Inventec Corporation Privacy Policy

The Inventec Corporation Privacy Policy is established to safeguard the privacy rights of data subjects. Inventec Corporation (hereinafter referred to as "the Company") commits to protecting your privacy in accordance with the Personal Data Protection Act and will implement appropriate security measures. By accessing or using the Company’s website or other services, you acknowledge that you have read, understood, and agreed to all provisions of this Policy. The Company reserves the right to modify or amend this Privacy Policy at any time, with changes published on the Company’s website without individual notification. It is recommended that you regularly review updates. If you do not agree to this Policy or any modifications, please immediately cease using the website and/or Company services

• Scope of Applicability

  This Policy applies to the following individuals: business partners, suppliers, contractors, external consultants, third-party collaborators, visitors to the Company’s website, users of the Company’s products or services, job applicants, and visitors to the Company’s premises (hereinafter collectively referred to as “You”).

• Definition of Personal Data

  Personal data includes but is not limited to: name, gender, date of birth, address, phone number, email address, affiliated organization, job title, national identification number/passport number or other identification document numbers, bank account details, facial images, surveillance recordings, educational background, work experience, professional certificates of job applicants, data collected through cookies on the Company’s website, and other data that can directly or indirectly identify an individual.

• Collection, Processing, Retention, and Utilization of Personal Data

  1. The Company may collect or obtain personal data under the following circumstances: when the data subject voluntarily provides information to the Company (e.g., initiating contact with the Company); when personal data is obtained as a result of a contractual or statutory relationship between the data subject and the Company (e.g., purchasing products or services from the Company); when personal data is acquired through direct interaction (e.g., participation in business meetings, exhibitions, commercial visits by Company representatives, or other professional engagements where personal data may be collected); when personal data is obtained through contractual collaboration with third parties; when the data subject accesses the Company's website; when the data subject voluntarily discloses personal data in a publicly available domain (e.g., information shared on social media platforms); when the data subject registers on any of the Company's websites to access its products or services; when the data subject interacts with third-party content or advertisements hosted on the Company's website; and when personal data is obtained from third parties, including but not limited to law enforcement agencies or regulatory authorities.
  2. The Company collects and processes personal data for the following purposes: providing its websites, products, and services; conducting compliance audits; managing corporate operations and administration (including but not limited to supplier management, financial oversight, and human resources administration); maintaining and securing the Company’s information systems; ensuring health and safety (including but not limited to facility access records, surveillance footage, and system login/logout data); conducting surveys and obtaining feedback; supporting judicial investigations; complying with applicable legal and regulatory requirements; enhancing the Company’s websites, products, and services; preventing fraudulent activities; and establishing, exercising, or defending legal rights.
  3. The collection, processing, and use of personal data shall adhere to the principle of not exceeding the specified purposes and shall not be subject to secondary use. However, the Company may process the provided personal data beyond its original purpose when required to comply with applicable laws, regulatory authority directives, or judicial requests, to assist in investigations and prevent unlawful activities, or to assert, exercise, or defend legal claims.
  4. The Company shall retain personal data for the duration necessary to fulfill the purposes for which it was collected. Furthermore, the Company may continue to store and process personal data beyond this period as required by applicable laws, regulatory obligations, or legitimate business interests. In accordance with Article 6, Section 6 of this Policy, you have the right to request the deletion of your personal data.

• Personal Data Protection and Information Security Management

  1. Only authorized personnel may access your personal data, and such personnel must comply with the Company's policies to protect privacy.
  2. The Company implements technical and organizational security measures to prevent accidental or unlawful destruction, loss, or alteration of personal data. These measures include but are not limited to encryption mechanisms, firewall security, and auditing systems. If you believe your data security has been compromised, please contact the Company immediately.
  3. If the Company entrusts third parties for service provision, it will require strict compliance with this Policy and conduct necessary audits to ensure adherence.
  4. The Company enforces a zero-tolerance policy regarding violations of privacy and personal data protection. If confirmed violations occur, disciplinary action will be taken, including legal proceedings when necessary.

