Privacy Policy

Autohome Global Used Car Export Platform (global.che168.com/en)

Table of Contents

Data Controller and Platform Overview

Limited Information We May Obtain

Legal Bases and Purposes of Data Processing

Core Data Storage Rules under the PRC Personal Information Protection Law

Recipients of Personal Information

General Statement on Cross-Border Data Transmission

Data Retention Periods

Data Subject Rights

Data Security Safeguards

Cookies, Tracking Technologies and Google Ads Consent Rules

User Profiling and Automated Decision-Making

Personal Data Breach Notification Mechanism

Global General Data Protection Compliance Rules

Policy Revision and Publication Rules

Contact for Privacy Inquiries and Rights Requests

Global Google Ads Compliance Statement

1 Data Controller and Platform Overview

1.1 Data Controller Identity

This website (global.che168.com/en, hereinafter referred to as the "Website") is operated by Beijing Shengtuo Hongyuan Information Technology Co., Ltd., the sole data controller of all personal information generated on the Website.

Company Address: 10th Floor, Tower B, CEC Plaza, 3 Danling Street, Haidian District, Beijing, P.R.China

Dedicated Privacy Contact Email: autohome-service@autohome.com.cn

1.2 Applicable Legal Basis

This Privacy Policy complies with the following laws, regulations and global compliance standards:

Personal Information Protection Law of the People's Republic of China;

Applicable local data protection laws of your country or region of residence;

Global privacy compliance standards for Google overseas advertising;

General Data Protection Regulation (GDPR) as cross-border compliance reference.

1.3 Scope of Application

This Policy applies to all global visitors accessing and browsing the Website, regardless of country or region.

Important Statement: The Website does not serve minors. We will not actively collect or store any minor-related information.

2 Limited Information We May Obtain

The Website's core function is vehicle display. No mandatory information submission forms are set. We will not actively or compulsorily collect user personal information. We only passively receive information you voluntarily provide when you send inquiries, and strictly follow the data minimization principle. We will not collect sensitive personal information without your separate explicit consent.

You may browse all vehicle content without providing contact information, and core browsing functions will not be restricted.

2.1 Information You Voluntarily Provide

Content you voluntarily send via private messages or emails: full name, email address, WhatsApp/phone number, intended purchasing country, destination port, corporate purchaser name, target vehicle models, procurement budget, consultation records and quotation documents.

2.2 Automatically Generated Anonymous Technical Data

Anonymous device identifiers for website stability: device model, operating system, browser type, IP address, page click logs, anonymous Google Ads traffic identifiers, session cookies.

Such data cannot identify a natural person independently and is only used for anonymous statistics.

2.3 Information We Will Never Collect Actively

All types of sensitive information: health status, religious beliefs, political opinions, biometrics, genetic data, full residential addresses, passports, customs clearance documents and other unnecessary private materials;

Any identity or contact information of minors;

Extra personal data irrelevant to business.

3 Legal Bases and Purposes of Data Processing

Limited data processing is only carried out when you voluntarily provide information, based on the following legal grounds:

Pre-contract communication: reply to vehicle inquiries and quotations upon your consultation;

Legitimate interests: defend network attacks and abnormal access, optimize vehicle pages; you may raise objections under Clause 8 at any time;

Separate explicit consent: push vehicle marketing materials and enable Google Ads tracking only after your active tick; you may withdraw consent anytime;

Performance of legal obligations: cooperate with investigations by Chinese customs, tax and regulators, and respond to legal data requests from overseas regulators.

4 Core Data Storage Rules under the PRC Personal Information Protection Law

All contact information you voluntarily submit shall only be stored and processed on servers within mainland China;

No cross-border transmission of user personal information will be conducted at present. We will not launch outbound compliance assessments, sign standard outbound contracts or synchronize data to overseas servers;

For visitors submitting no information, only anonymous browsing logs are stored, with no identifiable personal data retained.

5 Recipients of Personal Information

We never sell, rent or trade user personal information for profit. Limited internal and domestic sharing is conducted under data protection agreements. No personal information will be transmitted to any overseas third party:

Authorized internal export sales teams with hierarchical access control;

Domestic service providers: cloud servers, email systems, CRM and website data analysis providers;

Google LLC (Google Ads, Google Analytics): only fully anonymized browsing statistics are received without personally identifiable information;

Domestic and overseas regulatory authorities: data provided only upon formal legal documents.

6 General Statement on Cross-Border Data Transmission

No personal information of users will be exported or synchronized to any overseas third party in any country or region via the Website at present.

We will not initiate cross-border transmission, conduct DPIA/TIA, sign official outbound contracts or file outbound data with cyberspace authorities;

If cross-border transmission is required for future business adjustments, we will complete full compliance procedures, update this Policy and notify all users 30 days in advance via homepage announcements;

Cross-border restriction clauses under global laws are reserved for contingency only, with no actual cross-border data flow currently.

7 Data Retention Periods

Data is retained only for the shortest necessary period and completely deleted or irreversibly anonymized upon expiry. Visitors with no submitted personal data only have anonymous logs stored for 12 months:

Inquiry records without completed orders: retained for 24 months from last communication then deleted;

Completed export transaction records: retained for 10 years to meet Chinese customs and tax filing requirements;

Marketing contact information: deleted immediately after you withdraw marketing authorization;

Anonymous access logs and Cookie statistics: auto-cleared within 12 months;

Customs clearance documents: deleted within 90 days after full vehicle delivery and customs clearance;

User consent records for marketing and tracking: retained for a minimum of 5 years to meet global regulatory filing requirements.

