Privacy Policy

1. General
   
   

1. Mission Foods (Shanghai) Co., Ltd. with domicile at No. 933, Wuxing Central Road Nanqiao Town, Fengxian District, Shanghai, its parent companies, subsidiaries and/or other affiliate companies (collectively, hereinafter “Gruma”, "we", or "us"), for purposes of this Privacy Policy (“Policy”) are responsible for the treatment of the personal data (hereinafter, “Data”) we hold concerning the individuals (hereinafter, “Titleholder” or "you") to whom such data corresponds.

   位于上海市奉贤区南桥镇五星中心路 933 号的麦西恩（上海）食品有限公司，及其母公司、子公司和/或其他关联公司（以下统称为“Gruma”，“我们”或“我们”），出于本隐私政策（“政策”）的目的，负责处理我们持有的相关个人（下称 “所有权人”或“您”）的个人数据（下称“数据”）。

2. This Privacy Policy explains how Gruma handles personal information and complies with the requirements of the Cybersecurity Law of the People’s Republic of China. If you have any questions relating to this policy, contact us at 37108500, for general information call: 400 647 7432.

   本政策对 Gruma 如何处理数据并遵守适用法律和法规要求作出了解释，其中包括中华人 民共和国（“中国”）网络安全法。如果您对本政策有任何疑问，或联系我们 37108500 一般信息请致电: 400 647 7432.

3. Gruma is engaged in the business of elaboration, production, trading, distribution, import and export of corn and wheat flour, as well as corn and wheat flour-based products. Because of this, Gruma interacts and has interacted with several individuals, who are the Titleholders of the Data that at any time were collected from them.

   Gruma从事玉米和小麦粉以及以此为基础的产品的加工、生产、贸易、分销和进出口业务。 出于此目的，Gruma与一些个人有且有过往来，这些人是在某时被我们收集过数据的数据 所有权人。

2. Data: Type and Treatment

   
   Whether the Titleholder is a supplier, customer or personnel, if Gruma is unable to collect and hold the Data referred to in this Policy, it will not be able to perform the corresponding services to the Titleholder and/or to fulfill the corresponding employment/service related purposes. If you provide any Data as described above on behalf of any other person (including but not limited to your spouse, family members or other dependents/beneficiaries), you should ensure that you have obtained his/her express consent or authorization to share his/her Data with us for the purposes described in this Policy.

   无论所有权人是供应商、客户还是员工，如果 Gruma 无法收集和持有本政策中的相关数据，将无法向所有权人提供相应的服务和/或实现相应的就业/服务相关目的。 如果您代表其他任 何人（包括但不限于您的配偶、家庭成员或其他家属/受益人）提供上述任何数据，您应确保 已获得他/她的明确同意或授权，以出于本政策目的与我们共享他/她的数据。

   Gruma hereby informs you that the type of Data that it collects, use, store, process and transfer and the profile of each individual as well as the treatment and/or purpose given to them, is as follows:

   因此，Gruma 在此通知您，其收集、使用、储存、处理和转移的数据类型、个人情况以及其 处理和/或目的如下：

1. Data of the Personnel
   
   

1. With respect to Data of the PERSONNEL (i.e. employment applicants, employees, former employees, service providers, interns, retirees, independent contractors, and any other individuals engaged by third-party agencies to provide services to Gruma, as applicable), Gruma collects information from the Titleholders in a personal and/or direct manner and such information may include, but is not limited to, full name, address, telephone, email, career experience, non-criminal records certificate, union membership, proof of studies, proof of domicile, copy of an official ID, emergency contact information, gender or sexual orientation, date of birth, citizenship, nationality, bank account information, race/ethnicity, photographs, medical information (including body temperatures, whether getting Covid-19 vaccine), travel history, racial or ethnic origins, disability information, fingerprint scan, face recognition information, political or religious beliefs, marital/civil partnership status, information about spouse/domestic partner and dependents and other family members, and other employment/service related information. All this information is collected with respect to the services and/or tasks to be performed and with the purpose (i) to determine the consideration and/or remuneration for the services rendered and to make the determined payment, (ii) to communicate with, to locate or to identify the individual, (iii) to conduct HR related processing and/or administration (such as benefits administration), (iv) to prepare a career profile for examination and training purposes, (v) to conduct service/employment related management (such as job grading, performance and absence management), (vi) to conduct background checks, (vii) to conduct internal investigations regarding compliance with applicable laws and company policies and procedures, (viii) to exercise a right or obligation conferred or imposed by laws, including complying with mandatory reporting obligations and other legal requirements, or (ix) to fulfill any other employment/service related or business related legitimate purposes (such as M&A transactions, restructurings, etc.).

