Privacy Policy 隱私權政策
Thank you for using this website (Xinyangtw.com) and service, which is owned and operated by 鑫揚有限公司 (“Xinyangtw Universe”, “Xinyangtw.com”, “we”, “us”, and “our”) located at 3F-9, No. 48, Section 2, Chongqing North Road, Datong District, postal code 10345, Taipei City, Taiwan owns and operates this website (this “Site”).
We use the words “you” and “your” to mean you, the reader, and other visitors to our online and mobile resources who are, in all cases, over the age of 18. Our privacy statement (“this statement,” “this privacy statement,” and “our statement”) informs you about from whom and the types of personal information we collect, how we use it, who we share it with and why, and what we do to try to protect it.
Online and mobile resources mean the websites and other internet features we own that allow you to interact with our websites, as well apps we’ve created and distributed to let our customers and followers view our online and mobile resources or otherwise interact with the content we provide.
WHO WE COLLECT PERSONAL INFORMATION FROM
We may collect personal information from the following groups of data subjects: visitors to, and users of, our online and mobile resources; our customers; current members of our workforce and those who apply for posted jobs.
Personal information generally means information that can be used to identify you or that can be easily linked to you (for example, your name, address, telephone number, email address, social security number and date of birth). The privacy laws in some jurisdictions include unique elements in what they consider to be the personal information of the consumers or data subjects they protect. If those laws apply to us, as in the case of the California Consumer Privacy Act (“CCPA”) or European General Data Protection Regulation (“GDPR”), our use of the phrase “personal information” includes the unique elements required by such laws.
The categories of information we collect from each of these groups, and the ways in which we use it, differs. As you may have noticed, it’s possible that the same person could fall into more than one group. Most of this statement addresses our processing and sharing of personal information collected from visitors to and users of our online and mobile resources and our customers.
Nonetheless, we collect and retain the types of professional or employment related personal information you would expect an employer to have about its existing and former workforce and new job applicants. We provide legally required notices of collection and describe our use and sharing of the personal information of our workforce and applicants in greater detail in confidential internal human resource manuals and documents accessible to members of our workforce, or by publication on the proprietary workforce/applicant portals and apps we operate. In some cases, such portals and apps may be operated by third parties who transfer the personal information to us. In those situations, the legal responsibility to provide notice usually rests with the third party, not us.
In addition, like all corporate enterprises, we buy goods and services, lease equipment and office space and attend industry events. In doing so, we interact with many existing and potential vendors and business partners from whom we necessarily collect certain personal information in connection with our contractual and business relationships. As with our customers, this information is typically limited to minimum business contact information. We use and share personal information collected from our vendors and business partners to manage, administer and perform under our contracts with them, or share information about our products. We describe our use of vendor and business partner personal information in greater detail in our confidential contracts with those parties or on the internal vendor management portals we operate.
WHAT WE COLLECT
There are two types of information that we obtain from you online and then store and use: (i) non-personal information that’s collected automatically from each visitor, such as your device operating system; and (ii) personal information that you voluntarily provide to us or that is collected automatically.
By using our online and mobile resources or purchasing our products or services, you are signifying to us that you agree with this section of our privacy statement and that we may use and disclose your information as described.
Voluntarily Submitted Information.
If you participate in certain activities via our online and mobile resources, you may be asked to provide us with information about yourself. The types of personal information we collect in those situations includes identifiers (such as your name, email address, physical address, and phone number), professional information (such as the business you are in), and financial account information (such as your credit card information). We do not sell, rent, or trade voluntarily submitted personal information with third parties.
If you don’t want us to collect this type of personal information, please don’t provide it. This means you shouldn’t participate in the activities on our online and mobile resources that request or require it and you may want to communicate with us by phone or regular mail instead. Participation is strictly your choice. Not participating may limit your ability to take full advantage of the online and mobile resources, but it will not affect your ability to access certain information available to the general public on the online and mobile resources.
