Taitra Service

This summary Privacy Notice (“Summary Notice”) will provide you with a summary of the accompanied, detailed Privacy Notice (hereafter “Full Notice”, together "Summary and Full Notice") on the data processing activities of the Taiwan External Trade Development Council[an organization organized and existing under the laws of Taiwan, having its registered offices in 5F-7F No. 333 Section 1 Keelung Rd., Taipei City, Taiwan, R.O.C.] ("TAITRA", ?our“, "we" or "us") with respect to individually identifiable information ("Personal Data") about visitors of our sites www.taiwantrade.com ("Website").

1. Scope of applicability

   This Summary and Full Notice applies to you if you are a visitor of the Website.

2. Processing of your Personal Data (categories of Personal Data)

   We process the following of your Personal Data collected during your visit of the Website: your name, address, phone/fax number, email address, company profile, details of your visits to the Website and further technical data, your billing information, credit card numbers, expiration dates and tracking information from checks or money orders, and any other information relating to any individuals which you have provided us in any forms you may have submitted to us, or via other forms of interaction with you. For more details see 1. of the Full Notice or click here.

3. Processing purposes

   We process your Personal Data for the following purposes: to provide the Website in an optimized way for you and to currently enhance the user experience of the Website, to provide online trading and other services of the Website, to send you marketing materials, such as newsletters and information about special events to provide you with the latest information about our products and services which might be of interest to you and to provide statistical information regarding your use of the Website to our partners. For more details see 2. of the Full Notice or click here.

4. Legal justifications for the processing of your Personal Data

   One of the key privacy law requirements is that any processing of Personal Data has to have a legal justification. We generally use the following legal justifications: (1) You have given your consent to the processing (Art. 6(1)(a) GDPR; “Consent Justification”), (2) the processing is necessary to carry out a contract with you (Art. 6(1)(b) GDPR; “Contract Justification”), (3) the processing is necessary for (a) compliance with a legal obligation (Art. 6(1)(c) GDPR; “Legal Obligation Justification”) and (b) realizing a legitimate interest (Art. 6(1)(f) GDPR; “Legitimate Interest Justification”). For more details and the matching of purposes and corresponding legal justifications see 3. of the Full Notice or click here.

5. Data transfers and recipients and legal justification for such transfers

   We transfer your Personal Data to other group companies, our service providers, selected Taiwantrade supplier members, and, in accordance with applicable law, other governmental authorities, courts, external advisors, and similar third parties, some of the aforementioned recipients located in jurisdictions outside the EU. For more details see 4. of the Full Notice or click here.

6. Retention periods for and deletion of your Personal Data

   Your Personal Data will be deleted once they are not any longer needed for the purposes motivating their original collection or as required by applicable law. For more details see 5. of the Full Notice or click here.

7. Your statutory rights

   You have a number of rights with regard to the processing of your Personal Data, each as per the conditions defined in applicable law, such as the right to have access to your Personal Data, to have them corrected, erased or handed over. Please refer any of your questions to e-member@taiwantrade.com. For more details see 6. of the Full Notice or click here.

8. Changes of this Summary and Full Notice as well as further notices

   This Summary and Full Notice are subject to change. You will be notified adequately of any such changes. Further, you will be notified adequately through further relevant privacy notices (e.g. for specific purposes) in case such is not covered by this Summary and the Full Notice. If you do not agree to changes in this Summary and Full Notice, please contact usin writing and specifically request that we return and/or destroy all copies of all or part of your Personal Data in our possession.

9. How to contact us

   If you wish to exercise your data subject rights or if you have any other questions concerning this Summary and Full Notice, please address your request to us, who can be contacted at

   5F-7F No. 333 Section 1 Keelung Rd., Taipei City, Taiwan, R.O.C.

   Phone: 886-2-2725-5200#1784

   Email: crm@taitra.org.tw

Full Notice

This Website uses cookies. For further information please read our Cookie Policy - which you will find here.

