The purpose of this Privacy Policy is to explain how SILICON-BASED MOLECULAR SENSING TECHNOLOGY Co., Ltd. (hereinafter referred to as "the Company" or "we") collects and processes your personal data. The Company will amend this Policy from time to time to comply with relevant personal data protection laws in our operating locations and to meet our business operational needs. We recommend that you read this Policy carefully and check our website regularly to stay informed of any changes to its terms.
1. Data Subjects Covered by this Policy
This Privacy Policy applies to:
- (1) Employees of the Company
- (2) Employees of the Company's customers, suppliers, and contractors
- (3) Users of the Company's products or services
- (4) Visitors browsing the Company's website or physically visiting the Company's premises
- (5) Job applicants of the Company
The aforementioned data subjects are hereinafter collectively referred to as "you."
2. Methods of Personal Data Collection
The Company may collect or obtain your personal data through the following channels:
- (1) Data you proactively provide to the Company: You provide your personal data when contacting the Company via email or phone, or when applying for a job vacancy.
- (2) Data obtained through labor relations, business relations, or commercial cooperation: The Company directly obtains your personal data due to labor requirements, business contacts, or commercial activities. The Company may obtain your personal data when cooperating with you in research, development, or business dealings, when hiring you as a consultant or lecturer, or when you act as a contact person for such commercial cooperation.
- (3) Data made public by you: We may obtain your personal data when you publicly share information related to the Company on social media.
- (4) Personal data obtained on the Company's website: We obtain your personal data when you register on or browse the Company's website and/or systems.
- (5) Personal data provided by third parties: The Company may obtain your personal data from credit reference agencies, law enforcement agencies, third-party plug-ins, or cookies.
3. Categories of Personal Data
(collectively referred to as "your personal data")
(1) General Personal Data
- Personal details: Name, alias, photograph, ID card number, passport number, gender, date of birth, age, nationality, race, and financial information.
- Contact details: Contact address, phone number, fax number, email address, social communication software accounts, etc. If you interact with the Company as an employee of the Company or another company, this may include your name, job title, photograph, company phone number, and company email address.
- Expertise and social information: Educational background, research field, language skills, professional skills, employment history, current occupation, certifications, licenses, work experience, membership in various trade associations, and relationships with other individuals or institutions.
- Your consent records: Your written signature of consent, the time and date of consent, the method of consent, etc.
- Information related to the Company's website: Device type, operating system, browser type, browser settings, IP address, language settings, date and time of connection to the website, username, password, encrypted login information, usage data, etc.
- Views and opinions: Feedback you provide to the Company, or views and opinions about the Company you make public on social networks.
- Other: For example, whether your relatives are employed by the Company and their personal data.
(2) Sensitive Personal Data
Except in limited specific circumstances, the Company generally does not collect or process your sensitive personal data in the course of daily business. However, if processing your sensitive personal data is necessary for legitimate reasons, the Company will do so in accordance with the law. The types of sensitive personal data we may collect or process include health examination records, criminal records, etc. The Company may process your sensitive personal data in the following situations:
- To comply with relevant legal regulations
- To detect or prevent the occurrence of crimes
- To establish, exercise, or defend the legal rights of the Company or related parties
- Based on your consent
When you provide sensitive personal data to the Company, you must first ensure that you have the legal right to do so.
4. Purposes and Legal Basis for Processing Your Personal Data
The Company processes your personal data for the following purposes:
- (1) For human resources and administrative operations;
- (2) For business and operational purposes;
- (3) For communication and marketing purposes;
- (4) For system management purposes;
- (5) For supplier management purposes;
- (6) To obtain your feedback on products or services;
- (7) To maintain company and facility security and safety controls;
- (8) To fulfill legal obligations such as case investigations or statutory compliance;
- (9) To improve or develop products and services;
- (10) For human resources recruitment.
The Company may also use your personal data for purposes other than the original ones under the following circumstances:
- (1) Where explicitly stipulated by law;
- (2) Where necessary to promote public interest;
- (3) To protect your life, body, freedom, or property from danger;
- (4) To prevent significant harm to the rights and interests of others;
- (5) Based on your consent;
- (6) Where it is beneficial to your rights and interests.
