Data privacy notices

We, Eplan Software (Shanghai) Co., Ltd. (collectively "Eplan" or "we"), attach great importance to data protection during the processing of personal data. These Notices provide a comprehensive explanation of how we process your personal data.

These Notices apply to all personal data that you provide to us, or that we may access, through our website, any of our online applications, platforms, channels, products, or services (collectively, "Products and Services"), or our business interactions. These Notices apply where Eplan acts as the data controller.

Last updated: October 14, 2026
Effective date: December 26, 2025

At Eplan, we understand how important your personal data is to you and make every effort to keep it safe and secure. We are committed to maintaining your trust in us and protecting your personal data by adhering to principles including alignment of rights and responsibilities, clear purposes, choice and consent, collection and use limited to what is necessary, security, data subject participation, and openness and transparency. Eplan also undertakes to implement appropriate safeguards in accordance with established industry security standards to protect your personal data.

When you register for this service or use its features, you need to provide the information necessary for those features to work. Before using this service, please read these Notices carefully and make sure you understand them, including what information we require and the security measures we take.
 

1. When we collect personal data

Personal data means any information recorded electronically or otherwise that relates to an identified or identifiable natural person.

When you use this service, we will collect and use the information you submit in the ways and for the purposes described below, as necessary to provide the services you choose:

1.1 When you visit or use our website;

1.2 When you purchase or use any of our Products and Services;

1.3 When you voluntarily provide your personal data to us (for example, by opting to receive marketing emails, creating an account on our website or for our Products and Services, or completing an online event registration form);

1.4 When a company or organization you work with provides us with information;

1.5 When you attend webinars, lectures, exhibitions, or other events;

1.6 When you visit our social media pages;

1.7 When you or others publicly share information (for example, posting information publicly on LinkedIn or publishing materials on a company website);

1.8 When you visit our offices;

1.9 When you receive our communications, including emails, phone calls, or text messages;

1.10 When you use our Products and Services, including when you access customer service or technical support for them;

1.11 When necessary to provide our Products and Services, or otherwise conduct business with you or a company or organization you work with;

1.12 When we purchase services from selected third-party providers that use aggregated cookie data or similar data to deliver advertisements based on common characteristics; and/or

1.13 In other circumstances where we have informed you in advance, either through these Notices or when collecting the information, of how and why we collect it;

1.14 In addition, under applicable laws, regulations, and national standards, we may process your personal data without seeking your consent in the following circumstances:

1) Where processing is necessary for the conclusion or performance of a contract to which you are a party;

2) Where processing is necessary for the performance of statutory duties or legal obligations;

3) Where processing is necessary to respond to public health emergencies, or to protect the life, health, and property safety of natural persons in emergencies;

4) Where your personal data is processed within a reasonable scope for news reporting, public oversight, or similar activities in the public interest;

5) Where personal data that you have made public or that has otherwise been legally disclosed is processed within a reasonable scope in accordance with the law;

6) In other circumstances provided for by laws and administrative regulations.

1.15 If changes to our services or updates to their features require us to collect or use your personal data beyond the scope described above, we will notify you again and obtain your consent once more. Under the circumstances described above, you are not required to provide us with any personal data. However, if you do not provide it, we may not be able to provide certain services or information you may request.
 

2. What types of personal data we collect

We may collect the following categories of personal data as well as other information related to you (such as cookies):

2.1 Identity data and business contact information you share with us, such as your name, job/position/title, business email address, business address, telephone number, mobile phone number, fax number, personal telephone number, gender, date of birth, login credentials, ID number, etc.

2.2 Other information you provide to us when you use the platform, register an account or receive our services, such as your product interests, subscription preferences, personal preferences, information relating to webinars, personal profile (resume), articles, comments, opinions, images and videos you post on digital channels, and credit card and other payment information.

2.3 Electronic identification data and information collected by communication systems, IT applications, and web browsers, such as IT usage information (system access and IT and internet usage), device identifiers (mobile device ID, IP address, browser type, browser settings, access times, URLs, and cookies), registration and login credentials, login data and log files, analytics IDs, search and website registration data, and audio recordings (such as voicemail, telephone recordings, Skype recordings);

2.4 Employment and education history, certificates/licenses, and related data.
 

3. How we may use the personal data you provide to fulfill obligations, conduct transactions and carry out marketing activities

3.1 Contacting you or your company regarding potential business opportunities, products, or specific requests or inquiries;

3.2 Delivering the products, software, services, and solutions we have agreed to provide, or otherwise fulfilling our obligations under business transactions;

3.3 Managing our website and your account;

3.4 Sending technical notices, updates, security alerts, and support or administrative messages;

3.5 Investigating and preventing unauthorized transactions, unauthorized access to our Products and Services, and illegal activities;

