隱私權保護政策

本政策適用於您在使用 ALP 應用程式或接受本公司服務時所涉及之個人資料蒐集、處理與利用。

This Policy applies to the collection, processing, and use of personal data involved when you use the ALP Apps or receive the Company's Services.

本公司依據個資法第八條第一項規定，基於合法、公正之原則，在符合下列特定目的之必要範圍內，蒐集您的個人資料：

(一) 蒐集之目的：

1. 提供及維護本服務；
2. 開發及改善本服務；
3. 安全性及未經授權使用的防範措施；及
4. 提供優化之本服務。

(二) 個人資料之類別：

1. 您向本公司提供的個人資料，包含但不限於姓名、電話號碼、電子郵件信箱、所屬公司或單位名稱以及您提出之服務需求等您主動提供之資訊；
2. 您使用本服務時產生的個人資料；及
3. 其他因執行業務或法令規定應予蒐集之必要資料。

以下為本公司將蒐集個人資料的一些範例。該個人資料亦包括您未登入及未設立帳號之情形下所涉及之資訊。

• 使用方式和偏好資訊：當您使用本服務時，系統會自動記錄相關行徑，包括裝置識別碼、IP 位址、存取日期及時間、作業系統類型與版本、瀏覽及點選資料記錄、當機與效能等診斷紀錄，做為我們增進服務的參考依據。
• 位置資訊：當您使用 TR Driver 或 OMEGA Visitor 時，系統會詢問您是否同意應用程式存取您的位置資訊（TR Driver 包括應用程式於背景執行時）。當您同意後，我們僅會記錄位置資訊中的座標資訊，應用於：應用程式與相關前、後台系統之地理資訊視覺顯示；物流任務預計完成時間計算；配達前收件通知發送排程計算；倉儲園區到訪報到與入場通知等服務。
• 影像資訊：當您使用 TR Driver 並同意應用程式存取相機或相片圖庫後，您所拍攝或選取之配送歷程照片。（ALP OMEGA 之相機權限僅用於掃描條碼，影像即時處理，不留存任何影像；LRFILE 文件家之相機權限用於掃描 QR Code 以進行文件追蹤。）
• 各應用程式實際蒐集項目與權限，以本政策第二條第(三)項之揭露為準。

(三) 各應用程式蒐集資訊與裝置權限之揭露

本公司依「資料最小化」原則，僅於各應用程式功能所必要之範圍內請求裝置權限。ALP 應用程式共同蒐集之資料（均以不連結使用者身分之方式蒐集）包括：識別碼（使用者 ID、裝置 ID）、使用資料（產品互動）及診斷資料（當機資料、效能資料）。

各應用程式內顯示之營運資訊（如碼頭作業與車輛進出紀錄、倉儲營運與出貨紀錄、配送任務資料、文件倉儲訂購與檔案管理紀錄等），係由本公司系統產生之業務資料，並非向使用者蒐集之個人資料，不屬於本款揭露之範圍。除前述共同項目外，各應用程式向使用者額外蒐集之資料與敏感權限如下：

您可隨時於裝置系統設定中關閉或調整前述權限；惟關閉後，相關功能可能無法正常運作。

(四) 個人資料利用之期間

特定目的之存續期間，或依相關法令（如商業會計法等）規定之保存年限，以最晚屆至者為準。因系統備份機制所需，實際刪除完成可能有合理之作業延遲。

(五) 個人資料利用之對象、地區：

1. 對象：
   1. 本公司、本公司集團旗下公司（包括但不限於英屬開曼群島商特捷物流股份有限公司、艾立運能股份有限公司、艾立製研股份有限公司、艾立營造股份有限公司）；
   2. 受本公司委託處理雲端主機代管、系統維運、資訊安全或其他相關技術服務之協力廠商與受託單位；及
   3. 依法有調查權之政府機關（如本公司主管機關）。
2. 地區：前揭利用對象之國內外所在地（包括但不限於台灣、泰國、馬來西亞、新加坡及日本）。

Pursuant to Article 8, Paragraph 1 of the PDPA, the Company collects your personal data on a lawful and fair basis, and only to the extent necessary for the following specific purposes:

2.1. Purposes of Collection:

1. 2.1.1. Providing and maintaining the Services;
2. 2.1.2. Developing and improving the Services;
3. 2.1.3. Security and prevention of unauthorized use; and
4. 2.1.4. Providing an optimized experience of the Services.

