Taitra Membership Agreement

SUMMARY OF PRIVACY NOTICE

This summary Privacy Notice (“Summary Notice”) will provide you with a summary of the accompanied, detailed Privacy Notice (hereafter “Full Notice”, together "Summary and Full Notice") on the data processing activities of the Taiwan External Trade Development Council[an organization organized and existing under the laws of Taiwan, having its registered offices in 5F-7F No. 333 Section 1 Keelung Rd., Taipei City, Taiwan, R.O.C.] ("TAITRA", ?our“, "we" or "us") with respect to individually identifiable information ("Personal Data") about visitors of our sites www.taiwantrade.com ("Website").

Scope of applicability

This Summary and Full Notice applies to you if you are a visitor of the Website.

Processing of your Personal Data (categories of Personal Data)

We process the following of your Personal Data collected during your visit of the Website: your name, address, phone/fax number, email address, company profile, details of your visits to the Website and further technical data, your billing information, credit card numbers, expiration dates and tracking information from checks or money orders, and any other information relating to any individuals which you have provided us in any forms you may have submitted to us, or via other forms of interaction with you. For more details see 1. of the Full Notice or click here.

Processing purposes

We process your Personal Data for the following purposes: to provide the Website in an optimized way for you and to currently enhance the user experience of the Website, to provide online trading and other services of the Website, to send you marketing materials, such as newsletters and information about special events to provide you with the latest information about our products and services which might be of interest to you and to provide statistical information regarding your use of the Website to our partners. For more details see 2. of the Full Notice or click here.

Legal justifications for the processing of your Personal Data

One of the key privacy law requirements is that any processing of Personal Data has to have a legal justification. We generally use the following legal justifications: (1) You have given your consent to the processing (Art. 6(1)(a) GDPR; “Consent Justification”), (2) the processing is necessary to carry out a contract with you (Art. 6(1)(b) GDPR; “Contract Justification”), (3) the processing is necessary for (a) compliance with a legal obligation (Art. 6(1)(c) GDPR; “Legal Obligation Justification”) and (b) realizing a legitimate interest (Art. 6(1)(f) GDPR; “Legitimate Interest Justification”). For more details and the matching of purposes and corresponding legal justifications see 3. of the Full Notice or click here.

Data transfers and recipients and legal justification for such transfers

We transfer your Personal Data to other group companies, our service providers, selected Taiwantrade supplier members, and, in accordance with applicable law, other governmental authorities, courts, external advisors, and similar third parties, some of the aforementioned recipients located in jurisdictions outside the EU. For more details see 4. of the Full Notice or click here.

Retention periods for and deletion of your Personal Data

Your Personal Data will be deleted once they are not any longer needed for the purposes motivating their original collection or as required by applicable law. For more details see 5. of the Full Notice or click here.

Your statutory rights

You have a number of rights with regard to the processing of your Personal Data, each as per the conditions defined in applicable law, such as the right to have access to your Personal Data, to have them corrected, erased or handed over. Please refer any of your questions to e-member@taiwantrade.com. For more details see 6. of the Full Notice or click here.

Changes of this Summary and Full Notice as well as further notices

This Summary and Full Notice are subject to change. You will be notified adequately of any such changes. Further, you will be notified adequately through further relevant privacy notices (e.g. for specific purposes) in case such is not covered by this Summary and the Full Notice. If you do not agree to changes in this Summary and Full Notice, please contact usin writing and specifically request that we return and/or destroy all copies of all or part of your Personal Data in our possession.

How to contact us

If you wish to exercise your data subject rights or if you have any other questions concerning this Summary and Full Notice, please address your request to us, who can be contacted at

5F-7F No. 333 Section 1 Keelung Rd., Taipei City, Taiwan, R.O.C.

Phone: 886-2-2725-5200#1784

Email: crm@taitra.org.tw

Full Notice

This Website uses cookies. For further information please read our Cookie Policy - which you will find here.

