1.控制者(Controller) —第13(1)(a)条GDPR 

Tigroup Technology international GmbH 极其重视您的隐私权。本声明依据 GDPR 第 13 及 14 条，解释 我们如何通过官⽹ (www.titcgroup.com) 以及我们的核⼼业务（包括⾃动驾驶辅助系统 (ADAS) 道路测 试）收集和处理个⼈数据。 Tigroup Technology international GmbH takes your privacy extremely seriously. This notice explains, pursuant to Art. 13 and 14 GDPR, how we collect and process personal data through our website (www.titcgroup.com) and our core business operations, including Advanced Driver Assistance Systems (ADAS) road testing. 控制者⾝份及联系⽅式： Identity and contact details of the controller: Tigroup Technology international GmbH 法定总部位于德国杜塞尔多夫 (Headquartered in Düsseldorf, Germany) 电⼦邮件 (Email):ma.handong@titcgroup.com 

2.数据保护官(Data Protection Officer) —第37条GDPR

依据 GDPR 第 37 条以及德国联邦数据保护法 (BDSG) 第 38 条的规定，我们已任命了正式的内部数据保 护官 (DPO)，负责监督公司所有数据处理活动（特别是涉及公众的⼤规模⾃动驾驶路测数据采集）。 Pursuant to Art. 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG), we have appointed a formal internal Data Protection Officer (DPO) to oversee all data processing activities, particularly our large-scale ADAS road testing involving the public. 您可以随时通过以下⽅式直接联系我们的数据保护官： MARSSTEIN · MOSAIC 7/15/26, 11:20 AM MARSSTEIN.AI · COMPLIANCE DOCUMENT 1 / 6You may contact our Data Protection Officer directly at any time: 姓名 (Name): Shan Gao 电⼦邮件 (Email): gao.shan@titcgroup.com

3.处理⽬的与法律依据(Purposes and Legal Basis) —第13(1)(c) 及14(1)(c)条GDPR 

我们出于多种明确和合法的⽬的处理您的个⼈数据。对于⽹站访客，我们利⽤ Cookie 及 Google Analytics 进⾏⽹站优化和分析，这完全基于您依据 GDPR 第 6(1)(a) 条和 TTDSG 第 25 条作出的明确同 意。 We process your personal data for explicitly defined and legitimate purposes. For website visitors, we use cookies and Google Analytics for website optimization and analysis, strictly based on your explicit consent pursuant to Art. 6(1)(a) GDPR and Sec. 25 TTDSG. 在我们的核⼼业务⾃动驾驶路测 (ADAS) 中，我们通过⻋载传感器在公共道路上收集包含⾏⼈⾯部和⻋牌 的视频数据。该处理活动依据 GDPR 第 6(1)(f) 条的合法利益（即研发与安全测试必要性）进⾏；对于涉 及⾯部特征的特殊类别数据，我们结合⾃动匿名化等保障措施，依据 GDPR 第 9(2)(j) 条为⾃动驾驶技术 的科学研究与安全测试⽬的进⾏处理。 In our core ADAS road testing business, we collect video data on public roads via vehicle sensors, which may capture pedestrian faces and license plates. This processing relies on our legitimate interest (R&D and safety testing necessity) under Art. 6(1)(f) GDPR; for special category facial data, we process this for scientific research and safety testing of autonomous driving technologies under Art. 9(2)(j) GDPR, applying robust safeguards such as automated anonymization.

4.个⼈数据类别(Categories of Personal Data) —第14(1)(d)条 GDPR 

根据您与我们的互动⽅式，我们处理以下类别的个⼈数据： Depending on your interaction with us, we process the following categories of personal data: 1. ⽹站访客数据 (Website Visitor Data)：IP 地址、Cookie 标识符及访问⽇志记录。 1. Website Visitor Data: IP addresses, cookie identifiers, and access logs. 2. 业务联系⼈数据 (Business Contact Data)：姓名、职位、电⼦邮件、电话号码以及相关沟通记录。 2. Business Contact Data: Names, job titles, emails, phone numbers, and related communication records. 3. 路测数据 (Road Testing Data)：在⾃动驾驶系统测试中捕获的视频图像（可能包含⾏⼈⾯部特征、⻋ 牌号）、⻋辆 GPS 位置及传感器数据。 3. Road Testing Data: Video images captured during ADAS testing (potentially including pedestrian facial features and license plates), vehicle GPS locations, and sensor data. 

