Chinese Data Privacy Notice

Purpose and General Principles

This Privacy Notice for Chinese data subjects supplements the information contained in the Privacy Statement of Helios Technologies, Inc. and its subsidiaries (“General Privacy Statement”) and applies to visitors, users, and others who reside in China. We adopt this notice to comply with the Personal Information Protection Law (PIPL) of 2021.

Helios engages in the processing of personal information only when it has a clear and reasonable purpose, is directly related to the processing purpose, and is limited to the smallest scope for realizing the processing purpose.

We may collect, use, or disclose personal information for the purposes outlined in the General Privacy Statement in one or more of the following circumstances:

• Where we have obtained consent of the data subject;
• Where necessary to conclude or fulfill a contract in which the individual is an interested party, or where necessary to conduct human resources management according to lawfully formulated labor rules and structures and lawfully concluded contracts;
• Where necessary to fulfill statutory duties and responsibilities or statutory obligations;
• Where necessary to respond to sudden public health incidents or protect natural persons lives and health, or the security of their property, under emergency conditions;
• Handling personal information within a reasonable scope to implement news reporting, public opinion supervision, and other such activities for the public interest;
• When handling personal information already disclosed by persons themselves or otherwise lawfully disclosed, within a reasonable scope in accordance with the provisions of this Law; and
• Other circumstances provided in laws and administrative regions.

Helios processes personal information where consent has been obtained, in the ordinary course of business, to fulfill contracts, and for human resources management. Where required by law, we will seek your separate consent for certain processing activities.

Automated Decision-Making

We do not engage in automated decision making.

Cross-Border Transfers

If a transfer of your personal information is required to a third country or international organization, we will, in addition to the safeguards set out in our General Privacy Statement, obtain separate consent where required by law.

Transfers to Third Parties

Details of third parties to whom we may transfer personal data and the purposes for such transfer are provided to individuals prior to obtaining their consent.

Protection of your Personal Information

We maintain commercially reasonable physical, electronic and procedural safeguards to protect your personal information in accordance with the requirements of the PIPL.

We have established security policies and standards when accessing or using this information and restrict access to your personal information to those persons who need to use it for the purpose(s) for which it was collected.

Rights Afforded Under Chinese Data Privacy Law

Under the PIPL, you have the following rights:

• to know, decide, refuse, and limit the handling of your personal information by Helios unless laws or regulations stipulate otherwise;
• to access and copy your personal information in a timely manner, except when the laws and regulations require confidentiality;
• to request correction or completion of inaccurate personal information in a timely manner;
• to request Helios to explain its personal information handling rules;
• to request, subject to applicable legal obligations, the deletion of your personal information if (i) the agreed retention period has expired, or the handling purpose has been achieved, (ii) you withdraw your consent to processing, (iii) Helios ceases to provide the services for which the personal information was provided, or (iv) your personal information is handled in violation of laws, regulations, or agreements; and
• to request Helios in certain circumstances to transfer your personal information to another personal information handler.

These rights are not absolute. For more information on your rights and how to exercise them, please use the Contact Information below.

Contact Information

Individuals may submit a Data Subject Right (DSR) request. If a DSR request is denied, then we will explain the reason for doing so. DSR requests shall be submitted to our Data Protection Officer identified below. We will fulfill DSR requests in a timely manner.

If any you have questions or comments about this notice, our Privacy Policy, the ways in which we collect and use personal information in China, choices, and rights regarding such use, or wish to exercise your rights under Chinese law, as applicable, please do not hesitate to contact us via the channels found under contact information in this Privacy Policy. Pursuant to PIPL requirements, Helios also has a Chinese Data Privacy Officer whose contact information is below.

Children – China Rider

We will never knowingly request or process any personal information from any child under 14 years of. Any parental guardian with legal responsibility over a child located within China is encouraged to contact us at the address provided below if they have any reason to suspect their minor child has provided us with personal data so that we may promptly delete and destroy such personal data.

Last updated:  November 2021