This privacy policy is applicable to the mobile ticketing client (including iOS, Android and any other current or future mobile clients) of Laos-China Railway Mobile APP Ticketing Network and other functions and services provided by Laos-China Railway Co., Ltd. ("we").
Dear users,
We fully aware of the importance of personal privacy and will do our best to protect your personal information. We are committed to maintaining your trust in us and will protect your personal information under the following principles: the principle of consistency of powers and responsibilities, defined purpose, selection-based consent, minimum necessity, security assurance, subject participation, openness and transparency. We will also take corresponding security measures that conform to the mature security standards in the industry to protect your personal information. Your personal information that we collect when you use our services will be used only for the purposes set out in this Privacy Policy.
The Privacy Policy will help you understand:
1. How we collect and use your personal information
2. How we share, transfer and disclose publicly your personal information
3. How we store your personal information
4. Use of cookies
5. Prompts on sensitive personal information
6. Personal information security
7. Disposal of information security incidents
8. Information protection for minors
9. Your rights to personal information
10. Changes to this Privacy Policy
11. How to contact us
1. How we collect and use your personal information
You understand and agree:
To offer you better products and services, we are making continuous efforts to improve our solutions. Accordingly, we may offer new or optimized functions from time to time and need to collect new personal information or change the purpose or method of using personal information. In such cases, we will give you a further explanation of collection purpose, extent, and ways of using such information by updates to this Privacy Policy, pop-up windows or page prompts, etc. and collect and use your personal information after obtaining your express consent.
"Personal information" refers to all kinds of information recorded by electronic or other means that can identify the identity of a specific natural person or reflect the activities of a specific natural person individually or in combination with other information.
"Personal sensitive information" refers to personal information that, once divulged, illegally provided or abused, may endanger personal and property security and be likely to cause damage or discriminatory treatment of personal reputation, and physical and mental health.
(I) The basic functions of collecting and using your personal information
Our services include some basic functions, including functions necessary for online ticket purchasing, improving our services and ensuring transaction security. We need to collect, store and use the following personal information about you in order to realize such basic functions. Without your information, our services may be inaccessible to you. Be aware that, if necessary, we may send your identity information to appropriate issuing authorities for verification, so as to ensure the authenticity of certificates and the security of accounts and personal information. The basic functions and the types of personal information required are as follows:
(1) Register as our user and log in
•To register as our user, you need to create a user name and password so that we can provide services such as ticketing for you, and provide your name, gender, country/region, ID document type, ID document number, ID document validity period, date of birth, as well as the unique mobile phone number corresponding to your identity information and capable of communication, SMS verification code, e-mail address, and passenger type.
• If you only need information services such as browsing the Website and querying remaining tickets or stations, you do not need to register as our user or provide the information listed above.
(2) Provide you with ticket purchasing service
• If you choose the ticket booking service, you need to provide the passenger's name, ID document type, ID document number, passenger type, mobile phone number, and e-mail address. If you book the tickets for other people, you need to provide the aforementioned personal information of the actual orderer. Once the order is placed, the actual orderer is deemed to have accepted this Privacy Policy too. Therefore,before ordering products or services for other people, make sure you have obtained his/her authorization and consent.
(3)Protect your transaction security
In order to enhance the security of services that are provided by us and our partners, ensure the security of the operating environment, identify the abnormal status of registered accounts, better protect personal and property security from infringement, prevent security risks such as phishing websites, fraud, network vulnerabilities, computer viruses, network attacks, network intrusions, and more accurately identify violations of laws and regulations of the Lao People’s Democratic Republic or related protocol rules, we may use or integrate your user information, transaction information, device information, location information, log information and information for which our partners obtain your authorization or which they share according to law to comprehensively judge your account and transaction risks, conduct identity authentication, detect and prevent security incidents, and take necessary record, audit, analysis and disposal measures according to law.
(II) The extended functions of collecting and using your personal information
To facilitate your access to the services or enrich such services, we provide the following extended functions, which may collect and use your personal information. If you do not provide this personal information, you can still use the basic functions listed in item (I). These extended functions and the types of personal information required are as follows:
(1)Facilitate your use of the products or services
(a)Device Information: According to the specific permissions granted by you during the installation and use of software, we will receive and record the information related to the device you use, which can be used to identify your equipment (e.g., device model, operating system version, settings, unique device identifier (IMEI/IMSI/AndroidId/OAID&IDFA/ICCID), MAC address, IP address, running process, and application installation list) to ensure your security. You should understand that when you choose to run an application in the background of the device, the collection of information on your use of the application may not be stopped immediately due to network anomalies or system problems, resulting in temporary background information collection. You may click the List of Device Properties and Location Information to view details, and also may click here to view the device information and third-party SDKs.
