AMap Platform Privacy Policy
Effective Date: January 6th, 2025
Welcome to use our platform and products! We are OMNIPATH PTE. LTD. Our registered address is at 9 RAFFLES PLACE, #26-01, REPUBLIC PLAZA, SINGAPORE 048619. We provide AMap platform (http://mapsplatform.opnavi.com/) (hereinafter referred to as “Platform”) that powers map and location-based services through application program interfaces (APIs) or software development kits (SDKs) (hereinafter referred to as “our Products”).
This Privacy Policy (hereinafter referred to as “this Policy”) describes how we, as a data controller, collect and use your personal data through our Platform. The applicable laws and regulations of certain jurisdictions may impose unique or different requirements on the processing and protection of personal data. We will take appropriate measures to ensure we are in compliance with the applicable local laws and regulations.
Our Platform and Products may contain links to, or be embedded within other companies’ websites and services that have privacy policies of their own. This might include links to this Policy and the relevant Supplements, or providing the transparency information and integrated and embedded notices which identify us as the service provider or controller. Please carefully read and agree to their privacy policies before using their websites and services.
If you do not agree with this Policy, do not use our Platform or provide us with your personal data. If you have any questions, comments or suggestions about this Policy, please contact us by following the instructions in “Section X. How to Contact Us” of this Policy.
This Policy will help you understand the following content:
- Scope of Application
- How We Collect and Use Your Personal Data
- How We Use Cookies
- How We Share and Disclose Your Personal Data
- International Transfer of Your Personal Data
- How We Protect Your Personal Data
- Your Personal Data Rights
- Protection of Minors
- How We Update This Policy
- How to Contact Us
Our Products powers a wide variety of web, mobile, and mobile applications (hereinafter referred to as “Application(s)”) developed and/or operated by our customers (hereinafter referred to as “Developer(s)”).
This Policy applies to personal data processing activities where we act as a data controller. This means it applies to situations where we determine the purposes and means of the processing of personal data. This Policy does not apply to the processing of personal data that we carry out on behalf of a Developer for the purpose of service provisioning. Such activities are governed by the privacy policy of the Developer’s Application, not this Policy.
We expect Developers to process users’ personal data in a manner that complies with applicable laws and regulations. However, we have no control over how Developers and their Applications process users’ personal data, and therefore we cannot be held responsible for the actions of Developers. We advise users to carefully read and fully understand the relevant terms of service and privacy policy of any Application before using it, and to only use the Application after agreeing to its privacy policy.
This Policy does not cover products or services offered by other third parties, except for the data collection and processing activities described herein.
Personal data refers to any data that can directly or indirectly identify a specific natural person (“data subject”).
We may collect and use your personal data for the following purposes. If you do not provide certain personal data to us, we may not be able to provide the relevant Platform services to you.
1. To Create an Account and Log-in
When you access to the Platform and our Products, you may need to create a Developer account and register with us. We may ask for your information such as Developer name, email address and password.
2. To Communicate with You about Our Products
If you are interested in our Products, you may voluntarily submit your contact information, including your name, mobile phone number, email address, company information (company name, region, and department) and issue descriptions. We will contact you based on the information you provide with us to help you learn more about our Products.
By providing the above information, you agree that: (1) we may provide your contact information to a third-party service provider in order to communicate with you about your needs; (2) we may process your contact information and your usage logs of the Platform for the purpose of statistical analysis of our consulting services. We will protect your personal data in accordance with relevant laws and regulations.
3. Other Purposes
Please note that the Platform is constantly updated and developed. If we intend to use your personal data for purposes not specified in this Policy or for new purposes different from those stated at the time of collection, we will update this Policy and notify you about any changes, and obtain your consent for such use or rely on another legal basis for processing under applicable data protection laws.
The following provides an overview of the legal bases we typically rely on, though their application is subject to regional laws and may differ across jurisdictions:
1. Legitimate Interests.
We process personal data where necessary to pursue our (or a third party’s) legitimate interests which are not overridden by your interests or fundamental rights and freedoms, such as in connection with managing, developing, testing, securing our Platform. Any such processing is conducted subject to appropriate measures to protect your fundamental rights and freedoms related to your personal data, and in any event will be subject to the restrictions provided in this Policy.
