Data protection has a high priority for Infineon and its subsidiaries. We comply with the data protection legislation of the countries in which we do business. Internal data protection regulations ensure that consistent and high data protection standards apply at all companies within the Infineon Group. Our employees are obligated to comply with statutory and internal data protection regulations and to treating your data as confidential.

Extensive operational, technical and organizational security measures protect your data against accidental or deliberate manipulation, loss, destruction and access by unauthorized persons. We review our security measures regularly and adapt them to technological advances.

The Infineon Technologies AG, Am Campeon 1 – 15, 85579 Neubiberg, Germany, operates the www.infineon.com website and is controller of any personal data collected or otherwise processes on or through www.infineon.com as well as for other processing activities described in this privacy policy.

Depending on the case, our Infineon affiliates are acting as independent controller when processing personal data in their own responsibility.

You can contact the Group Data Protection Officer and staff at:

Infineon Technologies AG

Data Protection Officer

BC DPP Department

Am Campeon 1-15

85579 Neubiberg

Germany

By e-mail:      dataprotection@infineon.com

The California Privacy Rights Act (CPRA) is the State of California’s new data privacy law that grants California consumers broad rights to control their “personal information.”  

1. Collection

Our services have collected the following categories of personal information relating to consumers within the last twelve months: 

Do-not-track. As no workable standard has emerged for how our Services should handle so-called “do not track” signals, our Services do not respond to such signals. 

Limiting Use and Disclosure of Sensitive Personal Information. We use performance and marketing cookies as well as similar technologies only if you have given us your prior consent.
With such mechanisms, we collect information about how users interact with our website and which pages have been visited. This information may include sensitive personal information. To understand more about your rights or to adjust your cookie settings please see our cookie policy

2. Sharing

We do not sell your personal information.  If you consent we may share your personal information to a third party as defined under § 1798.140 (ah)(1) of the CPRA. To do this we use cookies as well as similar technologies.  Upon your first visit to our website, you will have the opportunity to consent to the use of performance and marketing cookies.  To understand more about your rights or to adjust your cookie consent settings please see our cookie policy. 

3. Business Purpose

We may disclose your personal information to a contractor or service provider for a business purpose as defined under § 1798.140(e) of the CPRA.  When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. 

We have disclosed the following categories (corresponding with the collection table above) of personal information for a business purpose:   

4. Data Subject Rights and Choices Under CPRA § 1798.100, 1798.105, 1798.106, 1798.110, 1798.115, 1798.125 and 1798.130

To exercise or understand more about your data subject rights please see Your rights section.

5. Changes To Notice

Infineon may make changes to this Notice. You should review this Notice periodically to keep up to date on our most current policies and practices.

Date Of Last Update:  December 30, 2022 

6. Questions And Contact Information

If you have questions regarding this Notice, please contact Infineon’s Group Data Protection Officer and his Team via e-mail at dataprotection@infineon.com.

This China Addendum to the Privacy Policy of the Infineon Group ("Addendum") only applies to the product(s) or service(s) of Infineon Technologies (China) Co., Ltd and its Affiliates listed below (collectively, "Infineon", "we", "us" or "our") that involve the Processing of Personal Information protected by Relevant Laws and Regulations of China. The provisions of this Addendum prevail in any conflict with the provisions of the Privacy Policy.

  • Infineon Technologies Centre of Competence (Shanghai) Co., Ltd.
  • Infineon Technologies (Shanghai) Co., Ltd.
  • Infineon Technologies (Wuxi) Co., Ltd.
  • Infineon Semiconductors (Wuxi) Co., Ltd.
  • Infineon Integrated Circuit (Beijing) Co., Ltd.
  • Infineon Semiconductors (Shenzhen) Co., Ltd
  • Infineon Technologies (Xi'an) Co., Ltd.