Some of the ways you voluntarily give us your personal information and how we use it:
Emails and Online Forms – When you send us an email or fill out an online form, such as to contact us, your email address and any other personal information (e.g., home address or phone number) that may be in the content of your message or attached to it, are retained by us and used to respond back directly to you and to process your request. Depending on the personal information provided, communications from us may be in the form of emails, telephone calls, and/or text messages. We may also send you information about any of our products or services we think may be of interest to you.
Registering for an Account – When you register for an account, you submit personal information to us such as your name and email address which we then retain. We use that information to create and manage your account and, in some cases, establish a password and profile to communicate with you.
Registering for Events – When you register for services, webinars, events, conferences, or programs we ourselves may host (rather than outsource to a third-party event manager with its own privacy policies), you will be submitting the types of identifiers described above. If the event requires a fee, we may also ask you to submit credit card or other financial information. We use this information to register you for the event and send you communications regarding the event.
Becoming a Subscriber to Our Service – We use any information provided from our customers to perform our contractual obligations and provide the products and services purchased to them, to manage their accounts and communicate with them.
Automatically Collected Information.
When you visit our online and mobile resources, basic information is passively collected through your web browser via use of tracking technologies, such as a “cookie” which is a small text file that is downloaded onto your computer or mobile device when you access the online and mobile resources. It allows us to recognize your computer or mobile device and store some information about your preferences or past actions.
We allow third party vendors to use cookies or similar technologies to collect information about your browsing activities over time following your use of the site. For example, we use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies to help us analyze how you use the online and mobile resources and enhance your experience when you visit the online and mobile resources. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/. You can learn more about how to opt out of Google Analytics by going to https://tools.google.com/dlpage/gaoptout.
The internet activity information collected through cookies and other similar means includes such things as: the domain name and IP address from which you accessed our online and mobile resources; the type of browser and operating system you use; the date and time and length of your visit; the specific page visited, graphics viewed and any documents downloaded; the specific links to other sites you accessed from our online and mobile resources; and the specific links from other sites you used to access our online and mobile resources.
Additionally, if you access our online and mobile resources from a phone or other mobile device, the mobile services provider may transmit to us uniquely identifiable mobile device information which allows us to then collect mobile phone numbers and associate them with the mobile device identification information. Some mobile phone vendors also operate systems that pinpoint the physical location of devices and we may receive this information as well if location services are enabled on your device. If you do not want us to collect and use geolocation data, disable location services through your device settings.
Regardless, we use both automatically collected information and mobile device information to compile generic reports about popular pages on our online and mobile resources, and to see how our customers and followers are accessing our online and mobile resources. We then use that data to administer the online and mobile resources and make them better, make your activities more convenient and efficient and to enhance the functionality of our online and mobile resources, such as by remembering certain of your information in order to save you time.
We use and retain your personal information in accordance with applicable law and as long as necessary to carry out the purposes described above in accordance with our internal data retention procedures.
WHEN/WITH WHOM DO WE SHARE PERSONAL INFORMATION
We use non-personal information to administer our online and mobile resources, make them better, and to make business decisions about what resources our customers might like.
We use voluntarily provided personal information to respond to your inquiries and provide you with the services you have requested, amongst other uses as further described below. We do not sell or rent your personal information to third party data vendors or marketing companies. We do not share phone numbers with third parties for marketing purposes. As you might expect, we disclose your information when required by law.
Legally Compelled Disclosures.
We may disclose your information, including personal information, to government authorities, and to other third parties when compelled to do so by such government authorities, or at our discretion or otherwise as required or permitted by law, including but not limited to responding to court orders and subpoenas.
YOUR RIGHTS AND OPTIONS
You do not have to provide personal information to enjoy most of the features of our online and mobile resources. Moreover, you can opt out of certain activities like newsletters and announcements. Residents of California and data subjects whose personal information was obtained while they were in the GDPR Jurisdictions have certain additional rights.
GDPR Jurisdictions means the countries composed of the European Economic Area (including Iceland, Lichtenstein, and Norway) and the following countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden.
