Privacy Policy

This website is operated by the Taiwan Resort Hotel Association (the "Association"). To safeguard the privacy of consumers' personal data and their transactional rights, the Association has established this Privacy Protection Policy (the "Policy") in accordance with Taiwan's Personal Data Protection Act (the "PDPA"), and provides the pre-collection notice required under Article 8 of the PDPA. Please read the following carefully.

1. Organisation Details

2. Specific Purposes for Retaining Personal Data Files

020 / Deposit and remittance management; 022 / Marketing (including direct marketing to individuals); 037 / Customer management; 039 / Reservations, accommodation registration and ticketing; 051 / Consumer protection and transaction rules; 055 / National and local tax assessment; 060 / Statistical surveys and analysis; 063 / Accounting and related services; 065 / Information and database management; 066 / Member (registry) management (including members' appointed representatives); 092 / Tourist-hotel and travel-agency management; 097 / Other purposes necessary for business items registered or provided in the charter.

3. Categories of Personal Data

C001 / Personal identifiers; C002 / Financial identifiers; C003 / Identifiers in government records; C011 / Personal descriptions; C093 / Financial transactions; C101 / Commercial activities of the data subject; C102 / Agreements or contracts.

4. Period, Region, Recipients and Methods of Use

Period: the operating period of the Association.
Region: Taiwan and the countries to which the ordered products belong.
Method: all personal data is provided by you voluntarily after you consent to the "pre-collection notice under Article 8 of the PDPA", and is collected via online order forms.

Personal data collected is used only for:

1. verifying identity for voucher reservations and orders;
2. handling and communicating order changes and amendments;
3. processing refunds arising from order changes;
4. sending travel-agency collection/payment receipts, tickets or gifts;
5. marketing data analysis;
6. if you write to the Association or leave an online message with your feedback, the Association will retain the communication records;
7. other online activities:
   • When you take part in online activities of the Association (including using the Association's products or services, browsing its web pages, or using other related website services), the Association may ask you to provide relevant personal data as required by the activity, including but not limited to your name, contact number, national ID number and email address.
   • System logs and cookies: in addition to retaining records generated on our systems while you browse or make enquiries (including IP address, access time, browser, and browsing/click records), this website may use cookies to record and analyse user behaviour. Such records can identify users — for example, to perform different actions based on the categories of data you prefer. If you do not wish to accept cookies, you may disable them via your browser settings; however, doing so may prevent you from using some services offered by this website.

5. Your Choice to Provide Data, and the Effect of Not Providing It

To protect consumers' ordering rights, please provide accurate membership or order information. If information is left blank or is inaccurate and cannot be confirmed by email or phone, this website may cancel the order.

6. Data Protection

1. The Association stores your personal data in full within our data storage systems and adopts appropriate security measures to prevent it from being stolen, altered, damaged or disclosed, with strict safeguards against access by unauthorised persons. All Association personnel have received thorough information-confidentiality training and fully understand that preventing personal data from being stolen, altered, damaged or disclosed is the duty of the Association and its staff; any violation will be subject to internal disciplinary measures and legal liability.
2. To protect the integrity and security of your personal data, the data-processing systems storing it are properly maintained and comply with the strict requirements of the relevant authorities, so as to protect your personal data from unlawful collection, processing, use, or other infringement of your rights.
3. Where business needs require engaging a third-party partner to provide services, the Association will strictly require it to comply with the PDPA and related laws, and will take necessary review procedures to ensure that it genuinely meets the Association's personal-data protection requirements and the PDPA and related regulations.

7. Linked Websites

This website may contain links to other websites. If you follow such a link you will leave the Association's website, and any personal data you subsequently provide to, or that is collected, processed or used by, a third-party website falls outside the scope of this statement; the Association does not protect your privacy on such linked sites. We recommend that you review that company's privacy policy before providing your personal data.

8. Amendments to This Policy

This Privacy Protection Policy takes effect immediately. The Association may revise it from time to time in response to amendments in law and advances in technology, so as to uphold the protection of users' privacy. Revised terms will be posted on the Association's website, and you are welcome to review this Policy periodically to understand how the Association protects the personal data it collects. Your continued use of our services signifies your agreement to this statement and any updates. If you have any comments on this statement, please contact us。