Home / Investor Relations / Corporate Governance / Personal Data Protection Policy

Personal Data Protection Policy

Our company is committed to protecting the personal data of everyone we interact with. We recognize that data security is essential to corporate integrity and trust.
To safeguard your privacy, we have established a robust data protection system in compliance with the Personal Data Protection Act. We continuously strengthen internal controls and security measures to ensure all personal data is collected, processed, and used lawfully, fairly, and transparently.

I. Purpose and Basis

To ensure the security of personal data belonging to all company personnel, customers, and suppliers who have business dealings with the company, this “Personal Data Protection Policy” is established in accordance with the Personal Data Protection Act, relevant regulations, and the company’s “Personal Data Protection Management Guidelines.” For the purpose of executing relevant business operations, the company collects, processes, and uses personal data within a legal and reasonable scope to safeguard the rights of data subjects and ensure compliance and security in business operations.

II. Scope of Application

This policy applies to the personal data of all company personnel, customers, and suppliers who have business interactions with the company.

III. Personal Data Management

The personal data collected by the company (including personally identifiable information such as name, company name, job title, address, telephone number, and email address) will only be used for business purposes specified under the company’s business registration or articles of incorporation. The company will also properly protect personal information in accordance with the Personal Data Protection Act.

Special categories of personal data, except for data disclosed by the data subject or other legally disclosed personal data, or as explicitly required by law, shall not be collected, processed, or used.

IV. Departments and Responsibilities

Department	Responsibility
Human Resources Department	Personal data of job applicants, employees, employee health check records, and manpower agency-related data
Finance Department	Personal data of shareholders and board directors/supervisors
Sales Department	Customer personal data
Procurement Department	Supplier personal data
General Manager's Office	Personal data of project consulting personnel and external auditors of certification bodies
IT Department	Information security and protection
Administration Department	Serves as the single point of contact for external reporting
Occupational Safety Office	Personal data of outsourced construction personnel
Audit Department	Uses personal data for auditing to ensure compliance with this policy
Others	Handled by the appropriate responsible department

V. Retention Period

The company may process and use relevant data within the scope permitted by law to provide information or services. The retention period spans from the initial contact date until the termination of the specific purpose.

VI. Rights of the Data Subject

Data subjects may exercise their rights in accordance with applicable laws (including requests for inquiry, review, duplication, supplementation, correction, processing, usage, and deletion of personal data). Please contact the company by phone or email during business hours.

VII. Personal Data Awareness and Training

Responsible departments shall, in accordance with the company’s “Training Management Guidelines,” periodically conduct awareness programs and training on personal data protection for department employees.

VIII. Policy Revision

Any amendments to this policy will be announced on the company website or communicated to relevant stakeholders. The latest version of the Personal Data Protection Policy published on the website shall prevail.