IMD business school for management and leadership courses
中国用户隐私通知
本中国用户隐私通知（“隐私通知”）说明盟德企业咨询（深圳）有限公司（以下简称“IMD中国”或“我们”），如何根据《中华人民共和国个人信息保护法》（2021年）（“《个人信息保护法》”）及其他相关法规和标准（包括其不时修订版本）收集、使用、披露或以其他方式处理您的个人数据。
“个人数据”是指以电子或其他方式记录的、与已识别或可识别的自然人有关的各种信息，不包括经过匿名化处理的信息（“个人数据”）。
IMD中国是IMD国际管理发展学院（总部位于瑞士沃州洛桑的一家基金会，下称“IMD”）的关联方。除IMD中国外，IMD还有其他关联方（以下合称为IMD中国的“关联方”）。
本隐私通知适用于IMD中国以及任何代表IMD中国处理个人数据的第三方个人或实体（“处理者”）开展的任何个人数据处理活动，包括收集、存储、使用、加工、传输、提供、披露和删除等活动（“处理活动”）。
1. 隐私通知的适用范围
1.1 本隐私通知适用于IMD中国就以下事项开展的所有处理活动：
(a) IMD中国的网站（www.imd.org/china）、社交媒体页面以及其他线上平台和移动应用程序（统称为“线上平台”）；
(b) 以线上或线下形式开展的各类项目和课程（包括任何评估、报告或其他教学工具）；
(c) 由IMD中国主办及/或与IMD中国相关的会议与活动；
(d) 筹款及社交活动；
(e) 市场营销与传播活动，包括新闻通讯、横幅、广告等；
(f) IMD校友社区的管理；
(g) 研究与其他科学活动（包括统计分析）；以及
(h) 面向申请入学者与应聘者的申请管理、处理及预招聘流程的管理。
1.2 请注意，本隐私通知不适用于IMD中国员工及董事会成员的个人数据处理，其适用另行制定的隐私通知。如需了解更多信息，请参见第10条所列联系方式与我们联系。
2. 个人数据的收集、使用与披露
2.1 根据《个人信息保护法》，IMD中国出于特定目的（“目的”）收集、使用并向第三方披露特定类别的个人数据。下文将逐项说明目的以及IMD中国如何收集、使用与披露相关信息。
2.2 关于IMD线上平台
a) 自动收集的信息
个人数据 | 目的 | 保留期限的适用原则（参见第5条） | 是否与第三方共享 |
浏览相关数据（包括访问页面、网页路径） | 分析目的；优化我们的服务、网页及用户体验 | A | 否 |
设备相关数据（包括硬件型号、操作系统版本或设备唯一识别码） | 安全保障目的 | A | 否 |
日志信息（包括您的IP地址、设备及事件信息，可能含崩溃记录及系统活动信息） | 分析目的；安全保障目的 | A | 否 |
地理位置信息 | 某些应用程序功能运行；通过应用程序提供服务 | A | 否 |
有关我们如何使用cookie、跟踪器和/或在线像素的信息，以及如何告知我们您对通过这些技术收集的个人数据的选择，请参见我们的cookie政策。请注意，当您允许浏览器使用第三方cookie时，相关第三方可能会出于自身目的收集您的个人数据。
b) 您提供的信息
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
您提供的信息 | 创建并管理您的个人账户（MyIMD） | A | 否 |
您提供的信息 | 回答您的问题和/或意见 | A | 否 |
2.3 关于项目、课程及其他服务内容
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏、出生日期）联系信息（电子邮箱、通讯地址、紧急联系人及联系方式） 适用情况下的财务信息（付款信息、支付方式） | 使您能够参与项目和/或课程；项目和/或课程的一般管理 | B | 与同一项目小组内的其他学员共享有限的身份识别与联系信息 |
职业信息（职务、所在公司、职业简历、可能会有的财务信息） | 个性化定制课程内容；促进学员间的交流与联系 | B | 否 |
与项目和/或课程相关的数据（报名信息、出勤情况、成绩与考试） | 项目和/或课程的一般管理 | C | 适用情况下，可披露给您的雇主及/资助企业（经特别告知您） |
您提供给我们的其他信息（尤其是通过您的MyIMD账户提供） | 使您能够参加IMD主办或相关的活动与会议；提升您在IMD内部的个人档案；向您提供奖学金 | B | 否 |
您提供给我们的其他信息 | 进行课程相关的调查与评估，以及开发教学工具 | B | 否 |
2.4 关于由IMD中国主办及/或相关的会议及其他活动
