing carried out on the basis of your consent before it was withdrawn;
ask us to explain our personal information processing rules.

To exercise these rights, e-mail enquiry@e.art. For security we may first need to verify your identity. We will respond within [TO CONFIRM: 15 working days] of receiving your request. If we refuse a request, we will give our reasons. The detailed procedure is described in Personal information protection.

If you believe our processing infringes your lawful rights and interests, you may complain to us, complain to or report to the cyberspace administration or other authorities responsible for personal information protection, or bring a lawsuit before a people’s court in accordance with the law.

Minors

The Site is intended for adults and is not directed at minors under the age of 14. Personal information of minors under 14 is sensitive personal information; if we find that we have processed such information without the consent of a parent or other guardian, we will delete it as soon as possible. Guardians who become aware of such a case are asked to contact us at enquiry@e.art.

Changes to this policy

We may update this policy to reflect changes in laws and regulations or in the Site’s functions, and will publish the updated version and its date on this page. If a change affects the purpose or method of processing or the types of personal information, we will point it out prominently and, where consent is required, obtain your consent again.

Contact us

For any questions, comments or complaints about this policy or our processing of personal information, contact:

Beijing Guiyudi Technology Co., Ltd. (北京瑰域迪科技有限公司)
Address: Room 705, Yingu Building, 9 Beisihuan West Road, Haidian District, Beijing (北京市海淀区北四环西路9号银谷大厦705室)
Phone: +86 10 6253 0092
E-mail: enquiry@e.art
Complaints and reports of illegal content: tousu@e.art