Furthermore, Andorra, Argentina, Canada (only commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and Japan have received an “adequacy decision” from the European Commission, adheres to the material terms of the GDPR. Switzerland also has its own data protection via its Federal Act of Data Protection (“DPA”).
GDPR longer has jurisdiction over The United Kingdom. Since the United Kingdom (“UK”) has now formally left the European Union, it is no longer regulated domestically by the material terms of the GDPR. The United Kingdom General Data Protection Regulation (“UK-GDPR”) is the UK's data privacy law that governs the processing of personal data domestically.
Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not specifically respond to browser “do not track” signals.
CHILDREN’S PRIVACY
Federal law imposes special restrictions and obligations on commercial website operators who direct their operations toward, and collect and use information from, children under the age of 18. We take those age-related requirements very seriously, and consistent with it do not intend for our online and mobile resources to be used by children under the age of 18 without first obtaining the verifiable consent of such child’s parent or legal guardian. Moreover, we do not knowingly collect personal information from minors under the age of 18, only a parent or legal guardian may provide such information after adhering to our verification process for submitting such information via the online and mobile resources. If we become aware that anyone under the age of 18 has submitted personal information to our online and mobile resources, we will delete that information and will not use it for any purpose whatsoever. If you believe that someone under the age of 18 has submitted personal information to our online and mobile resources, please contact us at [email protected]. We encourage parents and legal guardians to talk with their children about the potential risks of providing personal information over the Internet.
HOW WE PROTECT COLLECTED PERSONAL INFORMATION
We will take all reasonable security precautions to protect your personal information provided to our online and mobile resources. We have adopted a security program that includes technical, organizational, administrative, and other security measures designed to protect, in a manner consistent with accepted industry standards and applicable law, against anticipated or actual threats to the security of personal information (the “Security Program”). We cannot, however, guarantee that your information, whether during transmission or while stored on our systems or otherwise in our care, will be free from unauthorized access or that loss, misuse, destruction, or alteration will not occur. Except for our duty to maintain the Security Program under applicable law, we disclaim any other liability for any such theft or loss of, unauthorized access or damage to, or interception of any data or communications including personal information. We have every reason to believe our Security Program is reasonable and appropriate for our business and the nature of foreseeable risks to the personal information we collect. We further periodically review and update our Security Program, including as required by applicable law.
Nonetheless, as part of our Security Program, we have specific incident response and management procedures that are activated whenever we become aware that your personal information was likely to have been compromised.
THE CALIFORNIA CONSUMER PRIVACY ACT
When we collect personal information from California residents, we become subject to, and those residents have rights under, the California Consumer Privacy Act or “CCPA”. This section of our statement is used to allow us to fulfill our CCPA obligations and explain your CCPA rights. For purposes of this section, the words “you” and “your” mean only such California residents.
What did we collect from California Residents?
We collect the following categories of personal information: identifiers such as name, address, IP address, and other similar identifiers; personal information described in subdivision (e) of Section 1798.80 (California customer records statute) such as a name, address, telephone number, credit card number; commercial information such as products or services purchased; internet/electronic activity such as browsing history and search history; geolocation data including geographic coordinates/physical location; and audio, video, electronic or other similar information. We may disclose this information for one or more business purposes permitted by the CCPA. We do not sell, and within the last 12 months have not sold, personal information to third parties.
Rights of California Residents
You have the following rights under the CCPA, in summary disclosure, access and delete. More information can be found here. It’s important to us that you know that if you exercise these rights, we will not “discriminate” against you by treating you differently from other California residents who use our sites and mobile resources or purchase our services but did not exercise their rights.
You can exercise these rights up to two different times every 12 months. To do so, just contact us [email protected]. We may ask you to fill out a request form. The CCPA only allows us to act on your request if we can verify your identity or your authority to make the request so you will also need to follow our instructions for identity verification.
If you make a verifiable request per the above, we will confirm our receipt and respond in the time frames prescribed by the CCPA.
