摘要

Summary

我們自動蒐集的資料

Data we collect automatically

當您造訪 www.truthforum.tw 時，我們會自動向您蒐集資料。

We automatically collect data from you for example when you visit www.truthforum.tw.

值得信賴的第三方協助我們處理資料

Trusted third parties help us to process it

我們如何使用這些資料：

How we use them:

擁有者與資料控管者

Owner and Data Controller

我們蒐集的資料類型

Types of Data collected

本應用程式（本網站）自行或透過第三方蒐集的個人資料類型包括：

Among the types of Personal Data that this Application collects, by itself or through third parties, there are:

• 追蹤工具（Trackers）
• 使用資料（Usage Data）
• 裝置資訊 · Device information
• 使用者人數 · Number of Users
• 工作階段統計 · Session statistics

各類個人資料的完整說明，載於本隱私權政策的專章，或於資料蒐集前顯示的特定說明文字中。

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

個人資料可能由使用者自由提供；若屬使用資料，則於使用本應用程式時自動蒐集。

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

本應用程式或其所使用之第三方服務擁有者對 Cookie 或其他追蹤工具的任何使用，均係為提供使用者所要求的服務，以及本文件與 Cookie 政策所述之其他目的。

Any use of Cookies – or of other tracking tools — by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.

使用者應對其透過本應用程式取得、發布或分享的任何第三方個人資料負責。

Users are responsible for any third-party Personal Data obtained, published or shared through this Application.

資料處理的方式與地點

Mode and place of processing the Data

處理方式

Methods of processing

擁有者採取適當的安全措施，以防止資料遭未經授權的存取、揭露、修改或未經授權的銷毀。

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

資料處理係使用電腦及／或具備 IT 功能的工具進行，並遵循與所述目的嚴格相關的組織程序與方式。除擁有者外，在部分情形下，資料可能供參與本應用程式運作的特定負責人員（行政、業務、行銷、法務、系統管理）或外部單位（例如第三方技術服務供應商、郵務業者、代管服務供應商、資訊公司、傳播代理商）存取；必要時，該等單位由擁有者指定為資料處理者。使用者可隨時向擁有者索取最新的名單。

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

處理地點

Place

資料於擁有者的營運據點，以及參與處理之各方所在的任何其他地點進行處理。

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

依使用者所在地不同，資料傳輸可能涉及將使用者資料傳送至其所在國以外的國家。欲了解此類傳輸資料的處理地點，使用者可參閱本政策中「個人資料處理詳情」一節。

Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

保存期間

Retention time

除本文件另有規定外，個人資料的處理與儲存期間，以蒐集目的所需之期間為限；若基於適用之法定義務或使用者同意，得保存更長期間。

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users' consent.

處理目的

The purposes of processing

蒐集使用者相關資料，係為使擁有者得以提供服務、遵循法定義務、回應執法要求、保護自身或其使用者或第三方之權利與利益、偵測任何惡意或詐欺行為，以及下列目的：

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following:

• 平台服務與代管 · Platform services and hosting
• 分析 · Analytics
• 代碼管理 · Tag management

個人資料處理詳情

Detailed information on the processing of Personal Data

分析

Analytics

本節所列服務使擁有者得以監控及分析網站流量，並可用於追蹤使用者行為。

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

平台服務與代管

Platform services and hosting

此類服務的目的在於代管並運行本應用程式的關鍵元件，使本應用程式得以在單一整合平台上提供服務。此類平台為擁有者提供多樣工具（例如分析、使用者註冊、留言、資料庫管理、電子商務、金流處理），其中涉及個人資料的蒐集與處理。部分服務透過地理上分散的伺服器運作，因此難以確定個人資料實際儲存的位置。

These services have the purpose of hosting and running key components of this Application, therefore allowing the provision of this Application from within a unified platform. Such platforms provide a wide range of tools to the Owner – e.g. analytics, user registration, commenting, database management, e-commerce, payment processing – that imply the collection and handling of Personal Data. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.

代碼管理

Tag management

此類服務協助擁有者以集中方式管理本應用程式所需的代碼或指令碼，因而使用者資料會流經這些服務，並可能造成資料留存。

This type of service helps the Owner to manage the tags or scripts needed on this Application in a centralized fashion. This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.

Cookie 政策

Cookie Policy

本應用程式使用追蹤工具（Trackers）。欲了解更多，使用者可參閱 Cookie 政策 。

This Application uses Trackers. To learn more, Users may consult the Cookie Policy.