(b)Location Information: When you enable the device positioning function and use our location-based services, location permission is granted based on the information on your current location.
(c)Log Information: When you use our products or services available on the Website or mobile clients, we will automatically collect information on your use of our services and save such information as network logs, so as to provide you with more convenient services. This kind of information is used for operational analysis and reporting of performance security vulnerabilities, such as your search.
Please note that the device information, log information, location information is not sufficient to identify a specific natural person. If we use such non-personal information in combination with other information to identify a specific natural person or use it in combination with personal information, such non-personal information will be regarded as personal information during the use. Unless otherwise authorized by you or otherwise specified by laws and regulations, we will handle and protect such personal information in accordance with this Privacy Policy.
(2)Provide you with specific products or services you buy or use
If you order products or services for other people, you may need to provide the personal information of the actual orderer. Once the order is placed, the actual orderer is deemed to have accepted this Privacy Policy too. Therefore,before ordering products or services for other people, make sure you have obtained his/her authorization and consent.
• In order to display the order information of your account, we will collect the order information generated when you use our services so as to display such information for you and enable you to manage the order conveniently.
• When you contact us,we may store your communication/call record and content or the contact information you give, so as to contact you or help you solve problems, or record the solutions and results of related problems.
• To facilitate your travel, we may send you a short message about your trip, mainly including e-ticket information and destination services.
• You can use the products or services provided by us and our business partners through the link portal provided by the Laos-China Railway Mobile App Ticketing Network. When you use the above services through our products or services, you authorize us to receive, summarize and analyze your personal information or transaction information from our affiliated companies according to the actual business and cooperation needs. Before you use the services provided by a third party, please ensure that you have fully understood the rules for the collection and use of personal information of the third party. If you encounter problems, please consult the customer service of the company.
• The above extended functions may require you to allow us access to your device:
(a) Camera access: If you need to use the function of scanning ticket QR code or face verification, please allow access to your camera.
(b) Album/photo gallery access: If you need to use the function of storing and sharing train information, please allow access to your album.
(c) Push access: If you need to receive the app notification message and SMS sent to you by the Laos-China Railway Mobile App Ticketing Network, please enable the push permission. You can choose to receive notification messages through WeChat or Alipay. You need to provide and authorize us to use the corresponding third-party account information so that we can provide push notification services according to your choice.
(d) Calendar: The application on the travel service page provides you with the function to add your trips to the system schedule for timely notification of your recent schedule. This function does not require access to your calendar.
Please note that by granting access to these functions, you authorize us to collect and use this personal information to realize the above functions. When you stop the grant of access, you cancel the authorization, and we will not continue to collect and use your personal information, nor will we be able to provide you with the above functions corresponding to these authorizations. Your decision to stop the access will not affect the previous processing of personal information based on your authorization.
(3) Other purposes
We may conduct de-identified research, statistical analysis and prediction of the collected information to improve content and layout, support business decisions with products or services, and improve our products and services, such as using anonymous data for machine learning or model algorithm training. To achieve specific advertising service functions, we will collect rough location information, device information, AD display and hits from mobile clients for advertising, monitoring attribution and data statistics.
(III) Exceptions to obtaining authorization and consent
According to relevant laws, regulations and national standards of the Lao People's Democratic Republic, we may collect your information without your authorization or consent in any of the following cases:
1) Information related to our performance of obligations under laws and regulations;
2) Information directly related to national security and national defense security of the Lao People's Democratic Republic;
3) Information directly related to public security, public health, and major public interests;
4) Information directly related to criminal investigation, prosecution, trial and execution of the judgment, etc.;
5) Information collected for the purpose of safeguarding the life, property and other major legal rights and interests of you or other individuals but it is difficult to obtain your consent;
6) The personal information collected has been disclosed to the public by yourself;
7) Information necessary for signing and performing the contract at your request;
8) Your personal information collected from lawfully and publicly disclosed information via lawful channels such as news reports and government information release;
9) Information necessary for maintaining the safe and stable operation of the products or services provided, such as finding and handling the faults of the products or services.