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏、出生日期） | 会议和/或活动的管理 | B | 演讲嘉宾；其他与会者；适用情况下的餐饮和/或接待合作方；适用情况下，您的雇主及/资助企业（经特别告知您） |
联系信息（电子邮箱、通讯地址） | 会议和/或活动的管理 | B | 其他与会者和/或活动参与者（限电子邮箱地址） |
适用情况下的财务信息（付款信息、支付方式） | 会议和/或活动的管理 | D | 否 |
出勤数据 | 会议和/或活动的管理 | B | 适用情况下，可披露给您的雇主及/资助企业（经特别告知您） |
您提供给我们的其他信息（尤其是通过注册资料提供） | 会议和/或活动的管理；今后会议和活动的通知与宣传 | B | 适用情况下的餐饮和/或接待合作方；适用情况下，可披露给您的雇主及/资助企业（经特别告知您） |
您提供给我们的其他信息 | 调查和评估的开展 | B | 否 |
2.5 关于筹款活动
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏、出生日期）联系信息（电子邮箱、通讯地址） 职业信息（职务、所在公司、职业简历、如适用的财务信息） | 筹款活动 | B | 有限的特定情形下，可披露给第三方筹款机构（经特别告知您） |
适用情况下的财务信息（付款信息、支付方式、一般财务信息） | 筹款活动；付款与捐赠账户的跟进管理 | B | 否 |
社交网络中可获得的个人数据 | 筹款活动 | B | 否 |
2.6 关于传播活动（包括通过社交媒体）
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏） 联系信息（电子邮箱、通讯地址 | 发送新闻通讯及IMD活动的相关信息 | A | 否 |
社交网络中公开的个人数据； 您通过社交网络提供的其他信息 | 与您沟通；关系管理 | A | 否 |
2.7 关于业务拓展活动
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏） 联系信息（电子邮箱、通讯地址） | 管理IMD中国的业务拓展活动 | A | 否 |
公开信息（包括源自社交网络的信息） | 管理IMD中国的潜在客户开发活动 | A | 否 |
2.8 关于校友社区的管理
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏） 联系信息（电子邮箱、通讯地址） 在IMD的历史记录（项目、课程、成绩、会议） | 校友社区的管理 | B | 可披露给您所在地区的校友会（经特别告知您） |
身份信息（姓名、姓氏） 联系信息（电子邮箱、通讯地址） | 发送新闻通讯及IMD中国活动的相关信息 | B | 可披露给您所在地区的校友会（经特别告知您） |
活动参与数据（出勤、付款信息） | 校友社区的管理 | B | 可披露给您所在地区的校友会（经特别告知您） |
2.9 关于研究、其他科学活动，以及面向客户和参与者的分析活动
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
身份信息（姓名、姓氏） 联系信息（电子邮箱、通讯地址） | 开展研究与科学活动 | A | 适用情况下，可披露给合作大学与研究机构（经特别告知您） |
您提供的其他个人数据 | 开展研究与科学活动 | A | 适用情况下，可披露给合作大学与研究机构（经特别告知您 |
基于调查、IT 程序或其他教育场景所形成的行为与个性数据 | 向您提供个性特征（包括职业活动）分析 | A | 适用情况下，且仅在收集前明确说明的情形下，您的雇主及/或资助企业 |
包含您个人数据的访谈录音视频 | 开展研究与科学活动 | A | 适用情况下，可披露给合作大学与研究机构（经特别告知您）；适用情况下，亦可作为IMD中国教学材料披露给其他参与者及公众（经特别告知您） |
2.10 其他特定处理活动
a) 照片、视频及音频资料
在会议、活动，以及IMD中国的项目和课程期间，可能会对参与者和学生进行摄影及录像。对于IMD中国和参与者，该等资料是的重要传播、营销和社交工具。此外，访谈视频亦可能作为IMD中国项目和活动中的教学及/或研究资料（详见上文）。
个人数据 | 目的 | 保留期限原则（参见第5条） | 是否与第三方共享 |
个人照片与录制访谈内容（包括您在该情境下提供的所有个人数据） | 传播用途（包括通过社交媒体）；教学与研究 | A | 适用情况下，可通过IMD中国教学材料披露给其他参与者及公众 |
