This Privacy Policy describes how My LSC (hereinafter "we", "our", or "the Company") collects, uses, and protects the personal data of users of the My LSC mobile application (hereinafter "the Application").

The Application is a fleet management tool intended exclusively for professional use by Company employees. It is not publicly accessible, and no external registration is possible. Access is granted solely by internal administration.

We collect only the data strictly necessary for performing professional duties.

No health, personal financial, or sensitive data (as defined by GDPR) is collected.

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data is accessible only to authorised personnel (IT, HR, operational management).

Third-party services used (data processors)

These services are subject to Google LLC's privacy policies and compliance certifications. Data may be hosted in data centres outside the European Union; in such cases, appropriate contractual guarantees (Standard Contractual Clauses) are in place.

Upon expiry of these periods, your data is deleted or anonymised.

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS) and at rest (Firebase)
• Secure authentication via Firebase Authentication (session management, anomaly detection)
• Role-Based Access Control (RBAC): each user accesses only the data necessary for their role
• Logging of access and sensitive changes
• Restricted and traceable administrator access

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data being processed.
• Right of rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request deletion of your data, subject to legal retention obligations.
• Right to restriction of processing: temporarily restrict the use of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to certain processing based on legitimate interest.

These rights may be exercised by contacting the data controller. Some requests may be limited by legal obligations relating to the employment relationship.

We reserve the right to modify this Privacy Policy at any time, particularly to reflect legal, regulatory, or functional changes to the Application.

Any material change will be notified to you by professional email or via an in-app notification, at least 15 days before it takes effect. The date of the last update is always shown at the top of this page.

本隐私政策说明 My LSC（以下简称"我们"或"公司"）如何收集、使用和保护 My LSC 移动应用程序（以下简称"应用程序"）用户的个人数据。

本应用程序是一款专门供公司员工使用的车队管理专业工具，不对外公开，无法进行外部注册。 访问权限由内部管理员统一分配。

我们仅收集履行职业职责所严格必要的数据。

我们不收集任何健康、个人财务或 GDPR 定义的敏感数据。

我们不会出于商业目的向第三方出售、出租或共享您的个人数据。 您的数据仅供授权人员（IT、人力资源、运营管理层）访问。

使用的第三方服务（数据处理方）

上述服务受 Google LLC 隐私政策及合规认证约束。数据可能存储在欧盟以外的数据中心； 在此情况下，已签署适当的合同保障措施（标准合同条款）。

超过上述期限后，您的数据将被删除或匿名化处理。

我们采取适当的技术和组织措施保护您的数据：

• 传输中（HTTPS/TLS）和静态（Firebase）数据加密
• 通过 Firebase Authentication 进行安全身份验证（会话管理、异常检测）
• 基于角色的访问控制（RBAC）：每位用户仅可访问其职能所需的数据
• 访问和敏感变更记录日志
• 受限且可追溯的管理员访问

根据 GDPR，您享有以下权利：

• 访问权：获取正在处理的个人数据副本。
• 更正权：更正不准确或不完整的数据。
• 删除权：在法律保留义务范围内申请删除您的数据。
• 限制处理权：临时限制对您数据的使用。
• 数据可携权：以结构化、机器可读格式接收您的数据。
• 反对权：对基于合法利益的某些处理提出异议。

这些权利可通过联系数据控制方行使。部分请求可能受到劳动关系相关法律义务的限制。

我们保留随时修改本隐私政策的权利，特别是为反映应用程序的法律、监管或功能变化。

任何重大变更将通过专业电子邮件或应用内通知在生效前至少 15天 告知您。 最后更新日期始终显示在本页顶部。