1.Categories of Personal Data

We process the following Personal Data about you (hereinafter jointly "Your Data"):

(i) your name, address, phone/fax number, email address, company profile (hereinafter jointly "Contact Data");

(ii) details of your visits to the Website and the resources that you access, including but not limited to your IP address, traffic data, location data, weblogs and other communication data (hereinafter jointly "Technical Data");

(iii) your billing information, credit card numbers, expiration dates and tracking information from checks or money orders (hereinafter jointly "Order Data"); and

(iv) any other information that you provide by filling in forms on the Website, such as when you register for information including but not limited to, product catalog, trade leads, and other information about your business, information provided to us or others when you communicate with us or others via the Website for any reason (hereinafter jointly "Form Data").

2.Processing purposes

We process Your Data to the extent permitted or required under applicable law, for the following purposes:

‧to provide the Website in an optimized way for you and to currently enhance the user experience of the Website (hereinafter "Quality Purposes");

‧to provide online trading and other services of the Website (hereinafter "Services Purposes");

‧to send you marketing materials, such as newsletters and information about special events to provide you with the latest information about our products and services which might be of interest to you (hereinafter jointly "Marketing Purposes"); and

‧to provide statistical information regarding your use of the Website to our partners (hereinafter “Statistical Purposes”).

3.Legal justification for the processing of Your Data

Generally, the processing of Your Data is voluntary. However, if you do not provide Your Data, you may not be able to enjoy the services of the Website or achieve the purposes for which you use the Website (for instance, you may not be able to perform the online transaction on the Website).

Furthermore, we rely on the following legal justifications for the processing of Your Data:

YOUR Data
Processing Purposes	Categories of Your Data involved	Legal Basis
Quality Purposes	Technical Data	Legitimate Interest Justification
Services Purposes	Contact Data Order Data Form Data	Contract Justification/Legitimate Interest Justification
Marketing Purposes	Contact Data	Consent Justification
Statistical Purposes	Technical Data	Legitimate Interest Justification

4.Data transfers and recipients and legal justification for such transfers

4.1Recipients

(i) Other group companies: We transfer Your Data to other TAITRA group companies, as permitted under applicable data protection law pursuant to Legitimate Interest Justification of TAITRA to facilitate the contact with you and your queries.

(ii) Third parties: We may transfer Your Data to governmental agencies and regulators, courts, and government authorities, all in accordance with applicable law based on Legal Obligation Justification and to external advisors acting as controllers (e.g., lawyers, accountants, auditors etc.) based on Legitimate Interest Justification.

(iii) Service providers: When Members sign up for such services, the service provider will collect additional information (e.g., credit card number) from Members as necessary for it to provide the online payment services. We contract with third party service providers as part of our normal business operations to provide the Website and related services to you (i.e., the provision of online payment verification or other related services such as PayPal, HiTRUST, issuing banks, payment or amount transfer service provider(s), logistics service provider(s), certification service provider(s), eBay, and other trading platforms we cooperate with).

(iv) Selected Taiwantrade supplier members: If you are a buyer member of Taiwantrade, we may transfer Your Data to those qualified suppliers members who may provide the products you are looking for.

(v) A list of data recipients can be found in the Annex containing the identity, short description of the processing activity and location of the relevant data recipients.

4.2 Cross-Border Data Transfers

We may transfer Your Data outside of the country you are located. Some recipients of Your Data are also located in another country for which the European Commission has not issued a decision that this country ensures an adequate level of data protection, namely: Republic of China (Taiwan).

5.Retention periods for and deletion of Your Data

5.1 Your Data processed for the purposes hereunder will be stored only to the extent necessary. If a judicial or disciplinary action is initiated, Your Data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived as permitted by applicable law.

5.2 In principle, we will retain Your Data as long as required or permitted by applicable law. Afterwards, we will remove Your Data from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it.

