SWAROVSKI PRIVACY POLICY AND STATEMENT FOR TAIWAN REGION

This Privacy policy and collection statement applies to all personal information collected by Swarovski Crystal Online AG and its related bodies corporate (including Swarovski Hong Kong Ltd and its Taiwan region Branch) ("Swarovski"), including without limitation, by way of the Website.

This Privacy Policy applies in addition to (where applicable) the privacy policies specific to the Swarovski Crystal Society (“SCS”) or Swarovski Club programs.

If there is any inconsistency between any of the provisions in this Privacy Policy and the provisions of the privacy policies specific to the SCS or Swarovski Club programs respectively, the provisions of this Privacy Policy shall prevail.

By submitting your personal information to us, using our website or services or purchasing our products, you are deemed to consent to the collection, use, transfer, storage and handling of your personal information in accordance with this Privacy policy and collection statement. If you do not consent to this, please notify Swarovski by contacting us using our contact information below.

Due to the collection and use of personal information is involved with your privacy, according to Article 8 of Personal Information Protection Act of Taiwan region, Swarovski hereby precisely notice you related items as below.

Collecting your personal information

The specific purposes of collecting your personal information are marketing, managing internal member roll of judicial person, managing and serving consumer and client, online shopping and other electronic commerce service, survey, statistics and research analysis, and other business registered as scope of business or prescribed in the Articles of Incorporation.

Our main purposes in collecting information about you are such as follows:

• provide you with our products and/or services (including repairs and returns);
• respond to your queries;
• conduct promotions and competitions;
• conduct market research;
• keep you informed about our activities, products and services;
• allow you to join the SCS, Swarovski Club, and other similar Swarovski-related memberships;
• operate our business efficiently; and
• improve our products and services.

In particular, Swarovski may collect personal information:

• when you contact us with queries or issues;
• when you participate in our promotions or competitions;
• when you fill in questionnaires, surveys or contact forms;
• when your register your details with Swarovski;
• when you submit information through our Website, such as when you set up a user account, retrieve log-in information, join SCS, Swarovski Club (or similar membership groups), make online orders or purchases or enter into other online transactions; or
• when you use the Website, in which case our system may automatically collect information relating to your visit to that Website, such as your IP address.

We note that Swarovski may also use aggregated, anonymous data about its customers and/or website users as a group, for Swarovski's business purposes.

If you do not provide Swarovski with all requested personal information, we may be unable to assist you or provide you with our products and/or services, you may not be able to participate in our promotions or competitions or you may be unable to join the SCS or Swarovski Club (or similar membership groups).

Swarovski may collect your personal information, including, for example, your contact details (such as name, email address, address, phone number), date of birth, gender and where necessary to effect a purchase, return or similar transaction, your credit card or banking details.

Our use of cookies

Cookies are pieces of information that a website transfers to your computer's hard disk for record keeping purposes. Most web browsers are set to accept cookies. Swarovski uses cookies to make your use of the Website, resources and services as convenient as possible. Cookies in and of themselves do not personally identify users, although they do identify a user's browser. Cookies are useful to estimate our number of users and determine overall traffic patterns through the Website.

If you do not wish to receive any cookies, you may set your browser to refuse cookies, but this may mean you will not be able to take full advantage of the services and resources on our Website.

Using your personal information

Time period, area, target and way of the using your personal information

1. Time Period: Unless otherwise stipulated by applicable laws, until the day you request stop using your personal information or Swarovski stop providing service.
2. Area: The location of the parties indicated in the “Target”.
3. Target: Any legal entity of Swarovski Group, affiliate, subsidiary, delivery service and related service provider.
4. Way of Using: By way of automatic or non-automatic measures that is compliance with personal information protection relevant regulations.

Retailers and service providers

Like most large organizations, we use a range of retailers to sell and service our products and service providers to help us maximize the quality and efficiency of our services and our business operations. This means that individuals and organizations outside of our organization, such as third party retailers of Swarovski products, third parties that operate the personal information on behalf of and in accordance with Swarovski’s instructions (commissioned data processing) and third parties which Swarovski commissions for repairs of our products, will sometimes have access to personal information held by us and may use it on behalf of us. We require our service providers to adhere to strict privacy guidelines and not to use the information for any unauthorized purposes.

