日本

中信銀茲依據【銀行法】及【個人資料保護法】等相關法令之規定，說明中信銀蒐集、處理、利用及/或國際傳輸台端個人資料之管理方針，以及台端所享有之權利或服務如下：

中國信託商業銀行(股)公司 (以下稱「本行」) 在現在已（或將來可能）依法得經營之營業項目範圍內，於所涉業務執行之必要範圍內(仍須符合本行與臺端間往來之業務類別)，而有必要直接或間接  蒐集、處理、利用及/或國際傳輸臺端個人資料，依據個人資料保護法（以下簡稱個資法）第八條第一項規定，向臺端告知下列事項，請臺端詳閱：

CTBC Bank Co., Ltd. (hereinafter referred to as “the Bank") within its current (and potential) lawful business scope shall collect, process, utilize, and/or internationally transmit the personal data of customers directly or indirectly as necessary for the execution of relevant business operations (which shall remain subject to compliance in accordance with the type of transaction between the Bank and the customer).  In accordance with Article 8, Paragraph 1 of the Personal Data Protection Act (hereinafter referred to as the " Act"), the Bank hereby notifies customers of the following matters:

一、蒐集之特定業務目的
1.     Purposes of data collection for specific services

二、 個人資料之類別：個人識別資訊及社會概況(例如姓名、國籍、出生年月日、身分證字號、稅務居住者身分、稅籍編號、出生國家及城市、通訊方式、影像、人像、語音、學歷、職業、休閒活動及興趣、旅行及其他遷徙細節、婚姻狀況、家庭成員等)、商業活動及財務概況(例如消費金額、消費地點、消費品項、收入、所得、資產與投資、負債與支出、信用評等、保險細節、財務交易等)、行動及網路媒體資訊(例如Facebook、LINE等平台資訊，包括用戶名稱、帳號、封面相片及大頭貼照、朋友名單、興趣、討論群組、按讚及留言分享紀錄、行動裝置識別碼、網際網路協定(IP)位址、網際網路瀏覽軌跡、Cookie、行動裝置所在地等)、生物特徵(例如指紋、指靜脈等)及其他詳如相關業務申請書或契約書之內容，並以本行與客戶往來之相關業務、帳戶或服務及自客戶或第三人處（例如：財團法人金融聯合徵信中心）所實際蒐集之個人資料為準。

2.     Types of personal data:Personal identification and overview of social status (such as name, nationality, date of birth, national ID number, tax residency status, tax ID, birth country and city, contact details, images, portraits, voice, education, occupation, leisure and interests, travel and other migration details, marital status, family members, etc.); business activities and financial information (such as spending amounts, locations of expenditure, items purchased, income, earnings, assets and investments, liabilities and expenses, credit ratings, insurance details, financial transactions, etc.); mobile and online social media information (such as information on platforms like Facebook, LINE, etc., including usernames, account details, cover photos, profile photos, friend lists, interests, discussion groups, records of likes, comments, and sharing; mobile device identifiers, internet protocol (IP) addresses, internet browsing history, Cookies, mobile device location, etc.); biometric information (such as fingerprints, finger veins, etc.), and information such as the contents of relevant business applications or contracts. The information from the relevant business, account or service relationship between the Bank and customer or between the customer and a third party (such as the Joint Credit Information Center) shall be deemed the most accurate version of the information.

三、 個人資料來源：

3.     Source of personal data:

(一)     本行向客戶直接蒐集

(1)      Direct collection from customers by the Bank.

(二)     客戶自行公開或其他已合法公開

(2)      Information voluntarily disclosed by customers in public domain or collected from a legal and open source.

