|
|
|
Chunghwa Telecom Co., Ltd. (hereinafter referred to as “we”) hereby informs you of the following matters in accordance with Article 8, Paragraph 1, and Article 9, Paragraph 1 (if applicable) of the Personal Data Protection Act:
|
| I. |
The specific purposes for which we collect your personal data in providing mobile broadband services (hereinafter referred to as “the Service”) are as follows: |
| |
| Specific Purposes and Codes |
Description of Specific Purposes |
| 069 Contracts, Similar Contracts, or Other Legal Relationship Matters |
Exercise rights and fulfill obligations in accordance with the contract for the Service |
| 090 Consumer, Customer Management and Services |
Establish customer profiles to provide services related to billing, payment reminders, rights notifications and enforcement, and incident reporting |
| 091 Consumer Protection |
Process in accordance with the Consumer Protection Act and other relevant regulations |
| 133 Telecommunications Operations and Value-Added Telecommunications Network Services |
Provide telecommunications services related to the Service |
| 135 Information and Communication Services |
Ensure the smooth and secure management of network reception, coverage, and traffic for the Service through necessary measures |
| 137 Information Security and Management |
Process in accordance with the Cyber Security Management Act and other relevant regulations |
| 040 Marketing |
Provide customer rights and benefits reminder information, including products, tariffs, and promotional packages related to the Service |
| 157 Investigation, Statistics, and Research Analysis |
Utilize statistical analysis of customer usage data for the Service to plan the most appropriate pricing and products, providing customers with recommendations for suitable pricing and promotional offers |
| 063 Collection, Processing, and Utilization of Personal Data by Non-Governmental Entities in Accordance with Legal Obligations |
Collect, process, and utilize personal data as required by laws or regulations specifically authorized by law |
|
| |
|
| II. |
Categories of personal data collected for the provision of the Service: |
| |
| (I) |
Information you provide: Your name, national identification number, date of birth, contact information, and other data required to be filled in the service application form/contract or retained as mandated by law.
|
| (II) |
Your user number assigned by us. |
| (III) |
Network usage information: The communication equipment identification data, internet addresses and location information, communication time, connection usage and packet quantities, domain names, application service types and protocols, etc. generated by the public switched telecommunications network ("PSTN") after you use telecommunication services.
|
| (IV) |
Domain browsing information: Includes details on how you use our mobile broadband services, such as browsing duration, data volume, domain access, and signal status. |
| (V) |
Location information: Location information generated by your use of the Service. |
| (VI) |
Account information: Communication records, billing records, and payment methods (such as bank account numbers and credit card details) generated from your use of the Service, as well as service history records and other personal data related to your account (including data associated with non-service project contracts, such as telecom bill collection for other project contract fees).
|
| (VII) |
Other service information: To optimize the Service and facilitate your selection of the most suitable products/services, we may analyze your personal data and improve and develop our products/services based on the analysis results. |
|
| III. |
Duration of personal data processing and utilization: |
| |
| (I) |
Duration of specific purpose: We will process or utilize your personal data for the duration of your use of the Service.
|
| (II) |
Upon termination or cancellation of this contract (when you no longer use the Service), we will retain your personal data for at least one year in accordance with the Telecommunications Management Act and other relevant regulations. |
|
|
IV.
|
Region of personal data processing and utilization: Domestic and international locations (e.g. for international roaming) of the entities listed in the “Personal data processing and utilization targets” section. |
| V. |
Personal data processing and utilization targets: |
| |
| (I) |
Chunghwa Telecom Co., Ltd (including subcontractors entrusted by us to handle affairs).
|
| (II) |
Agencies/organizations authorized by law to collect, process, and utilize data (e.g., centralized database for number portability services, or databases designated by the central competent authority such as the Ministry of Interior’s National Immigration Agency and the National Police Agency to assist verification agencies). |
| (III) |
The parties you agree to (according to “Third-Party Marketing Individual Negotiation Terms”).
|
| (IV) |
Overseas telecommunications enterprises that have signed an international roaming service agreement with us. |
|
| VI. |
Method of personal data processing and utilization: |
| |
| (I) |
Establishment of a customer profile for the management of accounts and the provision of services.
|
| (II) |
Billing operations based on your network usage and billing information. |
| (III) |
Business communication and service notifications via various contact methods, including billing, payment reminders, and service-related updates.
|
| (IV) |
Optimization of the Service through personal data analysis, leading to service improvements and tailored plan recommendations. |
|
| VII. |
In accordance with Article 3 of the Personal Data Protection Act, your rights and method of exercise in relation to the personal data we hold are as following: |
| |
| (I) |
You may inquire about, review, or request a copy of the personal data we hold about you. However, we may charge necessary costs in accordance with Article 14 of the Personal Data Protection Act.
|
| (II) |
In accordance with Article 11, Paragraph 1 of the Personal Data Protection Act, we must proactively supplement or correct your personal data upon request. However, pursuant to Article 19 of the Enforcement Rules of the Personal Data Protection Act, you must provide appropriate clarification regarding the reasons and facts for such a request.