Using your personal information for marketing

We may use personal information you have provided to us, including your email address, to provide you with information in relation to new or updated products or services or special offers, promotions or competitions in which you may be interested.

If at any time you do not wish to receive such information from us, you may ask us to remove your name from our list by contacting us using our contact details below. Alternatively, if we send you such information by email, you can use the unsubscribe function in the email to inform us that you do not wish to receive such information from us by email. In either case, please allow 5 business days for your request to be processed.

Disclosing your personal information overseas

In order to deliver products and services to you and to improve our products and services, we may sometimes disclose your personal information to another company within or related to the Swarovski group (including those located in Switzerland, Hong Kong SAR, Taiwan region, the US, Liechtenstein and Austria), affiliates and service providers. Swarovski will not otherwise use or disclose any information about you without your consent, unless:

• the use or disclosure is for one of the purposes described in or otherwise permitted by this Privacy policy and collection statement;
• the use or disclosure is required or permitted by law;
• we believe it necessary to provide you with products or services which you have requested;
• we believe it necessary to protect the rights, property or personal safety of another person or Swarovski; or
• the assets and operations of Swarovski's business are transferred to a third party.

Access and accuracy

According to Article 3 of Personal Information Protection Act, you have the rights as follows with regard to your personal information:

1. To inquiry and request for a review your personal information;
2. To request to make duplications your personal information;
3. To request to supplement or correct your personal information;
4. To request to discontinue collection, processing or use of personal information; and
5. To request to delete your personal information.

Upon request, we will provide you with access to personal information that Swarovski holds about you, except in the limited circumstances in which it is permitted for us to withhold this information. To request access to your personal information, please contact us using our contact information below.

If at any time you wish to change personal information that is inaccurate, out of date or incomplete, please contact us using our contact information below and we will amend your record.

If at any time you wish to stop using of your personal information, please contact us using our contact information below or stop using Swarovski’s service. 

If you wish to have your personal information deleted, please let us know in the same manner as referred to above and we will take all reasonable steps to delete it unless we need to keep it for legal, auditing or internal risk reasons.

Storage and security of your personal information

Swarovski will endeavor to take all reasonable steps to keep secure any information which we hold about you, and to keep this information accurate and up to date.

Unfortunately, however, no data transmission over the internet can be guaranteed secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us through our Website and you use our Website at your own risk.

Your personal information is stored on secure servers that are protected in controlled facilities. We require our employees and data processors to respect the confidentiality of any personal information held by Swarovski. Swarovski may use overseas facilities to process or back up its information. As a result, we may transfer your personal information to our overseas facilities for storage. However, this does not change any of our commitments to safeguard your privacy.

Usernames and passwords

You can play an important role in keeping your personal information secure by maintaining the confidentiality of any password and accounts used on our Website. Please notify Swarovski immediately if there is any unauthorised use of your account by any other Internet user or any other breach of security.

You are responsible for the security of your user name and password (or other log-in information) and you take responsibility to ensure the confidentiality of this information.

Links to other websites

Swarovski provides access to third party websites through our Website. These linked websites are not under the control of Swarovski, and we are not responsible for the content or the conduct of the organization accessed via a link on our Website. Before disclosing your personal information on any website, we suggest you examine the terms and conditions and privacy policy of that website.

What to do if you have a problem, question or complaint

If you have any further queries relating to this Privacy policy and collection statement, or you have a problem or complaint, please contact us at:

Contact person: Customer Relations

Email: customer_relations.tw@swarovski.com

Phone number: +886 2 21 00 26 11

Address: 3F, No. 27, Chung Shan North Road, Section 1, Taipei 10441, Taiwan region

In most cases we will ask that you put your request in writing to us. We will investigate your complaint and will use reasonable endeavors to respond to you in writing within 30 days of receiving the written complaint. If we fail to respond to your complaint within 30 days of receiving it in writing or if you are dissatisfied with the response that you receive from us, you may have the right to make a complaint to the Office of the Information Commissioner.