2. Performance of a contract with you
We process personal data where the processing is necessary for the conclusion and performance of contract between you and us. Our Terms of Services is available at: http://mapsplatform.opnavi.com/policies/terms.
3. Legal Obligations
We process personal data as necessary to comply with applicable laws and regulations.
4. Public Interests
We process personal data where necessary to perform a task carried out in the public interest or in the exercise of official authority vested in us.
5. Obtaining your consent
We process your personal data if you have consented to the processing activity. You may revoke your consent at any time. In case no other legal basis applies in your jurisdiction, we will seek your consent. Subject to applicable laws, we may also seek your consent where we consider appropriate, even if another legal basis for processing could apply.
We retain personal data for no longer than is necessary for which they are collected. The length of time personal data is retained, and criteria for determining that time, are dependent on the nature of the personal data and the purpose for which it was provided. For example, for personal data related to managing your account (such as name, email address, and account content) are maintained for as long as they are retained by you within your account. We will delete or anonymize your personal data after we can no longer retain such data (e.g., the personal data is no longer necessary for the intended purposes) or upon your requests, except if we are permitted or required to keep it by applicable laws, regulations or court orders.
If we decide to no longer provide our Platform, we will stop collecting your personal data right away and notify you either individually or through announcements. We will also delete or anonymize any personal data about you, except if we are permitted or required to keep it by applicable laws, regulations or court orders.
Cookies and similar device identifier technologies (hereinafter collectively referred to as “Cookies”) are commonly used in internet services. When you use the Platform, we send a Cookie to your device to collect, identify, and store information about your use of our Platform. We commit not to use it for any purpose beyond those described in this Policy. Cookies are primarily employed to ensure the security and efficient operation of our Platform and is strictly necessary for us to provide our services to you. It allows us to verify the security status of your use of the Platform, troubleshoot crashes or delays, and help you avoid repeating steps, such as filling out forms or entering search queries.
Under the following circumstances, we may share, entrust the processing of, transfer, or otherwise disclose your personal data to the necessary extent.
- Entrusted Processing by Third Parties
We may entrust service providers to represent or assist us in providing services to you to support the development, operation, and improvement of our Platform. The services they provide will include technical services, communication services, cloud services and operations and maintenance services. The service providers will only act as data processors and will be entrusted to process the personal data required for provision of their services.
- Mandatory Disclosures
We may be obligated by mandatory law to disclose your personal data to certain authorities or law enforcement agencies in the countries where we operate. We may also disclose and otherwise process your personal data in accordance with applicable law to defend our legitimate interests, for example, in legal proceedings or in connection with governmental requests and filings.
- Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure the receiving party commits to protecting your data in accordance with this Policy.
We will not publicly disclose your personal data, unless we have obtained your consent or satisfied another legal basis under applicable laws and regulations, or when you voluntarily choose to do so.
Our Platform is available globally, and we use service providers in multiple countries and regions. Your personal data may be transferred from the country/region where you are located (“Home Country”) to other countries/regions (“Alternate Countries”). The data protection laws in the Alternate Countries may differ from those in your Home Country. When we transfer your personal data from your Home Country to the Alternate Countries, where the transfer may not be subject to an adequacy decision or regulations, we will take measures to comply with the legal requirements for cross-border transfer of personal data in your Home Country, and strive to achieve a materially equivalent standard of data protection comparable to that of your Home Country. Such measures include but are not limited to entering into Standard Contractual Clauses (if applicable in your jurisdiction) or other similar agreements with data protection clauses, and implementing organizational and technical measures to safeguard the security and privacy of your personal data. If you have any questions, you may contact us by following the instructions in “Section X. How to Contact Us” of this Policy.
We have established a data security management system centered on the data lifecycle, enhancing personal data security through organizational structures, system design, personnel management, and technical solutions. We conduct regular training and assessments to strengthen employees’ awareness of the importance of personal data protection.
We implement industry-standard, reasonable, and feasible security measures to protect your personal data and prevent unauthorized access, disclosure, usage, modification, damage, or loss. Examples include using encryption technology to enhance the security of personal data. Data exchanges between your browser and our servers are protected using SSL protocols, providing HTTPS secure browsing, employing trusted mechanisms to protect personal data from malicious attacks, and deploying access control mechanisms to ensure only authorized personnel can access personal data.
