Data Security Governance Center

Data Security Governance Center
DSGC Policy
Product Documentation©2013-2022 Tencent Cloud. All rights reserved.

Page 1 of 7

Data Security Governance Center

Copyright Notice©2013-2024 Tencent Cloud. All rights reserved.
Copyright in this document is exclusively owned by Tencent Cloud. You must not reproduce, modify, copy or distributein any way, in whole or in part, the contents of this document without Tencent Cloud's the prior written consent.
Trademark Notice

All trademarks associated with Tencent Cloud and its services are owned by Tencent Cloud Computing (Beijing)
Company Limited and its affiliated companies. Trademarks of third parties referred to in this document are owned bytheir respective proprietors.
Service Statement
This document is intended to provide users with general information about Tencent Cloud's products and services
only and does not form part of Tencent Cloud's terms and conditions. Tencent Cloud's products or services aresubject to change. Specific products and services and the standards applicable to them are exclusively provided for inTencent Cloud's applicable terms and conditions.

©2013-2022 Tencent Cloud. All rights reserved.

Page 2 of 7

Data Security Governance Center

Contents
DSGC Policy
Privacy Policy
Data Processing And Security Agreement©2013-2022 Tencent Cloud. All rights reserved.

Page 3 of 7

Data Security Governance Center

DSGC Policy
Privacy Policy：

Last updated 2024-01-05 16:56:05

1. INTRODUCTION
This Module applies if you use the T-Sec Data Security Center (“Feature”). This Module is incorporated into theprivacy policy located at Privacy Policy. Terms used but not defined in this Module shall have the meaning given tothem in the Privacy Policy. In the event of any conflict between the Privacy Policy and this Module, this Module shallapply to the extent of the inconsistency.

2. CONTROLLERSHIPThe controller of the personal information described in this Module is as specified in the Privacy Policy.

3. AVAILABILITY
This Feature is available to users globally but primarily intended for users located in the same country/region as theselected service region for optimal performance.

4. HOW WE USE PERSONAL INFORMATION
We will use the information in the following ways and in accordance with the following legal basis:
Personal Information

Use

Legal Basis

Customer's UIN, customer-authorized instance information,
database address (intranet IP), customer database accountnumber, customer database password, customer sample data(which may include the customer’s clients’ details in accordancewith the service customer provides).

We use thisinformation toprovide youwith the corefunctions of theFeature.

We process thisinformation as it isnecessary for us toperform our contract
with you to provide theFeature.

Customer configuration data, including customer’s APPID, asset
identification authority switch, task scan time, task scanfrequency, number of task samples, number of task sample data

We use thisinformation toprovide you

We process thisinformation as it isnecessary for us to©2013-2022 Tencent Cloud. All rights reserved.

Page 4 of 7

Data Security Governance Centersaved, total number of customer assets and number of authorized
assets.

with the corefunctions of theFeature.

perform our contract
with you to provide theFeature.

5. HOW WE SHARE AND STORE PERSONAL INFORMATIONAs specified in the Privacy Policy.

6. DATA RETENTION
We will retain personal information in accordance with the following:
Personal Information
Customer's UIN, customer-authorized
instance information, databaseaddress (intranet IP), customer
database account number, customer
database password, customer sample
data (which may include thecustomer’s clients’ details inaccordance with the service customer
provides).

Retention Policy
We retain such data for as long as you use the Feature. When youruse of the Feature is terminated, we will delete this data after 7days.You will be able to directly delete the following data by cancellingyour authorization to keep the data in the in the product console:
database address (intranet IP), customer database account number,customer database password, customer sample data (which may
include the customer’s clients’ details in accordance with the service
customer provides).

Customer configuration data, including
customer’s APPID, asset identification
authority switch, task scan time, task
scan frequency, number of task
samples, number of task sample data
saved, total number of customer
assets and number of authorized
assets.

We retain such data for as long as you use the Feature. When youruse of the Feature is terminated, we will delete this data after 7 days.If
you do not need the product to save your sample data, you can set
the scan task settings to not save the sample data.

©2013-2022 Tencent Cloud. All rights reserved.

Page 5 of 7

Data Security Governance Center

Data Processing And Security Agreement：

Last updated 2024-01-05 16:56:05

1. BACKGROUNDThis Module applies if you use T-Sec Data Security Center (“Feature”). This Module is incorporated into the Data
Privacy and Security Agreement located at DPSA. Terms used but not defined in this Module shall have the meaning
given to them in the DPSA. In the event of any conflict between the DPSA and this Module, this Module shall apply tothe extent of the inconsistency.

2. PROCESSING
We will process the following data in connection with the Feature:
Personal Information

Configuration Data: customer's APPID, UIN, asset identification authority switch, task scantime, task scan frequency, number of task samples, number of task sample data saved.

UseWe onlyprocess thisdata for thepurposes ofproviding theFeature to youin accordance
to your specificconfiguration.

Log data:<br/>1. Customer operation log:Back-end logic operation time, unique
identification of interface call, back-end code positioning, operation content (interaction withproduct business database; key business node mark: interface time-consuming statistics;
billing purchase, specification, duration and renewal information).<br/>2. Regular scheduling
log:Background logic operation time, background code positioning, operation content(interaction with product business DB; business key node mark: system initialization startand end time, task start and end time, scan task corresponding to the total number ofcorresponding tables in the scan task DB), SQL information, SQL parameters, internal key
node prompt information (user task start time, task completion time, total number ofcorresponding tables), customer APPID, UIN

We use thisdata for thepurposes ofproviding theFeature to you
and facilitate
the services, aswell as enable
as to undertake
anytroubleshooting.

Usage data: The total number of data assets purchased by a customer and the number of

We process

authorized assets.

this data toallow us to©2013-2022 Tencent Cloud. All rights reserved.

Page 6 of 7

Data Security Governance Center

monitor thedata assets thathave beenused.

3. SERVICE REGIONAs specified in the DPSA.

4. SUB-PROCESSORSAs specified in the DPSA.

5. DATA RETENTION
We will store personal data processed in connection with the Feature as follows:
Personal
Information

Retention Policy

Configuration
Data

We retain such data for as long as you use the Feature. When your use of the Feature is
terminated, we will delete this data after 7 days.

Log DataLog data will be automatically deleted after 60 days of first being recorded.

Usage Data

We retain such data for as long as you use the Feature. When your use of the Feature isterminated, we will delete this data after 7 days.

You can request deletion of such personal data in accordance with the DPSA.

6. SPECIAL CONDITIONS
You must ensure that this Feature is only used by end users who are of at least the minimum age at which anindividual can consent to the processing of their personal data. This may be different depending on the jurisdiction inwhich an end user is located.

©2013-2022 Tencent Cloud. All rights reserved.

Page 7 of 7