6.Your statutory rights

Under the conditions set out under applicable law (i.e., the GDPR), you have the following rights:

6.1 Right of access: You have the right to obtain from us confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed.

You have the right to obtain a copy of the Personal Data undergoing processing. For additional copies requested by you, we may charge a reasonable fee based on administrative costs.

6.2 Right to rectification: You have the right to obtain from us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.

6.3 Right to erasure (right to be forgotten): You have the right to ask us to erase your Personal Data .

6.4 Right to restriction of processing: You have the right to request the restriction of processing your Personal Data . In this case, the respective data will be marked and may only be processed by us for certain purposes.

6.5 Right to data portability: You have the right to receive the Personal Data concerning you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those Personal Data to another entity without hindrance from us.

6.6 Right to withdraw your consent: If you have given your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

6.7 Right to object:

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by us and we can be required to no longer process your Personal Data. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by us. Exercising this right will not incur any costs.

Such a right to object may not exist, in particular, if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that the aforementioned rights might be limited under the applicable national data protection law. We remain the universal point of contact for your execution of these rights.

Please refer any of your questions to crm@taitra.org.tw.

In case of complaints you also have the right to lodge a complaint with the competent supervisory authority, in particular in the member state of your habitual residence or alleged infringement of the GDPR.

Summary and Full Notice last updated: Aug, 2018

***

ANNEX

Data Recipients

#	Name of Data Recipient	Location	Receiving Data as Controller or Processor	Short description of processing activities
1.	Taiwan Trade Center, Sofia	Business Park Sofia, Building 2, 5 Fl., 1766 Sofia, Bulgaria	Controller	Internal cooperation with regard to the provision of the Website.
2.	Taiwan Trade Center, Paris	75 BIS, AVENUE MARCEAU 75116 PARIS, FRANCE	Controller	Internal cooperation with regard to the provision of the Website.
3.	Taiwan Trade Center, Duesseldorf	Immermannstr. 33, 40210 Duesseldorf, Germany	Controller	Internal cooperation with regard to the provision of the Website.
4.	Taiwan Trade Center München	Sonnenstr. 1, 80331 München, Germany	Controller	Internal cooperation with regard to the provision of the Website.
5.	TAIWAN TRADE CENTER, BUDAPEST	H-1056 Budapest, Vaci Utca 81, 1 emelet, Hungary	Controller	Internal cooperation with regard to the provision of the Website.
6.	Taiwan Trade Center, Milano	VIA STRADIVARI, 4, 20131 MILANO-ITALY	Controller	Internal cooperation with regard to the provision of the Website.
7.	Taiwan Trade Center, Rotterdam	Innsbruckweg 118, 3047 AH Rotterdam, The Netherlands	Controller	Internal cooperation with regard to the provision of the Website.
8.	Taiwan Trade Center, Warsaw	ul. Emilii Plater 53, 17 piętro, 00-113 Warszawa POLAND	Controller	Internal cooperation with regard to the provision of the Website.
9.	Taiwan Trade Center, Bucharest	3F, Chamber 1, Strada Buzesti 62-64, Sector 1, Bucharest, Romania	Controller	Internal cooperation with regard to the provision of the Website.
10.	Taiwan Trade Center, Barcelona	Carrer de Muntaner 239, Entlo. 4, 08021, Barcelona, España	Controller	Internal cooperation with regard to the provision of the Website.
11.	Taiwan Trade Centre, London	3RD FLOOR, 29 WILSON ST , LONDON EC2M 2SJ , UNITED KINGDOM	Controller	Internal cooperation with regard to the provision of the Website.
12.	Governmental agencies and regulators, courts, and government authorities	Taiwan	Controller	At request according to applicable laws.
13.	HiTRUST	Taiwan	Processor	To provide the online payment services.
14.	E.SUN Bank	Taiwan	Processor	To provide the online payment services.
15.	TAITRA	5F-7F No. 333 Section 1 Keelung Rd., Taipei City, Taiwan, R.O.C.	Controller	To provide the products you are looking for