2.2. Categories of Personal Data:

1. 2.2.1. Personal data you provide to the Company, including but not limited to your name, phone number, email address, company or organization name, and any service requests you submit, and other information you voluntarily provide;
2. 2.2.2. Personal data generated when you use the Services; and
3. 2.2.3. Other necessary data required to be collected in the course of business operations or under applicable laws.

Examples of the personal data the Company may collect are set out below. This may include data relating to you even when you are not logged in or have not created an account.

• Usage and Preference Information: When you use the Services, the system automatically records related activity, including device identifiers, IP address, access dates and times, operating system type and version, browsing and click records, and crash and performance diagnostics, which we use as a reference for improving the Services.
• Location Information: When you use TR Driver or OMEGA Visitor, the app will ask whether you consent to the app accessing your location information (for TR Driver, this includes when the app is running in the background). Once you consent, we will only record the coordinate data from your location information, which is used for: visual display of geographic information in the app and related front-end/back-end systems; estimating logistics task completion times; scheduling advance delivery notifications to recipients; and check-in/entry notifications for warehouse park visits, among other services.
• Image Information: When you use TR Driver and consent to the app accessing your camera or photo library, the delivery-process photos you take or select. (ALP OMEGA's camera permission is used solely for barcode scanning; images are processed in real time and none are retained. LRFILE's camera permission is used for scanning QR codes for document tracking.)
• The data and permissions actually collected by each app are subject to the disclosures in Article 2.3 of this Policy.

2.3. Disclosure of Data Collected and Device Permissions by App

In accordance with the principle of "data minimization," the Company only requests device permissions to the extent necessary for each app's functions. Data collected in common across the ALP Apps (all collected in a manner that is not linked to the user's identity) includes: identifiers (user ID, device ID), usage data (product interaction), and diagnostic data (crash data, performance data).

Operational information displayed within each app (such as dock operation and vehicle entry/exit records, warehouse operation and shipment records, delivery task data, and document storage ordering and file management records) is business data generated by the Company's systems, not personal data collected from users, and is therefore outside the scope of this disclosure. In addition to the common items above, the additional data and sensitive permissions collected from users by each app are as follows:

You may disable or adjust the above permissions at any time in your device's system settings; however, doing so may cause related features to stop working properly.

2.4. Duration of Use of Personal Data

The duration corresponds to the period necessary for the specific purpose, or the retention period required under applicable laws (such as the Business Accounting Act), whichever is later. Due to system backup mechanisms, actual deletion may be subject to a reasonable operational delay.

2.5. Recipients and Region of Use of Personal Data:

2.5.1. Recipients:

1. 2.5.1.1. The Company and companies within the Company's group (including but not limited to Ally Logistic Service Limited Taiwan Branch (Cayman Islands), Ally Transport Co., Ltd., ALLY X LAB Co., Ltd., and Ally Builders Co., Ltd.);
2. 2.5.1.2. Vendors and subcontractors engaged by the Company to provide cloud hosting, system operations, information security, or other related technical services; and
3. 2.5.1.3. Government agencies with statutory investigative authority (such as the Company's competent authority).

2.5.2. Region: The domestic and overseas locations of the aforementioned recipients (including but not limited to Taiwan, Thailand, Malaysia, Singapore, and Japan).

依據個資法第三條規定，您就本公司所保存之個人資料，得向本公司行使下列權利：

1. 查詢或請求閱覽、請求製給複製本：請以書面方式向本公司提出申請，本公司將依法核對身分後處理，並得依法酌收必要之工本費用。
2. 請求補充或更正：您得隨時要求修改不正確之資料，惟應提出適當之釋明文件。
3. 請求停止蒐集、處理、利用或請求刪除：特定目的消失、期限屆滿，或您欲取消授權時，得向本公司申請停止利用或刪除。但若因本公司執行職務或業務所必須（如依法律規定需保留會計憑證、或雙方尚有合約或訴訟關係者），本公司依法得不予刪除或停止利用。以下為帳號刪除機制：
   1. 使用者自行註冊之帳號：您可於 ALP 應用程式之帳號設定功能直接申請刪除帳號；亦可透過本政策第八條之聯絡信箱，提出刪除申請。
   2. 由所屬企業之管理人員建立之帳號：於帳號係由您所屬企業之管理人員建立與管理之情形，如需刪除帳號，您可洽所屬企業之管理人員辦理，或逕以本政策第八條之聯絡信箱向本公司提出申請，本公司將於確認身分後辦理。

