Data Relationship Mapper

1. Business Context一、业务背景

Project or service name项目或服务名称

Industry package行业模板

Jurisdiction lens适用法域视角

Your organization贵机构

Counterparty / vendor / partner对方／供应商／合作伙伴

Service and processing purpose服务及处理目的

2. Processing Activities二、处理活动

Use one row per activity in the result. Video-game mode starts from account, telemetry, and profiling because those are usually different legal relationships.结果里每个处理活动单独占一行。游戏模式会先列出账户、运行数据和用户画像这几项，因为它们通常属于不同的法律关系。

Other activity其他活动

3. Data and Recipients三、数据与接收方

Personal data categories个人数据类别

Data subjects数据主体

Recipients and destinations接收方与去向

Sensitive or regulated data敏感或受监管数据 Health, biometric, precise location, financial, religion, or sexual orientation data.健康、生物识别、精确位置、财务、宗教或性取向数据。 Not sure? If losing this data would be especially harmful or embarrassing to a person, check this.不确定？如果此类数据一旦泄露会对个人造成特别严重的伤害或难堪，请勾选此项。 Children or teen users儿童或青少年用户 Anyone under 18 can realistically use the service.实际上可能有未满 18 岁的人使用该服务。 Not sure? If you don't actively prevent minors from signing up, check this.不确定？如果你没有主动阻止未成年人注册，请勾选此项。 Cross-border transfer or remote access跨境传输或远程访问 Data leaves your country, or someone abroad can access it — including a vendor's support staff logging in from another country.数据离开本国，或境外人员可以访问——包括供应商的支持人员从其他国家登录。 Not sure? If any company involved operates from a different country, check this.不确定？如果涉及的任何一家公司在其他国家运营，请勾选此项。 Automated decisions, profiling, or recommendations自动化决策、用户画像或推荐 Software scores, ranks, recommends, or decides about people without a human reviewing each case.软件在无人逐案审核的情况下对个人进行评分、排序、推荐或决策。 Not sure? If an algorithm sorts or targets users automatically, check this.不确定？如果某种算法自动对用户进行分类或定向，请勾选此项。

4. Role Gate四、角色判定

Answer about请就 your own company贵公司自身. Don't worry about legal labels — just describe what actually happens. We'll work out the role for you.作答。不必纠结法律术语——只需描述实际发生的情况，我们会为你判定角色。

We decide why the data is collected and the key details of how我们决定收集数据的目的以及如何收集的关键细节 We set which data, how long it's kept, and who receives it — not someone else.由我们决定收集哪些数据、保存多久、由谁接收——而非他人。 Not sure? If you alone chose what to collect and could change it tomorrow without anyone's permission, check this.不确定？如果是你独自决定收集什么，并且明天无需任何人许可即可更改，请勾选此项。 We only handle the data on another company's written instructions我们仅依据另一家公司的书面指示处理数据 We act on someone else's behalf, like a subcontractor, and do nothing more with it.我们代表他人行事（如分包商），不对数据做任何额外处理。 Not sure? If a client tells you exactly what to do and you can't reuse the data for yourself, check this.不确定？如果客户明确告诉你该怎么做，而你不能将数据用于自身用途，请勾选此项。 The data reaches our servers or systems by default数据默认会进入我们的服务器或系统 Through our SDK, API, cloud, telemetry collector, or analytics pixel.通过我们的 SDK、API、云、遥测采集器或分析像素。 Not sure? If the data lands in infrastructure you control, check this.不确定？如果数据最终落入你所控制的基础设施，请勾选此项。 We can reuse the data (or anything we derive from it) for our own purposes我们可将数据（或由其衍生的任何内容）用于自身目的 Improving our product, building a database, training models, analytics, or ads.用于改进产品、建立数据库、训练模型、数据分析或广告。 Not sure? If you keep the data, build a library from it, or refine it with algorithms for your own service, check this. This is the most important question.不确定？如果你保留数据、据此建立数据库，或用算法对其进行加工以服务于自身业务，请勾选此项。这是最重要的一题。 We and the other company plan the data use together我们与对方公司共同规划数据的使用 Co-designed audiences, dashboards, campaigns, targeting, segmentation, or offers.共同设计受众、看板、营销活动、定向、分群或优惠方案。 Not sure? If you sit in the same planning meetings deciding how data is used, check this.不确定？如果你们在同一个规划会议上共同决定数据如何使用，请勾选此项。 Our code runs locally and we have no access to the data or results我们的代码在本地运行，我们无法访问数据或结果 The library runs on the device/server and we genuinely cannot see the personal data or outputs.该库在设备／服务器上运行，我们确实无法看到个人数据或输出结果。 Not sure? If everything stays on the customer's device and never reaches you, check this.不确定？如果一切都留在客户的设备上、从不传到你这里，请勾选此项。 Data collection is built-in and hard to turn off数据收集是内置的且难以关闭 The customer can't meaningfully change which fields, how often, how long, or who receives data.客户无法实质性地更改收集哪些字段、频率、时长或由谁接收数据。 Not sure? If switching it off would break the product, check this.不确定？如果关闭它会导致产品无法正常运作，请勾选此项。 The data is used for advertising, personalization, or sharing revenue数据被用于广告、个性化或分成收入 Independent commercial benefit from the data or the profiles derived from it.从数据或由其衍生的画像中获得独立的商业利益。 Not sure? If you make money from the data beyond the basic service fee, check this.不确定？如果你从数据中获得了基本服务费以外的收益，请勾选此项。 We rely on a partner's privacy policy and have no separate notice of our own我们依赖合作方的隐私政策，自身没有单独的告知 e.g. our SDK is only mentioned inside the phone maker's / app's privacy policy.例如，我们的 SDK 仅在手机厂商／应用的隐私政策中被提及。 Not sure? If you've never published your own privacy notice for this data, check this.不确定？如果你从未就该数据发布过自己的隐私告知，请勾选此项。

5. Evidence五、证据

Contracts, policies, or documents reviewed已审阅的合同、政策或文件

Known gaps or assumptions已知缺口或假设

Result结果

Answer the role gate and run the analysis. The output will appear here and can be handed to the other tools.完成角色判定并运行分析。输出结果将显示在此处，并可交接给其他工具。

Map who controls the data before choosing the legal tool.在挑选合适的法律工具之前，先弄清楚到底是谁在掌控这些数据。

Why start here?为什么从这里开始？

1. Business Context一、业务背景

2. Processing Activities二、处理活动

3. Data and Recipients三、数据与接收方

4. Role Gate四、角色判定

5. Evidence五、证据

Result结果

Recommended next steps建议的后续步骤

Evidence request list证据请求清单