Definition
CirculeID 处理哪些个人数据？
非常少。护照记录描述的是产品，不是人。我们处理用于客户与潜在客户沟通的联系方式、产品已认证用户的账户数据，以及不指向任何个人的聚合扫描信息。扫描公开护照无需账户，也不会生成任何画像。
Where a customer chooses to associate a person with an item — registering ownership, a warranty, or a repair — that is a deliberate act by that customer, who is the controller for it. It is never a by-product of someone scanning something.
处理
处理什么，依据什么
| Data | Purpose and basis | Retention |
|---|---|---|
| Passport records | Serving the product record. Processed on behalf of the customer, who is controller. Usually not personal data. | For the product’s service life, as the customer configures |
| Account data | Authenticating users of the authenticated product. Necessary for performance of the contract. | For the life of the account, then deleted |
| Contact details | Responding to enquiries and account communication. Legitimate interest, or contract. | Until you ask us to stop, or the relationship ends |
| Aggregate scan data | Reporting engagement to the brand. Identifies no individual and builds no profile. | Aggregated on collection; no individual record exists |
| Operational logs | Security, audit and incident investigation. Legitimate interest and legal obligation. | A bounded window, then deleted |
| Ownership registrations | Only where a customer offers it and a person opts in. Consent, held by that customer. | Set by the customer as controller |
您的权利
您可以索取什么
Where CirculeID is the controller — enquiries, account data, our own communications — you can ask for access to your data, correction, erasure, restriction of processing, portability, and you can object to processing carried out on the basis of legitimate interest. Write to ceo@fistasolutions.com and we will act on it.
Where we process on behalf of a customer, which covers most passport data, that customer is the controller. We will route your request to them promptly and support them in answering it, but the decision is theirs rather than ours to make.
You can also complain to a supervisory authority. We would rather you raised it with us first so we have a chance to fix it, but that is your choice and not a precondition.
Data residency is selectable per tenant, and EU-resident deployments keep passport records, events and credentials within the EU. Subprocessors are named in the data processing terms attached to the customer agreement, and changes are notified in advance.
答疑
常见问题
人们扫描产品时会被追踪吗？
不会。护照的公开层级无需账户、无需认证即可解析，因此根本不存在可供关联行为的身份。品牌方收到的是聚合后的扫描信息 —— 次数、大致区域、哪些章节被打开过 —— 而绝不会拿到单条记录。这是架构本身的性质，不是某个可调的设置。
护照数据属于个人数据吗？
通常不会。护照描述的是产品：材料、来源、足迹、可维修性。只有当客户有意将某个人与某件物品关联起来时——例如登记所有权或保修——它才成为个人数据；正因如此，这始终是一次明确而独立的选择，而不是扫码的副产品。
护照数据为什么不存放在区块链上？
部分正是因为这个原因。不可变账本无法执行更正，也无法响应删除请求；把可能含有个人数据的记录放上去，等于把一项合规特性变成一个合规问题。只有密码学摘要会被锚定，而摘要不会泄露记录的任何内容。
我如何行使对自己数据的权利？
Write to ceo@fistasolutions.com. Where CirculeID is the controller we will act on the request directly. Where we process on behalf of a customer — which is the case for most passport data — we will route it to that customer and support them in responding, because the decision is theirs to make.
还有谁在处理这些数据？
次级处理方在随客户合同附带的数据处理条款中列明，并注明各自的用途与运营地点。变更会事先通知而非事后公告，以便客户在变更生效前提出异议。