Privacy Policy
Privacy Policy of Shanghai Huisheng Law Firm
Effective Date：November 2025
1. Introduction
Shanghai Huisheng Law Firm (hereinafter referred to asHuisheng "or" we "highly value personal privacy protection and are always committed to ensuring the security of your personal information. This Privacy Policy (hereinafter referred to as "this Policy") aims to explain to you the ways and purposes in which we collect and use your personal information when you visit our official website, use the legal services we provide, or interact with us through other means, as well as your personal information rights under relevant data protection laws and regulations. Please carefully read and fully understand the content of this policy before establishing a service relationship with us or using related services.
If you have any questions or suggestions regarding the content of this policy, you can do so through the following textCommunicate with us using the methods listed in the 'Contact Us' section.
Please note that we may periodically revise this policy based on legal and regulatory updates and business development needs. After the policy update, we will publish the latest version on the corresponding page of the official website, and the revised policy will take effect from the date of publication. This policy only applies to the services and official websites provided by Huisheng, and does not apply to any third-party websites, plugins, or applications redirected from this website. When you click on a third-party link or enable a third-party link, the third party may collect or share your information, so please be sure to carefully read the privacy policy of the third-party platform. We are not responsible for the privacy protection practices of third parties, and the risk of using third-party services is borne by you.
2. Our identity and responsible party for information processing
Huisheng is a partnership law firm with 30 years of professional experience, with core businesses covering maritime and maritime affairs, insurance and finance, debt settlement, corporate governance, and other fields. For more information about us, please visit the official website of Huisheng. Our detailed contact information can be found in section of this policyeightpartThe content of 'Contact Us'.
Normally, when you access our services or collaborate with us, your country/The entities or affiliated entities of Huisheng in the region are responsible for processing your personal information in accordance with the law, and will strictly fulfill their information protection obligations in accordance with this policy and relevant legal provisions.
3. Scope and Purpose of Personal Information Collection
We will collect personal information of you or relevant personnel of your organization based on the specific scenarios of providing services or conducting cooperation. Common scenarios include but are not limited to: providing you with professional legal services, using the functions of our official website, and conducting business cooperation with us (such as providing procurement services for Huisheng).
When you submit a job application to us, we will collect and use your personal information in accordance with the law. These information may come from recruitment agencies or you may have accessed them through the official website of Huisheng“recruitment”Provided directly when filling out the application form online. Specifically, it includes your educational background, work experience, and background information related to the applied position (such as your legal work rights in the country/region where the applied position is located).
4. Legal basis for the use of personal information
According to relevant countries/According to the legal regulations of the region, we need to clearly inform you of the legal basis for collecting and processing personal information. The following are the legal basis we mainly rely on:
Firstly, to achieve legitimate interests. We collect and use personal information mainly to provide you with high-quality legal services, carry out legal business cooperation, and promote business development (including the business needs of related entities), but the exercise of such legitimate interests is always based on the premise of not harming your privacy rights and interests, and shall not exceed the necessary scope.
Secondly, to fulfill contractual obligations. To ensure the smooth performance of the service contract signed with you or your organization, we may need to collect and use relevant personal information. For example, the legal services you entrust may involve personal information of third parties such as employees and clients, which is a necessary basis for us to enter into and fulfill service contracts. The lack of this information will result in the inability to fulfill the contract properly.
Again, to comply with legal obligations. According to mandatory requirements of laws and regulations, we are required to collect and use specific personal information. For example, in order to comply with anti money laundering laws and regulations, before providing services to new customers, we need to collect the identity information of relevant individuals and conduct background checks in accordance with the law (which may involve sensitive information such as criminal records).