The Company processes your personal data based on the following legal grounds:
- (1) Your prior consent.
- (2) Where necessary for a contractual relationship between the Company and you, or for negotiating a contract.
- (3) The Company has a legitimate interest, provided that such legitimate interest does not override your interests, fundamental rights, and freedoms.
- (4) The Company is fulfilling its statutory compliance obligations.
- (5) Necessary for the Company to establish, exercise, or defend legal rights.
- (6) The Company cooperating in accordance with relevant laws to detect and investigate fraud and other crimes, and to prevent violations of Company policies and criminal acts.
5. How the Company May Process Your Personal Data
(1) Internal Processing
- Operation and management of the Company's website, systems, products, or services.
- Identifying issues, improving, and developing the Company's website, systems, products, or services.
- Management, operation, auditing, and monitoring of various Company systems.
- Maintenance of physical and electronic security measures at Company facilities.
- Compliance with the Company's legal obligations.
- Conducting recruitment and interview activities.
(2) External Processing
- Providing your personal data to third parties who manage the Company's website, systems, and obtain feedback on Company products or services.
- Providing your personal data to third parties who manage and update your contact information.
- Using your personal data for investigations and inquiries conducted by the Company in accordance with the law, and preventing violations of company policies and criminal acts.
- Using your personal data and related documents for submission, collection, and review in formal legal proceedings, or submitting facts, evidence, and witness testimony related to your personal information.
- Sharing your personal data with third parties based on your prior consent, in accordance with the parties listed in Article 8 "Parties with Whom We May Share Your Personal Data."
6. Cross-Border Transmission of Personal Data
Due to the multinational nature of the Company's business and services, and within the scope of the purposes listed in Article 4 and elsewhere in this Policy, the Company may transmit your personal information to other companies within the Company's group, including those located in Taiwan, the United States, Japan, South Korea, the Netherlands, Singapore, or other locations where the Company has established bases. These countries may have different levels of legal regulations and requirements for personal data protection compared to the country where you are located.
If the Company transfers your personal data from within the European Economic Area (EEA) to outside the EEA, and the receiving country has not obtained an adequacy decision from the European Union, the Company will sign the EU Standard Contractual Clauses with the recipient. You may request the Company to provide the Standard Contractual Clauses for your reference using the contact information listed in Article 17 of this Policy.
Please note that when you directly transfer any of your personal data to the Company's affiliates outside the European Economic Area, the Company cannot bear any responsibility for such transmission.
7. Protection of Minors
The Company does not intentionally collect personal information from minors under the age of 18. If the Company discovers that we have unintentionally collected personal information from an individual under the age of 18, the Company will delete such information in accordance with legal requirements.
8. Parties with Whom We May Share Your Personal Data
(1) The Company may share your personal data with the following parties:
- You and your designated representatives.
- Judicial authorities as required by law, or to report any illegal or suspected illegal acts.
- Accountants, auditors, consultants, lawyers, and other professionals providing consulting services to the Company who have signed confidentiality agreements with the Company.
- Payment service providers, shipping companies, and other global service providers of the Company, in accordance with the provisions of this Policy.
- Relevant parties, competent authorities, government units, law enforcement agencies, or courts, when necessary to establish, exercise, or defend legal rights, or to prevent, investigate, detect, or execute criminal penalties.
- Buyers or transferees of the transaction, if the Company sells or transfers all or part of its business or assets, or undergoes reorganization, dissolution, or liquidation.
(2) If the Company entrusts information service organizations to process your personal data, the Company will sign a contract with the information service organization to meet the following requirements:
- The information service organization must process your personal data within the scope of the intended purpose;
- The information service organization must comply with legal requirements to establish security mechanisms to protect personal data.
9. Personalized Data Analysis and Automated Decision-Making
To prevent data breaches and protect the Company's intellectual property, the Company may analyze your personal data and use it for automated decision-making, such as processing your personal data to analyze potential risks to IT systems. Therefore, we advise you to avoid disclosing your sensitive or confidential data.