(三)     本行向第三人(如：本行所屬中國信託金融控股公司及交互運用客戶資料之子公司、與本行合作推廣業務之公司、本行信用卡聯名/認同團體、本行合作夥伴(如:廣告商、電信公司、設備廠商…等))蒐集。本行向第三人蒐集資料時，可能將您的電子郵件地址(Email)、電話號碼、行動裝置識別碼、網際網路通訊協定(IP)位址、Cookie ID…等資料提供予第三人，做為資料串接識別之工具。

(3)    Collection from third parties with the Bank for cross-selling, mutual use of customers’ personal data, and business promotion or third parties engaged by the Bank (such as：ⅰ.China Trust Financial Holding Co., Ltd., and its subsidiaries that cross-sell customers' personal information,ⅱ.companies collaborating with the Bank in promotional activities, ⅲ co-branded/affiliated groups of the Bank's credit cards, and ⅳthe Bank's partners such as advertisers, telecommunications companies, equipment manufacturers, etc.). When the Bank collects information from third parties, it may provide your email address, phone number, mobile device identifier, internet protocol (IP) address, Cookie ID, etc., to the third party as tools for data integration and identification.

四、個人資料利用之期間、地區、對象及方式：

4.     The Duration, Region, Recipients, and Methods of utilization of personal data:

(一)     期間：特定目的存續期間、依相關法令所定（例如商業會計法等)或因執行業務所必須之保存期間或依個別契約就資料之保存所定之保存年限。（以期限最長者為準）。

(1)      Duration: The period of existence of specific purposes as defined by relevant laws (such as the Business Entity Accounting Act), or as deemed necessary to perform service activities or specifications in contracts (whichever is longer in duration shall apply).

(二)     地區：「個人資料利用之對象」其國內及國外所在地。

(2)      Region: The location, either domestic or overseas, of the "recipients of personal data usage"

(三)     對象：本行(含受本行委託處理事務之委外機構)、依法令規定利用之機構（例如：本行所屬金融控股公司等）、其他業務相關之機構(本行關係企業、通匯行、金融聯合徵信中心、聯合信用卡中心、臺灣票據交換所、財金資訊公司、信用卡國際組織、收單機構、信用保證機構、中央存款保險公司、中華民國人壽保險商業同業公會、中華民國產物保險商業同業公會、中華民國保險代理人商業同業公會、財團法人保險事業發展中心、財團法人金融消費評議中心、保險公司、或與保險公司有再保業務往來之公司、其他經金融監督管理委員會、農業金融主管機關許可設立或營業之機構、戶政機關、勞動部勞工保險局、財政部國稅局、農漁會、郵局、衛福部中央健康保險署、交通部公路局、業務委外機構、未受中央目的事業主管機關限制之國際傳輸個人資料之接收者)、依法有權機關或金融監理機關、客戶所同意之對象（例如本行共同行銷或交互運用客戶資料之公司、與本行合作推廣業務之公司）。

(3)      Recipients: The Bank (including other institutions commissioned to perform services); institutions that are permitted by law to utilize such information (e.g., the Bank's affiliated financial holding companies); other relevant institutions (affiliates of the Bank, correspondent banks, Financial Information Center, Joint Credit Information Center, National Credit Card Center, Taiwan Clearing House, Financial Information Service Co., Ltd., credit card organizations, acquirers, credit guarantee institutions, Central Deposit Insurance Corporation, Life Insurance Association, Non-Life Insurance Association, Insurance Agency Association, Taiwan Insurance Institute, Financial Ombudsman Institution, insurance companies , or companies engaged in reinsurance transactions with the insurance companies, institutions established or operated with approval from the Financial Supervisory Commission, agricultural financial authorities; household registration authorities, Bureau of Labor Insurance, Ministry of Labor; National Taxation Bureau, Ministry of Finance; Farmers’ and Fishermen’s Association; Chunghwa Post; National Health Insurance Administration, Ministry of Health and Welfare; Highway Bureau, MOTC; outsourced institutions, recipients of internationally transferred personal data not restricted by the central competent authority); competent authorities or financial supervisory authorities according to the law, and recipients agreed upon by the customer (e.g., companies engaged in joint marketing or collaborative use of customer data, companies collaborating with the bank in promotional activities).

(四)     方式：符合個人資料保護相關法令以自動化機器或其他非自動化之利用方式。

(4)      Method: Data is to be used through both automated and non-automated means that comply with relevant laws and regulations for personal data protection.