Finally, based on your explicit consent. If personal information cannot be processed legally based on the above legal basis, or if there are mandatory provisions in the laws of the place where the business is conducted, we will process the information only after obtaining your explicit consent. Especially when the collected information is classified as sensitive personal information according to local laws, such consent is even more necessary. For example, if you inform us of your dietary needs to meet health or religious habits, or if you inform us of mobility issues to seek special arrangements, it falls under this category. Please note that you may withdraw your consent at any time after giving it. Withdrawing consent does not affect the effectiveness of our lawful authorization to process information before withdrawal, but may result in us being unable to continue providing you with some targeted services or conducting related cooperation.
5. Security measures for personal information protection
Huisheng regards personal information security as its core principle and strictly implements comprehensive protection of personal information held in accordance with internal information security policies and operational procedures. The security measures we take include but are not limited to: establishing strict access control mechanisms to restrict information access permissions; Regularly conduct system penetration testing, promptly identify and fix security vulnerabilities; Strictly screen and manage internal staff and third-party service providers, clarify confidentiality obligations, and regularly conduct privacy protection training. By combining physical security with technological security, we aim to minimize risks such as information leakage, tampering, and loss.
6. Retention period of personal information
We will strictly store your personal information within the time limit stipulated by laws and regulations, ensuring that the storage time matches the processing purpose. After the expiration of the information retention period, we will completely delete your personal information in a secure and reliable manner, or anonymize it to ensure that the processed information cannot identify specific individuals. The aggregated information processed anonymously may be used for internal purposes such as statistical analysis and business planning, and such use does not involve personal information rights.
7. Your right to personal information
According to relevant data protection laws and regulations, you have legal rights over your personal information. The specific content and exercise of these rights may vary depending on your country/The legal regulations in different regions may vary, and there may be statutory exceptions and limitations. The core rights you enjoy include:
1. Right to access information: You have the right to request us to provide a copy of your personal information, but this request must not infringe on the privacy rights of others and is limited to the information content already covered by this policy;
2. Information correction right: When you discover inaccurate content in your personal information, you have the right to notify us for verification and correction;
3. Right to withdraw consent: You have the right to modify or withdraw your authorization consent for us to collect, use, and disclose your personal information (please refer to the relevant content in Part 4 of this policy for details);
4. Information deletion right: If we continue to retain your personal information without legitimate reasons, you have the right to request us to delete it;
5. Suspension of processing rights: In the following circumstances, you have the right to request us to suspend the processing of your personal information: first, after you notify us, we verify and confirm that there is inaccurate content in your personal information; Secondly, your claim that your personal information will not be processed goes beyond our legitimate interest in processing the information, and we are currently handling this claim;
6. Data Portability Right: You have the right to request that we transfer your personal information to you or other organizations designated by you in commonly used electronic formats;
7. Objection Right: If we process your personal information for the following purposes (including for user profiling), you have the right to object: to achieve our or a third party's legitimate interests, based on public interest needs, or for direct marketing purposes. We will immediately stop processing relevant information and analyzing user profiles related to objections to direct marketing purposes upon receipt; In response to objections in the first two situations, we will suspend the processing of relevant information unless we can prove that there are convincing legal reasons beyond your rights, or that it is necessary to continue processing the information in order to resolve legal disputes.
If you need to exercise the above rights or have any questions about the relevant rights, you can contact the Huisheng Data Protection Team. For specific contact information, please refer to section of this policyeightpart
eightContact Us
We hope this policy can help you fully understand how Huisheng processes personal information and the rights you enjoy. This policy covers your primary rights under relevant laws, but does not exclude other rights that may exist due to regional legal differences.
If you have any questions or specific needs regarding the exercise of your rights, or need to file a complaint or consult on matters not covered by this policy, please contact us through the following methods:
E-mailshanghai@rolmax.com
ninePolicy Update Explanation
The latest update time of this policy isNovember 2025. We will periodically update this policy based on legal and regulatory revisions, changes in regulatory requirements, and business development needs. After each update, we will prominently post the revised policy text on our official website and remind you to pay attention to the updated content in an appropriate manner. We suggest that you regularly review this policy to ensure timely understanding of our latest measures for personal information protection.
