ESG

 

Privacy and Personal Data Protection Policy

SynPower Technology Co., Ltd. (hereinafter referred to as “the Company”) highly values your privacy. This policy explains how we protect your personal data and ensure that you can use our website-related services with confidence. This policy covers the collection, use, and protection mechanisms of personal data to safeguard your digital rights.

1. Collection and Use of Personal Data

 
  • Purpose of CollectionIncluding but not limited to customer management, marketing promotion, contract performance, after-sales service, talent recruitment, and other business needs consistent with registered business items.
  • Data Categories

    ● Identification Data:Such as name, job title, contact phone number, email address, address, etc.

    ● Characteristic Data:Such as age, gender, date of birth, etc. (limited to specific business needs).

  • Period and Region of UseUnless otherwise required by law, your personal data will be used during the Company’s operating period and within its operating regions.

2. Data Security Protection Measures

 

The Company adopts strict technical and organizational security measures to protect your personal data, maintaining a record of zero major information security and personal data incidents in 2025:

  • Technical ProtectionUses advanced firewalls, MDR detection systems, and SSL encrypted transmission.
  • Organizational ManagementImplements strict access control mechanisms, allowing only authorized personnel to access personal data, with regular risk assessments.
  • Personnel Awareness EnhancementConducted 6 information security activities and 3 social engineering drills in 2025.

3. Exercise of Data Subject Rights

 

In accordance with the Personal Data Protection Act, you may exercise the following rights regarding personal data held by the Company:

  • 1. Inquire about or request access to, or request a copy of, your personal data.
  • 2. Request supplementation or correction.
  • 3. Request the cessation of collection, processing, or use.
  • 4. Request deletion, within the scope permitted by law.

Note:To exercise the above rights, please submit your request through the contact window at the end of this policy. We will respond and process the request within the statutory 15-day period, which may be extended when necessary.

4. Personal Data Breach Response Mechanism

 

In the event of a personal data breach, the Company will immediately initiate the following notification and response procedures:

1. Verification and Damage ControlThe information security team will immediately isolate affected systems and block the threat source to prevent further damage to personal data.
2. Legal NotificationNotify the competent authority within 72 hours of discovering the incident, and announce the affected scope and remedial measures taken.
3. Vulnerability Remediation and PreventionConduct root-cause analysis and vulnerability scanning, strengthen protection gaps, and update management processes.
4. Consultation and RemediesProactively assist data subjects in taking preventive measures and provide legal consultation channels to protect their rights and interests.

5. Use of Cookies

 

To provide the best service, this website places cookies in your browser. If you do not wish to accept cookies, you may disable cookie storage in your browser settings, but some website functions may not operate properly.

Privacy Protection Consultation Contact

📞 03-369-0966 (Personal Data Protection Team)

This policy may be revised as needed and published on the website.

Last updated: 2025/12/31