非特定个人的一般照片与视频 | 传播用途（包括通过社交媒体） | E | 适用情况下，可通过IMD中国传播活动披露给公众 |
b) 统计分析
请注意，IMD中国在前述情形下收集和/或处理的任何个人数据，均可能会用于建立和开展统计分析。我们会尽快对此类统计结果进行匿名化处理。
c) 特定处理活动
请注意，某些特定情况下，IMD中国可能会开展本隐私通知未涵盖（全部或部分）的临时处理活动。遇此情况，我们将另行向您提供专门的知情同意书，说明此类临时处理活动。该专门的知情同意书将作为本隐私通知的补充内容，须与本通知一并阅读。
3. 向第三方披露个人数据
3.1 如本隐私通知第2条所述，在每一类处理活动中，您的部分个人数据可能在有限的情况下披露并共享给第三方。
3.2 IMD中国也可能向以下各类接收方披露您的个人数据：
(a) 委托处理者和分包商：为支持IMD中国履行其服务，IMD 中国课程和项目中使用的多种软件可能涉及委托处理者和分包商对个人数据的辅助处理，以持续优化我们的线上服务和学习体验。
如需获取相关委托处理者和分包商名单，您可通过本隐私通知第10条所列联系方式向我们提出请求。
(b) IMD中国的关联方：在组织课程、项目和活动时，IMD中国可能会向其关联方披露您的个人数据。
3.3 未经您的同意，我们不会将您的个人数据披露给第三方供其自主使用，除非相关披露符合《个人信息保护法》或其他适用法律的规定。第三方接收方还须遵守合同义务，即根据相关协议保障您个人数据的安全性与保密性，并依据适用的数据保护法律处理您的个人数据。
3.4 如根据法院命令、政府主管机关的要求，以及/或者法律规定，IMD中国有义务或被要求披露您的个人数据，我们也可能将您的个人数据披露给相关第三方。
3.5 如您对上述内容有任何疑问，或需要获取更多信息，请通过[email protected] 联系我们。
4. 个人数据的跨境传输
请注意，IMD中国线上平台的服务器设于瑞士，因此，本隐私通知项下处理的您的个人数据将直接储存于瑞士。鉴于服务器位于境外，对于我们根据第2条收集的个人数据，不可避免地需要进行跨境数据传输。
您可通过以下方式联系服务器的控制方与管理方，行使本隐私通知第7条所述的所有个人数据权利：
IMD – 国际管理发展学院
Chemin de Bellerive 23, P.O. Box 915, CH-1001 Lausanne, Switzerland
此外，IMD中国可能会将您的个人数据传输至中国以外的国家，包括传输给IMD中国的关联方。如进行跨境传输，我们将采取必要措施，确保境外接收方提供的个人数据保护水平不低于《个人信息保护法》所要求的标准。
5. 个人数据的保留期限
IMD中国遵循以下数据保留原则（为便于引用，在具体处理说明中以字母指代）：
A | 自与IMD中国最后一次有效联系起，若为项目参与者，保留10年；其他情形保留2年 |
B | 自与IMD中国最后一次有效联系起，保留10年 |
C | 自项目完成起6个月 |
D | 自付款起1个月 |
E | 无限期 |
一般来说，IMD中国仅在为实现处理目的而有必要的期间内保留您的个人数据，或在我们因法律或业务原因确有必要保留的情形下保留相关数据。请注意，即使您已停止使用我们的服务，我们仍可能继续保留您的个人数据，例如出于税务、法律、会计等目的所必需保留的数据。
6. 个人数据的安全
6.1 IMD中国采取合理的预防措施，保护您的个人数据免遭擅自访问、使用、披露、复制、修改或其他类似风险。
6.2 IMD中国采取预防措施，防止自身持有的个人数据遭受丢失、滥用以及未经授权的访问、披露、篡改和销毁。我们同时设有符合适用法律规定的物理、电子和管理方面的安全措施，用以保障个人数据安全。
6.3 IMD中国竭力遵循行业标准的安全措施。但是，通过互联网传输及/或存储于服务器的数据无法保证100%安全。因此，我们无法确保本隐私通知所涵盖的个人数据绝对安全。尽管如此，我们仍致力于降低此类风险。您须自行负责对登录信息及密码保密。
7. 您的权利
请注意，您有权根据适用于您个人数据的中国法律、法规和相关标准主张多项权利。如需行使这些权利，请参见第10条所列联系方式与我们联系。出于安全考虑，您可能需要提交书面申请或提供可证明身份的材料。我们可能会要求您先完成身份验证后再处理您的请求。一般情况下，我们将在十五个工作日内给予回复。
- 知情权：参见本隐私通知内容。
- 查阅权：您有权向IMD中国确认您的个人数据是否被实际处理。若被处理，您有权查阅该等个人数据（包括获取副本）。
- 更正权：您有权要求我们及时更正或补充您的个人数据。