THE EU GENERAL DATA PROTECTION REGULATION
We do collect or otherwise obtain personal information from data subjects located in the GDPR Jurisdictions. We fulfill our GDPR obligations with respect to our workforce/job applicants, our customers (and their own end-clients), and our vendors and business partners through a series of separate notices, contracts or other terms provided to them at the time, and in the manner and form, GDPR and local law within each GDPR Jurisdiction requires.
We describe, in the immediately following section of this statement, how we comply with the GDPR for personal information collected from visitors to and users of our online and mobile resources while they were in a GDPR Jurisdiction. Thus, for purposes of that section, the words “you” and “your” mean only such GDPR Jurisdiction-based visitors and users.
What do we collect from you in the GDPR Jurisdictions and how do we use it?
We collect from you the categories of personal information already described. The lawful basis on which we rely for such collection, later use and disclosure, is what the GDPR refers to as legitimate interest. As stated elsewhere in this statement, we do not sell any of your personal information to third parties nor do we use it for automated decision making.
Cross-border Data Transfers and Third-Party Processors
If we transfer personal information from the GDPR Jurisdictions to a location that has not been deemed by the European Commission to have adequate privacy protections, we do so in the manner the GDPR permits.
Rights of Data Subjects in the GDPR Jurisdictions
While we attempt to allow all visitors and users of our online and mobile resources to exercise a degree of control over their personal information, under the GDPR we have a legal obligation to do so for you. More specifically, with respect to personal information collected from you while you were in a GDPR Jurisdiction, you have these rights: transparency, access, correction and deletion, portability, who, what, why and where, and restriction/objection (for more information click here).