3.6 Enabling you to communicate, collaborate, and share files with users you designate;

3.7 Analyzing trends and improving the functionality of our website;

3.8 Providing and enhancing a personalized online experience based on the preferences and personal data you enter on our website and selected third-party websites, which may include selecting and displaying targeted advertisements about our products, services, and solutions to make the information you receive more relevant to you (for example, by using advertising networks to display targeted digital advertisements on third-party websites);

3.9 Evaluating your job application;

3.10 Protecting our legal rights and property, protecting other users or third parties, and preventing personal injury or loss, when we deem it necessary;

3.11 Communicating with you by email, postal mail, or telephone about our and our business partners’ products, software, services, solutions, and events that may interest you, as well as questions and information you forward to us. Our employees, contractors, or third-party service providers may analyze, answer, or otherwise process those questions and information using automated means;

3.12 Processing your feedback;

3.13 Identifying the interest of existing or potential customers in specific products, solutions, and services based on activities such as their visits to certain web pages, document downloads, or direct inquiries, thereby generating leads or otherwise promoting our business and that of our business partners (such as our authorized distributors);

3.14 Publishing testimonials with your consent;

3.15 Improving the support and services we provide to you and/or our responses to your requests or inquiries;

3.16 Inviting you to provide feedback or participate in customer surveys, and analyzing and responding to your feedback and survey responses;

3.17 Better understanding the nature and quality of the products, software, services, and solutions we offer;

3.18 Improving and further developing products, software, services, and solutions; and/or

3.19 Using such information in our SCRM system.

We process your personal data in our SCRM system for marketing purposes. Each promotional communication will contain a link that allows you to opt out of receiving such communications in the future and manage your preferences by choosing which communications you wish to receive. You can also visit our Communication Preference Center to change your preferences at any time.
 

4. How we store, share, transfer and publicly disclose your personal data

4.1 Storage

Retention period: Based on applicable laws and regulations, as well as the purposes for which we collect and use personal data, we will only retain your data for the minimum period necessary for the purposes stated in these Notices, subject to applicable statutory retention requirements. Unless a longer retention period is necessary or permitted by law, we will promptly delete or anonymize your personal data once the purposes for which it was collected have been fulfilled.

Storage location: The information we collect will be stored within the territory of the People's Republic of China.

4.2 Sharing

We may share some of your data with our affiliates to better serve you, including by verifying your identity, clarifying your requests and providing assistance. We will not share information that can identify you with other partners without your explicit consent.

4.3 Transfer

We will not transfer your personal data to any other companies, organizations, or individuals, except in the following circumstances as stipulated by applicable laws and regulations:

1) We may transfer your personal data to other parties after obtaining your explicit consent;

2) In the event of a merger, acquisition, or bankruptcy liquidation involving the transfer of personal data, we will require the new company or organization receiving your personal data to continue to be bound by these Notices; otherwise, we will require it to obtain your consent again.

4.4 Public disclosure

In principle, we will not publicly disclose your personal data. We will only publicly disclose your personal data under the following circumstances:

1) Where we have obtained your explicit consent in advance;

2) Where disclosure is expressly provided for by laws and regulations.

4.5 Exceptions to the consent requirement for sharing, transferring or publicly disclosing personal data

Please be aware that, in accordance with applicable laws and regulations, we do not need your consent to share, transfer, or publicly disclose your personal data under the following circumstances:

1) Where it relates to the data controller's fulfillment of obligations under laws and regulations;

2) Where it directly relates to national security or national defense;

3) Where it directly relates to public safety, public health, or major public interests;

4) Where it directly relates to criminal investigations, prosecutions, trials, or execution of judgments;

5) Where it is intended to protect major legitimate rights and interests of the data subject or another individual, such as those relating to life or property, but it is difficult to obtain the consent of the individual concerned;

6) Where the personal data has been made public by the data subject themselves;

7) Where the personal data has been collected from lawfully disclosed public sources, such as lawfully published news reports and government information disclosure.
 

5. How we protect your personal data

We adopt industry-standard security protection measures to protect data against unauthorized access, disclosure, and attacks. We take all reasonable and practicable measures to protect your personal data. These measures include, but are not limited to, the following:

5.1 We formulate dedicated management policies, operating procedures, and emergency response plans for personal data security incidents, and manage data according to its classification to safeguard its security.

5.2 We strictly control access permissions through tiered and category-based access approval procedures, limiting access to the minimum number of personnel who need it. We also provide relevant personnel with regular information security education and training.

5.3 We implement practical technical measures such as encryption, data masking, and de-identification to safeguard the security and confidentiality of data during storage and transmission.

5.4 In the event of a personal data leak or similar incident, we will promptly inform you or issue a public announcement as required by laws and regulations, and take timely remedial actions. We will also proactively report the handling of personal data security incidents in accordance with the requirements of regulatory authorities.

We highly value the security of your personal data and will do our utmost to ensure the safety of the information you submit. However, please note that no internet environment is completely secure. Please also take care to protect your personal data, including your account details and password.
 