Pursuant to Article 3 of the PDPA, you may exercise the following rights with the Company regarding the personal data the Company holds about you:

1. 3.1. Inquiry, Access, or Request for a Copy: Please submit a written request to the Company. The Company will verify your identity in accordance with law before processing your request and may charge a reasonable processing fee as permitted by law.
2. 3.2. Request for Supplementation or Correction: You may request that inaccurate data be corrected at any time, provided that you submit appropriate supporting documentation.
3. 3.3. Request to Cease Collection, Processing, or Use, or Request for Deletion: When the specific purpose no longer exists, the retention period has expired, or you wish to withdraw your consent, you may request that the Company cease using or delete your data. However, where necessary for the Company to perform its duties or business (such as where applicable law requires retention of accounting records, or where a contractual or legal dispute is ongoing between the parties), the Company may, in accordance with law, decline to delete the data or cease its use. The account deletion mechanism is as follows:
   1. 3.3.1. Self-Registered Accounts: You may apply to delete your account directly through the account settings feature within the ALP Apps; alternatively, you may submit a deletion request via the contact email address set out in Article 8 of this Policy.
   2. 3.3.2. Accounts Created by Your Organization's Administrator: If your account was created and is managed by your organization's administrator, you may contact your organization's administrator to have the account deleted, or you may submit a request directly to the Company via the contact email address set out in Article 8 of this Policy; the Company will process the request after verifying your identity.

為維護您的個資安全，防止未經授權之存取、洩漏或竄改，本公司採取下列安全防護措施：

1. 技術防護：本公司採取適當之資訊安全防禦系統與管理機制，以維護整體系統與資料庫之安全性，包括但不限於防火牆、防毒系統、傳輸加密。
2. 權限管控：嚴格限制僅業務必要之經授權人員方得存取個資，且相關人員均負有法律上之保密義務。

To safeguard the security of your personal data and prevent unauthorized access, disclosure, or alteration, the Company adopts the following security measures:

1. 4.1. Technical Safeguards: The Company employs appropriate information security defense systems and management mechanisms to protect the overall security of its systems and databases, including but not limited to firewalls, antivirus systems, and encrypted transmission.
2. 4.2. Access Control: Access to personal data is strictly limited to authorized personnel whose duties require it, and all such personnel are bound by legal obligations of confidentiality.

您得自由選擇是否提供個人資料，不過，倘若您拒絕提供必要之個人資料，可能會導致您無法使用本公司提供有關之服務。

You are free to choose whether to provide your personal data. However, if you decline to provide personal data that is necessary, you may not be able to access or use the relevant Services.

本服務相關網頁可能使用 Cookie 或類似技術以記錄、改善您的瀏覽體驗並提供更便利的網頁功能。您可以透過變更瀏覽器之隱私權設定來拒絕 Cookie 的寫入，但這可能會導致本服務之部分功能或服務無法正常運作。

Web pages related to the Services may use cookies or similar technologies to record and improve your browsing experience and to provide more convenient web functions. You may decline the use of cookies by changing your browser's privacy settings; however, doing so may cause certain features or Services to stop working properly.

為因應法令變更、科技發展或本公司內部營運調整，本公司有權不定時修改本政策，並於本頁面公告修訂內容。若您於本政策修改後繼續使用 ALP 應用程式或本服務，即代表您已閱讀、理解並接受修改後之隱私權政策。

The Company reserves the right to amend this Policy from time to time in response to changes in law, technological developments, or the Company's internal business adjustments, and will announce any such amendments on this page. If you continue to use the ALP Apps or the Services after this Policy has been amended, you will be deemed to have read, understood, and accepted the amended Privacy Policy.

如果您對本政策或 Cookie 的使用有任何疑問或顧慮，請透過下列方式與我們聯繫：

永聯物流開發股份有限公司
電子郵件：privacy@alp.global

If you have any questions or concerns about this Policy or our use of cookies, please contact us as follows:

Ally Logistic Property Co., Ltd.
Email: privacy@alp.global