5.个⼈数据接收者(Recipients of Personal Data) —第13(1)(e)条 GDPR 

接收者名称 (Recipient Name) 类别 (Category) 所在地点 (Location) 传输⽬的 (Purpose of Transfer) 法律依据 (Legal Basis) Ti Group ⺟公司 (Parent Company) 中国 (China) 研发与算法优化、HR 管理 (R&D, Algorithm Optimization, HR Management) GDPR 第 46(2)(c) 条 SCCs Dropbox 存储服务提供 商 (Storage Provider) 欧洲 / 德国 (Europe / Germany) 财务及本地数据备份 (Financial and local data backup) GDPR 第 28 条 DPA

6.向第三国的数据传输(Data Transfersto Third Countries) — 第44-49条GDPR 

由于我们的⺟公司位于中国，部分个⼈数据（特别是⽤于算法优化的⻋机测试数据、脱敏后的路测视频 以及集团化管理的员⼯数据）将被传输⾄欧盟/欧洲经济区 (EEA) 之外的⽬的地（主要接收⽅为 Ti Group）。 Given our parent company is located in China, certain personal data (specifically vehicle testing data for algorithm optimization, pseudonymized road test videos, and employee data for group-wide management) will be transferred outside the EU/EEA to Ti Group as the primary recipient. 为保障您的数据权利，我们在进⾏跨境传输前已执⾏正式的传输影响评估 (TIA)，并根据 GDPR 第 46(2) (c) 条签署了最新的欧盟委员会标准合同条款 (SCCs)。同时，我们实施了严格的补充技术措施，包括所有 跨境传输采⽤ TLS 1.3 协议强加密、云端存储采⽤ AES-256 加密，并在数据出境前通过 AI 算法对视频中 的⾏⼈和⻋牌进⾏⾃动模糊（匿名化）处理。 To safeguard your data rights, we have conducted a formal Transfer Impact Assessment (TIA) prior to the transfer and executed the latest EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2) (c) GDPR. Furthermore, we implement stringent supplementary technical measures, including TLS 1.3 encryption for data in transit, AES-256 encryption at rest, and automated AI blurring (anonymization) of pedestrians and license plates before any data leaves the EU.

7.存储期限与删除规则(Retention Periods and Deletion Rules) — 第13(2)(a)条GDPR 

数据类别 (Data Category) 处理⽬的 (Purpose) 保留期限 (Retention Period) 法律依据 (Legal Basis) 删除⽅法 (Deletion Method) ⽹站⽇志与 Cookie (Website logs & Cookies) ⽹站分析与功 能 (Website analytics & function) 最⻓ 2 年 (Up to 2 years) Art. 6(1) (a) / (f) GDPR ⾃动过期 (Autoexpiry) 财务及报销记 录 (Financial & Expense Records) 法定记账合规 (Statutory accounting compliance) 10 年 (10 years) HGB/AO & Art. 6(1)(c) GDPR 安全销毁 (Secure destruction) 商业合同及信 函 (Commercial Contracts & Letters) 合同履⾏与审 计 (Contract fulfillment & audit) 6 年 (6 years) HGB & Art. 6(1) (b) GDPR 安全销毁 (Secure destruction) 汽⻋路测原始 视频 (Raw ADAS Road Test Video) 安全与算法研 究 (Safety & algorithm research) 完成脱敏后⽴即删除，最 ⻓ 60 天 (Deleted immediately after anonymization, max 60 days) Art. 6(1) (f) / Art. 9(2)(j) GDPR ⾃动覆盖与脚本 删除 (Automated overwrite & script deletion)

