Privacy Policy and Notice of Personal Data Collection, Processing, and Use

HIWIN Technologies Corp. and its affiliates (hereinafter referred to as "HIWIN") respect and are committed to protecting users' personal privacy. HIWIN is dedicated to complying with relevant legal requirements regarding the protection of users' personal privacy and the security of personal data. This Privacy Policy and Notice of Personal Data Collection, Processing, and Use (hereinafter referred to as "this Policy") is intended to help users understand how HIWIN collects, uses, and protects the personal data obtained from users through HIWIN's products and services. This Policy also explains how HIWIN discloses and transfers users' personal data and to whom.

If you are a minor, please obtain consent from your parent(s) or legal guardian before using this website or providing any personal data.

1. Collection, Processing, and Use of Personal Data

When users access this website, HIWIN may collect personal data that users provide in the course of using HIWIN’s products and services or when applying for job opportunities through HIWIN’s website. Below is a summary of the types of personal data that may be collected through this website and the purposes for which such data is collected.In certain countries, in order to prevent the improper collection and use of minors’ personal data, HIWIN may request users to additionally provide their age or the contact information of their parent(s) or legal guardian in order to obtain consent.In addition, when users access this website, HIWIN may also collect de-identified data that cannot be used to identify individual users.

When using HIWIN’s products and services or applying for job opportunities, users are not required to provide personal data; however, choosing not to do so may result in the website being unable to offer certain services or respond to user inquiries in many cases.

HIWIN may collect personal data that can directly or indirectly identify the user for the following lawful and legitimate purposes:Such data may be processed, used, and internationally transferred within the territory of the Republic of China (Taiwan), and may also be provided to public and private institutions involved in the relevant business purposes for processing, use, and international transfer within the territory of the Republic of China.In accordance with the Personal Data Protection Act, HIWIN hereby informs users of the following:

1.1Purposes of Personal Data Collection (The purpose codes and names listed below are subject to change according to future announcements by the Ministry of Justice.)

040 Marketing
063 Non-government agency collect or process personal information under legal obligations
069 Contract, contract-like or other legal relation matters
090 Consumer, Customer Management and Service
098 Lending and trust business
135 Information (Communication) Services
136 Information (Communication) and database Management
137 Information and Communication Security and Management
152 Advertisement or commercial behavior administration
157 Investigation, statistics and research analysis
182 Other Consulting and Consultant Services

1.2 Categories of Personal Data Collected by HIWIN (The category codes and names are subject to change in accordance with future announcements by the Ministry of Justice.)

Code 001 Type for identifying individuals
Code 038 Occupation
Code 054 Occupation expertise

1.3 Duration, Area, and Recipients of Personal Data Use

• 1.3.1 Duration：The period during which the specific purpose of personal data collection remains valid.
• 1.3.2 Area：All regions where HIWIN operates.
• 1.3.3 Recipients：Public and private institutions related to the respective business purposes.
• 1.3.4 Methods of Use：The collection, processing, international transfer, and use of personal data through automated or non-automated means in accordance with relevant personal data protection laws (e.g., using electronic documents, paper-based formats, or other appropriate methods compatible with the scientific and technological standards of the time).

1.4 Rights of Users Regarding Their Personal Data Held by HIWIN

• 1.4.1 Users may request HIWIN to inquire about, review, or provide copies of their personal data. However, HIWIN may deny such requests if doing so would materially harm its own interests or those of a third party. HIWIN may charge users a reasonable fee to cover necessary costs for responding to such inquiries, reviews, or copy requests.
• 1.4.2 Users may request HIWIN to supplement or correct their personal data, provided that the user appropriately explains the reasons and facts behind such a request.
• 1.4.3 Users may request HIWIN to stop collecting, processing, or using their personal data, or to delete their personal data. However, if HIWIN is required to retain the data for the execution of its duties or business operations, it may decline the user's request.
• 1.4.4 For any third-party personal data provided by the user (e.g., information of family members or emergency contacts), the user confirms that they have informed the concerned individuals and obtained their consent for HIWIN to process, use, and internationally transfer such data for the aforementioned purposes.

1.5 Information Related to Children

HIWIN understands the importance of protecting children's privacy, especially in an online environment. HIWIN recognizes that users under the age of 18 may not be able to provide valid consent regarding the processing of their personal information. Therefore, HIWIN's websites are not designed to target children under the age of 18.

HIWIN does not knowingly collect, use, or share personal information of minors without verified parental consent or as permitted by law. With the consent of a parent or legal guardian, minors may register and use HIWIN’s services through a HIWIN ID or any other account. Parents or legal guardians may contact HIWIN using the information provided in Section 10 "Contact Information" to review, modify, or delete their child's personal information, or to withdraw consent.

2. Data Retention and Information Security

2.1 Implementation of Security Measures :

HIWIN has implemented appropriate physical, technical, and administrative security measures to protect personal information from loss, misuse, alteration, or destruction. HIWIN will promptly address and rectify any identified deficiencies in its security measures. In addition, HIWIN will establish personal data protection policies and management systems in accordance with this Privacy Policy, and will continually review and improve such policies and systems.

• 2.1.1 Organization：Whenever personal data is processed within HIWIN, a designated individual will be assigned to oversee its proper management. HIWIN will also provide all employees with relevant training programs to help them understand personal data protection and proper management practices in their daily operations.
• 2.1.2 Anonymized Data Processing：When generating anonymized information, HIWIN will follow legally required standards and implement appropriate security control measures in accordance with applicable laws and regulations.
• 2.1.3 Outsourcing Control：HIWIN’s third-party service providers are contractually obligated to maintain the confidentiality of personal data. They are also prohibited from using such data for any other purposes not authorized by HIWIN.

3. Parties to Whom HIWIN May Disclose Users’ Personal Data

3.1 For Legal or Protective Purposes :

HIWIN may disclose or share necessary items of users’ personal data with third parties under the following circumstances, to comply with legal requirements or for protection purposes：

When necessary to comply with laws, regulations, requests from competent authorities, or judicial entities, or to establish, exercise, or defend legal claims, or to prevent fraud or investigate other illegal activities.

When permitted by law, to protect the rights, property, and safety of HIWIN, its service providers, users, or the public from harm.

3.2 User Consent :

HIWIN may share users' personal information after obtaining users’ consent during the data collection process or through subsequent consent.

4. Cookies and Similar Technologies

HIWIN and its third-party partners use cookies (small text files stored on the user’s device to record information) and other similar technologies to provide HIWIN products and services. When users visit any website under the HIWIN domain (including subpages and country/region-specific versions), that website may set some or all of the cookies and similar technologies described below.

The vast majority of cookies are stored only on the user’s device and are not transmitted back to HIWIN.

4.1 How HIWIN Uses Cookies：

• 4.1.1 To enhance users’ online browsing experience while using HIWIN products and services, HIWIN uses the following cookies to provide essential functions required for users to access and use HIWIN products and services：

• 4.1.2 To support statistical and usage analysis, provide users with personalized advertising services, and enhance other functional experiences, HIWIN uses the following third-party cookies to optimize users’ experience when using HIWIN products and services：

4.2 How to Manage Cookie Settings :

• 4.2.1 Please note that users can manage their cookie settings according to their preferences through their browser. Users are free to refuse all or part of the cookies (such as third-party cookies), delete cookies stored in their browsers, or make other related settings.
• 4.2.2 In some countries, when users visit HIWIN’s website for the first time, HIWIN will display a brief cookie notice banner at the top of these websites. Users can freely choose to enable or refuse the use of the aforementioned third-party cookies via this banner.
• 4.2.3 If users choose to refuse cookies, HIWIN may be unable to provide the full functionality of HIWIN products and services.
• 4.2.4 Depending on the type and version of the browser installed on the user’s device, the cookie functionality settings may differ and change. Below are some common browsers available on the market. Users can refer to the following links to learn how to manage cookie settings via these browsers (the linked pages are in Chinese, so please select a preferred language option on those pages for easier reading).If users do not use the browsers listed below or if the links are removed, please visit the support pages of the browser installed on your device or the browser vendor’s privacy policy pages for more information.Users may also refer to https://www.aboutcookies.org/ (content in English), which explains how to manage cookie settings in many different browsers.