- 删除权：在我们处理您个人数据的目的已不复存在，或我们依法不再具备处理权限的情况下，您有权要求我们删除您的个人数据。如我们决定应您的请求删除个人数据，我们也将同时通知已从我们处获取您个人数据的其他接收方，要求其及时删除您的个人数据，除非法律法规另有规定或相关接收方已获得您的单独授权。请注意，当您在我们的服务中删除个人数据后，我们可能不会立即从备份系统中删除相应信息，但会在更新备份时予以删除。
- 限制处理权：您有权要求对处理您个人数据的方式加以限制。
- 数据可携权：您有权以结构化、通用和可机器读取的格式获取您向我们提供的个人数据，并有权将该等信息转移给其他数据控制方。
- 拒绝处理的权利：您有权随时因与您个人情况相关的理由，拒绝我们对您的个人数据进行处理，即使相关处理关乎IMD中国的合法利益或公共利益。
- 向监管机构投诉的权利：如您是中国居民，您可向所在地的网信部门提出投诉。
- 注销账户的权利：您可随时申请注销您的MyIMD账户。账户注销后，我们将不再向您提供产品或服务，并根据您的请求删除您的个人数据，但法律法规另有规定的除外。
- 限制自动化决策的权利：我们当前处理活动未使用个人数据进行自动化决策。如未来启用该功能，您可随时拒绝自动化决策并选择不针对个人特征进行定向。如自动化决策对您的权益产生重大影响，您有权要求我们予以说明，并有权拒绝我们仅通过自动化决策作出决定。
如我们处理您个人数据的依据为您的同意，您可以随时撤销该同意。但请注意，这种情况下，IMD中国可能有权依据其他合法事由继续处理您的个人数据。此外，撤销同意并不影响在撤销前基于该同意已完成的数据处理活动的合法性。
您可随时登录MyIMD账户管理页面，查阅并修改大部分个人数据。您有责任确保您在与IMD中国相关的个人资料及活动中使用的个人数据始终准确且保持最新。
在以下情形下，我们可能无法响应您的请求：
- 涉及个人数据控制方履行法律法规规定义务的；
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 与刑事侦查、起诉、审判和判决执行等直接相关的；
- 个人数据控制方有充分证据证明数据主体存在主观恶意或滥用的；
- 为保护个人数据主体或他人生命、财产等重大合法权益但又难以获得本人同意的；
- 响应请求将导致个人数据主体或他人/组织合法权益严重受损的；
- 涉及商业秘密的。
原则上，我们对合理请求不收取费用，但对于重复次数过多、超出合理限度的请求，我们将酌情收取成本费用。对于无故重复、技术手段过度（例如要求开发新系统或根本改变现有做法）、对他人合法权益造成风险的请求，或高度不切实际的请求（如涉及备份存储介质中的数据），我们可能予以拒绝。
8. 我们如何处理儿童个人数据
我们的处理活动主要面向成年人。在获得父母同意后收集儿童个人数据的，我们只会在法律允许范围内、征得父母或监护人明示同意时，或为保护儿童所必需时使用或公开披露该信息。
尽管各地法律与习俗中对“儿童”的定义可能不同，我们视14周岁以下者为儿童。
如我们发现自己收集了儿童的个人数据但未事先获得可验证的父母同意，我们将尽快设法删除相关信息。
9. 隐私通知的更新
本隐私通知最近更新于2025年07月10日。
IMD中国保留更新或修改本隐私通知的权利。更新后的内容将发布在本页面。我们建议您定期查阅本页面，了解更新内容。您继续使用我们的线上平台和服务的，即视为您已知悉并接受相关更改。
10. 联系我们
如您有任何相关意见、问题或投诉，请通过以下方式与我们联系：privacy@imd.org
Privacy Notice for PRC Residents
This Privacy Notice for PRC Residents (“Privacy Notice”) describes how your personal data may be collected, used, disclosed, or otherwise processed in accordance with the Personal Information Protection Law 2021 (“PIPL”), relevant regulations and standards of the People’s Republic of China (PRC), as may be amended from time to time, by IMD China Co., Ltd. (hereafter referred to as “IMD China” or “we” or “us”).
