ePData用户信息和隐私保护协议及电子签名使用声明
上海信华医药科技有限公司(以下简称“我们”或“信华医药”)深知用户信息安全与隐私保护的重要性,我们将采取安全保护措施,致力于提升信息处理透明度,保障您的个人信息安全可控。
信华医药将严格遵守法律法规并遵循以下用户信息及隐私保护原则,为您提供安全、可靠的服务,包括并不限于临床研究数据采集、疾病调研等:
1、 合理必要:为了向您提供更好的服务,我们仅收集必要的信息。这些信息的收集将用于为您提供适合的解决方案和服务。
2、 充分知情:我们努力使用简明易懂的表述,向您陈述用户信息及隐私保护政策,以便您清晰地了解我们的信息处理方式。
3、 安全可靠:我们竭尽全力通过合理有效的信息安全技术及管理流程,防止您的信息泄露、损毁、滥用。我们在服务流程的各个环节,融入隐私保护的理念。
在使用信华医药的各项服务前,希望您务必仔细阅读并透彻理解本《用户信息及隐私保护政策》(以下简称“政策”),详细了解我们对信息的收集、使用方式,以便您更好地了解我们的服务并作出适当的选择,在您确认充分理解并“同意”该政策后方可使用相关服务。同时,您有权选择“不同意”。若您开始使用信华医药之相关服务,即被视为您对本政策所述内容的接受和认可。
定义
信华医药,是指上海信华医药科技有限公司。
个人信息,是指以电子或者其他方式记录的能够单独或者与其他信息结合识别特定自然人身份或者反映特定自然人活动情况的各种信息。
删除个人信息,是指在实现日常业务功能所涉及的系统中去除个人信息的行为,使其保持不可被检索、访问的状态。
本政策将主要向您说明并帮助您了解:
一、 我们可能收集的信息;
二、 我们如何收集和使用您的个人信息;
三、 我们如何共享、转让、公开披露您的个人信息;
四、 我们如何保护您的个人信息;
五、 您如何管理您的个人信息;
六、 我们如何处理特殊人群的个人信息;
七. 我们可能收集个人健康信息
八. 电子签名使用声明
九、 本政策如何更新;
一、 我们可能收集的信息
我们在提供服务时,根据合法、正当、必要的原则,仅可能收集、储存、和使用为您提供服务所必要的下列与个人(“您”)有关的信息:
1. 与个人身份相关的信息:当您使用服务时,我们可能收集、汇总或要求您提供的与个人身份相关的信息。例如生日、联系方式等。
2. 与个人身份无关的信息:当您使用服务时,我们将可能自动收集、获取并存储为服务日志的信息,例如IP地址、个人位置信息、用户的设备信息、来源途径、访问顺序、停留时间以及电子日志信息等。
二、 我们如何收集和使用您的个人信息
我们严格遵守法律法规的规定及与用户的约定,出于以下目的,收集、储存和使用您的个人信息。若我们超出以下用途或者将基于特定目的收集而来的信息用于其他目的使用您的信息,我们将再次向您进行说明,并征得您的同意。
1. 向您提供服务或产品。
2. 向您展示并推送您可能感兴趣的相关信息和服务。
3. 邀请您参与有关我们服务的调查,评估、改善我们的服务。
4. 将所收集到的信息用于数据分析。例如,我们将收集到的信息用于分析形成不包含任何个人信息的临床试验数据报告。
5. 征得授权同意的例外:以下情形中收集您的个人信息无需征得您的授权同意:
1) 在取得有关政府权力机关的授权或批准前提下,收集您与公共安全、公共卫生、重大公共利益有关的信息;
2) 从合法公开披露的信息中收集个人信息的,如合法的新闻报道、政府信息公开等渠道;
3) 用于维护为您提供的产品或服务的安全稳定运行所必需的,例如发现、处理产品或服务的故障;
4) 学术研究机构基于公共利益开展统计或学术研究所必要,且对外提供学术研究或描述的结果时,对结果中所包含的个人信息进行去标识化处理的;
5) 法律法规规定的其他情形。
三、 我们如何共享、转让、公开披露您的个人信息
1. 共享:
我们不会向除服务提供者以外的任何公司、组织和个人分享您的信息,但以下情况除外:
1) 我们可能会根据法律法规规定,或按政府主管部门的强制性要求,对外共享您的个人信息;
2. 转让:
除非在您的明确同意情况下,我们不会将您的个人信息转让给任何公司、组织和个人。
3. 公开披露
我们仅会在以下情况下,公开披露您的个人信息:
1) 获得您明确同意或基于您的主动选择,我们可能会公开披露您的个人信息;
2) 如果我们确定您出现违反法律法规或严重违反信华医药相关协议规则的情况,或为保护信华医药及用户或公众的人身财产安全免遭侵害,我们可能依据法律法规或信华医药相关协议规则征得您同意的情况下披露关于您的个人信息。
4. 共享、转让、公开披露个人信息时事先征得授权同意的例外:
1) 在取得有关机关的授权或批准前提下,收集您与公共安全、公共卫生、重大公共利益有关的信息;
2) 从合法公开披露的信息中收集个人信息的,如合法的新闻报道、政府信息公开等渠道。
四、 我们如何保护您的个人信息
1. 我们已采取符合业界标准、合理可行的安全防护措施保护您提供的个人信息安全,防止个人信息遭到未经授权访问、公开披露、使用、修改、损坏或丢失。