|
| (III) |
In accordance with Article 11, Paragraph 2 of the Personal Data Protection Act, if the accuracy of personal data is disputed, we will proactively or upon your request cease processing or utilizing it. However, this limitation does not apply if it is necessary for business operations or if you have provided written consent, with the dispute explicitly noted.
|
| (IV) |
If you believe that we have unlawfully collected, processed, or utilized your personal data, you may request its deletion or cessation of collection, processing, or utilization in accordance with Article 11, Paragraph 4 of the Personal Data Protection Act. However, we will review whether there has been a violation of the law and respond to you with the results.
|
| (V) |
Upon termination or cancellation of this contract, or if you believe we no longer need your personal data, you may request its deletion, cessation of processing, or utilization in accordance with Article 11, Paragraph 3 of the Personal Data Protection Act. However, if required for business operations (e.g., legally mandated retention periods) or with your written consent, we may retain, continue processing, or utilize your personal data.
|
| (VI) |
We shall respond to inquiries, provide access, or produce copies of the personal data collected upon your request. However, this is subject to the exceptions outlined in Article 10 of the Personal Data Protection Act.
|
|
| VIII. |
If you wish to exercise the rights stipulated in Article 3 of the Personal Data Protection Act, please contact our service centers or call our toll-free customer service number at 0800-080-123 (for landline and mobile calls, dial 123) for consultation and assistance, or visit the My Service Center website (https://123.cht.com.tw).
|
| IX. |
You are free to choose whether to provide relevant personal data and categories. However, the personal data listed when applying for the Service is necessary for notification purposes. If the information is incorrect or incomplete, you may be unable to apply for the Service or may not receive timely information related to it. Other personal data is automatically generated and recorded during your use of the Service. If you do not wish for us to process or utilize it, please follow the aforementioned methods to exercise your rights.
|
| X. |
Utilization beyond the purpose of collection: |
| |
| (I) |
We will only utilize your personal data within the necessary scope for the specific purposes of collection (refer to Article 1 of this Notice). However, in the event of circumstances as stipulated in Article 20, Paragraph 1 of the Personal Data Protection Act, we will use the data for purposes beyond those of collection in accordance with the law:
| 1. |
Explicit legal provisions. For example, providing your personal data to judicial police agencies in accordance with the Communications Protection and Surveillance Act.
|
| 2. |
Necessary to enhance public interest or to prevent significant harm to the rights and interests of others. For example, in accordance with the Fraud Crime Hazard Prevention Act, to prevent, stop, or report fraudulent or cybercriminal activities.
|
|
|
| 3. |
To eliminate any danger to your life, body, freedom, or property. For example, when your whereabouts are unknown, your location information may be provided to a third party legally entitled to access it. |
| 4. |
Provision of data to public agencies or academic research institutions upon request, when necessary for statistical or research purposes in the public interest, in a form that does not allow for personal identification (refer to Article 11 of this Notice).
|
| 5. |
Upon your agreement (e.g. according to the Third-Party Marketing Individual Negotiation Terms). |
|
| (II) |
Duration of use beyond the purpose of collection: In accordance with relevant legal regulations, the retention period shall be determined; or based on individual negotiations for specific projects (such as Google Collection Service, Apple Collection Service, KKBOX Micro-Payment Service, etc.), the retention period for your personal data shall be established according to the longest duration specified.
|
| (III) |
Processing and utilization of data in a manner that prevents personal identification restoration:
| 1. |
We will process your personal data in an objectively irreversible manner, using de-identification or other data minimization techniques (refer to Article 11 of this Notice). The results will be presented in statistical data, trend analysis, or other non-identifiable formats and provided to corporate clients, content providers, or innovative experimental units authorized by regulatory authorities. These insights serve as a basis for business decisions or technological development (e.g., enabling content providers to understand consumer browsing patterns, age/gender distribution, etc.).
|
| 2. |
If you wish to stop us from processing and utilizing your personal data using the aforementioned irreversible identification methods, you may notify us through the contact methods outlined in Section 8 of this Notice. However, this does not apply to any processing or utilization that has already occurred prior to your request or as mandated by law.
|
|
|
| XI. |
Methods employed to ensure irreversible de-identification of personal data are as follows: (including but not limited to) |
| |
| (I) |
Suppression - Removal of certain data to reduce the accuracy of the dataset. |
| (II) |
Pseudonymization - Replacement of unique identifiers in original data with pseudonymized data, preserving inter-database links while eliminating the possibility of personal data identification. |
| (III) |
Generalization - Modification of original data into a more generalized form while preserving accuracy. |
| (IV) |
Randomization - Modification of the original data content to approximate information, reducing accuracy. |
| (V) |
Aggregation - Replacement raw data with its statistical data. |
|
For more details, please visit the relevant information website: Chunghwa Telecom/ESG /Privacy Protection/Customer Privacy Protection (https://www.cht.com.tw/zh-tw/home/cht).
|
|