Personal data refers to any kind of information related to an identified or identifiable natural person as electronically or otherwise recorded, excluding information that has been anonymized (“Personal Data”).
IMD China is an affiliate of the IMD – International Institute for Management Development, a Swiss-based foundation established in Lausanne, Vaud (“IMD”). Apart from IMD China, IMD has other affiliates (collectively referred to as the “Affiliates” of IMD China).
This Privacy Notice applies to any processing of Personal Data of individuals carried out by IMD China and/or by any third-party person or entity on behalf of IMD China (“Entrusted Processors”), including collection, storage, using, processing, transmission, provision, disclosure, and deletion (“Processing Activities”).
1. Scope of Privacy Notice
1.1 This Privacy Notice applies to all Processing Activities that are carried out by IMD China in relation to its:
(a) IMD China’s website (www.imd.org/china), social media pages, and other of its online platforms as well as mobile applications (collectively, our “Online Platforms”);
(b) programs and courses, in person and/or online (including any assessments, reports, or other pedagogical tools);
(c) conferences and events organized by and/or in relation to IMD China;
(d) fundraising and networking activities;
(e) marketing and communication activities, including newsletters, banners, advertisements;
(f) management of the IMD alumni community;
(g) research and other scientific activities (including statistics); and
(h) management, processing, and monitoring of applications and pre-recruitment procedures for prospective students and employees.
1.2 Please note that this Privacy Notice does not apply to the Processing of Personal Data for employees and Board members of IMD China, who are subject to a separate privacy notice. For more information, please contact us by using the contact information provided under part. 10 below. .
2. Collection, use, and disclosure of Personal Data
2.1 In compliance with the PIPL, IMD China collects, uses, and discloses to third parties specified categories of Personal Data to fulfill certain purposes (“Purposes”). Information on the Purposes and how IMD China collects, uses, and discloses Personal Data is set out below.
2.2 In relation to IMD’s online platforms
a) Information automatically collected
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Browsing-related data (including pages visited, path on a webpage) | Analytical purposes; Enhancing our services, webpages and experience | A | No |
Device-related data (including hardware model, operating system version or unique device identifier) | Security purposes | A | No |
Log information (including your internet protocol address and device and event information, which can include crashes as well as system activity) | Analytical purposes; Security purposes | A | No |
Geographical location | Functioning of certain applications; Services provided through the application | A | No |
For information relating to our use of cookies, trackers, and/or online pixels, as well as to know how to communicate to us your choice regarding the Personal Data collected through them, please refer to our cookie policy. Please note that, when allowing third-party cookies on your browser, such third parties may themselves collect Personal Data for their own purposes.