歐盟使用者補充資訊

Further Information for Users in the European Union

處理之法律依據

Legal basis of processing

符合下列任一情形時，擁有者得處理與使用者有關的個人資料：

The Owner may process Personal Data relating to Users if one of the following applies:

• 使用者已就一項或多項特定目的表示同意；
• Users have given their consent for one or more specific purposes;
• 為履行與使用者間之契約及／或其前契約義務所必要；
• provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
• 為遵循擁有者所負之法定義務所必要；
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• 處理與為公共利益執行之任務，或擁有者被賦予之公權力行使有關；
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
• 為擁有者或第三方所追求之正當利益所必要。
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

無論如何，擁有者樂於協助釐清適用之具體法律依據，特別是提供個人資料屬於法定或契約上之要求，抑或締結契約所必要之要件。

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

保存期間之補充資訊

Further information about retention time

除本文件另有規定外，個人資料的處理與儲存期間以蒐集目的所需之期間為限；若基於適用之法定義務或使用者同意，得保存更長期間。因此：

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users' consent. Therefore:

• 為履行擁有者與使用者間契約而蒐集之個人資料，將保存至契約完全履行為止。
• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
• 為擁有者正當利益而蒐集之個人資料，將保存至達成該等目的所需之期間。使用者可於本文件相關章節查詢擁有者所追求之正當利益，或與擁有者聯繫。
• Personal Data collected for the purposes of the Owner's legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

若使用者已同意該等處理，且同意未經撤回，擁有者得保存個人資料更長期間。此外，若為履行法定義務或依主管機關命令，擁有者亦可能被要求保存更長期間。

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to fulfil a legal obligation or upon order of an authority.

保存期間屆滿後，個人資料將被刪除。因此，於保存期間屆滿後，將無法行使查閱權、刪除權、更正權及資料可攜權。

Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

使用者依《一般資料保護規則》（GDPR）享有之權利

The rights of Users based on the General Data Protection Regulation (GDPR)

使用者就擁有者所處理之資料，得行使特定權利。在法律允許範圍內，使用者尤其有權：

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following, to the extent permitted by law:

1. 隨時撤回同意 先前就個人資料處理所為之同意，使用者有權隨時撤回。
2. Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
3. 反對資料處理 若處理係基於同意以外之法律依據，使用者有權反對其資料之處理。
4. Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
5. 查閱其資料 使用者有權得知擁有者是否處理其資料、取得處理特定面向之揭露，並取得處理中資料之副本。
6. Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
7. 查證與請求更正 使用者有權查證其資料之正確性，並要求更新或更正。
8. Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
9. 限制資料處理 使用者有權限制其資料之處理。此時，擁有者除儲存外，不得為任何其他目的處理該等資料。
10. Restrict the processing of their Data. Users have the right to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
11. 刪除或以其他方式移除個人資料 使用者有權要求擁有者刪除其資料。
12. Have their Personal Data deleted or otherwise removed. Users have the right to obtain the erasure of their Data from the Owner.
13. 接收資料並移轉至另一控管者 使用者有權以結構化、通用且機器可讀之格式接收其資料，並在技術可行時，要求無障礙地傳輸至另一控管者。
14. Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance.
15. 提出申訴 使用者有權向其主管之資料保護機關提出申訴。
16. Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

使用者亦有權了解資料跨境傳輸（包括傳輸至受國際公法規範或由兩個以上國家設立之國際組織，例如聯合國）之法律依據，以及擁有者為保護其資料所採取之安全措施。

Users are also entitled to learn about the legal basis for Data transfers abroad including to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

關於反對處理權之細節

Details about the right to object to processing

當個人資料係為公共利益、行使擁有者被賦予之公權力，或為擁有者所追求之正當利益而處理時，使用者得以其特殊處境為由，反對該等處理。

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

惟使用者應知悉，若其個人資料係為直接行銷目的而處理，使用者得隨時免費且無須提出任何理由反對該等處理。使用者反對後，該個人資料將不再為直接行銷目的處理。欲了解擁有者是否為直接行銷目的處理個人資料，使用者可參閱本文件相關章節。

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time, free of charge and without providing any justification. Where the User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

如何行使這些權利

How to exercise these rights

任何行使使用者權利之請求，均可透過本文件所載之聯絡方式向擁有者提出。此類請求免費，擁有者將儘速回覆，且至遲於一個月內提供法律所要求之資訊。任何個人資料之更正、刪除或處理之限制，擁有者將通知曾揭露該個人資料之各接收者，除非通知顯不可能或需耗費不成比例之努力。經使用者請求，擁有者將告知該等接收者。

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month, providing Users with the information required by law. Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient, if any, to whom the Personal Data has been disclosed unless this proves impossible or involves disproportionate effort. At the Users' request, the Owner will inform them about those recipients.

其他關於資料蒐集與處理之資訊

Additional information about Data collection and processing

法律行動

Legal action

因不當使用本應用程式或相關服務而可能引發之法律行動，擁有者得於法院或其前置階段，為法律目的使用使用者之個人資料。使用者聲明知悉，擁有者可能因公務機關之要求而須揭露個人資料。

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

使用者個人資料之其他資訊

Additional information about User's Personal Data

除本隱私權政策所載資訊外，本應用程式得應要求，就特定服務或個人資料之蒐集與處理，向使用者提供額外且具情境性之資訊。

In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

系統紀錄與維護

System logs and maintenance

為營運與維護目的，本應用程式及任何第三方服務可能蒐集記錄與本應用程式互動之檔案（系統紀錄），或為此目的使用其他個人資料（例如 IP 位址）。

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.

