Personal Data Protection Policy
Personal Data Protection Management Policy
In order to comply with the terms of Taiwan’s Personal Data Protection Law as engaged in electronic retail business. The company will collect, process and utilize personal data provided by the parties in accordance with the following principles.
- The company will abide by the relevant laws and regulations of the Personal Data Protection Law, the guidelines set by the company, other relevant laws and regulations.
- The company will formulate regulations and operating standards which related to personal data protection management to implement personal data protection management, and continue to improve it through regular inspection, internal evaluation or inspection.
- After establishing a personal data protection management system, the company will announce to all staffs that they shall be aware of the implementation of the operation.
- The company will express the following in notice: The company will collect, process and use the personal data provided by the parties within the scope of the purpose of use, and will also take appropriate personal data protection measures for the processing and utilization within the scope necessary for the purpose of using the personal data provided by the parties.
- In order to maintain that the personal data provided by the parties are correct and up-to-date, appropriate measures will be taken to prevent the personal data from being stolen, leaked, or tampered with. Enhancing the company's information security related measures to protect the personal data collected, processed and used, while continuously improving the personal data management system built within the company. When it is confirmed that an outflow of capital has occurred, emergency response measures will be taken promptly and the parties will be notified of the facts.
- The company will respond in accordance with the relevant provisions of the Personal Asset Protection Law when the parties submit applications for access to, copy, correction, deletion, etc of personal data provided by them.