GDPR Compliance Statement

1. Overview

LingYun Team (hereinafter referred to as "this Site") is committed to complying with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). This page explains how we process your personal data under the GDPR framework and your rights as a data subject.

The data controller of this Site is the LingYun Team management. To contact the data controller, please send an email to admin@cnly.top。

2. Data Controller Information

• Data Controller: LingYun Team
• Contact Email：admin@cnly.top
• Registered as: TruckersMP Virtual Trucking Company (VTC)

3. Collection and Processing of Personal Data

This Site may collect and process the following personal data:

3.1 Visitor Data

• IP address (for security protection and logging)
• Browser type and version
• Access time and pages visited
• Language preference (stored in Cookie)

3.2 Event Registration Data

• Team/company name
• Contact person name
• QQ number
• Selected parking slot numbers
• Registration notes

3.3 Join Application Data

• QQ number
• Email address
• TruckersMP ID
• Application status and progress information

4. Legal Basis for Data Processing

Pursuant to Article 6 of the GDPR, the legal bases for processing your personal data include:

• Contract performance (Art. 6(1)(b)): Processing data necessary for event registration and join applications to provide the services you requested
• Legitimate interests (Art. 6(1)(f)): Website security protection, logging, and statistical analysis
• Consent (Art. 6(1)(a)): Processing specific data with your explicit consent
• Legal obligation (Art. 6(1)(c)): Compliance with applicable laws and regulations

5. Data Storage and Retention

Personal data retention periods are as follows:

• Event registration data: Retained for 6 months after the event for statistics and dispute resolution, then deleted
• Join application data: Retained for 12 months after application completion, then deleted
• Access logs: Retained for 30 days
• Session data: Automatically deleted after session expiration
• Admin account data: Retained during account lifetime, deleted upon account deletion

6. Your Rights

Under the GDPR, you have the following data subject rights:

• Right of access (Art. 15): You have the right to obtain a copy of the personal data we hold about you
• Right to rectification (Art. 16): You have the right to request correction of inaccurate personal data
• Right to erasure (Art. 17): Under certain circumstances, you have the right to request deletion of your personal data
• Right to restriction of processing (Art. 18): Under certain circumstances, you have the right to request restriction of processing your personal data
• Right to data portability (Art. 20): You have the right to receive your personal data in a structured format
• Right to object (Art. 21): You have the right to object to data processing based on legitimate interests
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw consent at any time

To exercise any of the above rights, please contact us at admin@cnly.top. We will respond to your request within 30 days.

7. Data Security

We take the following technical measures to protect your personal data:

• Sessions use HttpOnly and SameSite=Lax cookies
• Database queries use PDO prepared statements to prevent SQL injection
• Output uses htmlspecialchars() to prevent XSS attacks
• CSRF tokens verify all form submissions

8. Cross-Border Data Transfers

Our servers are located in China. If your data needs to be transferred from the EU/EEA to China, we will ensure the transfer complies with Chapter V of the GDPR, including signing Standard Contractual Clauses (SCC) or taking other appropriate safeguards.

9. Cookie Policy

This Site uses the following cookies:

• Session Cookie: Used to maintain login state (HttpOnly, SameSite=Lax)
• Language preference Cookie: Stores your selected language (Chinese/English)
• CSRF Token Cookie: Used to prevent cross-site request forgery attacks

This Site does not use third-party tracking cookies or advertising cookies.

10. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority in an EU Member State.

11. Policy Changes

This GDPR compliance statement may be updated from time to time. Significant changes will be notified through site announcements. We recommend that you review this page regularly for the latest data protection information.

12. Contact

If you have any questions about this GDPR compliance statement or need to exercise your data subject rights, please contact:

Email: admin@cnly.top