1. Transfer Overview
This notice is provided in accordance with Chapter V of the General Data Protection Regulation (GDPR) and is addressed to users in the EU/EEA. Fintegrity (傅通自业) is operated by Shanghai Fintegrity Information Technology Co., Ltd., a data controller registered in the People's Republic of China.
2. Destination
Your personal data is currently stored on Alibaba Cloud servers located within the People's Republic of China (East China region, Hangzhou). The PRC has not received an adequacy decision from the European Commission under GDPR Art. 45. Transfers to China therefore rely on the appropriate safeguards provided under GDPR Art. 46–49.
3. Legal Basis
We rely on Standard Contractual Clauses (SCCs) as provided under GDPR Art. 46(2)(c) as the primary legal basis for cross-border transfers. Where the specific transfer situation falls under the derogations in GDPR Art. 49 (for example, your explicit consent or necessity for the performance of a contract), we will notify you separately and obtain your consent for that specific context.
4. Safeguards
To protect personal data in cross-border transfers, we implement the following technical and organisational measures: TLS 1.2+ encryption in transit; encryption at rest at the database layer; strict least-privilege access controls; regular Data Protection Impact Assessments (DPIAs); and Data Processing Agreements (DPAs) with all sub-processors requiring equivalent data protection standards.
5. Withdrawal & Contact
You have the right to withdraw your consent to cross-border data transfers at any time; withdrawal does not affect transfers already completed. To withdraw consent or learn more about our cross-border transfer practices, please contact our Data Protection Officer at contact@fintegrity.cn. We will respond within one month.