Latest update: December 2023

Please contact us using the details below if you have any questions:

  • By post: Pudong, Shanghai, No. 4, Lane 55, Chuanhe Road, Zhang Jiang Hi-Tech Park, China 201210;
  • By email: dataprotection@infineon.com; or
  • By telephone: Call +86-21-61649891 and ask to be connected to the China Data Protection Officer.

1. About this Addendum

This Addendum will help you better understand the following:

  • Definitions;
  • Personal Information we Process;
  • Our legal bases for Processing;
  • Transfer to third parties;
  • Storage of Personal Information;
  • Security of Personal Information;
  • How we use Cookies;
  • Your Data Subject rights;
  • How to contact us; and
  • Changes to this Addendum.

We understand the importance of your Personal Information to you and will do our best to ensure the security and reliability of your Personal Information. We are committed to maintaining your trust in us and Processing your Personal Information in accordance with principles of lawfulness, legitimacy, necessity, and good faith, and not acting in any manner that is misleading, fraudulent, or coercive.

We also take security measures to protect your Personal Information in accordance with mature industry standards.

2. Deffinitions

For the purposes of this Addendum only, except as otherwise provided in the context:

2.1 "Personal Information" or "PI" refers to any kind of information related to an identified or identifiable natural person as electronically or otherwise recorded, excluding information that has been anonymized.

2.2. "Sensitive Personal Information" or "Sensitive PI" refers to Personal Information that, once leaked or illegally used, will easily lead to the infringement of human dignity or harm to the personal or property safety of a natural person, including biometric recognition, religious belief, specific identity, medical and health condition, financial account, personal location tracking and other information of a natural person, as well as any Personal Information of a minor under the age of 14.

2.3 "Process", "Processed", or "Processing" includes the collection, storage, use, editing, transfer, provision, disclosure, and deletion of Personal Information.

2.4 "Data Subject" refers to the natural person identified by or associated with Personal Information.

2.5 "Personal Information Processor" refers to any organization or individual that independently determines the purpose and method of Processing in their Personal Information Processing activities and provides Personal Information to a recipient outside the territory of China.

2.6 "Entrusted Processor" refers to any organization or individual that Processes Personal Information on behalf of a Personal Information Processor.

2.7 "Overseas Recipient" refers to an organization or individual located outside the territory of China that receives Personal Information from the Personal Information Processor.

2.8 "Regulatory Authority" refers to the cyberspace administration department of China at or above the provincial level.

2.9 "Relevant Laws and Regulations" refers to the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China, the Civil Code of the People's Republic of China, and other applicable laws and regulations of the People's Republic of China.

2.10 The meanings of undefined terms in this Addendum are the same as those stipulated in Relevant Laws and Regulations. 

3. Personal Information we Process 

3.1. How we collect and use your Personal Information

To provide this service, we will collect your Personal Information as permitted by law and in accordance with this Addendum. Please note that if you do not provide relevant Personal Information or consent to our collection of relevant Personal Information, we may not be able to provide you with some or all of products or services.

Depending on the specific services you wish to receive, we may collect and use the Personal Information about you in the ways and for the purposes stated below.

In the table below, we have highlighted in bold the Sensitive Personal Information that we collect, and explain the purposes of such collection. If you do not agree to provide relevant Sensitive Personal Information, you will not be able to enjoy corresponding services or functions that require such Sensitive Personal Information.

3.2. How we collect and use the Personal Information of Minors

Our services are not intended for or targeted to the use of children under the age of 14, and we do not knowingly collect any Personal Information from such children. If you believe we have received Personal Information from a child under the age of 14, please contact us so that we can delete the information immediately.

4. Our legal bases for Processing

Infineon Processes your Personal Information:

  • where it is necessary for the conclusion or performance of a contract to which you are a contracting party;
  • where it is necessary for performing a statutory responsibility or statutory obligation;
  • where it is necessary for responding to a public health emergency or for protecting the life, health, or property of a natural person in an emergency;
  • where Personal Information, which has already been disclosed by you or otherwise legally disclosed, is Processed within a reasonable scope and in accordance with Relevant Laws and Regulations;
  • where it is necessary for carrying out human resources management under employment policies legally established or a collective contract legally concluded;
  • with your consent; or
  • under any other circumstance as provided by Relevant Laws and Regulations.