2. 我们会采取合理可行的措施,尽力避免收集无关的个人信息。
3. 我们将在合理的安全水平内使用各种安全保护措施以保障信息的安全。例如,我们使用加密技术、匿名化处理等手段来保护您的个人信息。
4. 我们建立专门的管理制度、流程和组织确保信息安全。例如,我们严格限制访问信息的人员范围,要求他们遵守保密义务,并进行审查。
五、 您如何管理您的个人信息
1. 我们将按照本政策所述,仅为实现我们产品或服务的功能,收集、使用您的信息。如您发现我们违反法律、行政法规的规定或者双方的约定收集、使用您的个人信息,您可以要求我们删除。
2. 响应您请求的例外:在以下情形中,我们将无法响应您的请求:
1) 在取得有关机关的授权或批准前提下,收集的您与公共安全、公共卫生、重大公共利益有关的信息;
2) 有充分证据表明个人信息主体存在主观恶意或滥用权利的;
3) 响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的;
4) 涉及商业秘密的。
六、 我们如何处理特殊人群的个人信息
1. 如您为无自主选择能力的特殊人群,包括并不限于未成年人、无能力知情同意个人,您应当请您的监护人仔细阅读本政策,并在征得您的监护人同意的前提下使用我们的服务或向我们提供信息。
2. 对于经监护人同意使用我们的产品或服务而收集特殊人群个人信息的情况,我们只会在法律法规允许、监护人明确同意或者保护特殊人群所必要的情况下使用、共享、转让或披露此信息。
七、我们可能收集个人健康信息
您在使用服务时提交的个人健康信息,我们可能会收集,请予以授权同意。例如病历病史资料、检查报告、手术及麻醉记录、护理记录、药物食物过敏信息、生育信息、诊治情况、家族病史、其他与个人身体健康状况相关的信息,如体重、身高肺活量等。
八、电子签名使用声明
1.声明背景
为确保用户通过【ePData】(以下简称“本平台”)使用电子签名服务的合法性、安全性和有效性,根据《中华人民共和国电子签名法》《中华人民共和国民法典》及相关法律法规,特制定本声明。
2.电子签名定义
本声明中的“电子签名”指用户通过本平台提供的身份认证、加密技术及数字证书等手段,在电子文档上生成的、具有法律效力及身份识别功能的电子数据。
3.用户承诺
合法性:用户承诺通过本平台签署的电子文件内容真实、合法,且签署行为系本人真实意愿表达,不得利用电子签名从事违法活动。
身份认证:用户需完成本平台要求的实名认证(包括但不限于手机号验证、身份证核验、人脸识别等),并妥善保管账号及密码,不得转借或泄露。
签名效力:用户确认电子签名与手写签名具有同等法律效力,并自愿承担因签名引发的法律责任。
4.平台责任与义务
技术保障:本平台采用符合国家标准的加密技术(如SSL/TLS、数字证书等)确保电子签名生成、传输及存储的安全性。
审计留痕:本平台将记录电子签名操作的全流程日志(包括时间、IP地址、操作行为等),以备司法查验。
合规性:本平台承诺不篡改用户签署的电子文件内容,并配合用户提供必要的法律效力证明文件。
5.免责条款
因用户未妥善保管账号密码导致电子签名被冒用的,本平台不承担责任。
因不可抗力(如网络攻击、系统故障等)导致电子签名失效的,本平台将协助用户恢复数据,但不承担直接损失赔偿责任。
用户与第三方因电子签名引发的纠纷,由双方自行协商解决,本平台可提供必要的技术支持。
6.法律适用与争议解决
本声明适用中华人民共和国法律。
用户与本平台因电子签名产生的争议,应协商解决;协商不成的,提交本平台所在地有管辖权的人民法院诉讼解决。
九、本政策如何更新
我们可能适时修订本政策内容。如该等变更会导致您在本政策项下权利的实质减损,我们将在变更生效前,通过在页面显著位置提示等方式通知您。在该种情况下,若您继续使用我们的服务,即表示同意受经修订的政策约束。
版本更新日期: 2025年9月15日
版本生效日期: 2025年9月15日
我已阅读并理解上述《用户信息和隐私保护协议及电子签名使用声明》并知晓可能收集个人健康信息,“同意”授权信华医药收集、整理、记录我的个人信息并为我提供服务。
ePData User Information and Privacy Protection Agreement and Statement on the Use of Electronic Signatures
Shanghai Xinhua Pharmaceutical Technology Co., Ltd. (hereinafter referred to as “we” or “Xinhua Pharmaceutical”) fully understands the importance of user information security and privacy protection. We will take security measures, strive to improve transparency in information processing, and ensure that your personal information is secure and under control.
Xinhua Pharmaceutical will strictly comply with laws and regulations and follow the user information and privacy protection principles below to provide you with secure and reliable services, including but not limited to clinical research data collection and disease surveys:
1. Reasonable and necessary: To provide you with better services, we collect only necessary information. The information collected will be used to provide you with suitable solutions and services.
2. Fully informed: We strive to explain our user information and privacy protection policy in simple, understandable terms so that you can clearly understand how we process information.
3. Secure and reliable: We make every effort to prevent disclosure, damage, or misuse of your information through reasonable and effective information security technologies and management procedures. We incorporate privacy protection into every stage of our service processes.
Before using any of Xinhua Pharmaceutical’s services, please carefully read and fully understand this User Information and Privacy Protection Policy (hereinafter referred to as the “Policy”) and learn in detail how we collect and use information, so that you can better understand our services and make appropriate choices. You may use the relevant services only after confirming that you fully understand and “Agree” to this Policy. You also have the right to select “Disagree.” If you begin using Xinhua Pharmaceutical’s relevant services, you will be deemed to have accepted and acknowledged the contents of this Policy.
Definitions
Xinhua Pharmaceutical means Shanghai Xinhua Pharmaceutical Technology Co., Ltd.
Personal information means information recorded electronically or by other means that, alone or in combination with other information, can identify a specific natural person or reflect the activities of a specific natural person.
Deletion of personal information means removing personal information from systems involved in performing routine business functions so that it cannot be retrieved or accessed.