本政策未涵蓋之資訊

Information not contained in this policy

關於個人資料蒐集或處理之更多細節，使用者得隨時向擁有者索取。請參閱本文件開頭之聯絡資訊。

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

本隱私權政策之變更

Changes to this privacy policy

擁有者保留隨時變更本隱私權政策之權利，並將於本頁面（可能亦於本應用程式內）通知使用者；在技術與法律可行範圍內，亦可能透過擁有者可取得之任何聯絡方式向使用者發出通知。強烈建議經常查看本頁面，並參考頁尾所列之最後修改日期。

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

若變更影響基於使用者同意所進行之處理活動，擁有者將於必要時重新取得使用者之同意。

Should the changes affect processing activities performed on the basis of the User's consent, the Owner shall collect new consent from the User, where required.

定義與法律參照

Definitions and legal references

個人資料（或資料）

Personal Data (or Data)

任何直接、間接或結合其他資訊（包括個人識別號碼）而得以識別或可識別自然人之資訊。

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

使用資料

Usage Data

透過本應用程式（或本應用程式所採用之第三方服務）自動蒐集之資訊，可能包括：使用者所使用電腦之 IP 位址或網域名稱、URI 位址（統一資源識別碼）、請求時間、向伺服器提交請求所採用之方法、回應所收到之檔案大小、標示伺服器回應狀態之數字代碼（成功、錯誤等）、來源國家、使用者所使用瀏覽器與作業系統之特性、每次造訪之各項時間細節（例如在應用程式各頁面停留的時間），以及在應用程式內所依循路徑之細節（特別是所造訪頁面之順序），與其他關於裝置作業系統及／或使用者 IT 環境之參數。

Information collected automatically through this Application (or third-party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

使用者

User

使用本應用程式之個人，除另有說明外，即為資料當事人。

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

資料當事人

Data Subject

個人資料所指涉之自然人。

The natural person to whom the Personal Data refers.

資料處理者（處理者）

Data Processor (or Processor)

代表控管者處理個人資料之自然人或法人、公務機關、機構或其他團體，如本隱私權政策所述。

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

資料控管者（擁有者）

Data Controller (or Owner)

單獨或與他人共同決定個人資料處理目的與方式之自然人或法人、公務機關、機構或其他團體，包括與本應用程式運作及使用有關之安全措施。除另有說明外，資料控管者即為本應用程式之擁有者。

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.

本應用程式

This Application

蒐集與處理使用者個人資料之媒介。

The means by which the Personal Data of the User is collected and processed.

服務

Service

本應用程式所提供之服務，如相關條款（若有）及本網站／應用程式所述。

The service provided by this Application as described in the relative terms (if available) and on this site/application.

歐盟

European Union (or EU)

除另有說明外，本文件中所有關於歐盟之提及，均包括歐盟及歐洲經濟區之所有現行會員國。

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookie

Cookie

Cookie 屬於追蹤工具之一，係儲存於使用者瀏覽器中的小型資料集合。

Cookies are Trackers consisting of small sets of data stored in the User's browser.

追蹤工具（Tracker）

Tracker

指任何能夠追蹤使用者之技術，例如 Cookie、唯一識別碼、網路信標、嵌入式指令碼、e-tag 與指紋辨識，其方式包括存取或於使用者裝置上儲存資訊。

Tracker indicates any technology - e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by accessing or storing information on the User's device.

法律資訊

Legal information

除本文件另有說明外，本政策僅適用於本應用程式。

This policy relates solely to this Application, if not stated otherwise within this document.

本頁面之中文內容係依 iubenda 產生之英文版隱私權政策翻譯而成，僅供閱讀便利之用。若中英文版本有任何歧異，以 iubenda 所託管之英文版本 為準。

The Traditional Chinese text on this page is a translation of the English privacy policy generated by iubenda, provided for convenience only. In case of any discrepancy, the English version hosted by iubenda prevails.

我們能為您做什麼？

How can we help?

關於您的資料，您可以

Your data — what you can do

• 要求得知並查閱我們所持有關於您的資訊
• Ask us to know and access the information we hold on you
• 要求更正我們所持有關於您的資訊
• Ask us to correct information we hold on you
• 要求被遺忘（刪除我們所持有關於您的資訊）
• Ask us to be forgotten (delete the information we hold on you)
• 要求將您的資料移轉至其他服務
• Ask to port your data to another service

若發生問題

In case of issues

我們致力於提供正面的使用體驗，但也理解我們與使用者之間仍可能偶有爭議。若有此情形，歡迎隨時與我們聯繫。

While we strive to create a positive user experience, we understand that issues may occasionally arise between us and our users. If this is the case, please feel free to contact us.