Privacy Policy & Notification Statement for Personal Data Collection
FET/NCIC Privacy Policy
The FarEasTone Telecommunications Co., Ltd. (“FET”)/New Century InfoCom Tech Co., Ltd. (“NCIC”) completely respect the privacy rights of users. The following statements will disclose how your data and/or information is collected, used, and protected by FET and NCIC (collectively “the Company”). Please carefully read the following statements regarding the Privacy Policy (“the Policy”).
I. Scope
The applicable scope of the Policy:
- Personal data and other information collected, processed, and utilized for the purpose of the Company's general operation when you use the Company’s services, participate in activities, or apply for membership via the FETnet, or the Company's application (the "APP").
- Affiliates and the business partners or suppliers of the Company (including but not limited to commercial organizations and governmental institutes, etc.) commissioned by the Company or collaborate with the Company. When collecting, processing, and utilizing personal information are engaged, the Privacy Policy shall prevail.
II. Data Collection
When you apply for, or use the services of the Company (including but not limited to mobile network, fixed network, FET APP, FETnet, telecommunication services, value-added telecommunication business, voice message system, text message system, value-added services, other bonus campaigns, marketing, latest news, market survey, bill treatment, arrears payment, other related services, or new services or platform in the future, collectively “the Service"), the Company collects information for purposes including but are not limited to verifying the user identity established in our website/APP, retail stores, or customer services, and providing you relevant services. Information collected includes but is not limited to necessary information of the customers (or their representative), legal representative, or the institutions. See below for a more detailed description:
FET Mobile Broadband Service Notification Statement for Personal Data Collection
FET Fixed Network Telecommunications Service Notification Statement for Personal Data Collection
NCIC Fixed Network Telecommunications Service Notification Statement for Personal Data Collection
FET/NCIC Non-Telecommunication Services Notification Statement for Personal Data Collection , or Terms of Membership provided in individual product webpages or apps.
III. Utilization of the Personal Data
Principles for Sharing Data with Third Parties:
The Company will only use your personal data for the specific purposes stated at the time of collection and within the limits of relevant laws and regulations. The Company will not provide any personal data to a third party without your consent. However, the Company may share your personal data with a third party under the following circumstances that are in compliance with the principles of this Policy:
- In order to provide other services or preferential rights, if the Company needs to share your personal information with a third party who provides the service or preferential rights, a full explanation must be provided during the event. You have the right to choose whether to accept the service or promotion.
- When a judicial authority or government agency requires the Company to provide specific personal information due to public safety concerns, the Company will follow the legal and formal procedures under all users’ safety considerations.
IV. Data Protection
- Data Risk Management and Liability
To ensure the security of the user information collected, processed, or used by the Company, strict control measures have been adopted on the network, systems, and operating procedures. In addition, the Company incorporates information security risks into its risk management system, holds regular management meetings, and implements risk identification, analysis, management and reporting through the operation of different levels of organizations and responsibilities, and takes necessary countermeasures. The internal staff has undergone complete training on personal data protection. The third-party suppliers are required to conduct stringent protection mechanisms to comply with the obligations and regulations set by the competent authority. - Right to Data Portability/Request data to be transferred to other service providers
In compliance with the relevant laws and the requirements of the competency authority of telecommunications industry and to cooperate in preventing fraud, the Company should verify the customer data of new applications for telecommunications services and do not provide customers with the transfer of personal data to other telecom operators, except for the service of number portability available upon customer’s application. - Third-Party Audit
The Company also conducts regular internal and external audits. Through the international standard certifications of information security management and personal information management which are verified by third-party institute, the Company constantly review and strengthen the protection mechanism.
V. Security Mechanism of Information Protection
- Channel of Customer Complaints
The Company has setup a toll-free customer service hotline (0800-058-885) to accept customers' needs for processing personal data, complaints and consultations. - Incident Investigation and Handling
The Company always adopts the principle of "zero tolerance" for personal data incidents. In the event of personal data breach, the responsible units, including information security, legal affairs, and customer service departments, will investigate and handle the case in accordance with the Personal Data Protection Act and the Company's incident reporting and response procedures, and relevant regulations. Any violator will be subject to the relevant laws and internal regulations of the Company (including but not limited to termination of cooperation).
VI. Security Instructions for Using Website
- Verification of User Identity and Security Control
The Company’s website adopts the SSO (Single Sign On) mechanism for members to sign in. The members will be verified and authenticated by the Company’s database and systems. Non-members cannot use and log in to any services. To join as a member, it is required to provide and fill in relevant information and to authorize the activation via SMS.
All webpages related to customers or transactions are encrypted by using https to prevent any data theft or hacking. The Company’s network has several layers of firewalls protection to ensure the security of the systems. - Notes to Users
When you select “keep me logged in” on the login page in a computer or device and successfully login, the system will encrypt the login information and store it in your computer. Whenever you enter the website and the log-in information is required, the system will automatically send the user’s log-in information back to the Company’s host computer for authentication, allowing the user to remain logged in automatically. This, however, will only occur as long as the cookie is not cleared and you do not actively log out. Staying logged in can allow the user to easily access various services.
Please keep your password and personal information in custody properly and do not provide any personal information, specifically password to any other people. Please remember to logout of the account after using computer. If you are sharing a computer for public use or using a public computer, remember to close the browser window to prevent other people from reading your personal information or mails.
Therefore, do not select “keep me logged in” while you are using a public or shared computer, and remember to log out every time you leave the computer to protect the security of your information.
VII. Use of Cookie
In order for the system to recognize the user’s data, the Company’s website or system may use Cookie to record the user's behavior. The Company's server will write the required information into the user’s hard-disk through the browser. The next time the browser requests the server to return to a webpage, it will automatically send the Cookie information to the server. The server can determine the user according to the information and could then execute different activities or submit specific information according to the user's individual preferences back to the user's computer or device. Under the following circumstances, the Company will write or read Cookie information on your computer:
- To provide the users with personalized services for their convenience.
- To improve the Company's services by collecting statistics and analyzing the user's browsing mode.
VIII. Amendment of the Policy
The Company may implement any appropriate updates and amendments in response to factors such as technology development trends, amendments to relevant laws or regulations or other environmental changes in order to carry out the protection of the user's privacy. Any amendment or modification of the Policy made will be approved by the President and immediately published on the Company's website. If you continue to use the Company's services after the amendment or modification, you shall be deemed to have read, understood and agreed to accept the modified content of the Policy.
Far EasTone Telecommunications Co., Ltd. Mobile Broadband Service Notification Statement for Personal Data Collection
Far EasTone Telecommunications Co., Ltd. (hereinafter referred to as "we") hereby clearly inform you of the followings according to Article 8.1 and Article 9.1 (if applicable) of Personal Data Protection Act (hereinafter referred to as the "PDPA"):
- We collect your personal data for the specific purposes to provide mobile broadband service (hereinafter referred to as the "our service") as follows:
- Categories of personal data collected for providing our service:
- Data provided by you: Including your name, national identification number, date of birth, contact information, etc., as filled in the service application form or service agreement, or other data required by law.
- Telecommunications numbers assigned to you by us.
- Internet usage information: Identification information of communication equipment, internet address and location information, time of communication, connection usage and packet quantity, domain name, application service, and protocol generated by the public telecommunications networks after you use our service.
- Domain browsing information: Including how you use our mobile broadband service, such as internet access time, data volume, domain and signal status, etc.
- Location information: The location information generated when you use our service.
- Billing information: Including communication records, billing records, and payment methods (such as bank account numbers, credit card numbers, etc.), service history records, and other personal data related to your account (including the information of the other service agreement, such as Direct Carrier Billing Service binding our telecommunications bill).
- Other service information: To optimize our service and facilitate your selection of the most suitable products/services, we may analyze your personal data, and use the analysis results to improve and develop our products/services.
- Period of processing and use of personal data:
- Duration of the specific purposes: We will process or use your personal data while you use our service.
- After termination or cancellation of this service agreement (and you will not use our service anymore), we will retain your personal data for at least one year in accordance with Regulations for Administration of Mobile Broadband Businesses and other relevant regulations.
- Regions of processing and use of personal data: The regions where the recipients of processing and use of personal data set forth below are located, within and outside the territory of Taiwan (such as international roaming).
- Recipients of processing and use of personal data:
- We (including outsourced agencies entrusted by us to deal with affairs).
- Agencies/organizations that are legally authorized to collect, process, and use (such as: Number Portability Concentrated Databases, or the National Immigration Agency, Ministry of the Interior, National Police Agency, etc., which conduct verification with assistance of the database designated by the central industry competent authority.
- Recipients agreed by you (such as "Agreement for Individually Negotiated Terms and Conditions of Third Party Marketing").
- Foreign telecommunications enterprises that have signed an international roaming service agreement with us.
- Methods of processing and use of personal data:
- Establishing customer profiles for you to manage your account and provide our service.
- Performing billing operations based on your network usage information and billing information.
- Contacting you through various means of communication for business purposes or to notify you of information of our service, such as sending bills, payment reminders to your or the actual user’s address, email address, or by contacting you via phone or SMS to inform you about payment and reminder information.
- To optimize our service, we may analyze your personal data and improve, develop our service based on the analysis results in order to provide you with suitable service suggestions.
- Under the custodian status by us, you can exercise the following rights pursuant to Article 3 of PDPA:
- You may inquire, view, or request a copy of your personal data. However, we may charge necessary costs in accordance with Article 14 of PDPA.
- In accordance with Article 11.1 of PDPA, we shall, on our own initiative or upon your request, supplement or correct your personal data. However, in accordance with Article 19 of Enforcement Rules of the Personal Data Protection Act, you should appropriately explain the reasons and facts.
- In accordance with Article 11.2 of PDPA, in the event of a dispute regarding the accuracy of your personal data, we shall, on our own initiative or upon your request, cease processing or using your personal data. However, this does not apply if it is necessary for business execution or if you have provided written consent, with the dispute noted.
- In the event where the collection, processing or use of the personal data is in violation of PDPA, you may request us to erase your personal data collected or cease collecting, processing or using your personal data in accordance with Article 11.4 of PDPA. However, we will review whether there is any violation of law and reply to you with the result.
- After termination or cancellation of this service agreement, or we no longer need your personal data anymore, you may request us to erase or cease processing or using your personal data in accordance with Article 11.3 of PDPA. However, if it is necessary for the performance of our service (such as legally stipulated retention periods) or with your written consent, we shall still retain your personal data or continue to process and use your personal data.
- We should respond to your above request, regarding your personal data collected, reply your inquiries, reviewing, or copies, but this does not apply if there are circumstances listed in Article 10 of PDPA.
- If you would like to exercise the above rights under Article 3 of PDPA, please contact our physical store or call the toll-free customer service hotline 0800-058-885 for consultation and handling.
- You are free to decide whether to provide your personal data and categories, however, the personal data listed in the service application form or service agreement are necessary for notifying you. If not correctly and completely provided, it may not be possible to apply for our service, or it may not be possible to receive necessary information related to our service in a timely manner. Other personal data are automatically generated and recorded during your use of our service. If you do not want us to process or use it, you can exercise the aforesaid rights.
- Use beyond the purpose of collection:
- We will only use your personal data within the necessary scope for specific purposes of collection (please refer to this Notification Statement Article 1 for details) as previously explained, however, if there is any of the following circumstances stipulated in Article 20.1 of the PDPA, we will use your personal data beyond the purpose of collection pursuant to law:
- Expressly required by law. For example, to provide the personal data to judicial police officers in accordance with The Communication Security and Surveillance Act.
- Necessary for enhancing public interests or preventing significant harm to the rights of others public interests. For example, in accordance with the Fraud Crime Hazard Prevention Act, to prevent, restrict, or report fraud crime or cybercrime, etc.
- To prevent harm to your life, body, freedom, or property. For example, providing your location information to legally authorized third parties when you are missing.
- Entrusted by public agencies or academic research institutions, for statistics gathering or academic research for public interests, to provide data to such public agencies or academic research institutions in a form that does not identify you (refer to this Notification Statement Article 11).
- With your consent (e.g., "Agreement for Individually Negotiated Terms and Conditions of Third Party Marketing").
- Period of use of personal data which is beyond the purpose of collection: The retention period stipulated by relevant laws or regulations; or the retention period varied by individual negotiations from case to case (such as Direct Carrier Billing Service for Google Play or Apple Store), based on the longest retention period.
- Processing and use of de-identification data:
- We will process your personal data in a manner that objectively prevents the possibility of re-identifying individuals. We will use de-identification or other data minimization techniques (refer to this Notification Statement Article 11) to provide the results in the form of statistical data, trend analysis, or other non-identifiable formats. These results will be provided to our enterprise customers, content providers, or innovative experimental units permitted by the competent authority, as a basis for business decision or technological development (for example, allowing content providers to realize the CTR (click-through rate), consumer age/gender distribution, etc.).
- If you do not want us to process and use your personal data in the aforementioned de-identification methods, you may notify us to stop processing or using your personal data according to Article 8 of this Notification Statement; however, this does not apply to the use or processing we have already done before your request to stop, or if there are other legal provisions.
- We will only use your personal data within the necessary scope for specific purposes of collection (please refer to this Notification Statement Article 1 for details) as previously explained, however, if there is any of the following circumstances stipulated in Article 20.1 of the PDPA, we will use your personal data beyond the purpose of collection pursuant to law:
- Methods of de-identification adopted by Us (including but not limited to the following methods), explained as follows:
- Data Masking: Partially masking or replacing original data with special symbols (e.g., ○ or *).
- Range Presentation: Presenting numerical or monetary data in ranges.
- Aggregate Statistics: Aggregating calculations for different groups or different dimensions.
- Disclosure Limitation: Adjusting original data to reduce accuracy.
For more information, please visit:https://corporate.fetnet.net/content/corp/en/CSR/ExcellentService/Privacy.html
| Explanation of specific purposes | ||
|---|---|---|
| Service | Specific purposes | Explanation |
| Mobile Broadband Service | 069 Contracts, quasi-contracts, or other legal relations matters | To exercise rights and fulfill obligations under this service agreement. |
| 090 Consumers, customer management and services | To establish customer profiles for providing related services such as billing, payment reminders, rights notifications, and fault reporting. | |
| 091 Consumer protection | In accordance with Consumer Protection Act and other relevant regulations. | |
| 133 Operating telecommunication and value-added telecom network business | To provide telecommunications services related to our service. | |
| 135 Information (communication) services | To maintain the smoothness and security of the reception, coverage, and traffic of this service network, necessary management measures are taken. | |
| 137 Information and communication security management | In accordance with Cyber Security Management Act and other relevant regulations. | |
| 040 Marketing | To provide customer rights reminder information such as products, tariffs, and promotional packages for this service. | |
| 157 Investigations, statistics, and research analyses | To plan and provide customer with the most appropriate and suitable tariff as well as promotional suggestions by utilizing statistics and analyzing customer usage information of our service. | |
| 063 Non-government agency collect or process personal information under legal obligations | To collect, process, and use personal data as required by laws or regulations specifically and expressly authorized by laws. | |
Far EasTone Telecommunications Co., Ltd. Fixed Network Telecommunications Service Notification Statement for Personal Data Collection
If you applied for Fixed Network Telecommunications Service with Asia Pacific Telecom Co., Ltd. (hereinafter referred to as "APT") before December 15, 2023, you are still subject to the "APT Fixed Network Telecommunications Service Notification Statement for Personal Data Collection" that applied at the time of your application. Please refer to: https://www.aptg.com.tw/export/sites/aptg/others/download_pdf/corporate/self-data-notification1_1090907.pdf If you apply for Fixed Network Telecommunications Service with Far EasTone Telecommunications Co., Ltd. (hereinafter referred to as "we") after December 15, 2023, we hereby clearly inform you of the followings according to Article 8.1 and Article 9.1 (if applicable) of Personal Data Protection Act (hereinafter referred to as the "PDPA"):
- We collect your personal data for the specific purposes to provide Fixed Network Telecommunications Service (Fixed Voice/ Broadband Internet/Leased Line, hereinafter referred to as the "our service") as follows:
- Categories of personal data collected for providing our service:
- Data provided by you: Including your name, national identification number, date of birth, contact information, etc., as filled in the service application form or service agreement, or other data required by law.
- Telecommunications numbers assigned to you by us.
- Internet usage information: Identification information of communication equipment, internet address and location information, time of communication, connection usage and packet quantity, domain name, application service, and protocol generated by the public telecommunications networks after you use our service.
- Domain browsing information: Including how you use our Fixed Network Telecommunications Service, such as internet access time, data volume, domain and signal status, etc.
- Location information: The location information generated when you use our service.
- Billing information: Including communication records, billing records, and payment methods (such as bank account numbers, credit card numbers, etc.), service history records, and other personal data related to your account (including the information of the other service agreement, such as Direct Carrier Billing Service binding our telecommunications bill).
- Other service information: To optimize our service and facilitate your selection of the most suitable products/services, we may analyze your personal data, and use the analysis results to improve and develop our products/services.
- Period of processing and use of personal data:
- Duration of the specific purposes: We will process or use your personal data while you use our service.
- After termination or cancellation of this service agreement (and you will not use our service anymore), we will retain your personal data for at least one year in accordance with Regulations for Administration of Mobile Broadband Businesses and other relevant regulations.
- Regions of processing and use of personal data: The regions where the recipients of processing and use of personal data set forth below are located, within the territory of Taiwan.
- Recipients of processing and use of personal data:
- We (including outsourced agencies entrusted by us to deal with affairs).
- Agencies/organizations that are legally authorized to collect, process, and use (such as: Number Portability Concentrated Databases, or the National Immigration Agency, Ministry of the Interior, National Police Agency, etc., which conduct verification with assistance of the database designated by the central industry competent authority.
- Recipients agreed by you (such as "Agreement for Individually Negotiated Terms and Conditions of Third Party Marketing").
- Methods of processing and use of personal data:
- Establishing customer profiles for you to manage your account and provide our service.
- Performing billing operations based on your network usage information and billing information.
- Contacting you through various means of communication for business purposes or to notify you of information of our service, such as sending bills, payment reminders to your or the actual user’s address, email address, or by contacting you via phone or SMS to inform you about payment and reminder information.
- To optimize our service, we may analyze your personal data and improve, develop our service based on the analysis results in order to provide you with suitable service suggestions.
- Under the custodian status by us, you can exercise the following rights pursuant to Article 3 of PDPA:
- You may inquire, view, or request a copy of your personal data. However, we may charge necessary costs in accordance with Article 14 of PDPA.
- In accordance with Article 11.1 of PDPA, we shall, on our own initiative or upon your request, supplement or correct your personal data. However, in accordance with Article 19 of Enforcement Rules of the Personal Data Protection Act, you should appropriately explain the reasons and facts.
- In accordance with Article 11.2 of PDPA, in the event of a dispute regarding the accuracy of your personal data, we shall, on our own initiative or upon your request, cease processing or using your personal data. However, this does not apply if it is necessary for business execution or if you have provided written consent, with the dispute noted.
- In the event where the collection, processing or use of the personal data is in violation of PDPA, you may request us to erase your personal data collected or cease collecting, processing or using your personal data in accordance with Article 11.4 of PDPA. However, we will review whether there is any violation of law and reply to you with the result.
- After termination or cancellation of this service agreement, or we no longer need your personal data anymore, you may request us to erase or cease processing or using your personal data in accordance with Article 11.3 of PDPA. However, if it is necessary for the performance of our service (such as legally stipulated retention periods) or with your written consent, we shall still retain your personal data or continue to process and use your personal data.
- We should respond to your above request, regarding your personal data collected, reply your inquiries, reviewing, or copies, but this does not apply if there are circumstances listed in Article 10 of PDPA.
- If you would like to exercise the above rights under Article 3 of PDPA, please contact our physical store or call the toll-free customer service hotline 0800-058-885 for consultation and handling.
- You are free to decide whether to provide your personal data and categories, however, the personal data listed in the service application form or service agreement are necessary for notifying you. If not correctly and completely provided, it may not be possible to apply for our service, or it may not be possible to receive necessary information related to our service in a timely manner. Other personal data are automatically generated and recorded during your use of our service. If you do not want us to process or use it, you can exercise the aforesaid rights.
- Use beyond the purpose of collection:
- We will only use your personal data within the necessary scope for specific purposes of collection (please refer to this Notification Statement Article 1 for details) as previously explained, however, if there is any of the following circumstances stipulated in Article 20.1 of the PDPA, we will use your personal data beyond the purpose of collection pursuant to law:
- Expressly required by law. For example, to provide the personal data to judicial police officers in accordance with The Communication Security and Surveillance Act.
- Necessary for enhancing public interests or preventing significant harm to the rights of others public interests. For example, in accordance with the Fraud Crime Hazard Prevention Act, to prevent, restrict, or report fraud crime or cybercrime, etc.
- To prevent harm to your life, body, freedom, or property. For example, providing your location information to legally authorized third parties when you are missing.
- Entrusted by public agencies or academic research institutions, for statistics gathering or academic research for public interests, to provide data to such public agencies or academic research institutions in a form that does not identify you (refer to this Notification Statement Article 11).
- With your consent (e.g., "Agreement for Individually Negotiated Terms and Conditions of Third Party Marketing").
- Period of use of personal data which is beyond the purpose of collection: The retention period stipulated by relevant laws or regulations; or the retention period varied by individual negotiations from case to case (such as Direct Carrier Billing Service for Google Play or Apple Store), based on the longest retention period.
- Processing and use of de-identification data:
- We will process your personal data in a manner that objectively prevents the possibility of re-identifying individuals. We will use de-identification or other data minimization techniques (refer to this Notification Statement Article 11) to provide the results in the form of statistical data, trend analysis, or other non-identifiable formats. These results will be provided to our enterprise customers, content providers, or innovative experimental units permitted by the competent authority, as a basis for business decision or technological development (for example, allowing content providers to realize the CTR (click-through rate), consumer age/gender distribution, etc.).
- If you do not want us to process and use your personal data in the aforementioned de-identification methods, you may notify us to stop processing or using your personal data according to Article 8 of this Notification Statement; however, this does not apply to the use or processing we have already done before your request to stop, or if there are other legal provisions.
- We will only use your personal data within the necessary scope for specific purposes of collection (please refer to this Notification Statement Article 1 for details) as previously explained, however, if there is any of the following circumstances stipulated in Article 20.1 of the PDPA, we will use your personal data beyond the purpose of collection pursuant to law:
- Methods of de-identification adopted by Us (including but not limited to the following methods), explained as follows:
- Data Masking: Partially masking or replacing original data with special symbols (e.g., ○ or *).
- Range Presentation: Presenting numerical or monetary data in ranges.
- Aggregate Statistics: Aggregating calculations for different groups or different dimensions.
- Disclosure Limitation: Adjusting original data to reduce accuracy.
For more information, please visit:https://corporate.fetnet.net/content/corp/en/CSR/ExcellentService/Privacy.html
| Explanation of specific purposes | ||
|---|---|---|
| Service | Specific purposes | Explanation |
| Fixed Network Telecommunications Service | 069 Contracts, quasi-contracts, or other legal relations matters | To exercise rights and fulfill obligations under this service agreement. |
| 090 Consumers, customer management and services | To establish customer profiles for providing related services such as billing, payment reminders, rights notifications, and fault reporting. | |
| 091 Consumer protection | In accordance with Consumer Protection Act and other relevant regulations. | |
| 133 Operating telecommunication and value-added telecom network business | To provide telecommunications services related to our service. | |
| 135 Information (communication) services | To maintain the smoothness and security of the reception, coverage, and traffic of this service network, necessary management measures are taken. | |
| 137 Information and communication security management | In accordance with Cyber Security Management Act and other relevant regulations. | |
| 040 Marketing | To provide customer rights reminder information such as products, tariffs, and promotional packages for this service. | |
| 157 Investigations, statistics, and research analyses | To plan and provide customer with the most appropriate and suitable tariff as well as promotional suggestions by utilizing statistics and analyzing customer usage information of our service. | |
| 063 Non-government agency collect or process personal information under legal obligations | To collect, process, and use personal data as required by laws or regulations specifically and expressly authorized by laws. | |
New Century InfoCom Tech Co., Ltd. Fixed Network Telecommunications Service Notification Statement for Personal Data Collection
New Century InfoCom Tech Co., Ltd. (hereinafter referred to as "we") hereby clearly inform you of the followings according to Article 8.1 and Article 9.1 (if applicable) of Personal Data Protection Act (hereinafter referred to as the "PDPA"):
- We collect your personal data for the specific purposes to provide Fixed Network Telecommunications Service (Fixed Voice/ Broadband Internet/Leased Line, hereinafter referred to as the "our service") as follows:
- Categories of personal data collected for providing our service:
- Data provided by you: Including your name, national identification number, date of birth, contact information, etc., as filled in the service application form or service agreement, or other data required by law.
- Telecommunications numbers assigned to you by us.
- Internet usage information: Identification information of communication equipment, internet address and location information, time of communication, connection usage and packet quantity, domain name, application service, and protocol generated by the public telecommunications networks after you use our service.
- Domain browsing information: Including how you use our Fixed Network Telecommunications Service, such as internet access time, data volume, domain and signal status, etc.
- Location information: The location information generated when you use our service.
- Billing information: Including communication records, billing records, and payment methods (such as bank account numbers, credit card numbers, etc.), service history records, and other personal data related to your account (including the information of the other service agreement, such as Direct Carrier Billing Service binding our telecommunications bill).
- Other service information: To optimize our service and facilitate your selection of the most suitable products/services, we may analyze your personal data, and use the analysis results to improve and develop our products/services.
- Period of processing and use of personal data:
- Duration of the specific purposes: We will process or use your personal data while you use our service.
- After termination or cancellation of this service agreement (and you will not use our service anymore), we will retain your personal data for at least one year in accordance with Regulations for Administration of Mobile Broadband Businesses and other relevant regulations.
- Regions of processing and use of personal data: The regions where the recipients of processing and use of personal data set forth below are located, within the territory of Taiwan.
- Recipients of processing and use of personal data:
- We (including outsourced agencies entrusted by us to deal with affairs).
- Agencies/organizations that are legally authorized to collect, process, and use (such as: Number Portability Concentrated Databases, or the National Immigration Agency, Ministry of the Interior, National Police Agency, etc., which conduct verification with assistance of the database designated by the central industry competent authority.
- Recipients agreed by you (such as "Agreement for Individually Negotiated Terms and Conditions of Third Party Marketing").
- Methods of processing and use of personal data:
- Establishing customer profiles for you to manage your account and provide our service.
- Performing billing operations based on your network usage information and billing information.
- Contacting you through various means of communication for business purposes or to notify you of information of our service, such as sending bills, payment reminders to your or the actual user’s address, email address, or by contacting you via phone or SMS to inform you about payment and reminder information.
- To optimize our service, we may analyze your personal data and improve, develop our service based on the analysis results in order to provide you with suitable service suggestions.
- Under the custodian status by us, you can exercise the following rights pursuant to Article 3 of PDPA:
- You may inquire, view, or request a copy of your personal data. However, we may charge necessary costs in accordance with Article 14 of PDPA.
- In accordance with Article 11.1 of PDPA, we shall, on our own initiative or upon your request, supplement or correct your personal data. However, in accordance with Article 19 of Enforcement Rules of the Personal Data Protection Act, you should appropriately explain the reasons and facts.
- In accordance with Article 11.2 of PDPA, in the event of a dispute regarding the accuracy of your personal data, we shall, on our own initiative or upon your request, cease processing or using your personal data. However, this does not apply if it is necessary for business execution or if you have provided written consent, with the dispute noted.
- In the event where the collection, processing or use of the personal data is in violation of PDPA, you may request us to erase your personal data collected or cease collecting, processing or using your personal data in accordance with Article 11.4 of PDPA. However, we will review whether there is any violation of law and reply to you with the result.
- After termination or cancellation of this service agreement, or we no longer need your personal data anymore, you may request us to erase or cease processing or using your personal data in accordance with Article 11.3 of PDPA. However, if it is necessary for the performance of our service (such as legally stipulated retention periods) or with your written consent, we shall still retain your personal data or continue to process and use your personal data.
- We should respond to your above request, regarding your personal data collected, reply your inquiries, reviewing, or copies, but this does not apply if there are circumstances listed in Article 10 of PDPA.
- If you would like to exercise the above rights under Article 3 of PDPA, please contact our physical store or call the toll-free customer service hotline 0800-058-885 for consultation and handling.
- You are free to decide whether to provide your personal data and categories, however, the personal data listed in the service application form or service agreement are necessary for notifying you. If not correctly and completely provided, it may not be possible to apply for our service, or it may not be possible to receive necessary information related to our service in a timely manner. Other personal data are automatically generated and recorded during your use of our service. If you do not want us to process or use it, you can exercise the aforesaid rights.
- Use beyond the purpose of collection:
- We will only use your personal data within the necessary scope for specific purposes of collection (please refer to this Notification Statement Article 1 for details) as previously explained, however, if there is any of the following circumstances stipulated in Article 20.1 of the PDPA, we will use your personal data beyond the purpose of collection pursuant to law:
- Expressly required by law. For example, to provide the personal data to judicial police officers in accordance with The Communication Security and Surveillance Act.
- Necessary for enhancing public interests or preventing significant harm to the rights of others public interests. For example, in accordance with the Fraud Crime Hazard Prevention Act, to prevent, restrict, or report fraud crime or cybercrime, etc.
- To prevent harm to your life, body, freedom, or property. For example, providing your location information to legally authorized third parties when you are missing.
- Entrusted by public agencies or academic research institutions, for statistics gathering or academic research for public interests, to provide data to such public agencies or academic research institutions in a form that does not identify you (refer to this Notification Statement Article 11).
- With your consent (e.g., "Agreement for Individually Negotiated Terms and Conditions of Third Party Marketing").
- Period of use of personal data which is beyond the purpose of collection: The retention period stipulated by relevant laws or regulations; or the retention period varied by individual negotiations from case to case (such as Direct Carrier Billing Service for Google Play or Apple Store), based on the longest retention period.
- Processing and use of de-identification data:
- We will process your personal data in a manner that objectively prevents the possibility of re-identifying individuals. We will use de-identification or other data minimization techniques (refer to this Notification Statement Article 11) to provide the results in the form of statistical data, trend analysis, or other non-identifiable formats. These results will be provided to our enterprise customers, content providers, or innovative experimental units permitted by the competent authority, as a basis for business decision or technological development (for example, allowing content providers to realize the CTR (click-through rate), consumer age/gender distribution, etc.).
- If you do not want us to process and use your personal data in the aforementioned de-identification methods, you may notify us to stop processing or using your personal data according to Article 8 of this Notification Statement; however, this does not apply to the use or processing we have already done before your request to stop, or if there are other legal provisions.
- We will only use your personal data within the necessary scope for specific purposes of collection (please refer to this Notification Statement Article 1 for details) as previously explained, however, if there is any of the following circumstances stipulated in Article 20.1 of the PDPA, we will use your personal data beyond the purpose of collection pursuant to law:
- Methods of de-identification adopted by Us (including but not limited to the following methods), explained as follows:
- Data Masking: Partially masking or replacing original data with special symbols (e.g., ○ or *).
- Range Presentation: Presenting numerical or monetary data in ranges.
- Aggregate Statistics: Aggregating calculations for different groups or different dimensions.
- Disclosure Limitation: Adjusting original data to reduce accuracy.
For more information, please visit:https://corporate.fetnet.net/content/corp/en/CSR/ExcellentService/Privacy.html
| Explanation of specific purposes | ||
|---|---|---|
| Service | Specific purposes | Explanation |
| Fixed Network Telecommunications Service | 069 Contracts, quasi-contracts, or other legal relations matters | To exercise rights and fulfill obligations under this service agreement. |
| 090 Consumers, customer management and services | To establish customer profiles for providing related services such as billing, payment reminders, rights notifications, and fault reporting. | |
| 091 Consumer protection | In accordance with Consumer Protection Act and other relevant regulations. | |
| 133 Operating telecommunication and value-added telecom network business | To provide telecommunications services related to our service. | |
| 135 Information (communication) services | To maintain the smoothness and security of the reception, coverage, and traffic of this service network, necessary management measures are taken. | |
| 137 Information and communication security management | In accordance with Cyber Security Management Act and other relevant regulations. | |
| 040 Marketing | To provide customer rights reminder information such as products, tariffs, and promotional packages for this service. | |
| 157 Investigations, statistics, and research analyses | To plan and provide customer with the most appropriate and suitable tariff as well as promotional suggestions by utilizing statistics and analyzing customer usage information of our service. | |
| 063 Non-government agency collect or process personal information under legal obligations | To collect, process, and use personal data as required by laws or regulations specifically and expressly authorized by laws. | |
Far EasTone Telecommunications Co., Ltd./New Century InfoCom Tech Co., Ltd. Non-Telecommunication Services Notification Statement for Personal Data Collection
When you apply for, or use the information services of FarEasTone Telecommunications Co., Ltd./New Century InfoCom Tech Co., Ltd. (“the Company”), including but not limited to LINE Official Account application service, GCP cloud service, VMware service and server hosting service, or other Non-Telecommunication Services and new services or platform provided by the Company in the future, collectively “the Service". The Company collects information for purposes including but are not limited to verifying the user identity established in our website/APP, retail stores, or customer services, and providing you relevant services. Information collected includes but is not limited to necessary information of the customers (or their representative), legal representative, or the institutions. See below for a more detailed description:
- Notification of Personal Data Collection
The Company respects the privacy rights of personal data. As a basis for respecting user rights and interests and keeping good faith, the Company adopts the following principles when collecting, processing or using personal data for the Service. - The purposes of collecting your personal data:
040 Marketing 063 Non-government agency collect or process personal information under legal obligations 067 Credit cards, cash cards, debit cards, or electronic stored-value card business 069 Contracts, quasi-contracts, or other legal relations matters 072 Policy propaganda 081 Legal transaction business of personal data 085 Emergency services to Republic of China citizens who are abroad 090 Consumers, customer management and services 091 Consumer protection 104 Accounting management and debt trading business 127 Fundraising (including charity fundraising) 129 Accounting and related services 133 Operating telecommunication and value-added telecom network business 135 Information (communication) services 136 Information (communication) and database
management137 Information and communication security management 148 Internet shopping and other e-commerce services 152 Advertisement or commercial behavior management 153 Movie, television, music, and media management 154 Credit investigations 157 Investigations, statistics, and research analyses 181 Other business operation in accordance with the business registration project or organization prospectus 182 Other advisory and consultation services - Collection Methods of Customer Data
The Company will only collect necessary personal data limited to the categories announced by the government authority in accordance with the purpose of carrying out the Service, including value-added services, various incentives deals, marketing, information on events, market research, bill processing, arrears reminders or other related businesses to the Service. The personal information collected shall include but is not limited to the customer’s name, or the name of customer’s legal representative as it is recorded in various application forms, personal identification numbers, and/or other certified documentation that can sufficiently identify the customer’s identity, address, telephone number, e-mail address, date of birth, other related necessary information, and other information generated by using the services (including but not limited to location, web browsing history, and device information.) - The time period, region, target, and methods of processing and using your personal data:
- Time period: The period of the purpose for which the personal data was collected, the period of retention required by the Company for the execution of its business, or the retention period in accordance with laws and regulations (including but not limited to Civil Code and other applicable laws and regulations).
- Region: The area within and outside the Republic of China (excluding the areas not permitted by the competent authority).
- Target: The Company, affiliates and cooperative companies entrusted by the Company or have cooperative and business relationships with the Company.
- Methods of using personal data:
Your personal data is used whenever it is necessary, such as:- Creating customer/member files for you so that accounts can be managed
- Contacting you to provide customer service (including sending goods, notifying you on information about the service you applied for, or replying to your questions and appeals)
- Sending bill information to your address or e-mail address and notify you by phone call or SMS
- Providing you with marketing information, such as discounts, promotions, other services of the Company, and other products/services that may be more suitable for you by using your various contact methods
- Analyzing your personal data to maintain, protect, develop and enhance the Company's services, and recommendations on other products/services that you may be interested in or suitable for you based on the analysis results
- Analyzing your personal data and producing results in the form of statistical data, trends, or other formats that cannot identify you. Providing these anonymous data to the Company’s enterprise customers. For example, to let the enterprise customers understand their store hotspots, consumer age or gender distribution, consumer dwelling time, etc.
- Providing your personal data to a third party such as corporates specialized in marketing, analyses, surveys, advertising, public relations, logistics, payment flow, or information service, etc. entrusted by the Company to assist the Company in achieving the purpose of personal data collection within the scope of such entrustment. The Company will perform all the necessary supervision on the entrusted third party to ensure the security of your personal data
- The prevention, investigation, and use of rights for breach of contract
- Rights of using personal data:
Under the custodian status by the Company, you can exercise the following rights pursuant to the Personal Data Protection Act:
- Inquiring and reviewing your personal data
- Requesting duplications and supplements of, or making corrections to your personal data
- Requesting to cease the collection (opt-out), processing, or use of your personal data
- Requesting to delete your personal data
When exercising the above rights, you are required to make an application with our customer service contact window (or the store designated by the Company) by presenting your ID documents and the application form in person in order to protect the security of your personal information. The way of provision, processing time and inquiry fee of application documents are governed by laws, the Company's business regulations, the service agreement, or terms and conditions for other related membership services. According to Articles 10 and 11 of the Personal Data Protection Act, the Company may determine whether to accept your application or not by considering its necessity for the performance of business and the statutory retention period.
The Company will collect, process and use personal data only if you choose to agree to provide your personal data, and you are free to decide whether you would like to provide your personal data or not. However, if you decide not to provide personal data, the Company may not be able to approve the application or to provide the user with complete service.