Giant Heavy Machinery Service Corporation (hereinafter referred to as “Giant”) values the importance of privacy, This privacy policy is enacted, in accordance with the Taiwan Personal Data Protection Act, Enforcement Rules of the Personal Data Protection Act and Giant information security policy, to ensure the personal information security of Giant employees, customers and business partners, and to protect Giant rights and interests.
1. Scope |
This policy applies to Giant’s employees and contract personnel, and the companies having business with Giant, and their personnel, applicants of Giant, visitors to Giant's website , visitors to Giant.
2. Categories of Personal Data |
General Personal Data |
- Personal information: name, photo, ID number, gender, date of birth, age, nationality, company name, job title, title, account information, military service status.
- Contact information: contact address, telephone number, fax number, e-mail information, messenger app details, social media details, etc.
- Expertise and experience: educational background, research field, language abilities, professional skills, experience, occupation, qualification certification, work experience.
- Your consent record in paper or electromagnetic form for obtaining Personal Data.
- Information about your login to the Giant website and the feedback you provided.
- Others: Whether relatives work in Giant, relative information, etc.
Sensitive Personal Data |
We do not seek to collect or otherwise process Sensitive Personal Data in the ordinary course of our business. Where it becomes necessary to process your Sensitive Personal Data for any reason, we rely on one of the following legal bases. Sensitive Personal Data types including medical records, healthcare records, physical examination records, criminal records, etc. Giant may process your Sensitive Personal Data in the following situations :
- Compliance with applicable law: the processing is required or permitted by applicable law, e.g., to comply with our diversity reporting obligations.
- Detection and prevention of crime: The processing is necessary for the detection or prevention of crime, e.g., the prevention of fraud, violation of the law.
- To claim, exercise or protect the legal rights of Giant or relevant parties, Giant may process your Sensitive Personal Data.
- Based on your voluntary consent, Giant may process your Personal Data.
3. Purposes and Legal Bases of Personal Data Processing |
The collecting, processing or use of personal information shall be conducted by respecting such person’s rights and interests, in good faith, and to the extent necessary and reasonable for specific purpose. Prior to collecting personal information for business purpose, Giant shall notify such person of the collecting purpose and scope, and obtain his/her written consent. Giant may process personal data for the following purposes :
- For the purpose of Giant's business and operation, via email or through other channels, to perform works, cooperate or communicate, negotiate.
- Recruitment and job applications.
- Maintaining the security of Giant’s plant including but not limited to the plant site visit records, monitor records, and system login records and access records and other electronic security measures.
- For the purpose of managing suppliers, Giant may process your Personal Data by your prior consent.
- For the purpose of fulfilling statutory obligations such as case investigations and legal compliance.
4. Collection of Personal Data |
Giant may collects your Personal Data from the following sources including but not limited to the following situations:
- Giant may obtain your Personal Data through business collaboration , business visits or meeting.
- Giant may obtain your Personal Data provided by you, e.g., you contact Giant via e-mail or telephone, or when you provide us with your business card, or when you submit a job application.
- Giant may obtain Personal Data when you visit our website or use any features or resources available on the site.
- Giant may obtain Personal Data that you choose to make public, e.g., the content you disclose on social media.
- Giant may obtain Personal Data from third parties who provide it to us, e.g., credit reference agencies, law enforcement authorities, etc.
5. Disclosure of Personal Data to Third Parties |
Giant may disclose Personal Data to other entities within the Giant group, for legitimate business purposes and the operation of products or services in accordance with applicable law. In addition, we disclose Personal Data to:
- You and your appointed representatives.
- Legal and regulatory authorities, Giant may disclose your Personal Data to them in accordance with legal requirements, or to report any illegal or suspected illegal behavior.
- Accountants, auditors, consultants, lawyers and other professional advisors to Giant, subject to binding contractual obligations of confidentiality.
- Provide your Personal Data to Giant’s global service providers under this Policy (for example: payment service agencies, freight companies, etc.).
- Provide your Personal Data to relevant parties, governmental authorities, governmental department, law enforcement department or Court in order to claim, exercise legal rights when necessary, or to prevent, investigate, prosecute wrongdoing, or to execute criminal penalties.
6. Cross-Border Transfer |
Personal data may be transferred among and used by Giant’s subsidiaries located in different countries to the extent not exceeding the original scope of the Specific Purpose. Giant shall manage the transfer and use of personal data in accordance with the Policy and applicable privacy and personal data laws and regulations in the countries where the personal data is transferred and used.
7. Data Security |
Giant has implemented appropriate security measures to prevent your Personal Data from being accidentally or intentionally damaged, lost, tampered with, unauthorized disclosure, unauthorized access, and other illegal or unauthorized processing. Due to the open nature of the Internet, the information transmitted over the Internet is not completely secured. Although we have employed all reasonable measures to protect your Personal Data, there is still no guarantee that the processing of transmitting information via the Internet will be completely safe. You shall bear the possible risks underlying the transmission process. Please be sure to make sure there is no security issue during the processing of transmitting your Personal Data to Giant.
8. Data Accuracy |
Giant strives to take reasonable measures to ensure that your Personal Data is correct and timely. If there is any error exist in your Personal Data, we will immediately correct or delete it. In order to ensure the accuracy of your Personal Data, we may occasionally confirm the accuracy of your Personal Data with you.
9. Data Minimization |
Giant strives to take reasonable measures to ensure that the scope of Personal Data processed by Giant has a reasonable relevance to the purposes contained in this policy, and is limited to the processing within the reasonable scope.
10. Data Retention |
Giant strives to take reasonable measures to ensure that the processing of your Personal Data by Giant will only be made for the period necessary for the purposes listed in this policy. We will keep your Personal Data in accordance with the following principles:
- During the period that there is a continuous employment relationship between you and Giant.
- For the period necessary to achieve the legitimate purpose set out in this policy.
- During the period of statute of limitation prescribed by the applicable laws or regulations. For example, when a third party exercise the legal right to request for your Personal Data from Giant, Giant must keep and process your Personal Data for the period necessary for fulfilling the request.
- After the expiration of the retention period in the foregoing, Giant will permanently delete or destroy your relevant Personal Data, or pseudonymize your Personal Data.
11. Your Legal Rights |
According to applicable Personal Data protection Act you may claim the following rights to Giant:
- Review your Personal Data, request Giant to provide a copy of your Personal Data, supplement or rectify your Personal Data.
- Refusal to provide your Personal Data: However, please note that if you refuse to provide your Personal Data, Giant may not be able to fully provide you with our products or services.
- Stop processing your Personal Data, restrict processing your Personal Data, delete your Personal Data, or transfer your Personal Data to other Personal Data controllers under reasonable and feasible technical premises.
- Withdrawing your consent to the processing of your Personal Data by Giant: please note that withdrawing your consent will not affect the legality of the processing of your Personal Data based on your prior consent. If the processing of your Personal Data has other legal basis, we may continue to process your Personal Data.
- You reserve the right to appeal to the competent authority responsible for information protection for the Processing of your Personal Data.
Please note that before Giant can provide any assistance to your request, you need to provide identification documents in order to exercise the above rights.
12. Usage of customer data for secondary purposes |
Giant endeavors to protect the privacy of our customers. We do not use customer data for any secondary purpose other than the purposes defined in this Policy.
13. Contact information |
Information Security Office、Legal Affairs Office and Human Resources Division are responsible for privacy issues. The privacy violation will get into information security incident response process, the violator will have a punishment based on the severity, Transfer to the prosecuting agency or HR Internal discipline.
If you have any questions about this privacy policy, please contact us via the following information:
Giant Heavy Machinery Service Corporation
9F.-2, No. 21, Huanke 1st Rd., Zhubei City, Hsinchu County 302047 , Taiwan (R.O.C.)
Telephone:+886-3-559-1177
Alternatively, you may contact us using our online "Contact Us" form.