6. How we use cookies

When you visit a website, it may store information in, or retrieve information from, your browser, mostly in the form of cookies. This information might be about you, your preferences, or your device, and is mostly used to make the site work as you expect. This information does not usually identify you directly, but it can provide you with a more personalized online experience.

To ensure the normal operation of this website, we or our third-party partners may collect certain data through cookies or similar technologies. This data typically includes identifiers, site names, and certain numbers and characters, and is stored on your computer or mobile device in small data files known as cookies.

We use cookies to identify registered users and their login status, improve service quality, and optimize user experience. Cookie data can also help us analyze how users use our services.

We respect your privacy, so you can choose to disable functional, analytics, marketing, and social media cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

We will not use cookies for any purpose other than those described in these Notices. If you wish to not store the aforementioned information in cookies, you can block or clear cookies through your browser settings.
 

7. Your rights

In accordance with applicable Chinese laws, regulations, and standards, we will ensure that you can exercise the following rights regarding your personal data:

7.1 Access, copy, and correct your personal data

You have the right to access, copy, and correct your personal data, except as otherwise provided by laws and regulations. To exercise these rights, you can contact us by phone or email to request access to, copy, or correct your personal data.

To protect users’ personal data, we may require you to submit your identity information before accepting your request. We may verify such information and the details of your request to confirm that the request comes from the data subject and meets the legal requirements. We will respond to your request for access or correction within 30 days of receipt, or within the time limit required by laws and regulations.

7.2 Delete your personal data

Under the following circumstances, you can request deletion of your personal data, and we will do so promptly:

1) The purpose of processing has been achieved, cannot be achieved, or no longer requires the processing of your personal data;

2) We stop providing this service, or the retention period has expired;

3) You withdraw your consent or stop using this service;

4) We process your information in violation of laws, administrative regulations, or our agreement;

5) Other circumstances provided for by laws and administrative regulations.

For deletion requests, we will respond within 30 days or within the time limit required by laws and regulations. During this period, we will store and isolate your information securely until we have fulfilled your request.

When you delete information from this service, we may not delete the corresponding information from our backup system immediately, but we will do so when the backups are updated.

7.3 Withdrawal of consent

You can withdraw your consent to our collection of your personal data, or change the scope of such consent, by contacting us or otherwise.

Certain features require basic personal data to function. If you choose to withdraw your consent or authorization, we will be unable to continue providing you with the corresponding services. However, your decision to withdraw consent or authorization will not affect the personal data processing activities previously carried out based on such authorization.

7.4 Rights of the deceased user's close relatives

If a user passes away, their close relatives can contact us by phone or email to exercise their lawful rights in relation to the personal data associated with that user’s account.

7.5 Please note that we will not accept the requests described above under the following circumstances, and we will explain the reasons to you in such cases:

1) Where it relates to the data controller's fulfillment of obligations under laws and regulations;

2) Where it directly relates to national security or national defense;

3) Where it directly relates to public safety, public health, or major public interests;

4) Where it directly relates to criminal investigation, prosecution, trial, and execution of judgments;

5) Where the data controller has sufficient evidence indicating that the data subject is acting in bad faith or abusing their rights;

6) Where the purpose is to protect important legitimate rights and interests of the data subject or another individual, such as those relating to life and property, but it is difficult to obtain the consent of the individual concerned;

7) Where complying with the data subject’s request would seriously harm the legitimate rights and interests of the data subject or any other individuals and organizations;

8) Where the request involves trade secrets.
 

8. Protection of children’s personal data

Only users with the requisite capacity for civil conduct may register for and use this service; therefore, we presume that you have the capacity for civil conduct. Children should not create their own accounts without the consent of their parents or guardians. If you are a child, you must stop using this service immediately.

For personal data of children collected with parental consent, we will only use or disclose such data as permitted by law, or with the explicit consent of parents or guardians, or where necessary to protect the child.

Although the definition of a child may vary under local laws and customs, we consider anyone under the age of 14 to be a child.

If we discover that we have collected a child's personal data without prior verifiable parental consent, we will take steps to delete the data as soon as possible.

We also urge parents and guardians to remain attentive to and protect their children's personal data. If you find that a child's personal data has been collected or used without authorization, please contact us to have it deleted and ensure that the child stops using this service.
 

9. Updates to these Notices

These Notices may be updated from time to time. We will post any changes made to these Notices on this page. You can view the latest version of these Notices at any time on our official website (https://www.eplan.com.cn). If there are material changes to these Notices or changes that affect your rights and interests, we will prominently notify you when you log in to this service and obtain your consent again. If you do not agree to the changes, please stop using this service once the revised Notices take effect.
 

10. How to contact us

If you have any questions, complaints, or suggestions regarding these Notices or the protection of personal data, you can contact us in the following ways:

1) Call our customer service hotline at +86 4008202289;

2) Email your questions to our customer service team at info@eplan.cn;

We will normally reply as soon as possible within 30 days of receiving your inquiry or within the time limit required by laws and regulations.

Eplan Software (Shanghai) Co., Ltd.