10) Information necessary for academic research institutions to conduct statistical or academic researches for public interests, where the personal information contained in the academic research result is de-identified when the research or description result is provided to others.
2、How we share, transfer and disclose publicly your personal information
(1) Sharing
According to your choice and authorization or in accordance with the circumstances in the "exceptions for prior authorization and consent when sharing, transferring and publicly disclosing personal information", we may share your order information, account information, contact information and location information with a third party to ensure the smooth completion of the services provided for you. However, we will only share your personal information for legitimate, legitimate, necessary, specific and explicit purposes, and only share the personal information necessary for providing services. Our partners have no right to use the shared personal information for any other purpose.
Our partners include suppliers and third-party merchants or agencies of goods or technical services for various functions in this Privacy Policy, including but not limited technical infrastructure service, logistics, and distribution service, payment service, hotel reservation, car hire service, travel insurance, bus ticketing service and other services. We share this information for the purpose of performing the functions of the products and/or services you choose to use, and we may share your information with third parties to the extent permitted by law, regulation and policy and to the extent authorized by you to those third parties. We will process your personal information in accordance with the agreements with third parties, the verified legitimacy of the authorized sources of personal information, as well as laws, regulations and regulatory policies.
In certain cases, we will also be entrusted to handle your personal information, and the circumstances under which we serve as trustee usually include:
• Partners that entrust us with promotion. Sometimes we provide promotion service for other companies targeting users of our products and/or services. After obtaining your consent, we provide such partners only with information related to the promotion instead of your personal identity information, or we summarize such information so that you cannot be identified. For example, we tell the entrusting partners how many people have seen their promotion information or bought their products after seeing the information, or provide them with statistical information from which personal identity cannot be recognized to help them understand their target customers.
We will sign strict confidentiality agreements with the companies and organizations with who we share personal information and require them to treat personal information in accordance with this Privacy Policy and other relevant confidentiality and security measures of us. Our partners have no right to use the shared personal information for any other purpose. If it is necessary to change the purpose of processing personal information, we will ask for your further authorization and consent. If we intend to share personal information of minors with a third party, we will conduct a security assessment and protect such information by such means as encryption, anonymization, and de-identification.
(2) Assignment
We will not assign your personal information to any company, organization or individual, except in the case of "Exceptions to obtaining prior authorization and consent when sharing, assigning or publicly disclosing personal information".
In case of acquisition, merger, reorganization, bankruptcy or similar transactions or situations, if the assignment of personal information is involved, we will inform you about the situation and require the new company or organization that holds your personal information to continue to abide by this Privacy Policy. If the purpose of using personal information is changed, we will ask the company or organization to seek your authorization and consent again. In case no receiver is found in bankruptcy, we will delete your personal information in accordance with the law.
(3) Public disclosure>
We may publicly disclose your personal information only under the following circumstances:
• We may publicly disclose your personal information designated by you if you explicitly agree or choose to do so of your own free will;
• We may publicly disclose your personal information as required according to laws and regulations of the Lao People's Democratic Republic, and mandatory administrative law enforcement or judicial requirements. On the premise of complying with laws and regulations, when we receive the request for information disclosure mentioned above, we will require that corresponding legal documents such as a subpoena or investigation letter must be issued.
(4)Exceptions to obtaining prior authorization and consent when sharing, assigning or publicly disclosing personal information>
According to relevant laws, regulations and national standards of the Lao People's Democratic Republic, we may share, assign and publicly disclose your information without your prior authorization or consent in any of the following cases:
1) Information directly related to our performance of obligations under laws and regulations;
2) Information directly related to national security and national defense security;
3) Information directly related to public security, public health, and major public interests;
4) Information directly related to criminal investigation, prosecution, trial and execution of the judgment, etc.;
5) Information collected for the purpose of safeguarding the life, property and other major legal rights and interests of you or other individuals but it is difficult to obtain your authorization and consent;
6) The personal information collected has been disclosed to the public by yourself;
7) Information necessary for signing and performing the contract at your request;
8) Personal information collected from lawfully and publicly disclosed information via lawful channels such as news reports and government information release.