If you would like to exercise any of these rights, please contact [email protected]. Your ability to exercise these rights is subject to certain conditions and exemptions that you can read about in Articles 12 through 23 of the GDPR. Among those conditions is our right to decline part or all of a request if we cannot satisfy our reasonable doubts and concerns about your identity in a manner that helps us minimize the risk that unauthorized persons might use a GDPR right to access your personal information. We will respond to all requests without undue delay, and in accordance with the time frames, if any, prescribed by the GDPR. If you are not satisfied with how we use your personal information or respond to your requests, you have the right to complain to your data protection regulator. Contact information for the EU data protection regulators can be found here.
RIGHTS OF DATA SUBJECTS IN OTHER JURISDICTIONS
In other jurisdictions, with similar data privacy regulations, we may collect from you the categories of personal information already described. We collect and manage (including disclose) such data in compliance with applicable local law(s). As noted, we do not sell any of your personal information to third parties nor do we use it for automated decision making.
CHANGES TO THIS PRIVACY STATEMENT
This privacy statement was drafted on October 30, 2024 and is effective as of this date.
We reserve the right to change or update this statement from time to time. Please check our online and mobile resources periodically for such changes since all information collected is subject to the statement in place at that time.
CONTACTING US
If you have questions about our privacy statement or privacy practices, please contact us at:
Company Name: 鑫揚有限公司
Address: 3F-9, No. 48, Section 2, Chongqing North Road, Datong District, postal code 10345, Taipei City, Taiwan
Phone Number: 02-2214-1498
Email: [email protected]
隱私權政策
感謝您使用本網站 (Xinyangtw.com) 及服務，本網站由鑫揚有限公司（“Xinyangtw Universe”、“Xinyangtw.com”、“我們”、“我們的”）擁有及經營，地址為台北市大同區重慶北路二段48號9樓之3，郵遞區號10345。
