Vendor Privacy Notice

Air Liquide (China) Holding Co., Ltd. and its subsidiaries and affiliates (“Air Liquide” or “We”) are committed to being responsible for processing your personal information.

Before you use or submit any information, please carefully review this Privacy Notice (this “Notice”). We will continue to evaluate this Notice to reflect our personal information processing activities, and we may make changes to this Notice accordingly. Any changes will be made on this page and you should check this page periodically for updates. If we make material changes to this Notice, we will provide you with notice when required by law.

This Notice contains the following sections:

1. Application and definition 

2. How we collect and use your personal information 

3. How we share your personal information 

4. Legal bases for processing your personal information 

5. How we store your personal information 

6. How we protect your personal information 

7. Your choices and rights 

8. How we protect children’s PI 

9. Links to other sites and services 

10. How do we transfer your personal information globally 

11. Updates to this Notice 

12. Contact us 

This Notice governs and describes Air Liquide China’s practices (as a personal information processor under China’s data and privacy law) in connection with personal information that we collect in the course of our interactions with vendors or potential vendors  in Mainland China, including online communication, business cooperation with vendors, signing of contracts, etc.

Definitions of “personal information”, “sensitive personal information”, and “processing” in this Notice are set out as follows and are consistent with the definitions in the relevant laws.

• Personal information: refers to various types of information recorded in electronic or other ways that is related to an identified or identifiable natural person, including but not limited to name, address, mobile phone number, and ID number, etc. but excluding anonymized information.
• Personal information processor: refers to an organization or individual that independently decides on the processing purposes and processing methods during PI processing activities.
• Sensitive personal information: refers to personal information that, if leaked or used illegally, may easily lead to an infringement upon the human dignity of a natural person or endangerment of the safety of his/her body or property, including information on biometric identification, religious beliefs, specific identity, health care, financial accounts, and personal whereabouts, and personal information of minors under the age of fourteen. Sensitive personal information is marked in bold, italic and underline to draw your attention.
• Processing: includes personal information collection, storage, use, processing, transmission, provision, disclosure and deletion, etc.

We will only collect and process your personal information for the following purposes described in this Notice in accordance with the principles of lawfulness, legitimacy, necessity and good faith and in compliance with applicable laws and regulations. 

2.1 When we conduct business with you or your company, for the purposes of managing vendors’ information, requests for quotations, vendor qualification reviews, contract negotiation, signature, and generation, we will collect and process your name and business phone number. If you do not provide your business phone number, we may collect your personal phone number.

2.2 We may collect your name, business phone number, or your personal phone number if a business phone number is not provided, for the purposes of vendor qualification, selection, and creation in our digital management system. 

2.3 When you make an appointment to visit our sites, due to our security management needs, we will collect your name, phone number, job position, your company information, email address and ID card number. To ensure the safety of cooperation, all our vendors which intervene on our sites are required to sign a  safety agreement. Therefore, we may collect your name and ID number to get the safety agreement signed.

2.4 We may collect your name and phone number for the purposes of auditing, health, safety and environment (HSE) qualification review, vendor performance evaluation, and supplier risk management evaluation.

2.5 We may collect your name and phone number for the purposes of conducting supplier relationship management, keeping a record and processing the payment as well as financial information.

2.6 If you are a driver of our vendors, to identify you, keep your record and contract, send purchase order, assign tasks, safeguard your security, and analyse the situation of your operation, we will collect your name, gender, phone number, ID card, driver's licence, road transportation permit card, health check record, occupational health check report, whereabouts (when driving a vehicle for Air Liquide), precise location information, accommodation information, as well as Air Liquide's internal training and certification records and service violation assessment records.

2.7 We need to process the sensitive personal information mentioned above (information in bold and underlined), including ID card and precise location information, etc., otherwise we will not be able to provide you with the corresponding services. As you are aware, if sensitive personal information is leaked or illegally used, it may have a certain impact on the dignity, personhood, and property security of you.

2.8 If you are a staff of a vendor that provides recruiting, consulting or human resources services to us, you or your company may provide us with personal information of other individuals, such as candidates or consultants, for business cooperation purposes. You acknowledge and guarantee that you have obtained such individuals’ separate consent prior to the provision of personal information.

In order to achieve the purposes above, we may entrust third-party service providers to assist us in providing relevant operation and service support. We will send your personal information to third parties such as procurement service providers, vendor management service providers and data storage service providers. . For companies, organizations and individuals who we entrust to process your personal information, we ask them to handle your personal information in accordance with our instructions, this Notice and applicable laws. 

