Personal Data Privacy Protection Policy

I. Purposes of Collection

In the course of providing its services (the “Services”), the Firm collects your personal data for the following specific purposes:

1. Providing the Services: to provide you with legal consultation, project implementation, representation in litigation and other services.
2. Exercising legal rights or performing legal obligations: to retain, analyze or disclose your personal data where necessary to exercise rights under the law (for example, legal proceedings concerning a consumer dispute involving you) or to perform legal obligations (for example, cooperating with a criminal investigation).

II. Categories of Personal Data Collected

In the course of providing the Services, the Firm will collect the following personal data:

1. Personal data you provide:
   1. Consultation booking data: the name, telephone number, company name, e-mail address, consultation category, requirements and other details you enter when booking a consultation on the Firm’s website.
   2. Voice data: calls to the Firm’s telephone line will be recorded.
   3. Other data: the various materials you provide when you engage the Firm, which may include video recordings, audio recordings and photographs.

   You are free to choose whether to provide the personal data above. However, if you do not provide the data in fields marked “required”, or provide incomplete data, we may be unable to provide the Services. For optional fields, you are free to choose whether to provide the data; if you do not, we will be unable to offer you more tailored service.

2. Personal data obtained from third parties:
   1. Event participation data: when we provide services jointly with partners, we will obtain from the partner the personal data you agreed to share in connection with your participation in an event.

III. Period, Area, Recipients and Methods of Use

1. Period: unless otherwise provided by law, the period of use is the period during which the Services are provided to you.
2. Area: your personal data will be used primarily within the Republic of China (Taiwan). Some services may use the infrastructure of overseas cloud service providers, in which case your personal data will be transmitted to servers of the provider located outside Taiwan.
3. Recipients:
   1. Third-party service providers engaged by the Firm.
   2. The Firm’s partners.
   3. Competent authorities such as courts and prosecutors’ offices, where required by law or requested by them.
4. Methods: by automated or non-automated means, to store, compare, analyze and transmit data, to contact you, and so on, in order to provide the Services and achieve the purposes of collection above.

IV. Exercising Your Rights and Filing Complaints

Under Article 3 of the Personal Data Protection Act (the “PDPA”), you may exercise the following rights with respect to the personal data the Firm holds about you in providing the Services:

1. You may inquire about and review the personal data we hold about you, or request a copy. Under the PDPA, we may charge a fee to cover necessary costs, and we may refuse your request where the law permits.
2. You may request that your personal data be supplemented or corrected. Under the PDPA, you should reasonably explain the reasons and facts.
3. Where the accuracy of your personal data is disputed, you may request that we stop processing or using it. However, we need not stop where processing or use is necessary for our business and the dispute is noted, or where you have given written consent.
4. If you believe we have collected, processed or used your personal data unlawfully, you may request that we delete it or stop collecting, processing or using it. We will review whether any violation exists and reply to you with the result.
5. When the purpose of collection no longer exists or the period expires, you may request that we delete your personal data or stop processing or using it. However, we may still retain, or continue to process and use, your personal data where this is necessary for our business (for example, where a statutory retention period applies) or where we have separately obtained your written consent.

V. Policy Revisions and Notification

The Firm will revise this Policy from time to time in response to changes in law, developments in its services or other business needs. The revised version will be published on this page.