我們使用“您”和“您的”來指代您，讀者，以及所有年滿18歲的訪客。我們的隱私聲明（“本聲明”、“本隱私聲明”及“我們的聲明”）告知您我們從何處及收集哪些類型的個人信息，我們如何使用這些信息，我們與誰共享這些信息以及為何共享，還有我們採取了哪些措施來保護這些信息。
在線和移動資源指的是我們擁有的網站及其他網絡功能，這些功能讓您能與我們的網站互動，還包括我們創建並發佈的應用程式，讓我們的客戶和追隨者能查看我們的在線和移動資源或以其他方式與我們提供的內容互動。
我們從哪些人群收集個人信息
我們可能會從以下數據主體群體收集個人資訊：我們的線上和移動資源的訪客和用戶；我們的客戶；目前的員工以及申請職位的人士。
個人信息通常是指可以用來識別您的信息或可以輕易與您相關聯的信息（例如，您的姓名、地址、電話號碼、電子郵件地址、社會安全號碼和出生日期）。某些法域的隱私法律對其所保護的消費者或數據主體的個人信息有獨特的定義。如果這些法律適用於我們，例如加州消費者隱私法（“CCPA”）或歐盟通用數據保護條例（“GDPR”），我們在此使用的“個人信息”一詞包括這些法律所要求的獨特元素。
我們從每個這些群體收集的信息類別以及我們的使用方式各不相同。正如您可能注意到的，可能同一個人同時屬於多個群體。本聲明主要針對我們從在線和移動資源的訪客和用戶以及我們的客戶收集的個人信息的處理和共享。
儘管如此，我們收集並保留的與專業或就業相關的個人信息，您可以預期雇主對其現有和前員工以及新求職者擁有的信息。我們提供法律要求的收集通知，並在內部的機密人力資源手冊和文件中詳細描述我們對員工和求職者個人信息的使用和共享，這些文件可供我們的員工查閱，或通過我們運營的專有員工/求職者門戶和應用程序發布。在某些情況下，這些門戶和應用程序可能由第三方運營，並將個人信息轉移給我們。在這些情況下，提供通知的法律責任通常由第三方承擔，而非我們。
此外，與所有企業一樣，我們購買商品和服務、租賃設備和辦公空間，並參加行業活動。在這個過程中，我們與許多現有和潛在的供應商及商業夥伴互動，並因此需要收集與我們的合同和商業關係相關的某些個人信息。與我們的客戶一樣，這些信息通常僅限於最基本的商業聯絡信息。我們使用和共享從供應商和商業夥伴收集的個人信息，以管理、執行我們與他們的合同，或共享有關我們產品的信息。我們在與這些方的機密合同中或我們運營的內部供應商管理門戶中更詳細地描述了我們對供應商和商業夥伴個人信息的使用。
我們收集的內容
我們從您那裡獲得並存儲和使用的信息有兩種類型：(i) 自動從每位訪客收集的非個人信息，例如您的設備操作系統；(ii) 您自願提供給我們的個人信息或自動收集的個人信息。
通過使用我們的在線和移動資源或購買我們的產品或服務，您表示同意我們隱私聲明中的這一部分，並且我們可以按照描述使用和披露您的信息。
自願提交的信息
如果您通過我們的在線和移動資源參加某些活動，您可能會被要求提供有關您自己的信息。在這些情況下，我們收集的個人信息類型包括識別信息（如您的姓名、電子郵件地址、實體地址和電話號碼）、專業信息（如您所從事的行業）和財務賬戶信息（如您的信用卡信息）。我們不會將自願提交的個人信息出售、出租或交易給第三方。
如果您不希望我們收集這類個人信息，請不要提供。這意味著您不應參加我們的在線和移動資源中要求或需要提供此信息的活動，您也可以選擇通過電話或普通郵件與我們聯繫。參加活動完全是您的選擇。不參加可能會限制您充分利用在線和移動資源的能力，但不會影響您訪問在線和移動資源中對公眾可用的某些信息的能力。
您自願提供個人信息的一些方式以及我們如何使用這些信息：
電子郵件和在線表單——當您發送電子郵件或填寫在線表單（例如，聯繫我們）時，您的電子郵件地址以及可能包含在您的信息內容或附加檔案中的任何其他個人信息（例如，家庭地址或電話號碼）將被我們保留，並用於直接回覆您和處理您的請求。根據提供的個人信息，來自我們的通訊可能以電子郵件、電話或簡訊的形式進行。我們還可能會向您發送有關我們認為您可能感興趣的任何產品或服務的信息。
註冊帳戶——當您註冊帳戶時，您會向我們提交個人信息，例如您的姓名和電子郵件地址，我們將保留這些信息。我們使用這些信息來創建和管理您的帳戶，在某些情況下，還會建立密碼和個人資料以便與您聯繫。
註冊活動——當您註冊我們主辦的服務、網絡研討會、活動、會議或項目（而不是外包給有自己隱私政策的第三方活動管理者）時，您將提交上述所描述的識別信息。如果活動需要支付費用，我們可能還會要求您提交信用卡或其他財務信息。我們使用這些信息來為您註冊該活動並向您發送有關該活動的通訊。
成為我們服務的訂閱者——我們使用客戶提供的任何信息來履行我們的合同義務，提供購買的產品和服務，管理其帳戶並與他們溝通。
自動收集的信息
當您訪問我們的在線和移動資源時，基本信息會通過您的網絡瀏覽器被被動收集，這是通過使用跟蹤技術，例如“Cookie”來實現的。Cookie是一個小的文本文件，當您訪問在線和移動資源時，它會下載到您的計算機或移動設備上。這使我們能夠識別您的計算機或移動設備並存儲一些有關您偏好或過去行為的信息。