b) Information communicated by you
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
As communicated by you | Creation and management of your personal account (MyIMD) | A | No |
As communicated by you | Answer questions and/or remarks you would have | A | No |
2.3 In relation to programs, courses, and other offerings
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Identification data (name, surname, date of birth) Contact details (email address, postal address, emergency contact person and details) Where applicable, financial data (payment details, payment means) | Enabling you to follow the program and/or course; General management of the programs and/or courses | B | Other Participants in the same program cohort for limited identification and contact details |
Professional data (position, company, professional biography, financial information when available) | Tailor the programs and/or courses; Enable networking among students and participants | B | No |
Program and/or course related data (subscription data, attendance data, grades and exams) | General management of the programs and/or courses | C | If applicable, your employer and/or as specifically communicated to you, company sponsoring the program and/or course |
Other information you would provide us with, especially through your MyIMD account | Enabling you to follow the program and/or course; Enabling you to take part in events and conferences organized by or in relation to IMD China; Enhancing your profile within IMD China; Provide you with scholarships | B | No |
2.4 In relation to conferences and other events organized by and/or in relation to IMD China
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Identification data (name, surname, date of birth) | Management of the conference and/or event | B | Speakers; Other participants to the conference and/or event; If applicable, catering and/or hosting partners; If applicable, your employer and/or as specifically communicated to you, company sponsoring your participation in the conference or event |
Contact details (email address, postal address) | Management of the conference and/or event | B | Other participants to the conference and/or event for email address |
Where applicable, financial data (payment details, payment means) | Management of the conference and/or event | D | No |
Attendance data | Management of the conference and/or event | B | If applicable, your employer and/or as specifically communicated to you, company sponsoring your participation in the conference or event |
Other information you would provide us with, especially through the registration documentation | Management of the conference and/or event Communication on future events and conferences | B | If applicable, catering and/or hosting partners; If applicable, your employer and/or as specifically communicated to you, company sponsoring your participation in the conference or event |
Other information you would provide us with | Performance of surveys and assessments | B | No |
2.5 In relation to fundraising activities
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Identification data (name, surname, date of birth) Contact details (email address, postal address) Professional data (position, company, professional biography, financial information when available) | Fundraising activities | B | In certain limited situations, transfer to third-party fundraising entities as specifically communicated to you |
Where applicable, financial data (payment details, payment means, general financial information) | Fundraising activities Follow-up of the payments and donations account | B | No |
Available personal data on social networks | Fundraising activities | B | No |
2.6 In relation to communication activities (including through social media)
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Identification data (name, surname) Contact details (email address, postal address ) | Managing IMD China’s business development activities | A | No |
Publicly available data (including deriving from social networks) | Managing IMD China’s business development prospecting activities | A | No |
2.7 In relation to business development activities
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Identification data (name, surname) Contact details (email address, postal address ) | Managing IMD China’s business development activities | A | No |
Publicly available data (including deriving from social networks) | Managing IMD China’s business development prospecting activities | A | No |
2.8 In relation to the management of the alumni community
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Individual photos and filmed interviews, including all personal data provided by you in this context | Communication (including on social networks); Teaching and research | A | As the case may be, other participants and general public through IMD China’s teaching material |
General photos and videos (without an individual scope) | Communication (including on social networks) | E | As the case may be, the general public through IMD China’s communication activities |
2.9 In relation to research and other scientific activities, as well as analytic activities for clients and participants
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Individual photos and filmed interviews, including all personal data provided by you in this context | Communication (including on social networks); Teaching and research | A | As the case may be, other participants and general public through IMD China’s teaching material |
General photos and videos (without an individual scope) | Communication (including on social networks) | E | As the case may be, the general public through IMD China’s communication activities |
2.10 Other specific processing activities
a) Pictures videos and audio recordings
During events and conferences, as well as throughout IMD China’s programs and activities, pictures and videos may be taken of participants and students. Such pictures and videos constitute an important networking, marketing, and communication tool both for IMD China and for participants. In addition, filmed interviews may be used as training and/ or research material within IMD China’s programs and activities (see above).
Personal data | Purpose | Principles applied to retention period (for references see par. 5) | Share with third parties |
Individual photos and filmed interviews, including all personal data provided by you in this context | Communication (including on social networks); Teaching and research | A | As the case may be, other participants and general public through IMD China’s teaching material |
General photos and videos (without an individual scope) | Communication (including on social networks) | E | As the case may be, the general public through IMD China’s communication activities |
b) Statistics
Please note that any Personal Data that is collected and/or processed by IMD China as referred to above may be used to establish and develop statistics. The results of such statistics shall be anonymized as soon as possible.
c) Ad-hoc processing activities
Please note that, in certain specific situations, IMD China may implement ad-hoc processing activities that are not (entirely or in part) covered by this general Privacy Notice. In such a case, you shall be informed of such a specific processing activity with a dedicated Informed Consent sheet. Such a dedicated Informed Consent sheet comes in addition to this Privacy Notice and must be read in connection with it.