   关于员工的数据（即：求职者、雇员、前雇员、服务提供者、实习生、退休人员、独立承包商以及第三方机构聘用为 Gruma 提供服务的其他任何个人，如适用）。Gruma以个人和/或直接的方式收集所有权人的信息，这些信息可包括但不限于：全名、地址、电话、电子邮件、职业履历、无犯罪记录证明、工会会员资格、学习证明、住所证明、身份证复印件、紧急联系信息、性别或性取向、出生日期、公民身份、国籍、银行账户信息、种族/民族、照片、医疗信息（包括体温、是否接种 Covid-19 疫苗）、旅行史、种族或民族、残疾信息、指纹扫描、面部识别信息、政治或宗教信仰、婚姻/民事伴侣状况、关于配偶/同居伴侣、家属及其他家庭成员的信息，以及其他与就业/服务有关的信息。 所有这些信息的收集均与将要执行的服务和/或任务有关，其目的是：(i) 确定所提供服务的酬金和/或报酬，并进行确定的付款，(ii) 与个人通讯，确定位置或识别个人，(iii) 进行人力资源相关的处理和/或管理（如福利管理），(iv) 出于考试和培训的目的准备职业履历，(v) 进行与服务/就业相关的管理（例如工作分级、绩效和缺勤管理），(vi) 进行背景调查，(vii) 进行有关遵守适用法律和公司政策及程序的内部调查，(viii)行使法律赋予或规定的权利或义务，包括遵守强制性报告义务和其他法律要求，或 (ix) 实现其他任何与就业/服务相关或业务相关的合法目的（例如并购交易、重组等）。

2. Gruma may request at any time from any of the Titleholders any additional information for employment/service related or business-related legitimate purposes, and may make evaluations of socioeconomic, psychometric and/or medical (health) for internal purposes, in order to define a Titleholder’s profile for purposes of determining and/or providing some kind of allowance in the employment benefits and/or support in particular cases

   出于就业/服务相关或业务相关的合法目的，Gruma 可随时要求任何所有权人提供任何额外的信息，并出于内部目的可对社会经济、心理和/或医疗（健康）进行评估，以确定所有权人的情况，以便在特定情况下确定和/或提供某些就业福利和/或支持津贴。

3. Gruma may also request and/or collect Data from the PERSONNEL and/or from their spouses, family members or other dependents/beneficiaries information regarding suffered illnesses and/or accidents (health) of the Titleholders, as well as of the automobiles they use; this, in order to evaluate, quote and, if applicable, provide any type of Medical Insurance and/or Life Insurance and/or Automobile Insurance, as some sort of employment benefit attending to their title and/or position and/or duties.

   Gruma 也可能要求和/或从员工和/或他们的配偶、家庭成员或其他家属/受益人那里收集有关所有权人的疾病和/或事故（健康）信息、以及他们使用汽车的信息；这是为了评估、报价和提供（如适用）任何类型的医疗保险和/或人寿保险和/或汽车保险，作为与其职称和/或职位和/或职责有关的某种就业福利。

4. From among all the Data collected from the Titleholders and/or their spouses, family members or other dependents/beneficiaries, there is information deemed as “Sensitive Personal Data”, and Gruma may use this Sensitive Personal Data as set out in this Policy.

   从所有权人和/或其配偶、家庭成员或其他家属/受益人处收集的所有数据中，包含被视为“敏感个人数据”的信息，Gruma 可按照本政策规定使用该敏感个人数据。

2. Data of Customers

   
   With respect to the Data of CUSTOMERS, Gruma collects Data from two different types of customers:

   关于客户数据，Gruma 从两种不同类型的客户处收集数据：

1. Customer-Dealer, from whom it may be requested full name, address, telephone and/or email, website, bank account data, copy of an official ID; in order to (i) determine the consideration and/or remuneration for the supply of the products and/or the services provided by Gruma, (ii) make the corresponding collection and payment, and (iii) communicate with and to locate the Customer-Dealer.

