Collection, Use and Disclosure of Personally Identifiable Information
The definition of PII depends on the related law. In Europe, it includes all information that is directly or indirectly related to users and "personal data" as defined in the GDPR (General Data Protection Regulation). If the GDPR or other EU privacy laws apply to users, the privacy law details how users can exercise their rights.
The company can collect, store, process and transfer various kinds of personal data about users, and the company have grouped them as following:
Special Data Categories: The company can also collect, store, process, and transfer the following types of data that the GDPR defines as "special categories" for more sensitive personal information.
Government and Legal Request
If a company intends to disclose PII, it may be permitted by law, legal process, litigation, or at the request of public and government authorities within or outside your country of residence. The Company can share PII if it determines that the access, use, preservation or disclosure of such information is reasonably necessary to meet applicable laws, regulations, legal proceedings, or compelling government requests. In addition, it may be permitted if it detects, prevents, or handles the service, fraud, security or technical issues, including investigations into potential violations, or if users are concerned about damage to the rights or property of the company, users or the public.
The company's website uses IP addresses to help analyze flows, manage the company's website, track user movements, and collect extensive demographic information for aggregation use. IP addresses do not include PII.
The company website uses "cookie". "Cookie" is data stored on a user's hard drive that contains information about the user. Cookie do not contain PII and do not connect while users are on the company website. For example, setting cookie on a company website saves time on the company website because users do not have to log in with their password more than once. If users reject cookie, users can continue to use the company website, but is restricted in some areas of the company website. Cookie can also allow company to track and target users' interests to improve their experience on the company website.
To receive certain updates or to use certain features of the company website, users need to fill out a registration form. During registration, users may need to provide a PII such as a username or email address. If request, it is optional for the user to provide demographic information (e.g., income level and gender) and a unique identifier that allows the company to provide a more personalized experience on the company website.
The company can contract with third-party to provide services to the company, including the internal operation of the company's website, the store and search of information including PII, and other services related to the service. PII, online survey information, discussion group information, and aggregated demographic information can be maintained on the company's servers or on the company's third-party contractor's servers. The company can use a third-party to facilitate provision of targeted content and transfer data to third party contractor to facilitate service. Except as required by law, the company is not responsible for the actions of such third parties in relation to the handling and processing of PII.
The company's website has security measures in place to protect against loss, misuse and alteration of information, including PII controlled by the company. However, due to the nature of the threat to information security, the company cannot guarantee that it can prevent security breaches that could compromise information, including PII controlled by the company. The safety and security of PII also depends on users’ behavior. If the user is provided with a password for access to certain parts of the company website (or if the user is selected), then the user is responsible for keeping this password confidential. The company is not responsible for any responsibility caused by the users’ negligence because information users access and share in public places is visible to all users of the website.
Spam Protection Policy
The company opposes mass posting to unsolicited commercial emails and inappropriate newsgroups (spam) as a means of publicity or advertising. The company does not send emails to anyone who is not related to company situation or has not requested to contact us and does not post unrelated advertisements. If you receive an unsolicited commercial email that appears to be from a company or company employee, notify the company immediately.
User Rights under GDPR
Users have rights to access rights (Article 15 of GDPR), modifications (Article 16 of GDPR), deletions (Article 17 of GDPR), processing restrictions (Article 18 of GDPR), and data mobility (Article 20 of GDPR). In addition, users have rights to oppose processing based on Article 6 of GDPR. Users also have rights to file a complaint with the data privacy supervisory office.
If users agree to the company to process personal data for a specific purpose, users’ consent becomes the legal basis for the processing of the user's personal data. The consent can be withdrawn at any time, without affecting the legality of the processing performed on the basis of consent, until withdrawal. Cancellations can be made without forms and, if possible, should be sent to the contact information provided in the policy.
Personally Identifiable Information Update and Removal Correction
The company will make reasonable efforts to provide a way for users and clients of the company's website to request them to modify, update or remove clients' PII from the company's database.
According to the GDPR, users can request the following items from the company.
Selection and Rejection
As of a company requests information about users, clients, survey participants, or discussion group participants, the company's website provides users and clients the opportunity to refuse to receive additional emails and emails from the company.