3. Disclosure of Personal Data to third parties
3.1 As mentioned under part 2 above, for each category of processing operations, some of your Personal Data may, under limited circumstances, be disclosed and shared with third parties.
3.2 IMD China may also disclose your Personal Data to the following categories of recipients:
(a) Entrusted Processors and subcontractors who support IMD China in performing its services, through various software used in IMD China’s courses and programs to continually improve our online services and learning experiences.
A list of such Entrusted Processors and subcontractors may be made available on request by contacting us by using contact information provided under par. 10 below.
(b) IMD China Affiliates, when organizing courses, programs, and events.
3.3 We do not disclose your Personal Data to third parties for their independent use without your consent unless such disclosure is permitted under the PIPL or any other applicable laws. Third-party recipients of your Personal Data are also contractually bound to respect the security and confidentiality of your Personal Data pursuant to agreements and to treat your Personal Data in accordance with applicable data protection laws.
3.4 IMD China may also communicate your Personal Data to third parties when we are ordered or obliged to do so because of a court order, governmental authority, and/or by law.
3.5 Should you have any questions on the above or require any further information, please contact us at [email protected]
4. Cross-border transfers of Personal Data
Please note that the servers of the Online Platforms are located in Switzerland, and therefore, your Personal Data processed under this Privacy Notice will be stored directly in Switzerland. As the servers are located abroad, we cannot avoid the cross-border transfer of your Personal Data as we collected in accordance with part 2 above of this Privacy Notice.
You may exercise all of your Personal Data rights under part 7 of this Privacy Notice by contacting the controller and administrator of the servers as follows:
IMD – International Institute for Management Development
Chemin de Bellerive 23, P.O. Box 915, CH-1001 Lausanne, Switzerland [email protected]
Further, IMD China may transfer your Personal Data to countries outside of the PRC, including to IMD China Affiliates. If we do, we will take necessary steps to ensure that the overseas recipient provides a standard of protection for your Personal Data that is at least comparable to that provided under the PIPL.
5. Retention of Personal Data
IMD China applies the following principles for the retention of data (letters are used in the applicable modalities for ease of reference).
A | From the last active contact with IMD China we retain data for 10 years for a program participant, or for 2 years otherwise |
B | 10 years from the last active contact with IMD China |
C | 6 months from program completion |
D | 1 month from payment |
E | No limitation |
In general, IMD China will only retain your Personal Data for as long as is necessary for us to process your Personal Data and to fulfil the Purposes or where we may have legal or business reasons for doing so. Please be advised we may continue to retain your Personal Data after you cease to use our services, for instance if the Personal Data is necessary to meet our legal obligations, such as retaining the Personal Data for tax, legal, and accounting purposes.
6. Security of Personal Data
6.1 IMD China takes reasonable precautions to protect your Personal Data from unauthorized access, use, disclosure, copying, modification, or similar risks.
6.2 IMD China takes precautions to protect Personal Data in our possession from loss and misuse as well as unauthorized access, disclosure, alteration, and destruction. We also maintain physical, electronic, and procedural safeguards that comply with applicable laws to safeguard Personal Data.
6.3 At IMD China, we make every effort to follow industry-standard security. However, no data transmitted through the Internet and/or stored on servers is 100% secure. As a result, we are unable to guarantee that any Personal Data covered by this Privacy Notice will be entirely secure. That being said, we do work to limit these risks. You are solely responsible for keeping your login information and passwords confidential.
7. Your rights
Please note that you benefit from various rights, depending on the applicable laws, regulations and standards of the PRC to your Personal Data. To exercise them, please contact us by using the contact information provided under part. 10 below. For security purposes, you may need to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. Generally, we will reply within 15 working days.
- Information right: See current notice.
- Access right: You have the right to receive from IMD China confirmation about the actual processing or not of your Personal Data. If your Personal Data is processed, you have the right to access such Personal Data (including to receive a copy).
- Rectification right: You have the right to request that your Personal Data be rectified or completed without undue delay.