Future changes

From time to time, Swarovski's policies will be reviewed and may be revised. Whilst Swarovski seeks to minimize changes to its policies, Swarovski reserves the right to change this Privacy policy and statement at any time by posting an updated version on our Website. Please therefore keep checking these policies to ensure you are aware of the current terms. If at any point Swarovski decides to use personal information in a manner materially different from that stated at the time it was collected we will notify you by email or via a prominent notice on our Website, and where necessary we will seek your prior consent.

SWAROVSKI CRYSTAL SOCIETY (SCS)
The following provisions shall be applicable for the processing of data by SWAROVSKI in connection with the customer loyalty program Swarovski Crystal Society (SCS). a. Responsible for the Personal Data (Controller) The PERSONAL DATA in connection with the membership at SCS is processed by two joint controllers, in particular (i) the controller of the respective local Swarovski company which issues the membership according to the application form and which receives the membership fees, and (ii) the controller of Swarovski Aktiengesellschaft, Dröschistrasse 15, 9495 Triesen, Liechtenstein. The collected personal data will be shared with other companies of the Swarovski Group of companies and certain third parties as described in this Privacy Policy. b. Processing of Personal Data and Source Swarovski collects and retains the personal obligatory data provided on the SCS application form (including but not necessarily limited to the title, name, contact details, birth date, pre-existing SCS membership number, language preference, order information, as well as the name, contact details and SCS membership number of the gift giver, where applicable) by the SCS Member him or herself or by the person that buys the SCS Membership as a gift and provides Swarovski with the PERSONAL DATA of the SCS Member (“Form Data”). In addition, Swarovski also collects any Personal Data provided voluntarily by the customer in the online member area or when interacting with us: styles/interests (e.g. in Jewellery and Accessories, Home, Figures and Collectables and/or Watches; Classic style), social media accounts (and related information collected through social log-in), gender, IP address and online identifiers. Swarovski receives such PERSONAL DATA from the points of sale where the membership is ordered and paid. It assigns to each new SCS Member, a unique membership number, tracks the membership start and renewal dates, service and mailing options chosen by the SCS Member, services provided (including gifts sent), and, as the case may be, further data about the SCS Member's use of the Swarovski Group's online offerings and mailings (e.g., newsletter open rate, click rate, visited online web pages, social media interactions), interaction variables (such as click rates, time of interaction or social media interaction). Swarovski may also process payment information, directly or through a third party, where necessary for the payment of SCS Membership fees. Additionally, Swarovski records the purchase history of each SCS Member, in the form of items purchased (product designation, price) and place and time of purchase. The purchase history is recorded only if the SCS Membership number is communicated at the checkout for purchases in stores offering the SCS program. In the online store, a registered customer must activate their account online by setting up an online account. A registered customer’s purchase history is recorded if the account number is quoted when making a purchase or the registered customer makes a purchase when logged into their online account. Swarovski also collects and saves any vouchers sent to the SCS Member and, as the case may be, further data about the SCS member’s use of the Swarovski Group's online offerings and mailings (e.g., newsletter open rate, click rate, visited online web pages, social media interaction). Where Swarovski believes that two different SCS Memberships belong to the same individual, or where a valid request is received, Swarovski may merge them.

c. Purpose of processing
SWAROVSKI collects and processes the personal data of members of the customer loyalty program in particular also for the following purposes:

• administration of SCS memberships;
• operation of SCS, namely providing of advantages and awarding special conditions, participating in surveys, requiring feedback and act in social media,
• Personalization and unification of customer experience across channels (Swarovski stores, swarovski.com, e-mail communication, social media) 
• Provision of relevant information and a personalized marketing content 
• Non-marketing communication including but not limited to: changes related to our Privacy Policy, General Terms and Conditions and/or Terms of Use; general changes to product and service offering; account verification; password reset; or an information related to incidents that could affect our services
• Provision of personalized offers, assistance and advice regarding products and services
• Provision of invitations to special events and promotions reserved for registered customers
• Participation in surveys, requiring customer feedback across channels (Swarovski stores, swarovski.com, e-mail, social media)

In participating stores, the SCS membership allows SCS members to take advantage of an extended customer advice in which, upon presentation of the account number, the store employee can call up the registered customer’s data and provide the registered customer with additional sales advice based on his or her past purchases, style/interests selected or wish list. On presentation of the SCS membership number, e-mail address or the registered customer’s name and date of birth (or another unique authentication attribute), the relevant store employee or customer service representative has access to the relevant registered customer’s saved purchase history data and wish list. 

