VIVOTEK Privacy Policy

Protecting your privacy is a crucial part of gaining and keeping your trust in VIVOTEK.

We have a comprehensive Privacy Policy which serves as our commitment to you to protect the security and privacy of your personal data. Our Privacy Policy covers the following areas of concern:

• The types of data we collect from you
• When we collect your data
• How we use and process your data
• Our legal basis for processing your data
• When and to whom we share your data
• For how long we retain your data
• Your rights over your personal data
• When and to whom we transfer your data across country borders
• The security measures we take to protect your data
• Who to contact if you wish to discuss your data

This document serves to elucidate the Data Privacy and Protection Policy of the Vast Security Station (VSS) Software, VAST Face Solution, VORTEX and the VIVOCloud service ensuring that users comprehend how we collect, utilize, and safeguard personal data. This policy applies to all users of the products and services mentioned above.

Definition of Personal Data

Personal data is defined as any information that can be utilized to identify, contact, or locate an individual, including but not limited to, names, addresses, telephone numbers, email addresses, images, photographs, and other identifying characteristics.

Purposes of Data Collection

The primary objectives of collecting personal data are to facilitate the functionalities of the Vast Security Station (VSS) Software, VAST Face Solution, VORTEX and the VIVOCloud service, including but not limited to:

• Enhancement of facial recognition and object detection
• Optimization of intelligent search speed

Types of Data Collected

We may collect the following categories of data:

• Facial images and feature descriptions
• Full-body snapshots
• Gender, age, and physical characteristics

Data Storage and Protection

We solemnly commit to securing the integrity and confidentiality of your personal data. Our database (DB) undergoes special encryption processes, and access to relevant data is exclusively granted to personnel with administrative privileges. Adequate security measures are implemented to prevent unauthorized access, alteration, disclosure, or destruction of data. Our data storage and processing practices comply with applicable laws and regulations.

Data Deletion

Personal identification data will be deleted based on the cyclic playback settings of recorded files. This ensures that data retention is managed according to specific needs and compliance requirements, preventing the long-term retention of unnecessary personal data.

Regulatory Compliance

Users or administrators with surveillance system management privileges are responsible for ensuring that their usage aligns with local and international privacy and data protection regulations while applying VSS. We strongly advise users to seek legal counsel before utilizing our software to ensure that their operations are legal and in accordance with relevant regulations.

This policy provides a foundational understanding of the personal data and delineates our data collection, utilization, and safeguarding measures. We continuously update and refine our policies to ensure data privacy and security. If you have any questions or concerns about this policy, please contact us at privacy@vivotek.com.

Appendix – Partner Relationship Management Data Use Notice

This section supplements and forms an integral part of VIVOTEK’s global Privacy Policy and applies to partners and users of partner-facing platforms and tools operated or designated by VIVOTEK.

Purpose of Processing

To establish, manage, and support partner relationships, including but not limited to partner onboarding, account administration, training and certification, program participation, collaboration, and other related operational activities, VIVOTEK may process and use personal data provided by partners through partner-facing platforms and tools.

Scope of Platforms and Tools

Partner-facing platforms and tools may include, without limitation, partner relationship management (PRM), customer relationship management (CRM), learning, enablement, or certification systems, and other systems reasonably related to partner relationship management, whether operated internally by VIVOTEK or provided through third-party service providers designated by VIVOTEK.

Purpose Limitation and Safeguards

The processing and use of personal data described in this section shall be limited to purposes compatible with the original purpose of collection and shall be conducted in accordance with applicable data protection laws and regulations, as well as VIVOTEK’s internal data protection, information security, and access control policies.

Transparency and Acceptance by Use

By registering for, accessing, or continuing to use any partner-facing platform or tool after having been provided with this Notice, partners and users acknowledge that they have read, understood, and accepted the data use arrangements described herein.

Relationship to This Privacy Policy

This section supplements and shall be read together with other provisions of this Privacy Policy. In the event of any inconsistency, this section shall prevail with respect to matters relating to partner relationship management platforms and tools.