Privacy Policy

Dear Users,

CHC Navigation Europe Kft. (hereinafter referred to as "CHCNAV", "we", "us" or "our") place a high priority on protecting your personal privacy. When you use CHCNAV PointX operated by us, we will protect your personal data in accordance with this Privacy Policy (hereinafter referred to as "this Policy").

This Policy is designed to help you understand what personal data we collect, why we collect it, and how we protect it. This Policy describes our practices with respect to personal data we collect from or about you when you use CHCNAV PointX. We collect and process your personal data and provide services in compliance with relevant laws and regulations to protect your privacy and ensure data security.

Generally, we will collect and process your personal data only when it is necessary for the performance of a contract, the provision of services, or with your consent, unless otherwise specified for specific services we provide. In such cases, the rules for processing personal data may be elaborated in other privacy policies specifically published for that product and/or service. Please refer to the specific privacy policy. Additionally, we may explain our rules for processing your personal data through page notifications, pop-up reminders, information pushes, or other methods. The specific personal data processing rules for business functions of products or services will be subject to the information we provide to you.

This Policy does not apply to Third-Party Services integrated into our services. Your use of such Third-Party Services (including any personal data you provide to third parties) will be governed by the terms of service and privacy policies of those third parties, rather than this Policy. Please carefully read the terms of the third party for specific regulations. Besides, please protect your personal data properly and only provide it to a third party when necessary.

Before interacting with us, please carefully and thoroughly read and understand this Policy, especially the sections emphasized in bold and/or underlined. Your agreement to this Privacy Policy only indicates your understanding of the functions provided by the Cloud and the necessary personal data required for the operation of those functions. It does not imply that you consent to the collection of non-essential personal data, which will be subject to explicit consent requests based on your authorization during use. Corresponding device permissions will not be enabled by default, and for important or sensitive device permissions, we will separately seek your consent through pop-ups when you access specific business functions. If you do not agree with this Policy, please do not use CHCNAV PointX or provide us with your personal data.

This Policy Will Help You Understand the Following Issues:

  1. Collection and Use of Personal Data
  2. Disclose Your Personal Data
  3. How We Store and Protect Your Personal Data
  4. Your Rights
  5. How We Process Personal Data of Minors
  6. Cross-Border Provision of Personal Data
  7. Update to This Policy
  8. How to Contact Us
  9. Miscellaneous

Ⅰ. Collection and Use of Personal Data

To facilitate your understanding, we have listed the business functions we provide, the purposes of processing, and the methods of collecting and using personal data as follows:

Business functions Personal data / Information Purpose of Processing
NTRIP Account Login & Management NTRIP username, password (encrypted), region selection, device location (optional, for server selection) – Authenticate user identity and connect to the NTRIP correction service.
– Display account status, validity period, remaining days, service area, mount points, and bound devices.
– Enable users to manage their subscription and understand service availability.
Base Station Map Device location (optional, user may decline) – Show nearby base stations and their real-time status.
– Indicate whether the user is within coverage area.
Location permission is optional; if declined, data will be displayed at a regional level (coarse granularity).
Ionosphere Information Region/language preference, approximate location (derived from IP or user selection) – Display ionospheric prediction charts to assist in assessing field conditions.
– Provide localized content.
Push Notifications Device identifier (for push service) – Send account expiration reminders, system announcements, ionospheric alerts, etc.
Self-Service Troubleshooting Connection event logs (e.g., login failures, API errors, connectivity test results). Logs do NOT contain passwords, tokens, or other sensitive credentials. – Help users diagnose and resolve connection issues independently.
– Improve service stability and error analysis.
Settings & Cache Management Locally cached data (user can clear manually) – Allow users to manage local storage and clear cache.
Feedback & Support Contact information (optional), error logs (optional, user-provided) – Enable users to contact distributors or official support for assistance.
– Collect feedback to improve product quality.

All the information mentioned above cannot reasonably be linked to an identified or identifiable natural person when used in isolation shall not constitute personal data under applicable laws. Where such information may directly or indirectly identify individuals through combination with other datasets, we will process it in compliance with applicable data protection laws.

Ⅱ. Disclose Your Personal Data

2.1 Data Sharing

2.1.1 We will not share your personal data with third parties other than CHCNAV and its affiliates unless we obtain your prior explicit consent or as otherwise required by laws and regulations. However, exceptions apply to data that cannot identify specific individuals and cannot be restored to its original form.

2.1.2 Certain services may involve sharing specific personal data with partners to provide better customer service and user experience. We will only share personal data for legitimate, justifiable, necessary, specific, and clear purposes, and will only share the personal data that is essential for providing the services. Unless you provide additional authorization or as otherwise required by law, our partners are prohibited from using the shared personal data for other purposes.