The personal data collected is used by Swarovski to administer and manage the Membership (including also for accounting and payment purposes), to provide the Member with the benefits and other services that come with the Membership (the legal basis for this is the Membership) and to provide the SCS Member with commercial communications (such as newsletters, product information, services and exclusive offers of the Swarovski Group) by e-mail, mail, mobile messaging or a phone call based on the contact information provided by the Member (for which Swarovski relies on the SCS Member's consent). In all these cases, SWAROVSKI may personalize the information sent to the Member so that the Member particularly receives, where possible, information which SWAROVSKI considers interesting for the Member. For this purpose, SWAROVSKI analyses the Form Data (and in particular, information as to age, gender, interests and preferences) and other information that can be gleaned from the purchase history, or inferred from interaction data, or has been given to SWAROVSKI by the SCS Member voluntarily at any later time. Furthermore, SWAROVSKI may use the personal data for compliance with its legal obligations and, where it has a legitimate interest, for statistical and research purposes, including for better understanding of SCS Members, consumer and market analysis, improvements to the SCS Program and the development of new products and services. Non-marketing communication may still be sent if you have opted-out from certain marketing communication as this may be necessary for us to perform a contract with you, to comply with legal obligations or security requirements. Also, we will send you a personal note on your birthday, if you share your date of birth with us.

d. Disclosure of Personal Data
In the course of processing personal data in connection with SCS, SWAROVSKI may namely disclose data to the following categories of recipients:

• PARTNERS, including business, marketing and promotion partners (including social media partners) and all participating retail shops or other authorized specialists dealers, irrespective of whether the company is run by SWAROVSKI or another sales or cooperation partner; whereas these stores may be located within any country worldwide and they may use data received from SWAROVSKI only for the purpose of operating SCS, including personalized offers to and communication with Members on behalf of SWAROVSKI;
• to a SWAROVSKI company to whom the processing of data (operation of the database) regarding SCS has been outsourced in technical respect (processors). Each recipient may be located in a country without an adequate level of data protection. If that is the case, SWAROVSKI will ensure an adequate level of protection. e. Rights of Data Subjects SCS Members and membership gift givers are entitled at any time to ask SWAROVSKI for information relating to their saved personal data, and other information as provided for by applicable data protection law. They also have the right to ask to amend, limit or delete their personal information, or ask for a copy of the personal information. Swarovski registered customers may also revoke any consent they have provided to Swarovski (e.g. to be used for promotional, advertising purposes and receive newsletters and other commercial communications) for the future. If you want to exercise any of your rights regarding newsletter subscriptions, data access or data deletion, please do not hesitate to contact our Customer Care team at customer_service_tw@swarovski.com, who will be happy to answer any questions you may have. Please note that we may require you to verify your identity before allowing you to access your personal information.

f. Data Retention
Personal Data will be held and used for the duration of the Membership; thereafter, it will be retained as long as necessary for the aforementioned purposes, but not for more than five years, unless required for legal reasons. The purchase history is generally recorded for five years. As exception to this rule, the purchase history on SCS exclusive products will be kept during the entire duration of the Membership in order to recognize member life-time value to the Society. Should a SCS Member not wish to have his or her SCS exclusive product history stored above 5 years, he/she can request deletion by contacting informing of his/her explicit wish to have this history deleted Further information regarding SCS can be found in the General Terms and Conditions of the customer loyalty program on www.swarovski.com.

g. Updates and Additional Information
For updates to the information provided in this Data Privacy Policy and, as the case may be, further country-specific mandatory information and mandatory information based on the EU Data Protection Regulation, and for any uncertainties regarding the transfer of personal information overseas, the storage, security of your personal information and other privacy issues that are not explicitly stipulated under this Data Privacy Policy, please refer to the Privacy Policy on www.swarovski.com where applicable.