Sometimes we might need to collect your separate consent for Processing activities if required by Relevant Laws and Regulations. We will notify you if such separate consent is required and provide details about the Processing.

5. Transfers to third parties

We may need to transfer your Personal Information to other Infineon Group entities or third parties, especially to selected Entrusted Processors, distributors, partners, and sales representatives.

We conduct Personal Information protection impact assessments before transferring your Personal Information to third parties.

5.1. Entrusted Processors

We may transfer your Personal Information to our Entrusted Processors that need to know such information to fulfil one or more of the "Purposes of Processing PI" described in Section 3.1, such as our professional advisors and technology service providers. When we share your Personal Information with Entrusted Processors, we require them to:

  • process Personal Information only as we instruct them;
  • not transfer your Personal Information to other parties without our approval;
  • implement adequate operational, technical, and organizational security measures to protect your Personal Information from any unauthorized access, leakage, tampering, or loss;
  • keep your Personal Information confidential;
  • return or delete your Personal Information at our instruction;
  • submit to our supervision; and
  • act in a manner consistent with Infineon policies and Relevant Laws and Regulations.

5.2. Third-party Personal Information Processors in China

We may need to provide your Personal Information to the following third parties in China, who are separate Personal Information Processors of your Personal Information:

We do not provide your Personal Information to third parties without your separate consent unless such provision is in accordance with Relevant Laws and Regulations. For information that is relevant but not listed in the above table, we will supplement it in the Personal Information Consent Letter.

5.3. Overseas Recipient

Infineon has global business operations. As such, we may need to transfer your Personal Information from China to the following Overseas Recipients:

  • Infineon Technologies AG (which is the Overseas Recipient):
  • Location: Am Campeon 1-15, 85579 Neubiberg, Bavaria, Germany;
  • Contact Information: dataprotection@infineon.com;
  • Ways and Procedures to Exercise Your Rights: Send emails to dataprotection@infineon.com.
  • Other affiliates of the Infineon Group who assist the Overseas Recipient to realize the business goal (which should be considered as Other Overseas Recipients).

The details of the Processing conducted by the Overseas Recipient (i.e., Infineon Technologies AG) are as follows:

We shall only transfer your Personal Information to the Overseas Recipient in accordance with Relevant Laws and Regulations and, where necessary, with your separate consent.

We require the Overseas Recipient of your Personal Information to:

  • Process Personal Information only in accordance with the agreed purpose, method and scope of the transfer and the agreed purpose and method of Personal Information Processing by the Overseas Recipient.
  • Inform us of the place and period of data retention abroad.
  • Take certain measures for handling outbound data after the retention period expires, the agreed purpose is completed, or the agreements terminate.
  • Not make onward transfers of Personal Information to other organizations or individuals.
  • Inform Infineon when there is a substantial change in its actual control or business scope or when the data security protection policies and regulations of the country or region where it is located and the network security environment changes, as well as other force majeure circumstances that make it difficult to ensure data security.
  • Take appropriate emergency measures to safeguard your Personal Information when it is tampered with, destroyed, leaked, lost, transferred, illegally obtained, or illegally used.

6. Storage of Personal Information

Unless Relevant Laws and Regulations stipulate longer retention periods, we only store your Personal Information for the minimum period necessary for achieving the "Purposes of Processing PI" described in this Addendum.

After the retention period expires, we will delete or anonymize your Personal Information in accordance with Relevant Laws and Regulations. If deleting your Personal Information is technically difficult, we will stop all Processing activities other than storing your Personal Information and take necessary security measures.

