Taiwan Business Bank collects, processes, and uses personal information of customers (hereinafter referred to as "you") in compliance with the Personal Data Protection Act of the Republic of China and related laws and regulations. Unless otherwise stipulated by law or otherwise agreed between you and us, the contents of this policy statement will be followed. This is done to provide diverse and improved financial products and services.

This policy statement applies to all of our operations, and we strongly encourage our suppliers and business partners to comply with it as well.

To ensure efficient supervision, promotion, coordination, and integration of personal data protection within our organization, we have formed a "Personal Data Protection and Management Committee" and a "Personal Data Protection Working Group." Additionally, we conduct annual internal audits of personal data protection to ensure compliance with regulations and safeguard the privacy of our clients' information.

(1)Provision of Personal Data

When you apply for our services or engage in business transactions with us, we will first obtain your consent before requesting any personal information from you. This personal information may include your name, national identification number, personal account number, bank account number, password, gender, date of birth, contact information, and any other details required by relevant business application forms or contracts. The collection of your personal data will be based on the business or services you engage in with us and may involve third parties, such as the Joint Credit Information Center. If there is any deviation from the original purpose of collecting your personal data, we will obtain your consent before proceeding with any such use. You have the freedom to choose whether or not to provide the requested personal information. However, if you refuse to provide the necessary personal data, we may not be able to carry out the required verification, processing, and response operations. This may result in our inability to provide you with the requested services.

(2)Use of Personal Data

The collection of your personal data will be used within the scope of the services we provide. If it is necessary to engage third parties to provide services due to business requirements, we will strictly require these third parties to comply with this policy statement. Unless with your consent, authorization, or as required by law, we shall not exchange or provide your personal data to other individuals or organizations arbitrarily.
Unless otherwise required by law, we will destroy or delete your personal data by internal regulations after the specific purposes of the collection have been achieved or ceased to exist. Alternatively, your personal data may be de-identified in a manner that cannot be traced back to you and retained. The relevant traces, evidence, and records of deletion, cessation of processing, or utilization of retained personal data shall be kept for at least five years unless otherwise provided by law or agreed upon in contracts.

(3)Marketing of Personal Data

We will only send financial and business promotion information to you within the scope permitted by law, based on the business relationship between you and us, or with your consent. This is done to provide you with a diverse range of improved financial products and services. If you no longer wish to receive any financial or business promotion messages from us, you may contact us at any time to notify us. We will stop sending you such information and refrain from using your personal data for marketing purposes.

When using our services, you have the right to inquire about, access, or obtain your personal data within a reasonable operational procedure and timeframe. You have the right to update or correct outdated personal data, choose to opt out of service offerings, or request the deletion, cessation of processing, or utilization of your personal data, unless required by law. Prior to processing any such requests, we may ask you to provide proof of your identity and specify the personal data that you wish to inquire about, correct, or delete. We may refuse to process requests for access that are excessive, repetitive, technically demanding, privacy-infringing, impractical (such as requests for information stored on backup tapes), or unnecessary. If you wish to inquire about, request access to, or obtain copies of your personal data from us, please note that we may charge a fee in accordance with the law to cover necessary costs.

We will take reasonable measures to ensure the accuracy, completeness, and timeliness of the personal data that we process. We rely on you to update or correct your personal data when necessary.

We use the Secure Socket Layer (SSL) data encryption protocol to enhance the security of data transmission. In addition to SSL, we also utilize encryption technologies that employ a key length of 256 bits or higher, or other equivalent levels of encryption, to ensure the security of your data. We implement appropriate security measures to prevent unauthorized access, alteration, destruction, loss, or disclosure of personal data. These measures include conducting internal reviews of practices and security measures for the collection, storage, and processing of personal data to ensure their safety and privacy. Additionally, physical security measures are implemented to prevent unauthorized access to systems that store personal data.

To better meet your needs, We use cookie technology to provide services. When you browse our website, it automatically records your browsing habits, preferences, and any relevant information you enter through your browser. On your future visits to our website, you will not need to re-enter the same information. This will save you from repetitive and cumbersome steps. You can configure your browser to reject the use of cookie technology. Please note that by doing so, you may be prevented from accessing certain features of our website.

Please ensure the security of your personal information, passwords, electronic certificates, and accounts. Do not disclose any personal information, particularly passwords, to anyone or any institution. It is advisable to refrain from using public computers. Additionally, after using a computer, it is important to close the browser window to prevent unauthorized access to your personal information or emails.

Any employee of ours who violates the relevant laws or internal regulations regarding the Personal Data Protection Act shall be subject to disciplinary action and legal liability, depending on the severity of the offense.
If personnel from our suppliers violate relevant laws or contractual provisions related to personal data protection, resulting in harm to us, they will be held liable for damages.

In response to changes in the social environment, business needs, regulatory requirements, and technological advancements, we reserves the right to periodically modify and announce amendments to this policy statement to ensure its continued relevance. We encourage you to regularly review this policy statement on our website to protect your rights and interests.

If you have any questions regarding this policy statement or the exercise of your personal data rights, please visit our website (https://www.tbb.com.tw/) and leave a message in the "Contact US" section or call 0800-01-7171 for further assistance.