2.1.3 We conduct due diligence on the data security environments of organizations and individuals with whom we share personal data. We require them to sign strict confidentiality agreements and process personal data by taking confidentiality and security measures in accordance with the law.

2.2 Data Transfer

2.2.1 We will not transfer your personal data to any organization or individual other than CHC and its affiliates except under the following circumstances:

2.3 Public Disclosure

In principle, we will not proactively disclose your personal data. We will only disclose your personal data under the following circumstances:

2.4 Entrusted Processing

2.4.1 To provide you with better services, we may entrust third-party partners to process your personal data. Such processing will only be conducted for legitimate, justified, necessary, specific, and explicit purposes. We strictly limit the purposes for which the entrusted parties may process your information and require them to adopt adequate data security measures. If a third-party partner uses your information for purposes outside the purpose of our authorization, it will separately obtain your consent.

2.4.2 We will not entrust third-party partners to process personal data that can directly identify you without your valid authorization. If you voluntarily provide your contact information, address, or other personal data to a specific third-party partner for direct communication, the third party will directly process your personal data, and we will neither retain nor use such information.

2.5 Exemptions of Prior Consent

In the following circumstances, we are not required to obtain your prior authorization or consent for sharing, transferring, or publicly disclosing personal data:

  1. where your express consent or authorization is obtained in advance;
  2. where it is necessary to fulfill the legal obligations to which we are subject;
  3. where it is necessary to protect the vital interests of you or another person;
  4. where tasks in the field of public interest are carried out;
  5. where you disclose personal data to the public on your own;
  6. where your personal data is collected from legally disclosed information, such as legitimate news reports, government information disclosure, and other channels.

Ⅲ. How We Store and Protect Your Personal Data

3.1 Storage Retention Period and location

3.1.1 Depending on the context, content, and type of service, the storage duration of data may vary. We will retain your personal data for the period necessary to provide the service. However, in cases where laws or regulations specify a different retention period, you agree to a longer retention period, or retention is necessary for ensuring service quality, security, dispute resolution, or technical constraints, we may extend the retention period as required by law or agreement or within a reasonable scope after the expiration of the aforementioned retention period. Once the retention period expires, we will delete your personal data or anonymize it in accordance with legal requirements.

3.1.2 Your personal data and files are stored on the servers of our third party providers we hire to provide services to us. Your personal data may be transferred across national borders because we have servers located worldwide.

3.2 Data Security Measures and Capabilities

3.2.1 To protect your information security, we implement all reasonable physical, electronic, and administrative security measures to prevent unauthorized access, use, alteration, public disclosure, damage, or loss of your information. We have taken all reasonable and feasible measures to protect your personal data. For example:

3.2.2 We have established a comprehensive data security protection system for CHCNAV PointX, including:

3.2.3 You acknowledge that the internet environment and electronic data transmission are not entirely secure. We cannot guarantee that these measures will fully prevent any unauthorized access, use, or disclosure of your information.

3.2.4 We will take commercially reasonable steps to ensure that we do not collect irrelevant personal data. If non-essential personal data is unintentionally collected through automated collection technologies and your consent cannot be obtained, we will promptly delete or anonymize the information. We will retain your personal data only for the duration necessary to achieve the purposes stated in this Policy unless there are reasonable and necessary grounds or legal allowances for continued retention.

3.3 Security Incident Response and Notification

3.3.1 In the event of an information security incident (e.g., leakage, damage, or loss of personal data), we will promptly notify you as required by laws and regulations. The notification will include the nature and potential impact of the incident, the measures we have taken or will take, suggestions for your self-protection and risk mitigation, and any remedial actions we will offer.

3.3.2 We will notify you of the incident promptly via in-app notifications, email, or other methods. If it is difficult to notify each individual, we will use reasonable and effective means to issue a public announcement.

3.3.3 Please understand that, in accordance with laws and regulations, if the measures we take can effectively prevent harm from information leakage, tampering, or loss, we may choose not to notify you unless required to do so by regulatory authorities.

Ⅳ. Your Rights

In accordance with applicable laws, regulations, we strive to ensure that you enjoy the following rights during our processing of your personal data, including but not limited to:

4.1 Access, Copy, Rectify, and Transfer Your Personal data

4.1.1 Unless otherwise provided by applicable data protection laws, you have the right to access, copy, rectify, and transfer your personal data.

4.1.2 You may access, copy, or rectify your personal data through "Account" within the App, where you can view and update your account information.

