This policy explains which personal data we collect when you use this website or contact us, why we process it, how long we keep it, who we share it with and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR) and, where applicable, the Personal Information Protection Law of the People’s Republic of China (PIPL).
Scope of this policy
This policy covers the website served under this domain and all of its language versions, the inquiry and sample-request form, datasheet requests and our e-mail correspondence with you. It does not cover third-party websites that you reach through links from here — their operators are responsible for their own data processing.
Who is responsible for your data
The controller within the meaning of Art. 4(7) GDPR — the entity that decides why and how your data is processed — is:
- Controller
- Zhejiang Yute Intelligent Technology Co., Ltd.
- Registered office
- No. 1 Jianshe East Road, Yanguan Town, Haining, Zhejiang, China
- info@yutemag.com
- Telephone
- +86 197 0387 8629
What data we collect
We keep collection to what is needed to answer your request and to run the site securely. In practice this means:
- Inquiry and sample requests: the name, company, business e-mail address, country, application field, specification notes and message that you enter in the form.
- Correspondence: the content of e-mails, quotations, drawings and technical documents exchanged with our sales and application engineers.
- Server and security records: the IP address and browser User-Agent transmitted with your request, the page requested, the time and the HTTP status code. IP address and User-Agent are stored together with an inquiry so that we can trace misuse and evidence where a request came from.
- Language preference: a cookie that remembers which language version of the site you selected.
We do not collect identity documents, payment card data, biometric data or precise location data. We do not build advertising profiles and we do not track your behaviour on other websites.
Purposes and legal bases
We process your data only for the purposes below, each backed by a legal basis under Art. 6(1) GDPR:
- Answering your inquiry, preparing quotations, sending samples and handling the resulting business relationship — performance of a contract or steps taken at your request prior to entering into a contract, Art. 6(1)(b).
- Remembering your language choice, keeping the website available and protecting it against misuse — our legitimate interest in operating a secure, usable website, Art. 6(1)(f).
- Meeting tax, accounting, export-control and product-traceability obligations — compliance with a legal obligation, Art. 6(1)(c).
- Sending product news, technical notes or event invitations after you have asked for them — your consent, Art. 6(1)(a), which you may withdraw at any time.
We do not use your data for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Cookies and local storage
This website sets no advertising, marketing or analytics cookies and embeds no third-party tracking scripts. That is why you are not shown a consent banner. The only items stored in your browser are strictly functional:
- yute_lang — remembers the language version you selected. Lifetime approximately 12 months. It is set when you use the language switcher or arrive through a language-specific link.
- yute_admin — the login session for our internal content management panel. It is HttpOnly, expires after 12 hours and is never issued to ordinary visitors.
You can delete or block these cookies in your browser settings at any time. If the language cookie is blocked or deleted, the site falls back to the language of your browser and then to the country that your IP address resolves to.
Choosing a language from your IP address
When you have not chosen a language yourself and our content delivery network does not tell us your country, the server asks the third-party IP geolocation service ipapi.co to resolve your IP address to a country code, solely in order to pick a starting language. Only the IP address is transmitted; no other data is sent, and the result is cached in server memory for at most 12 hours and is not written to a log file or database. As soon as you choose a language yourself, that lookup is skipped on your later visits.
If you would rather your IP address was never sent to this service, set a language preference in your browser or select a language on the site — the server will then use that instead of the lookup.
Sharing and service providers
We do not sell, rent or trade personal data. We share it only with service providers who process it on our behalf and on our instructions, or where the law requires it:
- Hosting and content delivery providers that serve this website, keep it available and generate access logs.
- The provider of our business e-mail system, through which your inquiry reaches our sales team.
- ipapi.co, used only to resolve your IP address to a country code as described above.
- Auditors, customs brokers, forwarders or public authorities where we are legally obliged to disclose information or where disclosure is necessary to execute your order.
Where a provider processes personal data on our behalf, we conclude a data processing agreement as required by Art. 28 GDPR.
Transfers outside your country
We are established in China and our own systems run in data centres that may be located outside your country, including outside the European Economic Area. Where personal data is transferred abroad, we rely on appropriate safeguards under Art. 46 GDPR — in particular the standard contractual clauses of the European Commission — together with technical measures such as encryption in transit. You may request a copy of the safeguards in place through the contact details in this policy.
Where data has to be transferred in order to answer your request, we transfer only the data needed for that purpose.
How long we keep data
We keep personal data only as long as a permitted purpose requires it:
- Inquiries and business correspondence: for as long as it takes to deal with your request and maintain the business relationship, and afterwards for the period required by statutory retention duties, in particular tax and export-control rules. Data that is no longer needed is deleted or anonymised.
- Access logs at our hosting and content delivery providers: generated and retained according to their policies, typically for a few days up to a few months. The application itself does not write separate access logs.
- Language cookie: approximately 12 months, or until you delete it in your browser.
Records linked to a completed order are kept for the statutory period, because we must be able to prove the traceability of a delivered product.
Your rights
Where the GDPR applies to you, you have the following rights and can exercise them free of charge:
- Access — obtain confirmation of whether we process data about you and receive a copy of it.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete data that we no longer need or that we process unlawfully.
- Restriction — limit how we use your data while a question about its accuracy or about our use of it is being resolved.
- Data portability — receive the data you provided in a structured, commonly used and machine-readable format, or have it transmitted to another controller.
- Objection — object to processing based on our legitimate interests, and in particular object to direct marketing at any time.
- Withdraw consent — withdraw any consent you have given with effect for the future.
- Complaint — lodge a complaint with a supervisory authority, for example the data protection authority of your place of residence, place of work or the place of the alleged infringement.
To exercise a right, write to the contact address given in the contact section of this policy. We may ask for evidence of identity so that we do not disclose data to the wrong person, and we answer within one month.
How we protect your data
The site is delivered over HTTPS, so the data you submit is encrypted in transit. The content management panel can only be reached with a password and a time-limited session and is restricted to authorised staff. Inquiry records are stored on a server with filesystem access control, are not published on the website, and are visible only to the sales staff who handle them. We review these measures as the site evolves.
Minors
This website addresses industrial and business customers. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe that a child has sent us data, contact us and we will delete it.
Changes to this policy
We may update this policy when the law, our service providers or our processes change. The version published on this page at the time of your visit applies; the date at the top of the page shows the last revision. If a change materially affects how we use your data, we will point it out here.
Contact for data protection requests
Send privacy questions and requests to info@yutemag.com with the subject line “Privacy request”. Please tell us which right you wish to exercise and, if your request concerns an inquiry you sent us, the e-mail address you originally used. We answer within one month of receiving your request.