8 Data Subject Rights

All global adult users may submit free rights applications via the dedicated privacy email with identity verification. We respond within the statutory time limit of your country or region of residence. The Website collects no minor information and rejects all minor-related rights applications.

Universal Core Rights for All Global Users

Right to Access: obtain copies of all your voluntarily submitted personal data and written explanations of all processing activities;

Right to Rectification: correct inaccurate contact and procurement information you submitted;

Right to Erasure: apply for permanent deletion of all your personal data after communication ends, consent withdrawal or valid objections;

Right to Restriction of Processing: suspend data processing if you dispute data accuracy or processing legality;

Right to Data Portability: export all your submitted information in machine-readable format;

Right to Object: object to data processing for website optimization and marketing at any time;

Right to Withdraw Consent: revoke all marketing and ad tracking authorizations anytime without affecting prior legal processing;

Right to Complaint: file complaints against our violations with local data regulators.

Global Supplementary Right

All global users may request a full list of domestic third parties accessing your data; no overseas data recipients exist due to zero cross-border transmission.

9 Data Security Safeguards

End-to-end TLS/SSL encryption is adopted for all website transmission. Personal information is encrypted in storage with hierarchical staff access control. Access audit logs are retained for at least one year with regular internal security reviews. All staff handling user data receive mandatory data protection training. Third-party providers undergo annual security audits. Standardized data breach emergency procedures are established.

No country-specific cross-border encryption standards apply as no cross-border data transmission is performed.

10 Cookies, Tracking Technologies and Google Ads Consent Rules

Three types of Cookies are used. Necessary Cookies support basic browsing. Analytics and Advertising Cookies are disabled by default and require separate ticking. Bundled "select all" authorization is prohibited globally:

Analytics and ad tracking Cookies are disabled by default for all overseas IPs and enabled only via separate manual ticks;

A full-screen independent consent pop-up is displayed for all overseas users with separate accept/reject buttons for analytics and Google Ads tracking. Narrow bottom banner pop-ups are forbidden;

All pop-ups carry a one-click permanent opt-out button for Google remarketing. All global marketing emails include permanent unsubscribe links;

All tracking Cookie consent records are stored in China for at least 5 years for global regulatory inspection.

You may clear browser Cookies and re-trigger the pop-up to adjust preferences. Disabling ad tracking will not affect core vehicle browsing functions.

11 User Profiling and Automated Decision-Making

We only conduct basic vehicle matching based on your voluntarily submitted purchase intentions. No fully automated decisions with legal or material adverse impacts on users are implemented. All vehicle recommendations are manually reviewed by operation staff. You may turn off automatic matching at any time.

12 Personal Data Breach Notification Mechanism

In case of security incidents causing unauthorized leakage or tampering of personal information:

PRC baseline requirement: notify affected users and Chinese cyberspace regulators within 72 hours upon discovery;

We will notify local data regulators within the statutory time limit of your country or region and send separate written notification emails to affected users.

13 Global General Data Protection Compliance Rules

This clause sets unified universal compliance requirements applicable to all overseas users, replacing country-specific subclauses:

Cross-border transmission rule: No outbound personal data transmission is conducted at present. Cross-border encryption, approval and audit requirements under local laws are reserved for contingency and not applicable to current operations;

Separate consent rule: Marketing pushes, ad tracking and potential future cross-border transmission require independent, non-bundled explicit user consent. Bundled authorization is banned worldwide;

Record retention rule: All user consent, data processing and internal audit records are stored in China for at least 5 years to meet global inspection demands;

Minor global rule: The Website does not target or collect minor information, so guardian consent procedures are unnecessary globally;

Regulatory cooperation obligation: Data regulators of any country or region may audit user data stored in China, and we fully cooperate with all legal official inspections;

Global breach response: Formal breach reports will be submitted to local regulators within statutory time limits of your jurisdiction upon data leakage.

14 Policy Revision and Publication Rules

We reserve the right to revise this Policy to adapt to updated Chinese laws, global local data protection regulations and Google Ads policies.

Material revisions (new data collection, new cross-border arrangements, Cookie rule adjustments) will be announced on the homepage 30 days in advance for all global users;

Minor text or contact updates only update the revision date at the top of this document;

Your continued browsing and use of the Website after the revision takes effect constitutes acceptance of the updated Policy;

You may email the dedicated privacy mailbox in writing to apply for archived historical versions.

15 Contact for Privacy Inquiries and Rights Requests

All data subject applications, policy consultations, breach reports and regulatory communications may be submitted via the following channels:

Privacy Contact Email: autohome-service@autohome.com.cn

Mailing Address: 10th Floor, Tower B, CEC Plaza, 3 Danling Street, Haidian District, Beijing, P.R.China

We will provide an initial response within 15 working days after receiving complete identity-verified applications, and issue formal replies within the statutory time limit of your country or region of residence.

16 Global Google Ads Compliance Statement

Google and third-party service providers may push personalized cross-network ads via Cookies and device identifiers based on your browsing behavior. The Website enables Google Analytics advertising and Google remarketing tags.

You may disable Google personalized ads via Google settings or turn off ad tracking Cookies through the Website's global unified consent pop-ups;

All traffic data shared with Google is fully anonymized, and no personally identifiable information will be transmitted without your separate marketing consent;

This Policy fully meets Google's unified global compliance disclosure standards for remarketing, conversion tracking and cross-border advertising, and complies with worldwide ad review specifications.