CCPA

Supplementary Provisions of Privacy Policy(CCPA)

I. Preface

Since you are a resident of California and enjoy the protection provided by California state laws in addition to the rights and interests already stated in our Privacy Policy, we shall inform you the following policies while collecting your personal information according to California Consumer Privacy Act of 2018(CCPA) Section 1798.100. All terms in this document shall be supplementary to our Policy Privacy and shall form part of our Privacy Policy. Please read the terms below carefully:

II. Collection, processing and utilization, disclosure and sale of information

(a) The scope of personal information (CCPA §1798.140(o)):
1. “Personal information” includes the items stated in Section II(a)1 AND:

• (1) Any categories of personal information described in California Civil Code subdivision (e) of Section 1798.80.
• (2) Characteristics of protected classifications under California or federal law.
• (3) Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).

2. “Personal information” DOES NOT include publicly available information, consumer information that is deidentified or aggregate consumer information. For purposes of this paragraph, “publicly available” means information that is lawfully made available from federal, state, or local government records, and DOES NOT mean biometric information collected by a business about a consumer without the consumer’s knowledge. “Deidentified” means information that cannot reasonably identify, relate to, describe, be capable of being associated with, or be linked, directly or indirectly, to a particular consumer, provided that a business that uses deidentified information:

• (1) Has implemented technical safeguards that prohibit reidentification of the consumer to whom the information may pertain.
• (2) Has implemented business processes that specifically prohibit reidentification of the information.
• (3) Has implemented business processes to prevent inadvertent release of deidentified information.
• (4) Makes no attempt to reidentify the information.

3. “Aggregate consumer information” means information that relates to a group or category of consumers, from which individual consumer identities have been removed, that is not linked or reasonably linkable to any consumer or household, including via a device. “Aggregate consumer information” does not mean one or more individual consumer records that have been de identified. (CCPA §1798.140(a), (h) )

(b) Consent of the sale of personal information (CCPA §1798.120, §1798.135(a))
1. By confirming and accepting this Privacy Policy, you are deemed to agree in writing that the Company may sell your personal information to a third-party.
2. You may request the Company to disclose the categories of the personal information that the Company sold about you and the categories of the third parties to whom it was sold.
3. You may request the Company at any time not to sell your personal information to third parties. To opt-out of the sale of you information that the Company has collected, please click here “Do Not Sell My Personal Information”. You may also authorize another person to opt-out of the sale of your personal information on your behalf.
4. We will update the following information on this website from time to time:

• (1) The list of categories of personal information the Company has sold in the preceding 12 months. (CCPA §1798.115(c), §1798.130(a)(5)(C)(i))
• (2) The list of categories of personal information the Company has disclosed for a business purpose in the preceding 12 months. (CCPA§1798.115(c), §1798.130(a)(5)(C)(ii))

III. Maintenance of Personal Data

(a) Your rights to select and control the use, disclosure or sale of your personal information: You may contact the Company or log in to the Company's website or goods or services to help ensure that your contact information and preferences are correct, complete and up-to-date. As for other personal information we keep, we will provide you access and copies of the information you requested free of charge, so that you can access this information for any purpose, including asking us to disclose the personal information we’ve collected, disclosed or sold for the preceding 12 months, correct incorrect data or asking the Company to delete data that is not required to be kept according to law or for legitimate business purposes. (CCPA §1798.100(d))

(b) Once your identity has been verified, we will reply to your request within 45 days. The response periods may be extended to 90 days if necessary, and we will notify you of the extension within 45 days.

(c) The Company may refuse to provide the information requested about the collection, disclosure or sale of personal information to the same consumer more than twice in a 12-month period. (CCPA §1798.100(d))

(d) How you access, change and remove personal information: (CCPA §1798.100, §1798.105): If you plan to stop using the Company's website, goods or services or you don't agree with the Company to collect, process, use, disclose and sell your personal information for providing the website or goods or services, you can also choose to delete your login account directly through your goods or services application. Unless otherwise agreed in this Privacy Policy, we will delete your personal information.

(e) If you want to apply for access, amendment, update, blockade, restriction or deletion of personal information, or if you want to obtain an electronic copy of personal information previously provided to the Company for the preceding 12 months and send it to other companies (limited to the portability of data given to you by applicable laws), you can apply with the instructions described in the section “Contact us”. (CCPA §1798.130(a)(5)(B), §1798.130(a)(5)(C))

(f) Once we receive your request and your identity is verified, we will reply to your request in accordance with relevant laws within 45 days. The response periods may be extended to 90 days if necessary, and we will notify you of the extension within 45 days. (CCPA §1798.130(a)(2))

(g) When applying, please state the personal information you want to change, whether you want to remove your personal information from the Company’s database, or how you want to restrict the Company's use of your personal information. For your safety, the Company will only handle the request for personal information related to your e-mail address of your application, and the Company needs to verify your identity before adopting your request. We will comply with your requirements as soon as possible within 45 days (may extend to 90 days if necessary) after passing the verification.

(h) We may also refuse your request to delete the personal information if it is necessary for the Company or its service provider to maintain the consumer’s personal information in order to: (CCPA §1798.105(d))

1. Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’ ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
3. Debug to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
7. To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.
8. Comply with a legal obligation.
9. Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.

(i) If your requests are manifestly unfounded or excessive, we may refuse to deal with your requests, or charge a reasonable fee for the administration costs of providing information. (CCPA §1798.145(i)(3))

IV. Minors' Use of Website and Goods or Services

The Company's website and goods or services are not intended for individuals under the age of twenty (20). The Company will not take the initiative to collect personal information of individuals under the age of 20.

V. Consumer’s Rights to Request Information (CCPA §1798.110(a), §1798.115(a))

You may request the Company to disclose:

(a) The categories of the personal information that the Company has collected.

(b) The commercial purpose for collecting or selling the personal information.

(c) The categories of sources from which the personal information is collected.

(d) The categories of third parties with whom the Company shares personal information.

(e) The specific pieces of personal information the Company has collected about you.

(f) The categories of personal information that the Company sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold.

(g) The categories of personal information that the Company disclosed for a business purpose.

VI. Contact us

(a) The Company is located at: Address: No.179 Fuhuiyuan Road, Xitun District, Taichung City, 407, Taiwan.
(b) If you have any questions about this Privacy Policy or want to submit your request on the rights in this Privacy Policy, please contact us at:
Address: No.179 Fuhuiyuan Road, Xitun District, Taichung City, 407, Taiwan.
Addressee: Privacy Protection Team
E-mail: oc@chassis-tech.com 
Toll-free telephone number: