PRIVACY POLICY

Website: t50rankings.com (the “Website”) Data Controller: Beijing CCM Media Co., Ltd. (Unified Social Credit Code: 911102287596345515; registered address: Room 603, Building A, Aocheng Rongfu Center, Beijing 100107, China) — “we“, “us“, or the “Company” Effective date: September 14, 2026 Language: This Policy is issued in English, which prevails over any translation.

1. Introduction and Scope

1.1 This Policy explains how we collect, use, store, share and protect your personal information when you use the Website and our related services, and the rights you have over that information.

1.2 This Policy applies to: (a) browsing our rankings and industry content; (b) registering an account to view rankings; (c) registering for our summits, forums and offline events (the “Events“); (d) submitting award or ranking applications and supporting materials (the “Submissions“); and (e) subscribing to updates or contacting us.

1.3 This Policy does not apply to third-party websites or services. Third-party links on our Website are governed by their own privacy policies.

2. Information We Collect

2.1 Information you provide

(a) Account registration (viewing rankings)

• Name or display name, email address, mobile number, company and job title, password (stored encrypted)

(b) Event registration

• Name, gender (if you choose to provide), company, job title, department, email, mobile number
• Participant category (attendee / speaker / sponsor / media)
• Where required for entry permits or event logistics: identity document type and number, nationality, arrival and departure details, dietary requirements (if you choose to provide)
• Payment and invoicing information where a fee applies. We do not store your full card details; payments are processed by third-party payment providers.
• Photographs and video taken at Events

(c) Award and ranking submissions

• Company name, unified social credit code or overseas registration number, contact person and details, job title
• Business data (including sales revenue, output, export value and similar figures) and supporting materials
• Submission statements, evidence and third-party certifications

(d) Other contact

• Information you provide when you contact us by email, form or telephone

2.2 Information collected automatically

• Device information (device type, operating system, browser type and version, screen resolution)
• Log information (IP address, access time, pages viewed, referring link, duration of visit)
• Approximate location inferred from IP address (city level)
• Information collected through cookies and similar technologies (see Section 5)

2.3 Information obtained from third parties

• Corporate information from public filings, announcements, government disclosures and industry databases
• Attendee and submission information provided by event partners (including local event execution agencies)
• Contact details provided by our partner foreign-invested enterprises in China

We do not collect mobile device identifiers (IMEI/IMSI), access your photo library or calendar, or obtain your login credentials from WeChat or Apple ID, as this Website is not a mobile application.

3. Purposes and Legal Bases

Purpose	Categories of information	Legal basis
Providing ranking content and account services	Registration, device and log data	Performance of a contract
Event registration management and on-site services	Registration data, identity documents, payment data, photos and video	Performance of a contract / your consent
Reviewing ranking and award submissions	Submission data, business data, contact details	Your consent / performance of a contract
Compiling and publishing rankings and issuing certificates	Company information, business data, contact details	Legitimate interests / your consent
Communicating with you; sending event and ranking updates	Contact details	Performance of a contract / your consent
Website security, anti-scraping and anti-fraud	Device and log data	Legitimate interests / legal obligation
Analytics and product improvement (using de-identified or aggregated data)	Device and log data	Legitimate interests
Marketing communications (only with your separate consent; you may unsubscribe at any time)	Contact details	Your consent

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

4. Sharing

We do not sell or rent your personal information. We share it only as follows:

1. Service providers: cloud hosting and CDN providers, email and SMS providers, payment processors, event logistics providers (including local event execution agencies), translation services and analytics providers. They may process information only as necessary to provide services to us, under contract.
2. Event partners: co-organizers, supporting organizations and sponsors of our Events. We share only the minimum necessary information covered by your consent (such as attendee name and company name). We do not share contact details or identity documents unless you separately consent.
3. Affiliates: to the extent necessary and subject to this Policy.
4. Legal requirements: where necessary to comply with law, respond to a lawful request from a competent authority, enforce our terms, or protect the rights, property and safety of us or others.
5. Business transfers: in a merger, acquisition or asset transfer, your information may transfer as an asset. We will require the recipient to remain bound by this Policy and will notify you.

5. Cookies and Similar Technologies

5.1 We use cookies and similar technologies (including local storage and pixel tags) to maintain login sessions, remember language preferences, measure traffic and support security.

5.2 Strictly necessary cookies are required for the Website to function. Analytics and marketing cookies are enabled only with your consent, obtained through a consent banner where required by applicable law.

5.3 Third-party translation service: the Website may use third-party machine translation. When you use the translation function, page content and some of your browsing data may be transmitted to that provider to deliver the translation. You may exit the translation function if you do not wish this to occur.

5.4 You can manage or delete cookies through your browser settings, though some functions may then not work properly.

5.5 We may send you service-related announcements where necessary (for example, when we suspend a service for maintenance). These are not marketing messages and cannot be unsubscribed from; marketing messages can be unsubscribed at any time.

6. International Transfers

6.1 Storage locations:

• Data of the Chinese-language site and of users in mainland China is stored on servers within mainland China;
• Data of this Website (English site) and of overseas users is stored on servers in Singapore.

6.2 Cross-border transfers may occur:

• (a) our team in China may access data stored overseas in order to administer overseas event registrations and review submissions;
• (b) overseas submission data may be transferred to China for the compilation of cross-border rankings;
• (c) the use of international cloud, email and translation services may involve data transmission.

