Privacy Policy

Dersheng Co., Ltd. highly values the protection of our members’ personal data and privacy.
This Policy explains how we collect, use, secure, and retain personal data on this website, and applies to all activities by logged-in members on the site.

1. Personal data and records collected
To provide better products and services, while members are logged in we may collect and record the following:
• Member identifiers: member ID or account (used to map to member records).
• Usage records: viewed product pages, downloaded catalogs or images, click timestamps, page URLs, referrers.
• Device and technical information: device type (desktop, mobile, tablet), browser type and version (User-Agent), IP address.
• Others: product categories, language, marketing campaign codes, download file types, etc. (if any).

2. Purpose of use and legal basis
• Purpose of use
For popular content statistics, product design and website experience improvement, market analysis, detection and prevention of abnormal use or security incidents.
• Legal basis
Processed in accordance with Taiwan Personal Data Protection Act and related laws. For members in the EU, processing will follow GDPR lawful bases (performance of a contract, legitimate interests, or consent) as applicable.

3. Retention period and storage location
• Retention period
Data is retained only for the period necessary to achieve the collection purposes or as otherwise required by law or contract (e.g. member data retained one year or per internal policy).
• Storage location
Stored on Company-managed servers or hosted by cloud providers that meet security and compliance requirements.

4. Disclosure and third-party processing
We will not disclose personal data to third parties except in the following cases:
• Where required by law, judicial order, or competent authorities.
• To engage service providers for specific purposes (e.g. backup, cloud services) under confidentiality and security agreements.

5. Your rights and how to exercise them (applicable to Taiwan)
You may exercise the following rights under the Personal Data Protection Act:
• Right to access or request to view
• Right to request copies
• Right to request rectification or supplementation
• Right to request restriction of collection, processing or use
• Right to request erasure
How to exercise: contact us by email at service@dersheng.com.tw

6. Rights for EU residents (GDPR)
If you are in the EU, under the GDPR you also have:
• Right to be informed
• Right to data portability
• Right to restrict processing
• Right to object
• Right to withdraw consent
The Company is the Data Controller. To exercise these rights, contact: privacy@dersheng.com.tw
We will respond within a reasonable timeframe (generally within 30 days). If you believe the Company violated the GDPR, you may lodge a complaint with your local supervisory authority.

7. Security measures
We implement multiple security measures to protect personal data, including but not limited to:
• Access control and authentication
• Encryption in transit and at rest
• System auditing and access logging
• Regular security assessments and staff training

8. Cookies and tracking technologies
This website primarily records logged-in member activities via internal systems and does not use third‑party advertising cookies. If third‑party analytics (e.g. Google Analytics) are used in the future, this page will be updated with purpose and opt‑out instructions.

9. Policy updates
This Policy may be updated due to service, technical, or legal changes. Updated versions will be posted on this page and take effect upon publication.

10. Contact
If you have questions about this Policy or data protection, contact:
• service@dersheng.com.tw (general inquiries)
• privacy@dersheng.com.tw (EU users and international data protection matters)