• Principles for Sharing Personal Data with Third Parties

  1. The Company is committed to protecting your personal data and shall not disclose, transfer, lease, or sell it to any third party without authorization. However, this restriction shall not apply where you have provided explicit consent, where the recipient is contractually bound by a confidentiality agreement with the Company, where disclosure is required by applicable laws, regulatory obligations, or contractual necessity, or where such disclosure is otherwise permitted under this Privacy Policy.
  2. When sharing personal data with third parties, the Company shall adhere to the following principles:
     
     1. Ensuring that third parties acknowledge and comply with this policy;
     2. Limiting data sharing to the minimum necessary to achieve the intended purpose of collaboration;
     3. Conducting regular audits of third-party personal data protection measures.

• Your Rights

  Subject to applicable legal requirements, you have the right to assert the following rights regarding your personal data with the Company:

  1. You have the right to determine whether to provide your personal data to the Company. When the Company requests the provision of personal data, you have the right to refuse. However, if you choose not to provide your personal data, the Company may be unable to fully offer certain website features or services.
  2. The Company processes your personal data based on your consent; however, you have the right to withdraw such consent at any time. The withdrawal of consent shall not affect the lawfulness of the collection and processing of your personal data conducted by the Company prior to your withdrawal.
  3. Request access to and review of your personal data.
  4. Request a copy of your personal data.
  5. Request the supplementation or rectification of inaccurate or incomplete personal data.
  6. Request the deletion, cessation of collection, processing, or use of your personal data.
  7. Where technically feasible and necessary for the exercise of rights, you may request the transfer of your personal data in an electronic and machine-readable format to a designated third-party service provider. For example, residents of the European Economic Area (EEA), in accordance with the General Data Protection Regulation (GDPR), have the right to assert or request restrictions on the Company's processing of their personal data.
  8. You have the right to lodge a complaint or report any violations, suspected breaches, or potential infringements related to privacy rights or personal data protection.

• Cross-Border Data Transfers

  As the Company operates as a multinational entity, cross-border transfers and utilization of personal data may occur, provided that such transfers do not exceed the originally specified purposes of collection, processing, and use, and remain within the scope of this Policy. The Company shall adhere to this Policy as well as the applicable data protection and privacy regulations governing cross-border data transfers in each relevant jurisdiction.

• Risk Management Policies and Procedures

  1. Risk Assessment
     

     The Company shall conduct periodic risk management for privacy protection in accordance with its risk management policies and procedures, identifying and assessing factors that may pose risks. These risks include unauthorized access, data breaches, data corruption, and other cybersecurity threats.

  2. Risk Mitigation Measures
     

     For identified risks, the Company shall implement appropriate mitigation measures, including:

     1. Enhancing data encryption technologies;
     2. Increasing cybersecurity protection levels;
     3. Conducting regular security audits and penetration testing;
     4. Establishing and updating response plans and measures.
  3. Risk Monitoring
     

     The Company shall continuously monitor and assess privacy protection risks, adjusting relevant measures in response to evolving risks to ensure the security and integrity of personal data.

  4. Risk Audit
     

     The Company shall conduct periodic or ad hoc internal and external audits to verify whether personal data protection measures and related procedures comply with relevant legal regulations and management systems, thereby continuously enhancing the effectiveness of personal data management mechanisms.

• Cookies

  When you visit the Company's website, the Company employs standard cookie technology to place and access cookies on your device. If you do not wish to accept the storage of cookies, you may configure your browser’s privacy settings to a “high” level to refuse cookie placement or receive a warning notification before cookie data is stored. You may also choose to adjust your browser settings to receive prior notifications regarding cookies, allowing you to accept or reject them; however, doing so may result in certain website functions being restricted or operating improperly. The Company does not intentionally or knowingly infringe upon your privacy while you browse its website.

• Governing Law and Jurisdiction

  The interpretation and application of this Privacy Policy, as well as any disputes related to this Privacy Policy, shall be governed by the laws of the Republic of China (Taiwan). In the event that litigation is necessary, both parties agree that the Taiwan Shilin District Court shall be the court of first instance.

• Incident Contact

  If you wish to exercise your rights under Article 6 of this Policy, encounter an event or situation that may lead to an infringement of your rights, or discover a possible violation of this Policy, you may contact the Company through the following channels: Privacy Protection Hotline:+886-2-2881-0721#21999 or Email: 21999@inventec.com。

This Policy was enacted on October 15, 2024.