五、依據個資法第三條規定，臺端就本行保有臺端之個人資料，得行使下列權利：

5.     In accordance with Article 3 of the  Act, the customer reserves the following rights regarding their personal data held by the Bank:

(一)     除有個資法第十條所規定之例外情形外，得向本行查詢、請求閱覽或請求製給複製本，惟本行依個資法第十四條規定得酌收必要成本費用。

(1)    Excluding the circumstances described in Article 10 of the  Act, the customer may inquire, request to review, and request to obtain copies of personal data from the Bank. However, the Bank may collect a small fee to cover its costs in accordance with Article 14 of the Act.

(二)     得向本行請求補充或更正，惟依個資法施行細則第十九條規定，臺端應適當釋明其原因及事實。

(2)      The customer may request supplementation or correction from the Bank. However, in accordance with Article 19 of the Personal Data Protection Act Enforcement Rules, the customer shall appropriately explain the reasons and facts.

(三)     本行如有違反個資法規定蒐集、處理或利用臺端之個人資料，依個資法第十一條第四項規定，臺端得向本行請求停止蒐集。

(3)      In the event the Bank violates any of the provisions of the  Act in collecting, processing, or utilizing the personal data of the customer, the customer may request the Bank to stop collection according to Article 11, Paragraph 4 of the Act,

(四)     依個資法第十一條第二項規定，個人資料正確性有爭議者，得向本行請求停止處理或利用臺端之個人資料。惟依該項但書規定，本行因執行業務所必須並註明其爭議或經臺端書面同意者，不在此限。

(4)      According to Article 11, Paragraph 2 of the Act, in the event there is a dispute regarding the accuracy of personal data, the customer may request the Bank to stop processing or utilizing their personal data. However, according to the provision in the same paragraph, this limitation does not apply when the Bank deems it necessary for business operations, and explicitly states the dispute or obtains written consent from the customer.

(五)     依個資法第十一條第三項規定，個人資料蒐集之特定目的消失或期限屆滿時，得向本行請求刪除、停止處理或利用臺端之個人資料。惟依該項但書規定，本行因執行業務所必須或經臺端書面同意者，不在此限。

(5)      According to Article 11, Paragraph 3 of the  Act, when the specific purpose for collecting personal data has ceased to exist or the deadline has expired, the customer may request the Bank to delete, stop processing, or stop utilizing their personal data. However, according to the provision in the same paragraph, this limitation does not apply when the Bank deems it necessary for business operations or obtains written consent from the customer.

六、臺端如欲行使上述個資法第三條規定之各項權利，有關如何行使之方式，得至本行各營業據點或客服專線(免付費電話0800-024-365；自費電話02-2745-8080、02-2769-5000)詢問或於本行網站(網址:www.ctbcbank.com)查詢。臺端如欲向本行表示拒絕接受行銷時，亦得透過上述管道行使權利，本行於接獲拒絕接受行銷通知後，除法令另有規定外，將依規於十個工作天內停止利用臺端個人資料進行行銷。

6.     If the customer wishes to exercise the abovementioned rights vested in Article 3 of the  Act, or inquire on ways the customer may exercise these rights, please contact the Bank’s customer service  at 0800-024-365（Free phone） or 02-2745-8080; 02-2769-5000, or inquire business units during business hours , or visit the Bank's website (www.ctbcbank.com) for more information. If the customer does not wish to receive any marketing information from the Bank, the customer may request the Bank to stop marketing the customer’s personal information through the above mentioned channels. Upon receipt of the notification of such request, the Bank will, unless otherwise provided by law, stop using  the customer’s personal data for marketing purposes within ten (10) business days in accordance with regulations.

七、臺端得自由選擇是否提供相關個人資料及類別，惟臺端所拒絕提供之個人資料及類別，如果是辦理業務審核或作業所需之資料，本行可能無法進行必要之業務審核或作業而無法提供臺端相關服務或無法提供較佳之服務。

7.     The customer is free to choose whether to provide relevant personal data and categories. However, if the customer refuses to provide certain personal data or categories that are necessary for business review or operations, the Bank may be unable to conduct the necessary due diligence or operations, resulting in the inability to provide the client with relevant or optimal level of  service.

This Notification is written in English and Chinese. The English version of this Notification is for reference only. In case of any discrepancy between the English and Chinese versions, the Chinese version shall prevail.

台端如對前述告知內容確已知悉、瞭解與同意，再請繼續執行交易