10. Security of Personal Data
The Company has implemented appropriate technical and organizational security measures (such as setting access permissions) in accordance with relevant laws to protect your personal data from accidental or intentional destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other illegal or unauthorized processing.
Due to the open nature of the Internet, the transmission of information over the network is not entirely secure. Although we have taken all reasonable measures to protect your personal data, we cannot guarantee the absolute security of information you transmit over the network. You assume the potential risks associated with this transmission process; please ensure there are no security issues when transmitting information to us.
11. Accuracy of Personal Data
The Company is committed to taking reasonable measures to ensure that the personal data we process is accurate. If there are any inaccuracies in your personal data, the Company will promptly correct or delete it. To ensure the accuracy of your data, the Company will confirm with you when necessary.
12. Principle of Data Minimization
The Company is committed to taking reasonable measures to ensure that the collection and processing of your personal data are kept to a minimum reasonable scope and that this scope is reasonably related to the purposes stated in this Policy.
13. Retention Period of Personal Data
The Company is committed to taking reasonable measures to ensure that your personal data is processed only for the period necessary to achieve the intended purposes. The Company will retain your personal data based on the following principles:
- (1) During the existence of a business relationship: For example, from the time you begin business contact with the Company until the time you notify the Company to cease business contact.
- (2) Within the statute of limitations specified by relevant laws: For example, when a third party exercises legal claims against the Company related to your personal data, the Company may continue to process your personal data for the period necessary to satisfy such requests. The Company's processing of your personal data in this context is strictly limited to the storage and maintenance of the security of such data.
- (3) After the retention period agreed upon between the Company and you has expired, the Company will permanently delete or destroy your personal data, or anonymize it through de-identification.
- (4) Within the necessary period to achieve the legitimate purposes stated in this Policy.
14. Rights of Data Subjects
In accordance with applicable personal data protection laws, you may exercise the following rights regarding the Company:
- (1) Request to review your personal data.
- (2) Request the Company to provide a copy of your personal data.
- (3) Supplement or correct your personal data.
- (4) Request the transfer of your personal data to another data controller, subject to reasonable and technically feasible conditions.
- (5) Object to the processing of your personal data by the Company or a third party acting on behalf of the Company, subject to legal compliance.
- (6) Choose to opt-out by exercising the following rights:
- Withdraw your consent to the Company's processing of your personal data. Please note that withdrawing your consent will not affect the lawfulness of the Company's processing based on your prior consent; if the processing itself has other legal bases, the Company may continue to process your personal data.
- Refuse to provide your personal data. However, please note that if you refuse to provide your personal data, the Company may not be able to fully provide you with the Company's products or services.
- Request to stop the collection of your personal data.
- Request to restrict the processing of your personal data.
- Request the deletion of your personal data.
If you wish to exercise the above rights or have any questions about this Privacy Policy, please contact the Company using the contact information provided in Article 17 of this Policy. For security purposes, when you exercise these rights, the Company may require additional information to verify your identity to reasonably confirm that you are the owner of the personal data or an authorized representative.
15. Cookies and Similar Technologies
When you visit the Company's website or log into the Company's systems, the Company may set cookies on your device or read existing cookies on your device, provided this complies with legal regulations or your consent has been obtained. The Company may use cookies to record specific information on your browser, or to record your preferences and browsing habits. The Company will process your personal data using cookies and other similar technologies in accordance with our Cookie Policy. For more details on cookies, please refer to the Company's Cookie Policy.
16. Direct Marketing
The Company may use your email address and other personal data to provide you with information you may find interesting, including but not limited to product technical updates, testing service information, or industry trends. When providing this information, the Company may use the contact details you provided to reach you. You may unsubscribe from the Company's newsletters at any time by sending an email to the Company; after unsubscribing, the Company will no longer send you newsletters.
17. Contact Information
If you have any questions regarding this Privacy Policy, please contact the Company using the following details:
Email: support@molsentech.com