zTab Privacy Policy (International Users)
Effective Date: [2025年3月2日22:13:14]
Data Controller: Weixian Chandong Network Studio
Service Domain: https://tab.zmt.wiki
EU Representative: [z@yoxiha.com]
Data Protection Officer: 1044949834@qq.com
1. Data Collection Scope
1.1 Mandatory Data
diff
+ Email Address: Used for account verification and service notifications
+ First Login IP: Recorded for security audit purposes (retained for 180 days)1
2
2
1.2 Prohibited Collection
- No third-party authentication data
- No browser history tracking
- No advertising identifiers
2. Legal Basis for Processing (GDPR Art.6)
| Purpose | Legal Basis |
|---|---|
| Account Creation | Contractual Necessity (Art.6(1)(b)) |
| Security Auditing | Legitimate Interests (Art.6(1)(f)) |
| Service Updates | Explicit Consent (Opt-in required) |
3. Cross-Border Data Transfer
3.1 Data Storage Location
- Primary: Beijing, China (AsiaCloud Data Center)
- Backup: Frankfurt, Germany (AWS eu-central-1)
3.2 Transfer Safeguards
- EU Standard Contractual Clauses (SCCs)
- Regular penetration testing reports available upon request
4. Your Rights
4.1 Entitlements Overview
| Right | How to Exercise | Processing Time | Limitations |
|---|---|---|---|
| Right of Access | Email request to z@yoxiha.com | 15 working days | Structured data provided in PDF format only |
| Right to Erasure | Submit viaContact Form | 30 calendar days | Retention of legally required security logs (6 months) |
| Right to Rectification | Self-service through Account Settings | Immediate effect | Email changes require re-verification |
5. Children's Privacy
5.1 Age Restrictions
- Under 13: Strictly prohibited (COPPA Compliance)
- 13-15: Require guardian consent via certified email
6. Security Measures
6.1 Technical Protections
- Email Obfuscation: bcrypt hashing with salt value
- IP Anonymization: Last octet removal after 90 days
- Encryption: AES-256 for data at rest, TLS 1.3 for transit
6.2 Breach Notification
- Will notify affected users within 72 hours via registered email
- Simultaneously report to relevant EU supervisory authority
7. Policy Management
7.1 Version Control
- Historical versions archive: privacy
- Change notification: Mandatory re-acceptance upon major updates