Business Data Privacy Notice

This notice further explains how COFCO International processes personal data from individuals who engage with us in a business context, whether on their own behalf or as representatives of companies or other organisations.

1 Overview

This notice explains how COFCO International (collectively CIL, “we”, or “us”) processes personal data from individuals who engage with us in a business context, whether they do so personally or as representatives of companies, or other organisations. This includes customers, suppliers, business partners, service providers, and other stakeholders, as well as persons acting on their behalf.

Please read this notice alongside our full Global Data Privacy Policy, which provides comprehensive information on your rights and our data protection practices.

2 Which Personal Data We Collect

CIL collects personal data that is necessary to conduct our business relationships, depending on the specific business context and the purpose for which the data is collected. This also includes data we process to comply with applicable legal and regulatory requirements. This may include, but is not limited to:

Identification and contact details (such as name, job title, company affiliation, email address, phone number);
Business and contractual information relevant to our commercial agreements and the services we provide or receive;
Financial and payment information necessary for billing, credit checks, and risk assessments;
Information related to business activities, roles, or supply chain involvement, where required for compliance, risk management, or due diligence;
Other information provided directly by individuals, or obtained from publicly available sources or third parties, where permitted by law.

3 How We Collect Your Personal Data

We may collect personal data through the following means:

Directly from you or your organisation, for example during onboarding, contract negotiation or execution, or through ongoing correspondence;
From third-party sources, such as public registers, credit reference agencies, trade insurers, and KYC/AML screening providers;
Via our group entities or business partners, when collaborating on shared transactions or services.

4 How We Use Your Personal Data

We process personal data in the context of our legitimate business operations and in accordance with applicable laws. This includes:

Establishing, managing, and maintaining commercial relationships;
Verifying identities, company structures, and assessing credit or compliance-related risks;
Complying with legal and regulatory obligations, including anti-money laundering (AML), know-your-customer (KYC), and other requirements related to supply chain management and business operations.
Performing contractual obligations, coordinating logistics, and processing payments;
Supporting internal processes including quality assurance, certification, and risk management;
Communicating with you in your professional capacity, including business updates and service coordination;
Protecting our legal interests and ensuring the security and integrity of our operations.

We rely on appropriate legal grounds for processing, including contract performance, legitimate interests, and legal compliance.

5 How And Why We Share Your Personal Data

a) Within CIL

CIL operates globally, which may involve transferring personal data outside your country of residence. Where data is transferred to countries that do not offer the same level of protection, we ensure that appropriate legal safety measures are in place, such as standard contractual clauses or other approved mechanisms.

b) Outside CIL

We may disclose personal data to third parties when necessary for our business operations or to comply with legal requirements. These may include:

External service providers that support our operations, risk management, or regulatory compliance
Financial institutions, insurers, and credit-related service providers
Logistics providers, certification bodies, or supply chain traceability platforms
Auditors, advisors, or consultants assisting us with business or compliance matters
Public authorities, regulators, or law enforcement agencies where legally required or permitted.

6 Your Rights and Further Information

You may have certain rights regarding your personal data, including rights of access, correction, restriction, or objection, subject to applicable data protection laws. You may also have the right to lodge a complaint with supervisory authority.

For more comprehensive information about your data protection rights, how we handle international transfers, our data retention practices, or how to exercise your rights, please refer to our Global Data Privacy Policy. You may also contact our Data Protection Officer at [email protected].