4.3. YouTube :

HIWIN’s website uses YouTube embedding features along with the “Enhanced Privacy Mode” to play video content provided by YouTube. YouTube is a service provided by Google LLC (hereinafter referred to as “Google”), located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To play embedded videos, HIWIN’s website establishes a connection with YouTube’s servers. YouTube uses the “Enhanced Privacy Mode” feature to embed videos on HIWIN’s website. This “Enhanced Privacy Mode” is provided by YouTube, which assures that no cookies containing personal information will be stored on the user’s device. However, when users play a video, their IP address and the website they visit will be recorded and processed by YouTube. If users are not logged into any YouTube or other Google services when accessing the videos, they will not receive video-related information. If users are logged into YouTube or Google, YouTube will link the connection information to the users’ YouTube accounts, and only cookies that do not contain personal information will be stored on the users’ devices. If users do not want this to happen, they must log out of YouTube or change the relevant settings in their user accounts before visiting HIWIN’s website.

Furthermore, whether or not users play videos, each visit to the website establishes a connection to Google’s “DoubleClick” network. The connection to Google’s network triggers additional data processing procedures, which HIWIN cannot control.

According to the EU-US Privacy Shield data protection framework adopted by Google LLC, Google LLC (based in the U.S.) and its subsidiary YouTube guarantee compliance with the EU’s data protection requirements.

For more information about YouTube’s privacy policy, please visit：https://policies.google.com/privacy?en&hl=en

4.4 Web Analytics Services :

HIWIN uses the following third-party web analytics and tracking services, as detailed below. The legal basis for the above is Article 6(1)(f) of the GDPR.

4.4.1 Google Analytics

This website uses the web analytics service Google Analytics, provided by Google, Inc. (hereinafter referred to as “Google”). Google Analytics uses cookies, which are small text files placed on the user’s computer, to help analyze how users use the website. The information generated by the cookie about the user’s use of the website is typically transmitted to and stored on Google’s servers in the United States. If IP anonymization is enabled on this website, Google will truncate the IP address within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. Google will use this information on behalf of the website operator to evaluate the use of the website, compile reports on website activity for HIWIN, and provide other services related to website and internet usage to the website operator.

The IP address transmitted by the user’s browser as part of Google Analytics will not be merged with other Google data.

Users can configure their browsers to refuse cookies; however, please note that if you do so, you may not be able to use all the features of this website fully. Additionally, users can prevent Google from collecting data generated by cookies related to their use of the website (including the user’s IP address) by downloading and installing the browser plugin provided by Google at the following link： http://tools.google.com/dlpage/gaoptout?hl=en。

This website uses Google Analytics with the “_anonymizeIp()” feature. This means that IP addresses are processed in a shortened form, making it impossible to associate them with individuals. If any data collected about users can be linked to an individual, such linkage will be immediately excluded, and the personal data will be deleted immediately.

4.4.2 Google Ads Conversion Tracking

This website uses Google Ads Conversion Tracking. When a user clicks on an ad served by Google, a conversion tracking cookie is activated in the user’s browser through Google Ads. These cookies expire after 30 days and are not used to collect personally identifiable information. If a user visits a page on this website and the cookie has not expired, Google and HIWIN will know that the user clicked the ad and was directed to that page. Each Google Ads customer receives a different cookie. As a result, the cookie cannot be tracked across the websites of Google Ads customers. Conversion statistics are generated by the conversion cookie collecting data from Google Ads customers who have chosen to track conversions. Ads customers receive information about the total number of users who clicked their Google Ads and were redirected to the conversion tracking page, but they do not receive any information that can identify individual users. If users do not wish to participate in the tracking program, they can easily opt out by disabling Google conversion tracking cookies in their internet browser settings. Users can also disable conversion tracking cookies at any time by setting their browser to block cookies from “googleadservices.com.”