We will not share your personal information with any third party who has an independent purpose and method of processing personal information.

In most circumstances, we rely upon your consent to process your personal information. While under the relevant laws, we do not require your consent to process (including but not limited to, the collection, storage, use, processing, transmission, provision, disclosure, and deletion.) your personal information when:

1. the processing is necessary for the conclusion or performance of a contract to which the individual is a contracting party or for conducting human resource management under the labor rules and regulations developed in accordance with the law and a collective contract signed in accordance with the law;
2. the processing is necessary to fulfill statutory functions or statutory obligations;
3. the processing is necessary to respond to public health emergencies or protect the life, health or property safety of natural persons under emergency circumstances;
4. personal information is processed within a reasonable scope to conduct news reporting, public opinion-based supervision, or other activities in the public interest;
5. the personal information that has been disclosed by the individuals themselves or other personal information that has been legally disclosed is processed within a reasonable scope in accordance with this Law; or
6. under any other circumstance as provided by any law or administrative regulation.

We only retain your personal information within the minimum period which is necessary for the fulfilment of the purposes stated in this Notice. Meanwhile, we will also store your personal information with adherence to the mandatory provisions about the retention period rising from applicable laws and regulations.

We have implemented industry accepted administrative, technical, and physical security measures to protect the personal information you provide and to prevent the data from being accessed, disclosed publicly, used, modified, damaged or lost without authorization. We will take all reasonable and practicable measures to protect your personal information.

However, we cannot and do not guarantee that these measures will provide absolute security. Where a personal information breach occurs unfortunately, we will inform you as required by the laws and regulations via mail, letter, telephone, pushed notification or other available means. Where it is difficult to inform the subjects of the personal information one by one, we may publish an announcement on our Services. Where required by law, we will also report the treatment result of the personal information security incident. 

According to applicable law, you may have: 

1. the right to know and the right to decide on the processing of your personal information; 
2. the right to restrict or refuse the processing of your personal information by others; 
3. the right to consult and duplicate your personal information; 您
4. the right to request personal information processors to correct or supplement your personal information where you discover the information is incorrect or incomplete; 
5. the right to withdraw your consent to the processing of personal information based on your consent (but please note that your withdrawal of consent does not affect the validity of the processing of personal information that has been carried out based on your consent before the withdrawal); 
6. the right to request the transfer of personal information to your designated personal information processors; 
7. the right to delete your personal information under specific circumstances. 

If you hope to exercise your rights above, please contact us via the contact information provided in this Notice. To protect the security of your personal information, we need to verify your identity in order to respond to your rights request(s), and we may not be able to respond to the request(s) for rights related to personal information that are not from you or authorized by you (for example, requests to consult personal information of someone else). 

Additionally, the rights above are subject to limitations and exceptions under applicable law. We will respond to and comply with your request(s) consistent with applicable law as soon as reasonably practicable. If you have unresolved concerns, you also have the right to complain to relevant supervisory authorities or where applicable, file a lawsuit with the court in accordance with applicable law.

Our Services are not directed to children under the age of 14, and we do not knowingly collect personal information from children under the age of 14 without parental/guardian consent. We do not knowingly collect personal information from children for any purpose. If you believe that we have personal information of a child without parental/guardian consent, or if wish to withdraw consent, please contact us via the contact information provided in this Notice and we will delete such information.

The Services may contain links to third-party websites, applications and other services. Please be aware that we are not responsible for the privacy practices of such other sites and services. We encourage you to be aware when you leave our Services and to read the privacy statements of each and every site you visit that collects your information.

Since Air Liquide is a multinational corporation, as part of our international operations, our business entities and departments may transmit information with affiliate companies who conduct the personal information processing activities under our instructions and on our behalf:

Where personal information is transferred to another jurisdiction outside mainland China, your personal information will be secured by appropriate safeguards as set forth under applicable law, including without limitation, where applicable by the use of the standard contract to be published by the supervisory authority for the transfer of Information between mainland China and other jurisdictions. To the extent required under applicable law, we will obtain separate consent from you before the transfer of your personal information.

We reserve the right to update this Notice at any time to reflect changes in the law, our data collection or practices, the features of our services, or advances in technology. We will provide you with a new privacy notice when required by law. We may also notify you in other ways from time to time about the processing of your personal information.

If you have questions about this privacy notice or wish to contact us for any reason in relation to our personal information processing, please contact us at cn-privacy@airliquide.com.