8.数据主体权利(Data Subject Rights) —第15-22条GDPR 

权利 (Right) 法律依据 (Legal Basis) 前提条件 (Conditions) ⾏使⽅式 (How to Exercise) 访问权 (Right of Access) Art. 15 GDPR 需验证⾝份 (Identity verification required) 发送邮件⾄ DPO (Email DPO) 更正权 (Right to Rectification) Art. 16 GDPR 数据不准确或不完整 (Data is inaccurate or incomplete) 发送邮件⾄ DPO (Email DPO) 删除权 / 被遗忘权 (Right to Erasure / Right to be Forgotten) Art. 17 GDPR 处理⽬的已失效或撤回同意 (Purpose fulfilled or consent withdrawn) 发送邮件⾄ DPO (Email DPO) 反对权 (Right to Object) Art. 21 GDPR 针对基于合法利益的处理活动（如路测数 据采集）(Processing based on legitimate interest, e.g., ADAS testing) 发送邮件⾄ DPO (Email DPO)

9. Cookie与追踪技术(Cookies and Tracking Technologies) —第 5(3)条ePrivacy指令

Cookie 名称 (Cookie Name) 提供商 (Provider) ⽬的 (Purpose) 存储期限 (Storage Duration) 法律依据 (Legal Basis) Cookie Consent (CMP) [TO BE COMPLE TED] 区分技术必要与可选分析 Cookie (Distinguish necessary vs optional cookies) [TO BE COMPLET ED] Sec. 25(1) TTDSG / Art. 6(1)(f) GDPR

10.⾃动化决策与分析(Automated Decision-Making and Profiling) —第22条GDPR 

Tijet Technology international GmbH 不会使⽤依据 GDPR 第 22 条对您产⽣法律效⼒或类似重⼤影响的 完全⾃动化决策。 Tijet Technology international GmbH does not employ fully automated decision-making processes that produce legal effects concerning you or similarly significantly affect you, as defined under Art. 22 GDPR. 尽管我们在汽⻋功能验证和⼀致性测试中使⽤了⼈⼯智能和机器学习算法，但所有最终的认证结论和关 键决策均由我们的专业⼯程师通过⼈⼯审核和确认（即具备有效的⼈⼯⼲预）。 Although we utilize AI and machine learning algorithms during automotive functional validation and conformance testing, all final certification conclusions and critical decisions undergo human review and confirmation by our expert engineers (ensuring meaningful human intervention).

11.向监管机构投诉的权利(Right to Lodge a Complaint) —第77 条GDPR

根据 GDPR 第 77 条，如果您认为对您个⼈数据的处理违反了相关数据保护法规，您有权向主管的数据保 护监管机构提出投诉。 Under Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection regulations. 基于我们位于德国的法定注册总部所在地，受我们领先监管机构管辖的机构为： Based on the location of our legally registered headquarters in Germany, our competent lead supervisory authority is: 北莱茵-威斯特法伦州数据保护与信息⾃由专员 (LDI NRW) Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2-4, 40213 Düsseldorf, Germany

12.隐私声明的修改(Changesto this Privacy Notice) 

我们可能出于法律要求的更新或核⼼业务扩展（例如新增汽⻋路测区域、引⼊新传感器或变更跨境传输 框架）的需要，不定期修订本隐私声明。更新的内容将在我们的官⽹同步发布，发⽣重⼤变更时，我们 将通过直接邮件通知或在⽹站显著位置发布公告。 We may update this Privacy Notice from time to time due to legal requirement updates or expansion of our core business operations (such as new ADAS road testing areas, introduction of new sensors, or updates to cross-border transfer frameworks). Updates will be published on our website, and we will communicate any material changes via direct email notice or prominent announcements on our website.

最后更新⽇期 (Last updated)：2026年3⽉27⽇ (March 27, 2026)