我們允許第三方供應商使用Cookies或類似技術來收集您使用網站後的瀏覽活動信息。例如，我們使用谷歌提供的網站分析服務Google Analytics。Google Analytics使用Cookies來幫助我們分析您如何使用在線和移動資源，並提升您訪問時的體驗。要了解更多有關谷歌如何使用這些數據的信息，請訪問 www.google.com/policies/privacy/partners/。您可以通過訪問 https://tools.google.com/dlpage/gaoptout 獲得有關如何退出Google Analytics的更多信息。
通過Cookies和其他類似方式收集的互聯網活動信息包括：訪問我們在線和移動資源的域名和IP地址；您使用的瀏覽器和操作系統類型；訪問的日期、時間和時長；特定訪問的頁面、查看的圖形和下載的任何文檔；從我們的在線和移動資源訪問的其他網站的特定鏈接；以及從其他網站訪問我們的在線和移動資源的特定鏈接。
此外，如果您從電話或其他移動設備訪問我們的在線和移動資源，移動服務提供商可能會向我們傳輸唯一可識別的移動設備信息，這使我們能夠收集手機號碼並將其與移動設備識別信息關聯起來。一些手機供應商還運行能夠定位設備物理位置的系統，如果您的設備啟用了位置服務，我們也可能會收到這些信息。如果您不希望我們收集和使用地理位置數據，請通過您的設備設置禁用位置服務。
無論如何，我們使用自動收集的信息和移動設備信息來編制有關我們在線和移動資源中熱門頁面的通用報告，並查看我們的客戶和追隨者如何訪問我們的在線和移動資源。我們然後使用這些數據來管理在線和移動資源並改善它們，使您的活動更便捷高效，並增強我們在線和移動資源的功能，例如通過記住您的某些信息來節省您的時間。
我們根據適用法律使用和保留您的個人信息，並在必要時根據我們的內部數據保留程序執行上述目的。
我們何時/與誰共享個人信息
我們使用非個人信息來管理我們的在線和移動資源，提升其質量，並就我們的客戶可能喜歡的資源做出商業決策。
我們使用自願提供的個人信息來回應您的詢問，並提供您所要求的服務，還有其他後續描述的用途。我們不會將您的個人信息出售或出租給第三方數據供應商或市場營銷公司。我們不會出於市場營銷目的與第三方共享電話號碼。如您所預期，我們在法律要求時會披露您的信息。
法律強制披露
我們可能會向政府機構和其他第三方披露您的信息，包括個人信息，當政府機構要求時，或在我們的自行裁量下，或在法律要求或允許的情況下，包括但不限於回應法院命令和傳票。
您的權利和選擇
您不必提供個人信息即可享受我們在線和移動資源的大多數功能。此外，您可以選擇退出某些活動，如電子郵件通訊和公告。加利福尼亞州居民及其個人信息在GDPR管轄區獲取的數據主體擁有某些額外權利。
GDPR管轄區是指由歐洲經濟區組成的國家（包括冰島、列支敦士登和挪威）以及以下國家：奧地利、比利時、保加利亞、克羅地亞、塞浦路斯、捷克共和國、丹麥、愛沙尼亞、芬蘭、法國、德國、希臘、匈牙利、愛爾蘭、意大利、拉脫維亞、立陶宛、盧森堡、馬爾他、荷蘭、波蘭、葡萄牙、羅馬尼亞、斯洛伐克、斯洛文尼亞、西班牙和瑞典。
此外，安道爾、阿根廷、加拿大（僅限商業機構）、法羅群島、根西島、以色列、曼島、澤西島、新西蘭、瑞士、烏拉圭和日本已獲得歐洲委員會的“充足性決定”，符合GDPR的實質條款。瑞士也通過其聯邦數據保護法（“DPA”）擁有自己的數據保護法。
GDPR不再對英國具有管轄權。自英國正式脫離歐盟以來，英國不再受到GDPR的實質條款的國內監管。英國通用數據保護法（“UK-GDPR”）是英國管理國內個人數據處理的數據隱私法。
某些瀏覽器具有“拒絕追蹤”功能，讓您告訴網站您不希望跟蹤您的在線活動。目前，我們不會特別回應瀏覽器的“拒絕追蹤”信號。
兒童隱私
聯邦法律對針對18歲以下兒童的商業網站運營商施加了特殊限制和義務。我們非常重視這些年齡相關的要求，並且不打算讓我們的在線和移動資源被18歲以下的兒童使用，除非首先獲得該兒童的父母或法定監護人的可驗證同意。此外，我們不會故意收集18歲以下未成年人的個人信息，只有父母或法定監護人在遵循我們的驗證過程後才能提供此類信息。如果我們發現任何18歲以下的人向我們的在線和移動資源提交了個人信息，我們將刪除該信息，並不會以任何目的使用它。如果您相信某位18歲以下的人向我們的在線和移動資源提交了個人信息，請通過 [email protected] 與我們聯繫。我們鼓勵父母和法定監護人與他們的孩子談論在互聯網上提供個人信息的潛在風險。
我們如何保護收集的個人信息
我們將採取所有合理的安全預防措施來保護您提供給我們在線和移動資源的個人信息。我們已採取包括技術、組織、管理和其他安全措施在內的安全計劃，以保護個人信息免受預期或實際的安全威脅，這些措施符合行業標準和適用法律（“安全計劃”）。然而，我們不能保證您的信息在傳輸過程中、存儲在我們的系統上或以其他方式保管時，將不會受到未經授權的訪問，或不會發生損失、濫用、破壞或更改。除了根據適用法律維護安全計劃的義務外，我們對於任何此類數據或通訊（包括個人信息）的盜竊、損失、未經授權的訪問或損壞，以及攔截不承擔任何其他責任。我們有充分的理由相信，我們的安全計劃對我們的業務和可預見的個人信息風險是合理和適當的。我們還會定期審查和更新我們的安全計劃，包括根據適用法律的要求。