4.2 Delete Your Personal data

4.2.1 You can delete all the data you add voluntarily.

4.2.2 In the following circumstances, if we have not proactively deleted your personal data, you may request deletion through the contact details provided in this Policy:

4.2.3 We will endeavor to respond to your request for deletion within 15 working days of receipt.

4.2.4 If the legally mandated retention period has not expired or if deletion is technically infeasible, we will cease processing your personal data except for storage and the implementation of necessary security measures.

4.3 Restrict our processing of your personal data

If you are located in the EEA, you may also have the right to restrict our processing where one of the following applies:

4.4 Your right to data portability

If you are located in the EEA, you may request us to send the personal data concerning you back to you, which you have provided to us, in a structured, commonly used, and machine-readable format and you may request us to transmit those data to another controller without hindrance from us to which the personal data has been provided, where the processing has legal basis and is carried out by automated means.

Please kindly note that, however, if you exercise your right to object, restrict, or delete, we may not be able to provide to you some, or any, of the features and functionality of CHCNAV PointX.

4.5 Responding to Your Requests

4.5.1 We will strive to respond to your request within 15 working days. If you are dissatisfied with our response, you may file a complaint using the contact details provided in this Policy.

4.5.2 In the following circumstances, we may be unable to respond to your request in accordance with laws and regulations:

  1. Where we are not capable of identifying what is your personal data based on the information we control separately;
  2. Where it is directly related to national security or defense security;
  3. Where it is directly related to public safety, public health, or significant public interests;
  4. Where it is directly related to criminal investigations, prosecutions, trials, or the enforcement of judgments;
  5. Where the personal data controller has sufficient evidence to show that the personal data subject has malicious intent or is abusing his/her rights;
  6. Where it is necessary to safeguard the significant legitimate rights and interests of the individual or other individuals, such as life and property, but obtaining the individual's consent is difficult;
  7. Where responding to your request would result in serious harm to the legitimate rights and interests of you, others, or organizations;
  8. Where the request involves trade secrets.

If our response does not meet your satisfaction, particularly if our processing of personal information has adversely affected your legitimate rights and interests, you have the right to lodge a complaint to the supervisory authority in your jurisdiction.

Ⅴ. How We Process Personal Data of Minors

5.1 CHC places great importance on the protection of minors' information. Please be aware that our website, products, and services are intended solely for adults with full civil capacity.

5.2 If we discover that we have collected personal data from minors without authorization from their parents or guardians, we will take reasonable steps to promptly delete it. If you discover that we have collected personal data from a minor under your guardianship without your consent, you may contact us using the contact information provided in this Policy, and we will delete the information in question.

Ⅵ. Cross-Border Provision of Personal Data

In compliance with applicable laws and regulations, personal data collected and generated by us within a jurisdiction will be stored either within its territorial boundaries or in cloud servers located in designated regions that adhere to the applicable legal requirements. If we need to transfer your personal data outside the region mentioned above, you agree that you have the legal authority to transfer the personal data to us, and we will take necessary compliance measures to ensure the security and legality of the data transfer. We also take necessary technology and organization measures to ensure cross-border data transfer security and fulfill the mandatory obligations stipulated in applicable laws. For international transfer, we also require the overseas recipient(s) of your personal data to provide at least the adequate protection level set forth in this Privacy Policy and other separate agreements between us.

Ⅶ. Updates to This Policy

We reserve the right to update or modify this Policy from time to time. If our Privacy Policy changes, the latest version will be promptly updated on the homepage of CHCNAV PointX. For significant changes to the Privacy Policy, we may also notify you through various channels. If you disagree with the effective revisions, you may notify us through the contact information in this Policy. By continuing to use CHCNAV PointX, you indicate your acceptance of the revised Privacy Policy.

Ⅷ. How to Contact Us

8.1 If you wish to exercise your data subject rights or have any questions, complaints, or suggestions about this Policy or any of the above content, please contact us through Email: datacompliance@huace.cn

8.2 Generally, we will review and respond to your inquiry within 15 working days after receiving your contact information.

8.3 Requests that are not directly related to your identity, repetitive requests without reasonableness, or requests requiring disproportionate technical effort (e.g., development of new systems or fundamental changes to existing practices), those that pose risks to others' legitimate rights and interests, or that are impractical may be declined by us.

8.4 If you are dissatisfied with our response, particularly if our personal information processing activities have infringed upon your legitimate rights and interests, you may also file a complaint or report to the regulatory authorities.

Ⅸ. Miscellaneous

9.1 This Policy may exist in multiple language versions. In the event of any inconsistencies or conflicts between versions, the English version of this Privacy Policy shall prevail.

9.2 The headings in this Policy are provided for convenience and readability only and do not affect the meaning or interpretation of any provisions in this Policy.

Date of Release: 1/8/2026

Effective Date: 8/8/2026