9) Information necessary for maintaining the safe and stable operation of the products or services we provided, such as finding and handling the faults of the products or services.
Sharing and transferring de-identified personal information, which is ensured to be unable for data receiver to restore or re-identify the main body, do not count as external sharing, transferring and public disclosure of personal information, and the storage and processing of such data do not require separate notification to you or obtaining your consent.
3、How we store your personal information
Even if you access the Website from a region or country outside Laos, be aware that your information will be stored and processed in Laos (Lao-China Railway Co., Ltd.).
Generally speaking, we will keep your personal information for the shortest time necessary to achieve the above purpose. After the expiration date, we will delete or anonymize your personal information. If we stop offering products or services, we will promptly stop collecting your personal information, notify you individually or by means of public announcement, and delete or anonymize the personal information that we hold after the service or operation is terminated.
4、Use of cookies
Cookies are text files placed by the webserver on your access device, helping call information, and simplifying the process of recording your personal information during your subsequent access. You have the right to accept or reject Cookies. If the browser automatically receives Cookies, you may modify the browser settings to reject cookies according to your needs. Please note that if you choose to reject cookies, you may be unable to fully experience the services provided.
5、Prompts on sensitive personal information
The China Laos Railway Internet Ticket Network reminds you that the content and information you upload or publish in the products and services provided by the China Laos Railway Mobile APP Ticket Network may involve your personal sensitive information. Including but not limited to ID number, personal biometric information (face information, fingerprint information), travel information, and personal information of children under 14 years of age. Therefore, you need to consider carefully before using the products or services we provide for you. You agree that these personal sensitive information will be processed in accordance with the purpose and method stated in this privacy policy.
6、Personal information security
(1) The Laos-China Railway Mobile App Ticketing Network attaches great importance to information security and has set up a special responsible team. We have made great efforts to provide you with information protection, adopted appropriate management, technical and physical security measures, and established an information security assurance system that is suitable for business development with reference to domestic and foreign information security standards and best practices.
(2) From the perspective of the life cycle of data, we have developed security protection measures in all aspects of data collection, storage, display, processing, use, and destruction. According to the level of information sensitivity, we have adopted different control measures, including but not limited to access control, SSL (Secure Socket Layer) encrypted transfer and storage, desensitized display of sensitive information. We have taken reasonable and feasible security protection measures that conform to industry standards to protect the personal information you provide, used encryption technology to improve the security of personal information and use a reliable protection mechanism to protect personal information from malicious attacks, preventing personal information from unauthorized access, public disclosure, use, modification, damage, or loss.
(3) We have deployed access control mechanisms to ensure personal information only accessible to authorized personnel. We strictly manage our employees who may come into contact with your information, and can monitor their operation. We have established an approval mechanism for important operations such as data access, internal and external transfer and use, desensitization, and decryption, and signed confidentiality agreements with the employees above. At the same time, we provide regular information security training for our employees and require them to build good operation habits in their daily work and enhance their awareness of data protection.
(4) Notwithstanding the aforementioned security measures, please understand that there are no "perfect security measures" on the network. We will provide appropriate security measures to protect your information and provide reasonable security based on current technologies. We will try our best to prevent your information from being disclosed, damaged, or lost.
(5) All your accounts are under security protection.Please properly keep your account and password information and do not share your password with other people or third-party websites. If you find your personal information, especially your account or password, is leaked, please contact our customer service department immediately so that we can take appropriate measures.
(6) Please store or back up your text, pictures, and other information on time. You need to understand and accept that the system and communication network that you use to access our services may go wrong sometimes due to factors out of our control.
7、Disposal of information security incidents
We will initiate the emergency response plan immediately to curb the escalation of the conditions if a personal information security incident unfortunately occurs, and inform you about the general conditions of the incident and possible impact, the measures that we have taken or will take, the suggestions regarding risk prevention and reduction for your own choice, and remedial measures for you, etc. We will inform you of the relevant conditions of the incident by mail, telephone, pushing notification, etc. When it is difficult to inform the subjects of personal information individually, we will issue an announcement in a reasonable and effective manner.
8、 Information protection for minors
According to relevant laws and regulations of the Lao People's Democratic Republic, minors refer to people under the age of 18.