This Policy primarily explains and helps you understand:
I. Information We May Collect;
II. How We Collect and Use Your Personal Information;
III. How We Share, Transfer, and Publicly Disclose Your Personal Information;
IV. How We Protect Your Personal Information;
V. How You Manage Your Personal Information;
VI. How We Handle Personal Information of Special Groups;
VII. We May Collect Personal Health Information
VIII. Statement on the Use of Electronic Signatures
IX. How This Policy Is Updated;
I. Information We May Collect
When providing services, in accordance with the principles of lawfulness, legitimacy, and necessity, we may collect, store, and use only the following information relating to an individual (“you”) that is necessary to provide services to you:
1. Information related to personal identity: When you use the services, we may collect, aggregate, or ask you to provide information related to your personal identity, such as your date of birth and contact details.
2. Information unrelated to personal identity: When you use the services, we may automatically collect, obtain, and store information as service logs, such as IP addresses, personal location information, user device information, referral sources, access sequence, duration of visits, and electronic log information.
II. How We Collect and Use Your Personal Information
We strictly comply with laws and regulations and our agreements with users when collecting, storing, and using your personal information for the following purposes. If we use your information beyond the following uses or use information collected for a specific purpose for another purpose, we will explain this to you again and obtain your consent.
1. To provide you with services or products.
2. To display and send you relevant information and services that may interest you.
3. To invite you to participate in surveys about our services and to evaluate and improve our services.
4. To use collected information for data analysis. For example, we use collected information to analyze and produce clinical trial data reports that contain no personal information.
5. Exceptions to obtaining authorization and consent: Your authorization and consent are not required to collect your personal information in the following circumstances:
1) Collecting information about you related to public security, public health, or major public interests, provided that authorization or approval has been obtained from the relevant government authorities;
2) Collecting personal information from lawfully publicly disclosed information, such as lawful news reports and government information disclosures;
3) Where necessary to maintain the secure and stable operation of products or services provided to you, such as identifying and resolving product or service faults;
4) Where necessary for academic research institutions to conduct statistics or academic research in the public interest, provided that personal information included in the results is de-identified when the results of academic research or descriptions are made available externally;
5) Other circumstances stipulated by laws and regulations.
III. How We Share, Transfer, and Publicly Disclose Your Personal Information
1. Sharing:
We will not share your information with any company, organization, or individual other than service providers, except in the following circumstances:
1) We may share your personal information externally as required by laws and regulations or by mandatory requirements of government authorities;
2. Transfer:
We will not transfer your personal information to any company, organization, or individual without your explicit consent.
3. Public disclosure
We will publicly disclose your personal information only in the following circumstances:
1) We may publicly disclose your personal information with your explicit consent or based on your own initiative and choice;
2) If we determine that you have violated laws or regulations or seriously violated Xinhua Pharmaceutical’s relevant agreements or rules, or to protect Xinhua Pharmaceutical, users, or the public from harm to their persons or property, we may disclose your personal information in accordance with laws and regulations or Xinhua Pharmaceutical’s relevant agreements or rules, with your consent.
4. Exceptions to obtaining prior authorization and consent when sharing, transferring, or publicly disclosing personal information:
1) Collecting information about you related to public security, public health, or major public interests, provided that authorization or approval has been obtained from the relevant authorities;
2) Collecting personal information from lawfully publicly disclosed information, such as lawful news reports and government information disclosures.
IV. How We Protect Your Personal Information
1. We have adopted reasonable and practicable security measures that meet industry standards to protect the personal information you provide against unauthorized access, public disclosure, use, modification, damage, or loss.
2. We will take reasonable and practicable measures to avoid collecting irrelevant personal information as far as possible.
3. We will use various security measures within a reasonable level of security to safeguard information. For example, we use encryption, anonymization, and other methods to protect your personal information.
4. We establish dedicated management systems, procedures, and organizational arrangements to ensure information security. For example, we strictly limit the personnel who may access information, require them to comply with confidentiality obligations, and conduct reviews.
V. How You Manage Your Personal Information
1. As described in this Policy, we will collect and use your information only to perform the functions of our products or services. If you discover that we have collected or used your personal information in violation of laws, administrative regulations, or our agreement, you may request that we delete it.