6.3 Safeguards:

• Encryption in transit and at rest, access control and data minimization;
• Where personal data is transferred from the European Economic Area, we rely on the EU Standard Contractual Clauses with supplementary measures, if and to the extent such transfers occur;
• For transfers of personal information out of mainland China, we complete the applicable procedures under Chinese law, including security assessment, standard contractual clauses or personal information protection certification;
• We enter into data processing agreements with overseas service providers.

6.4 You may request a copy of the applicable transfer safeguards using the contact details below.

7. Retention

Category	Retention period
Account information	For the life of the account; deleted or anonymized within 30 days of closure
Event registration and attendance data	12 months after the Event; financial records kept for the statutory period
Submissions and business data	3 years after publication of the relevant ranking (for dispute verification and historical comparison), then deleted or archived
Event photographs and video	Used within the scope of your consent; you may request cessation of use at any time
Log data	6 months
Consent records	3 years after withdrawal of consent (for evidentiary purposes)

We retain information longer where required by law or necessary to address disputes.

8. Security

We apply industry-standard measures, including HTTPS/TLS encryption, tiered access controls, confidentiality obligations for personnel and periodic security assessments. No method of transmission or storage is completely secure. In the event of a personal data breach, we will notify affected users and report to regulators as required by applicable law, within 72 hours where that standard applies.

9. Special Protection for Submission Materials

9.1 Submission materials may contain your trade secrets. We use them only for ranking review and related analysis, and we:

• restrict access to a defined group of personnel bound by confidentiality undertakings;
• publish only aggregated or necessary data externally, and do not publish the underlying files or details of your submission;
• do not provide them to third parties except where disclosure is required by law or you consent in writing.

9.2 To access, correct or withdraw submitted materials, contact us at the email below.

9.3 Please do not include sensitive personal information unrelated to the review (such as identity card numbers, bank account details or health information) in your submission.

10. Your Rights

To the extent provided by applicable law, you have the right to:

1. Access and obtain a copy of your personal information;
2. Correct or supplement inaccurate or incomplete information;
3. Delete your personal information (where no legal retention obligation applies);
4. Restrict or object to our processing;
5. Withdraw consent (without affecting the lawfulness of prior processing);
6. Data portability — receive information you provided in a structured, commonly used format;
7. Opt out of marketing at any time;
8. Complain to the data protection authority in your jurisdiction.

To exercise these rights, email【privacy@t50rankings.com】. We respond within 30 days of receiving your request (one month for requests under EU law). We may need to verify your identity first.

11. Minors

The Website is intended for enterprises and industry professionals and is not directed at minors. We do not knowingly collect personal information from minors (under 14 or under 16, depending on the jurisdiction). If we learn that we have inadvertently done so, we will delete it promptly.

12. Jurisdiction-Specific Provisions

The following provisions prevail in the relevant jurisdiction:

(1) Mainland China (PIPL, Cybersecurity Law, Data Security Law)

• We obtain your separate consent to process sensitive personal information (including financial accounts, whereabouts and information of minors under 14);
• We safeguard your rights to be informed about and to decide on the processing of your personal information, including the right to restrict or refuse processing by others;
• For any outbound transfer of personal information, we complete the applicable compliance procedures (see Section 6).

(2) Singapore (PDPA)

• We process personal data in accordance with the Personal Data Protection Act, observing the principles of purpose notification, reasonableness and use limitation;
• You have the right to access and correct your personal data and to withdraw consent;
• If you believe we have breached the PDPA, you may lodge a complaint with the Personal Data Protection Commission (PDPC).

(3) Indonesia (PDP Law, UU No. 27/2022)

• Where we provide services in Indonesia or our processing affects data subjects in Indonesia, we will comply with local requirements, including appointing a local representative if required【to be confirmed】;
• You have the right to access, update and delete your personal data and to withdraw consent.

(4) United Arab Emirates / Saudi Arabia (UAE PDPL, Saudi PDPL)

• We process personal data in accordance with local law and safeguard your rights of access, correction, deletion and withdrawal of consent;
• Where a local representative is required by law, we will appoint one【to be confirmed with local counsel】.

(5) European Union / EEA (GDPR)

• The Website is primarily directed at users in China, Asia and the Middle East and is not directed at users in the EU, and we do not market to or monitor EU users. Where EU visitors nonetheless access the Website and provide personal information, we process it in accordance with this Policy and respect their rights of access, rectification, erasure and objection;
• If we begin providing services to EU users or systematically monitoring their behaviour, we will reassess the applicability of the GDPR and, where necessary, appoint an EU representative under Article 27 and complete the required documentation;
• Where personal data is transferred from the EEA (if applicable), we rely on the EU Standard Contractual Clauses.

13. Changes to This Policy

We may update this Policy from time to time. For material changes (such as new purposes or new recipients), we will notify you by website notice or email and, where required, obtain your consent again. Updated versions take effect on publication.

14. Contact Us

• Data Controller: Beijing CCM Media Co., Ltd.
• Registered address: Room 603, Building A, Aocheng Rongfu Center, Chaoyang District, Beijing 100107, China
• Data protection contact:【privacy@t50rankings.com】
• EU representative (GDPR Art. 27): NA
• Indonesia / Middle East / Singapore local representative: NA