The Laos-China Railway Mobile App Ticketing Network is mainly for adults. Without the consent of parents or guardians, minors, especially children under the age of 14, should not create their own personal information subject accounts. If you are the guardian of minors, we remind you to properly perform your guardianship duties and protect the personal information security of minors. If the minors under your supervision use our services, you should give correct guidance and supervision. If you are a minor, please read this privacy policy carefully with the help of your parents or guardians before using the services of the Laos-China Railway Mobile App Ticketing Network, and use our services or provide information to us with the consent of their parents or guardians.
We will only use, share, transfer or disclose the personal information of minors collected with the consent of parents or guardians for using our products or services if the laws and regulations permit, parents or guardians explicitly agree, or it is necessary for protecting the minors. If we find that we have collected personal information of minors without their parents' or guardians' prior consent, we will manage to delete relevant data as soon as possible.
If you have any comments, suggestions, complaints or reports on minors' information, please feel free to contact us through the contact information listed herein. Please don’t hesitate to contact us if you have any questions.
9、Your rights to personal information
We attach great importance to your personal information and make all efforts to protect your rights to your personal information, except as otherwise provided by laws and regulations. In order to ensure security, we may ask you to provide a written request or prove your identity in other ways. Usually, we will accept your request within 15 working days after receiving your reply and authenticating your identity. In principle, we do not charge for your reasonable requests, but for repeated requests beyond reasonable limits, we will charge for them as appropriate. We may reject requests that are very impracticable, repeated for no reason, require excessive technical means for handling, or pose risks to the legitimate rights and interests of others.
(1) You can log in to "my XXX" at any time and enter the function modules such as personal center and common information to access, correct and delete your account information, including personal data, permission settings, security settings, common contacts, passwords, e-mail and ticket delivery addresses.
(2) You may revoke your authorization by turning off some of the functions. Or, you may revoke all authorizations to continue collecting your personal information by canceling your account.
(3) You can cancel the account of the mobile APP ticketing network of the Laos-China Railway through the following path:
1) You can cancel your account by logging in to the ticket sales network of the mobile phone APP of the Laos-China Railway. The specific path is: click "My" - click the setting button at the top right of the page - click "Cancel";
2) After cancelling the account of the mobile APP ticketing network of Lao-China Railway, we will stop providing services for you, and will delete your personal information or anonymize it according to the requirements of applicable laws, unless otherwise specified by laws and regulations.
3) Information directly related to public security, public health, and major public interests;
4) Information directly related to criminal investigations, prosecutions, trials and enforcement of sentences;
5) Proofed by sufficient evidence that you have subjective malice or abuse of rights;
6) For the purpose of safeguarding the life, property and other major legal rights and interests of you or other individuals but it is difficult to obtain your consent;
7) Responding to your request will cause serious damages to legal rights and interests of you or other individuals and organizations;
8) Involving business secrets.
10、Changes to this Privacy Policy
The content of this Privacy Policy may be modified from time to time to be adapted to the development of laws, technologies, or business. Major changes will be notified to users in appropriate forms such as issuing announcements on the Website and sending notices to users. Major changes referred to herein include:
(1) Major changes in our service modes, such as the purpose of processing personal information, the type of personal information processed, and the use of personal information;
(2) Major changes in our ownership structure and organizational structure, such as changes in owners caused by business adjustments, bankruptcies, and mergers;
(3) Changes in main objects of personal information sharing, transfer or public disclosure;
(4) Major changes in your rights to participating in personal information processing and the way in which you exercise the rights;
(5) Changes in the department responsible for handling personal information security, the contact information and the complaint channels;
(6) Existence of high risks proved by the personal information security impact assessment report.
When you use our Website, you may review our privacy policy at any time so that you can understand the changes. You may view the lasted update date of this Privacy Policy at the "latest update" on the top of this Privacy Notice.
11、How to contact us
You may contact us via the following ways, and generally we will accept and handle your request on personal information within 15 working days.
Tel: 020-891891
Email: yyglb@lcrc.ltd
If you are not satisfied with our reply and believe that our personal information processing has damaged your legitimate rights and interests, you can file a complaint with the customer service of the China-Laos-China Railway Mobile App Ticketing Network, or file a complaint or report to the public security organ or regulatory authorities such as Netcom, telecommunications, and marketing, or file a lawsuit with the people's court with jurisdiction at the defendant's residence.