1. Categories of Personal Data

   We process the following Personal Data about you (hereinafter jointly "Your Data"):

   1. your name, address, phone/fax number, email address, company profile (hereinafter jointly "Contact Data");
   2. details of your visits to the Website and the resources that you access, including but not limited to your IP address, traffic data, location data, weblogs and other communication data (hereinafter jointly "Technical Data");
   3. your billing information, credit card numbers, expiration dates and tracking information from checks or money orders (hereinafter jointly "Order Data"); and
   4. any other information that you provide by filling in forms on the Website, such as when you register for information including but not limited to, product catalog, trade leads, and other information about your business, information provided to us or others when you communicate with us or others via the Website for any reason (hereinafter jointly "Form Data").
2. Processing purposes

   We process Your Data to the extent permitted or required under applicable law, for the following purposes:

   • To provide the Website in an optimized way for you and to currently enhance the user experience of the Website (hereinafter "Quality Purposes");
   • To provide online trading and other services of the Website (hereinafter "Services Purposes");
   • To send you marketing materials, such as newsletters and information about special events to provide you with the latest information about our products and services which might be of interest to you (hereinafter jointly "Marketing Purposes"); and
   • To provide statistical information regarding your use of the Website to our partners (hereinafter “Statistical Purposes”).
3. Legal justification for the processing of Your Data

   Generally, the processing of Your Data is voluntary. However, if you do not provide Your Data, you may not be able to enjoy the services of the Website or achieve the purposes for which you use the Website (for instance, you may not be able to perform the online transaction on the Website).

    

   Furthermore, we rely on the following legal justifications for the processing of Your Data:

   YOUR Data
   Processing Purposes	Categories of Your Data involved	Legal Basis
   Quality Purposes	Technical Data	Legitimate Interest Justification
   Services Purposes	Contact Data Order Data Form Data	Contract Justification/Legitimate Interest Justification
   Marketing Purposes	Contact Data	Consent Justification
   Statistical Purposes	Technical Data	Legitimate Interest Justification

4. Data transfers and recipients and legal justification for such transfers
   1. Recipients
      1. Other group companies: We transfer Your Data to other TAITRA group companies, as permitted under applicable data protection law pursuant to Legitimate Interest Justification of TAITRA to facilitate the contact with you and your queries.
      2. Third parties: We may transfer Your Data to governmental agencies and regulators, courts, and government authorities, all in accordance with applicable law based on Legal Obligation Justification and to external advisors acting as controllers (e.g., lawyers, accountants, auditors etc.) based on Legitimate Interest Justification.
      3. Service providers: When Members sign up for such services, the service provider will collect additional information (e.g., credit card number) from Members as necessary for it to provide the online payment services. We contract with third party service providers as part of our normal business operations to provide the Website and related services to you (i.e., the provision of online payment verification or other related services such as PayPal, HiTRUST, issuing banks, payment or amount transfer service provider(s), logistics service provider(s), certification service provider(s), eBay, and other trading platforms we cooperate with).
      4. Selected Taiwantrade supplier members: If you are a buyer member of Taiwantrade, we may transfer Your Data to those qualified suppliers members who may provide the products you are looking for.
      5. A list of data recipients can be found in the Annex containing the identity, short description of the processing activity and location of the relevant data recipients.
   2. Cross-Border Data Transfers

      We may transfer Your Data outside of the country you are located. Some recipients of Your Data are also located in another country for which the European Commission has not issued a decision that this country ensures an adequate level of data protection, namely: Republic of China (Taiwan).

5. Retention periods for and deletion of Your Data
   1. Your Data processed for the purposes hereunder will be stored only to the extent necessary. If a judicial or disciplinary action is initiated, Your Data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived as permitted by applicable law.
   2. In principle, we will retain Your Data as long as required or permitted by applicable law. Afterwards, we will remove Your Data from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it.
6. Your statutory rights
   Under the conditions set out under applicable law (i.e., the GDPR), you have the following rights:
   1. Recipients
      1. Right of access: You have the right to obtain from us confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed.
      2. You have the right to obtain a copy of the Personal Data undergoing processing. For additional copies requested by you, we may charge a reasonable fee based on administrative costs.
      3. Right to rectification: You have the right to obtain from us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
      4. Right to erasure (right to be forgotten): You have the right to ask us to erase your Personal Data .
      5. Right to restriction of processing: You have the right to request the restriction of processing your Personal Data . In this case, the respective data will be marked and may only be processed by us for certain purposes.
      6. Right to data portability: You have the right to receive the Personal Data concerning you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those Personal Data to another entity without hindrance from us.
      7. Right to withdraw your consent: If you have given your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
      8. Right to object:

         You have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by us and we can be required to no longer process your Personal Data. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by us. Exercising this right will not incur any costs. Such a right to object may not exist, in particular, if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that the aforementioned rights might be limited under the applicable national data protection law. We remain the universal point of contact for your execution of these rights.

Please refer any of your questions to crm@taitra.org.tw.

In case of complaints you also have the right to lodge a complaint with the competent supervisory authority, in particular in the member state of your habitual residence or alleged infringement of the GDPR.

Summary and Full Notice last updated: Aug, 2018

***

ANNEX

Data Recipients