7. Security of Personal Information

Data protection has a high priority for Infineon and its subsidiaries. We use various technical and organizational measures to protect your Personal Information. To understand more about how we protect your Personal Information, please see https://www.infineon.com/cms/en/about-infineon/sustainability/DPMS/?redirId=189805 and our Privacy policy.

8. How we use Cookies

We use Cookies as well as similar technologies. Upon your first visit to our website, you will have the choice to consent to our use of performance and marketing Cookies. To understand more about your rights or to adjust your Cookie consent settings, please see our section about Cookies.

9. Your Data Subject rights

9.1. Your rights over your Personal Information

Subject to Relevant Laws and Regulations, you have the following rights over your Personal Information:

  • Right to request access to and copies of your Personal Information.
  • Right to information about and to decide on our Processing.
  • Right to restrict or deny our Processing of your Personal Information.
  • Right to seek the transfer of your Personal Information to a third party under Relevant Laws and Regulations.
  • Right to request the rectification of your Personal Information.
  • Right to request the completion of your Personal Information.
  • Right to request the erasure of your Personal Information.
  • Right to unsubscribe to personalized marketing messages.
  • Right to request an explanation of automated decisions that have a material impact on your rights and interests.
  • Right to refuse decisions solely made by automated means that have a material impact on your rights and interests.
  • Right to request an explanation of our Personal Information Processing rules.
  • Right to require a copy of the Contract concluded between the Overseas Recipient and Infineon. If any trade secret or confidential business information is involved, relevant content in the copy of the Contract may be appropriately redacted.

9.2. Your Rights as a Third-Party Beneficiary

Due to the necessity of Infineon global business operations, we need to transfer your Personal Information to the Overseas Recipient. To protect your Personal Information rights and interests, we sign the Standard Contract for Outbound Transfer of Personal Information ("Contract") formulated by the Cyberspace Administration of China with the Overseas Recipient. You will be a third-party beneficiary under the Contract and enjoy relevant rights, if you do not expressly refuse these rights within 30 days. Please rest assured that the Contract does not impose any liability on you. Your rights as a third-party beneficiary under the Contract include, but are not limited to:

  • Right to know about, decide on, restrict and refuse the Processing of your outbound Personal Information, the right to access, make copies of, correct, supplement and delete your outbound Personal Information, as well as other rights stipulated by Relevant Laws and Regulations;
  • Right to exercise the above rights over your outbound Personal Information by making a request to us and/or the Overseas Recipient using the contact details set out in this Addendum;
  • Right to assert the above rights by filing a complaint with a Regulatory Authority or filing a lawsuit with a competent Chinese People's Court.

If you do not want to be a third-party beneficiary under the Contract, please contact us within 30 days using the details provided in in Section 10. "How to contact us".

9.3. How to exercise your rights

If you would like to exercise any of the above rights, understand how we use your Personal Information, or have any questions about this Addendum, please contact us using the details provided in the Section 10. "How to contact us" below.

You also have the right to withdraw your consent to our Processing of your Personal Information carried out based on your consent. If you wish to withdraw your consent to our Processing of your Personal Information, contact us using the details provided in Section 10 below. Please note that the withdrawal of your consent does not affect the validity of any activity of Processing of your Personal Information already carried out before the withdrawal of your consent.

If you would like to exercise any of the above rights against any Third Party or the Overseas Recipient, please contact them directly using the information in Sections 5.2 and 5.3 above.

10. How to contact us

You can contact us at:

  • By post: Pudong, Shanghai, No. 4, Lane 55, Chuanhe Road, Zhang Jiang Hi-Tech Park,

China 201210;

  • By email: dataprotection@infineon.com; or
  • By telephone: Call +86-21-61649891 and ask to be connected to the China Data Protection Officer.

We will promptly respond to your requests to exercise your rights if you contact us.

11. Changes to this Addendum

Our services are not intended for, or targeted to the use of children under the age of 16 and we do not knowingly collect any personal information from such children. If you believe we have received personal information from a child under the age of 16, please contact us so that we can delete the information immediately.