儘管如此，作為我們安全計劃的一部分，我們有具體的事件響應和管理程序，當我們發現您的個人信息可能遭到破壞時，將立即啟動這些程序。
加利福尼亞消費者隱私法
當我們從加利福尼亞居民那裡收集個人信息時，我們將受到加利福尼亞消費者隱私法（“CCPA”）的約束，這些居民也擁有該法所賦予的權利。本節旨在幫助我們履行CCPA的義務並解釋您的CCPA權利。在本節中，“您”和“您的”僅指這些加利福尼亞居民。
我們從加利福尼亞居民收集了什麼？
我們收集以下類別的個人信息：識別符號，如姓名、地址、IP地址和其他類似識別符號；根據1798.80條第(e)款（加州客戶記錄法）的描述的個人信息，如姓名、地址、電話號碼、信用卡號；商業信息，如購買的產品或服務；互聯網/電子活動，如瀏覽歷史和搜索歷史；地理位置數據，包括地理坐標/物理位置；以及音頻、視頻、電子或其他類似信息。我們可能會為CCPA允許的一個或多個商業目的披露這些信息。我們不會出售，並且在過去12個月內未曾出售個人信息給第三方。
加利福尼亞居民的權利
根據CCPA，您擁有以下權利，總結為：披露、訪問和刪除。更多信息可以在此找到。對我們來說，了解您行使這些權利後，我們不會對您進行“歧視”，即不會以不同的方式對待那些使用我們網站和移動資源或購買我們服務但未行使其權利的其他加利福尼亞居民，這一點非常重要。
您可以在每12個月內行使這些權利最多兩次。要這樣做，只需通過 [email protected] 與我們聯繫。我們可能會要求您填寫請求表格。CCPA僅允許我們在能夠驗證您的身份或您提出請求的權限時對您的請求採取行動，因此您還需要遵循我們的身份驗證指導。
如果您根據上述要求提出了可驗證的請求，我們將確認收到並在CCPA規定的時間範圍內做出回應。
歐盟通用數據保護條例
我們確實會從位於GDPR管轄區的數據主體收集或以其他方式獲取個人信息。我們通過一系列單獨的通知、合同或其他條款，按照GDPR及每個GDPR管轄區內的當地法律要求，履行對我們的員工/求職者、客戶（及其最終客戶）以及供應商和商業夥伴的GDPR義務。
我們在本聲明的下一部分中描述了我們如何遵守GDPR，針對在GDPR管轄區內的訪問者和使用者收集的個人信息。因此，在該部分中，“您”和“您的”僅指這些GDPR管轄區內的訪問者和使用者。
我們在GDPR管轄區收集了什麼以及如何使用？
我們從您那裡收集的個人信息類別已在前文中描述。我們依賴的合法基礎是GDPR所稱的合法利益。正如本聲明其他部分所述，我們不會將您的任何個人信息出售給第三方，也不會將其用於自動化決策。
跨境數據轉移和第三方處理器
如果我們將GDPR管轄區的個人信息轉移到歐洲委員會未認定具有足夠隱私保護的地點，我們將按照GDPR允許的方式進行。
GDPR管轄區數據主體的權利
雖然我們努力讓所有訪問者和使用者對其個人信息擁有一定的控制權，但根據GDPR，我們對您有法律義務這樣做。具體而言，對於在GDPR管轄區內收集的個人信息，您擁有以下權利：透明度、訪問、更正和刪除、數據可攜性、查詢誰、什麼、為什麼和在哪裡，以及限制/反對（更多信息請點擊此處）。
如果您希望行使這些權利中的任何一項，請通過 [email protected] 與我們聯繫。您行使這些權利的能力受某些條件和例外的約束，您可以在GDPR第12至23條中了解這些條件。其中一項條件是，如果我們無法以滿足我們合理懷疑和關切的方式驗證您的身份，我們有權拒絕部分或全部請求，以幫助我們降低未經授權的人士利用GDPR權利訪問您的個人信息的風險。我們將在不延遲的情況下回應所有請求，並遵循GDPR規定的時間範圍（如有）。如果您對我們如何使用您的個人信息或對您的請求的回應不滿意，您有權向您的數據保護監管機構提出投訴。歐盟數據保護監管機構的聯繫信息可以在此找到。
其他管轄區數據主體的權利
在其他擁有類似數據隱私法規的管轄區，我們可能會從您那裡收集已描述的個人信息類別。我們在遵守適用當地法律的前提下收集和管理（包括披露）此類數據。如前所述，我們不會將您的任何個人信息出售給第三方，也不會將其用於自動化決策。
隱私聲明的變更
本隱私聲明於2024年10月30日起草，並自該日期生效。
我們保留不時變更或更新本聲明的權利。請定期查看我們的在線和移動資源，以了解此類變更，因為所有收集的信息均受當時有效的聲明約束。
聯繫我們
如果您對我們的隱私聲明或隱私實踐有任何問題，請通過以下方式與我們聯繫：
公司名稱：鑫揚有限公司
地址：台北市大同區重慶北路二段48號9樓之3 郵編10345
電話號碼：02-2214-1498
電子郵件：[email protected]