- Erasure right: You have the right to request the erasure of your Personal Data when the reason why we need and process your Personal Data no longer exists, or when we are no longer legally permitted to process such Personal Data. If we decide to respond to your request for deletion, we will also at the same time notify the entities which have obtained your Personal Data from us and request them to timely delete your Personal Data, unless otherwise required by laws or regulations, or unless those entities have obtained your separate authorization. When you delete your Personal Data from our service, we may not immediately delete the corresponding information in our backup system, but will do so when updating the backup.
- Limitation of processing right: You have the right to request that your Personal Data be processed in a limited manner.
- Data portability right: You have the right to retrieve the data you have provided in a structured, commonly used, and machine-readable format, and you have the right to transfer this Personal Data to another controller.
- Right to object: You have the right at any time to object to the processing of your Personal Data for reasons deriving from your personal situation, even if this processing concerns IMD China’s legitimate interest or public interest.
- Possible right to lodge a complaint with a supervisory authority: If you are a resident of the PRC, the complaint can be lodged at the local Cyberspace Administration.
- Deregister your account: You may request to deregister your MyIMD account at any time. After deregistration of your account, we will cease to provide you with products or services and delete your Personal Data upon your request, except as otherwise provided by laws or regulations.
- Restrain the information systems from automated decision-making. At present, our processing activity does not use Personal Data for automated decision-making, and you may reject automated decision-making at any time and choose the option of not to target your personal characteristics if such decision-making function is adopted in the future. You have the right to request an explanation from us if a decision made through automated decision-making significantly affects your rights and interests, and you have the right to refuse us to make decisions only through automated decision-making.
When the processing is based on your consent, you can at any time withdraw it. Please note, however, that in such a case, IMD China may be authorized to continue processing your Personal Data based on another lawful ground. Similarly, the lawfulness of any data processing that occurred before the consent’s withdrawal is not impacted by such withdrawal.
Access and modification of most of your Personal Data can be done at any time by accessing your profile on MyIMD. It is your responsibility to ensure that the Personal Data used in the context of your profile and activities with IMD China is up-to-date and correct.
We will not be able to respond to your request in the following circumstances:
- the circumstances which are related to the fulfilment of the obligations under laws and regulations by the controller of the Personal Data;
- the circumstances which are directly related to national security and national defense security;
- the circumstances which are directly related to public security, public health and major public interests;
- the circumstances which are directly related to criminal investigation, prosecution, trial and judgment enforcement;
- the circumstances in which the controller of the Personal Data has sufficient evidence to prove that the Personal Data subjects have subjective malice or have abused their rights;
- the circumstances in which the significant legitimate rights and interests of a Personal Data subject or other individuals, such as life or property, are to be safeguarded, but the consent of such subject is difficult to be obtained;
- the circumstances in which responding to the request from a Personal Data subject would result in serious damage to the legitimate rights and interests of such subject or other individuals or organizations;
- the circumstances which involve trade secrets.
In principle, we do not charge for your reasonable requests, but we will, as appropriate, charge a cost fee for multiple repetitive requests beyond reasonable limits. We may refuse the requests that are unnecessarily repetitive, require excessive technical means (for example, requiring the development of a new system or a fundamental change in the current practice), pose a risk to the legal rights and interests of others, or are highly impractical (for example, involving the backup of information stored on disks).
8. How we process children’s personal data
Our processing activities are primarily intended for adults. Where a child’s personal data is collected with parental consent, we will only use or publicly disclose such information as permitted by laws, with the express consent of the parent or guardian, or as necessary to protect the child.
Despite different definitions of a child under local laws and customs, we consider anyone under 14 years old as a child.
If we find that we have collected a child’s personal data without prior proven consent of the parents, we will try to delete the relevant personal data as soon as possible.
9. Updates to the Privacy Notice
This Privacy Notice was last updated on July 10, 2025.
IMD China reserves the right to update or modify this Privacy Notice. The changed text will be posted on this page. We recommend that you check this page periodically for updates. Your continued use of our Online Platforms and services constitutes your acknowledgement and acceptance to be bound by such changes.
10. Contact Us
If you have any comments, questions, or complaints, please contact us at [email protected].