We make every effort to ensure the security of any information you transmit to us. However, please understand that due to technological limitations and various malicious methods that may exist in the internet environment, you should be aware that the systems and communication networks you use to access our services may encounter issues due to factors beyond our control.
Under applicable data protection laws, you may enjoy all, or part of, the following rights to your personal data. The availability of these rights may vary depending on your jurisdiction and the legal basis for processing. You may request for exercising your rights by contacting us as indicated in “Section X. How to Contact Us” of this Policy.
- Know / Be Informed
You have the right to receive clear information about how we process your personal data, which we provide through this Policy.
- Access Your Personal Data
You have the right to access your personal data, except as otherwise provided by applicable laws or regulations.
- Correct or Supplement Your Personal Data
You can request correction of inaccurate personal data and completion of incomplete information.
- Delete Your Personal Data
You are entitled to request that we erase your personal data, and we shall delete your personal data in accordance with circumstances specified under applicable laws and regulations. Please note that certain exceptions may be applicable where we may decline to comply with, or are legally obligated not to fulfill, your request, such as when necessary for establishing, exercising, or defending legal claims.
- Restrict Processing
You have the right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note, however, that if we stop processing the personal data, we may use it again if there are valid grounds under data protection laws for us to do so (for example, for the defense of legal claims or for another’s protection).
- Data Portability
You can receive a copy of your personal data and transmit it in a structured, machine-readable format in accordance with applicable laws or regulations. To ensure the security of your personal data, we may need to verify your identity before processing your data portability request. Please note that direct transmission to another party can only be provided where it is technically feasible and does not adversely affect the rights and freedoms of others. While we strive to provide data portability services at no charge, in cases where fulfilling your request would require disproportionate effort or involve extraordinary costs due to the complexity or volume of data involved, we may need to charge a reasonable administrative fee, which we will discuss with you beforehand so you can decide how you would like to proceed.
- Object
You are entitled to object to our processing of your personal data when such processing is grounded on our legitimate interests or public interests.
- Withdraw Your Consent
You are entitled to withdraw your consent at any point in time when our processing of personal data relies on your consent as the lawful basis. Following your withdrawal of consent, we may be unable to continue providing you with the relevant functions and services. Nevertheless, your decision to withdraw consent shall not impact our prior processing of personal data that was conducted based on your previously given consent.
- Lodge a Complaint
We encourage you to contact us directly with any questions or complaints via the methods listed in “Section X. How to Contact Us” of this policy. You also have the right to lodge a complaint with the appropriate supervisory authority in your jurisdiction, to the extent provided under applicable laws and regulations.
Our Platform is not directed toward individuals under 16 years of age (or the applicable age of majority in your jurisdiction), and we do not intentionally collect or solicit personal data from such users without the consent of their parents or guardians.
If you are a legal guardian of a minor, please carefully review this Policy before allowing the minor to access our Platform. Should you have questions about the minor’s use of our Platform, or about the information they provide to us, please contact us immediately using the details provided in “Section X. How to Contact Us” of this Policy. If we discover such a situation ourselves or are notified that we have collected personal data from a minor without proper parental or guardian consent, we will promptly delete such data unless we are permitted or required by applicable laws and regulations to retain it.
We reserve the right to update or modify this Policy periodically. We will not diminish your rights under this Policy without your explicit consent.
We will notify you of any changes to this Policy on the Platform and notify you through appropriate means, including pop-up notifications, emails, and text messages, to ensure you are promptly informed of the modifications.
For material changes involving the purposes, methods, or categories of personal data processing, we will seek your renewed consent as required by applicable data protection laws.
If you have any questions, opinions, or suggestions regarding this Policy, or if you have concerns about the collection, use, sharing, access, deletion, or correction of your personal data while using our Platform, or if you wish to reach out to our Data Protection Officer for issues specifically related to personal data protection, you may send an email to mapsplatform@opnavi.com. We aim to respond to privacy inquiries within 30 days or as required by applicable laws.