   客户-经销商，可要求其提供全名、地址、电话和/或电子邮件、网站、银行账户数据、身份证复印件；以便 (i) 确定由 Gruma 提供的产品和/或服务的酬金和/或报酬，(ii) 进行相应收付款，(iii) 与其通讯并确定客户-经销商的位置。

2. Customer-Consumer, from whom it may be requested full name, address, telephone and/or email, date of birth and other information voluntarily provided by the Titleholder, for product evaluation and/or brands and/or services of Gruma; in order to (i) create and maintain your account; (ii) obtain a result in market surveys, (iii) send them advertising material and/or notices, via email and/or any other media; and (iv) respond to your inquiry. If you are receiving promotional information about Gruma and do not wish to receive this information any longer, you may remove your name from our mailing list, calling us on 37108500 General Information: 400 647 7432 and asking to be removed from our mailing list.

   客户-消费者，可要求其提供全名、地址、电话和/或电子邮件、出生日期以及所有权人自愿提供的其他信息，以用于产品评估和/或品牌和/或 Gruma 的服务；以便 (i) 创建和维护您的账户；(ii) 获得市场调查结果，(iii) 通过电子邮件和/或任何其他媒体向他们发送广告材料和/或通知；以及 (iv) 回复您的询问。如果您收到有关 Gruma 的促销信息，且不希望再收到此类信息，或致电 37108500 一般信息致电：400 647 7432，以要求将您的名字从我们的邮件列表中删除。

3. Data of Suppliers

   
   With respect to the Data of SUPPLIERS, Gruma may collect information which includes, but is not limited to, full name, address, telephone, email, quotation and/or budget, proof of domicile and copy of an official ID; bank account data, in order to identify and locate the Titleholder, to determine the consideration and/or remuneration for the services rendered and/or the goods supplied to Gruma, as well as to make the payments referred to above. In the event that information regarding any bank account of this type of Titleholders is collected, such data will be collected solely for the purpose of facilitating the payment, whether at the bank or through wire transfer or third-party payment service provider.

   关于供应商的数据，Gruma可能会收集但不限于：全名、地址、电话、电子邮件、报价和/或预算、住所证明和身份证复印件；银行账户数据，以便识别所有权人和确定所有权人的位置，确定向 Gruma 提供的服务和/或商品的酬金和/或报酬，以及进行上述付款。如果收集了此类所有权人的任何银行账户信息，则收集此类数据的目的仅为便于支付，无论是在银行、或通过电汇、或第三方支付服务提供商进行付款。

3. Data Protection Actions and Mechanisms
   
   

1. Gruma will maintain and implement the adequate protection actions and mechanisms, which will consist in the necessary Administrative, Physical and Technical Measures, in view of its capacity and the type of Data being treated. The foregoing will ensure the security, integrity and privacy of the Data.

   Gruma根据其能力和所处理的数据类型，将维护和实施适当的保护措施和机制，包括必要的行政、物理和技术措施。上述措施将确保数据的安全性、完整性和隐私性。

2. Gruma is responsible for the collection, safeguard and treatment of the Data. At any time you may exercise your right to access your Data by contacting Gruma on the details set out at the beginning of this Policy.

   Gruma 负责数据的收集、保护和处理。您可以随时通过本政策开头列出的详细信息与 Gruma 联系，以行使访问您的数据的权利。

3. If at any time you wish to correct or delete Data, we hold about you that is inaccurate, out-of-date, incomplete, irrelevant or misleading, please contact us on the details set out at the beginning of this Policy and we will amend this record or provide written notice in case there is a reason why we cannot amend it. If you wish to have your Data deleted, please let us know by contacting us on the details above and we will take all reasonable steps to delete it unless we have legitimate justification to reject such request or we need to keep it for legal, auditing or internal business reasons.

   如果您在任何时间希望纠正或删除我们持有的有关于您的不准确、过期、不完整、不相关或误导性的数据，请按照本政策开头列出的详细信息与我们联系，我们将修改该记录或在无法修改的情况下作出书面通知。如果您希望将您的数据删除，请通过本政策开头列出的详细信息与我们联系并通知我们，我们将采取一切合理措施删除该资料，以下情况除外：我们有合法理由拒绝该要求或我们因法律、审计或内部业务原因将保留该数据。

4. You may also contact us by e-mailing us on the details above if you have a complaint about how we have handled your Data. If Gruma becomes aware of any ongoing concerns or problems concerning our privacy practices, we will contact you about the issue, investigate the issue, and take all reasonable steps to work with you to resolve the issue.

   如果您对我们处理您的数据的方式有任何不满，您也可以按照上述信息通过电子邮件与我们取得联系。如果 Gruma 发现与我们隐私实践有关的持续影响或问题，我们将就该问题与您联系，调查该问题，并采取任何合理措施与您合作解决该问题。

5. Gruma may assign and/or transfer the Data, both to individuals and entities, either national or foreign (including Mexico). The recipients of such Data will be subject to the provisions of this Policy; therefore, it is possible that Gruma requires transferring your Data to third parties with whom it maintains business or professional relations. Also, Gruma may transfer Data corresponding to its PERSONNEL to third parties such as external firms, service providers, payroll providers, background check agencies, affiliates, laboratories and/or clinics, or government agencies, for the purpose of the above employment/service related or business-related legitimate purposes. Such third parties will receive the Data only and exclusively as part of the business and/or professional relationship with Gruma, as part of the scope and/or as information that is necessary to perfect the internal, business and/or professional relations created among Gruma and the Titleholders. Gruma will only select third parties who formally agree to implement the necessary security measures to ensure the adequate level of privacy of the Data. Gruma will be responsible for notifying all third parties the content of this Policy, as well as any modification or cancellation of Data arising from the exercise of the rights made at any time by any of the Titleholders. Hence, the Data we collect from you in the PRC will be stored on the servers located within and outside the PRC (excluding Hong Kong, Macau and Taiwan).

   Gruma 可以将数据转让和/或转移至国内或国外（包括墨西哥）的个人和实体。此类数据的接收者将受本政策规定的约束；因此，Gruma 可能会要求将您的数据转移至与之有业务或专业关系的第三方。同时，Gruma 可能出于上述就/服务相关或业务相关的合法目的，将其员工的相应数据转移至第三方，如外部公司、服务提供者、薪资提供商、背景调查机构、关联公司、实验室和/或诊所、或政府机构。此类第三方将仅作为与 Gruma 的业务和/专业关系的一部分来接收数据，作为完善 Gruma 与所有权人之间建立的内部的、业务和/或专业关系的范围和/或信息的一部分。Gruma将仅选择正式同意实施必要的安全措施以确保数据隐私级别足够高的第三方。Gruma将负责向所有第三方通知本政策的内容，以及任何所有权人在任何时间行使权利而产生的任何数据修改或取消。 因此，我们在中国从您那里收集的数据将被储存至位于中国境内外（不包括香港、澳门和台湾）的服务器上。

6. Gruma, in view of the technologies implemented for the day-to-day performance of its duties, collects information containing Data through its website or other channels governed by this Policy; however, it does not collect this type of information using cookies and/or web beacons, nor through social networking media.

   根据日常履职而采用的技术，Gruma通过其网站或本政策管辖的其他渠道收集包含数据的信息；但是，它不会通过使用 cookies和/或网络信标、也不会通过社交网络媒体来收集此类信息。

7. Protecting children’s personal data is very important to us. We do not accept or will not knowingly collect Data from any child who are not capable of providing the consent for processing of his/her Data according to the applicable law. If you believe that any children’s Data may have been provided to us, please contact us using the details set out at the beginning of this Policy. We will take steps to delete the Data as soon as possible should we learn that we have collected the Data of a child without first receiving verifiable consent of the child's legal guardian.

   儿童个人数据的保护对我们来说至关重要。我们不接受也不会有意收集根据适用法律无法同意处理其数据的任何儿童的数据。如果您认为您已向我们提供任何儿童的数据，请按照本政策开头列出的详细信息与我们联系。如果我们得知我们在未事先获得儿童法定监护人可验证同意的情况下收集了儿童数据，我们将尽快采取措施删除该数据。

Any amendment to the scope of this Policy may be consulted through the following website: www.missionfoods.com.cn

本政策范围内的任何修订可通过以下网站查询：www.missionfoods.com.cn