4.4.3 Google Tag Manager

This website uses Google Tag Manager as part of Google Analytics. Tags are small tag elements on the HIWIN website used to measure traffic and visitor behavior, evaluate the impact of online advertising and social media, enable remarketing and targeting, as well as test and optimize the website. Google Tag Manager is a solution that helps HIWIN manage website tags through an interface. The Google Tag Manager tool itself (which implements tags) belongs to a cookie-free domain. This tool triggers other tags to collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will apply to all tracking tags implemented via Google Tag Manager.

For more information about Google Tag Manager, please visit online：https://www.google.com/analytics/tag-manager/use-policy/.

4.4.4 Google Analytics Remarketing

HIWIN’s website uses Google Analytics remarketing features as well as cross-device functionalities from Google Ads and Google DoubleClick. The provider is Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

These features allow the advertising audiences collected via Google Analytics remarketing to be linked with Google Ads and Google DoubleClick cross-device functions. As a result, personalized advertising content based on a user’s browsing interests and behavior on one device (e.g., mobile phone) can also be shown on the user’s other devices (e.g., tablet or PC).

With the user’s consent, Google links the user’s website and app browsing history to their Google account. This enables the delivery of the same personalized ads to every device logged into with the user’s Google account.

To support this functionality, Google Analytics collects Google-authenticated user IDs, which are temporarily associated with HIWIN’s Google Analytics data to define and establish cross-device ad targeting.

Users can opt out of personalized ads in their Google account to permanently refuse cross-device remarketing/targeting via the following link： https://www.google.com/settings/ads/onweb/

For more information and data protection regulations, please refer to Google’s data protection statement：https://policies.google.com/technologies/ads?hl=en-GB

Users can also block cookies according to the detailed instructions in the network analytics section of the data protection statement.

4.4.5 Bing Ads Conversion Tracking

Online Advertising Program Bing Ads (https://secure.bingads.microsoft.com/ -> English) uses the analytics service provided by Bing, namely Bing Conversion Tracking. When a user clicks on an ad delivered by Bing, a conversion tracking (UET) cookie is stored on the user’s device.

UET (Universal Event Tracking) collects data as described in the Microsoft Privacy Statement：https://privacy.microsoft.com/en-us/privacystatement. Bing Ads retains this data for 180 days. UET also collects the IP address and Microsoft cookies (valid for 13 months). This cookie contains a GUID assigned to the user’s browser and/or an ID assigned to the user if authenticated via their Microsoft account. Typically, cookies in the relevant domains and IP addresses are sent with every HTTP request, not only via UET. Bing Ads does not resell this data to third parties or share it with other advertisers.。

For special cases of personal data transfer to the United States, Microsoft commits to complying with the EU-US Privacy Shield Framework：https://www.privacyshield.gov/welcome. The legal basis for using Bing Ads is Article 6(1)(f) of the GDPR.

Information about third parties：Yahoo! Taiwan Holdings Ltd., Taiwan Branch 14F, 66 SanChong Rd., Nangang District, Taipei City, Taiwan
https://privacy.microsoft.com/en-us/privacystatement

4.5 Updating and Deleting User Personal Data :

Users have the right to access and correct their personal data at any time. For registered information, users can view and modify their registration data simply by logging into their account on this website.

Users may contact HIWIN Technology at any time to refuse the use of their personal information by HIWIN Technology. HIWIN Technology will, within a reasonable scope, promptly remove the user’s personal information from its database.

Users can use HIWIN Technology’s email address: webmaster@hiwin.tw to request inquiries, access, copies, supplements, corrections, cessation of collection, processing or use, or deletion of the personal data provided.