2. Exceptions to responding to your requests: We will be unable to respond to your requests in the following circumstances:
1) Information collected about you related to public security, public health, or major public interests, provided that authorization or approval has been obtained from the relevant authorities;
2) Where there is sufficient evidence that the personal information subject acts with malicious intent or abuses their rights;
3) Where responding to your request would seriously harm your legitimate rights and interests or those of other individuals or organizations;
4) Where trade secrets are involved.
VI. How We Handle Personal Information of Special Groups
1. If you belong to a special group that cannot make independent choices, including but not limited to minors and individuals incapable of giving informed consent, you should ask your guardian to read this Policy carefully and use our services or provide information to us only with your guardian’s consent.
2. Where we collect personal information of special groups who use our products or services with their guardians’ consent, we will use, share, transfer, or disclose this information only where permitted by laws and regulations, with the guardian’s explicit consent, or where necessary to protect these special groups.
VII. We May Collect Personal Health Information
We may collect the personal health information you submit when using the services; please provide your authorization and consent. Examples include medical records and medical history, examination reports, surgical and anesthesia records, nursing records, drug and food allergy information, reproductive information, diagnosis and treatment details, family medical history, and other information relating to your physical health, such as weight, height, and vital capacity.
VIII. Statement on the Use of Electronic Signatures
1. Background of the Statement
This Statement is formulated in accordance with the Electronic Signature Law of the People’s Republic of China, the Civil Code of the People’s Republic of China, and relevant laws and regulations to ensure the lawfulness, security, and effectiveness of users’ use of electronic signature services through [ePData] (hereinafter referred to as the “Platform”).
2. Definition of Electronic Signature
In this Statement, “electronic signature” means electronic data generated by users on electronic documents through identity authentication, encryption technologies, digital certificates, and other means provided by the Platform, with legal effect and an identity verification function.
3. User Commitments
Lawfulness: Users undertake that the contents of electronic documents signed through the Platform are true and lawful, that signing expresses their genuine intent, and that they will not use electronic signatures for unlawful activities.
Identity authentication: Users must complete the real-name authentication required by the Platform (including but not limited to mobile phone number verification, identity card verification, and facial recognition), safeguard their accounts and passwords, and not lend or disclose them to others.
Effect of signatures: Users acknowledge that electronic signatures have the same legal effect as handwritten signatures and voluntarily assume legal liability arising from their signatures.
4. Responsibilities and Obligations of the Platform
Technical safeguards: The Platform uses encryption technologies that comply with national standards (such as SSL/TLS and digital certificates) to ensure the security of electronic signature generation, transmission, and storage.
Audit trail: The Platform will record logs of the entire electronic signature process (including time, IP address, and actions performed) for judicial examination.
Compliance: The Platform undertakes not to tamper with the contents of electronic documents signed by users and to cooperate with users in providing necessary documents proving legal effect.
5. Disclaimer
The Platform assumes no liability if an electronic signature is used without authorization because a user failed to safeguard their account and password.
If an electronic signature becomes invalid due to force majeure (such as cyberattacks or system failures), the Platform will assist the user in restoring data but assumes no liability for compensation for direct losses.
Disputes between users and third parties arising from electronic signatures shall be resolved through negotiation between those parties. The Platform may provide necessary technical support.
6. Governing Law and Dispute Resolution
This Statement is governed by the laws of the People’s Republic of China.
Disputes between users and the Platform arising from electronic signatures shall be resolved through negotiation; if negotiation fails, the dispute shall be submitted to a people’s court with jurisdiction at the location of the Platform.
IX. How This Policy Is Updated
We may revise this Policy from time to time. If such changes would substantially reduce your rights under this Policy, we will notify you before the changes take effect, for example by displaying a prominent notice on the page. In such circumstances, your continued use of our services indicates your agreement to be bound by the revised Policy.
Version update date: 2025-09-15
Version effective date: 2025-09-15
I have read and understood the above User Information and Privacy Protection Agreement and Statement on the Use of Electronic Signatures, am aware that personal health information may be collected, and “Agree” to authorize Xinhua Pharmaceutical to collect, organize, and record my personal information and provide services to me.