Privacy Policy
Last updated: October 27, 2026
The Taipei Arts International Association (Unified Business No.: 83868702, hereinafter the "Association") values your privacy and the protection of your personal data. This policy explains how the Association collects, processes and uses your personal data when you use the Association's website, LINE Official Account, membership, events, customer service and other services, and the rights you may exercise.
This English version is provided for reference only. In case of any discrepancy, the Chinese version prevails.
1. Scope
This policy applies to the Association's website (https://www.taia.tw), LINE Official Account, membership applications, account linking, newsletter subscriptions, event registration, forms, customer service and other services.
Where a particular event or service involves other data, purposes or partners, the Association will provide supplementary notice before collection.
When you follow a link to a website or service operated independently by a third party, that third party's own collection and use of data is governed by its privacy policy. The Association's legal responsibilities are not waived because it uses a third-party platform or outsourced service.
2. Purposes, Sources and Categories of Data
According to the actual needs of its services, the Association collects the following data to the extent necessary:
1.Membership management and identity verification: name, telephone number, email address, member ID, necessary account data and verification records.
2.LINE interaction and member account linking: LINE User ID, display name, profile image or its URL, linking and unlinking records, and the messages, attachments and necessary interaction records you send.
3.Event registration and contact: name, contact details, items registered for, necessary registration details, and attendance and service-handling records.
4.Customer service and complaint handling: contact details, inquiry content, correspondence and handling records.
5.Newsletters and event promotion: contact details you choose to provide, subscription preferences, and consent and unsubscribe records.
6.System security and service improvement: IP address, browser and device information, access times, cookies, website usage and necessary system records.
7.Legal compliance and dispute handling: necessary data directly related to a specific legal obligation or dispute.
Sources of data include what you provide directly, records generated when you use the services, and, when you use LINE-related features, data provided by the platform according to the feature, the permissions granted and your actions.
Each service will indicate required and optional fields. The categories listed in this policy do not mean that you must provide all of this data for every service.
The Association collects and processes data on the basis of a contract or quasi-contractual relationship with appropriate security measures, your valid consent, an express provision of law, or another applicable legal basis. Where separate consent is required by law, it will be obtained separately.
Where another person registers or provides data on your behalf, the Association will inform you of the source of the data and related matters as required by law, unless an exemption from notification applies.
Where payment, insurance, photography or personal data specially protected by law is involved, the Association will separately confirm the necessity and legal requirements and give appropriate notice before collection.
3. LINE Official Account and Member Account Linking
Adding the Association's LINE Official Account as a friend does not automatically grant website membership, complete account linking, or constitute consent to receive all marketing messages.
When you use the LINE Official Account, LINE Login or the linking feature, the Association obtains only the necessary data according to the actual feature, platform settings and scope of authorization. Using LINE does not by itself give the Association access to all of your LINE data.
Linking a member account requires necessary verification. The Association will explain its purpose before linking, and you may request unlinking through the service features or by using the contact details in Section 10.
Blocking the Official Account, revoking LINE authorization, unlinking your member account, opting out of marketing and deleting personal data are separate matters. You may request them together, and the Association will explain the outcome and any features affected.
LINE's own processing of data for its services is governed by its applicable policies. Once the Association obtains data, its processing remains subject to this policy and the law.
4. Use of Personal Data
(1) Period of Use
1.Member data: kept while the membership relationship continues. After membership ends, only data genuinely necessary for account reconciliation, security or dispute handling is kept, for no more than two years.
2.Event, customer service and form data: kept until the service and any related follow-up are completed and there is no further need to keep it.
3.Marketing data: use for marketing stops when you object, withdraw consent, the subscription ends or the original purpose no longer exists. To avoid sending messages by mistake again and to demonstrate consent, records of consent, unsubscription or objection may be kept to the extent necessary and will not be used for any other marketing.
4.Website and system records: kept only for the period necessary to maintain functions, security and analysis, and reviewed and purged regularly.
Within these periods, if the purpose has been fulfilled and there is no other lawful reason to keep the data, the Association will delete it or stop processing and using it as required by law.
Where data must be kept longer for a lawful and necessary reason such as a specific legal obligation, litigation, a complaint or a security incident, retention is limited to the necessary data, purpose and period, and the data will be handled as required by law once the reason no longer applies. Backups are also subject to retention and deletion management and are not a reason to keep data indefinitely.
(2) Region of Use
The Association mainly processes data within the Taiwan Area and the Mainland Area. When LINE, cloud, email or other third-party services are used, data may be stored, processed, backed up or accessed outside these areas, in the regions where the relevant service providers and their processors are located.
For services involving processing outside these areas, the Association will, before collecting the relevant data, explain the service provider, the purpose of processing and the countries or regions involved through the service page or a supplementary notice, and will comply with applicable restrictions on international transfers.
(3) Recipients
Recipients are limited to:
1.Personnel authorized by the Association within the scope necessary for its work.
2.Vendors engaged by the Association to provide hosting, system maintenance, message delivery, event administration or similar services.
3.Partner organizations notified in advance for a particular service and having a lawful basis for receiving the data.
4.Authorities with legal power that request data within the lawful and necessary scope.
5.Other recipients with your valid consent or meeting the requirements of the Personal Data Protection Act.
The Association does not sell your personal data and does not freely provide it to third parties for their own marketing. Before providing data to a third party, the Association will confirm the purpose, the scope of data and the legal basis. Where use beyond the original purpose requires separate consent by law, the Association will obtain it separately.
Based on actual contracts and the use of data, the Association distinguishes between vendors acting on its behalf and services provided independently by third parties, and properly supervises the vendors it engages.
(4) Methods of Use
Within lawful and necessary purposes, the Association carries out verification, contact, registration, customer service and service management by means of paper, electronic documents, telephone, email, LINE, internet transmission and necessary system processing.
5. Marketing Messages and Cookies
Necessary service notices, such as member verification, registration confirmations, event changes and customer service replies, are managed separately from marketing messages.
Whether to receive newsletters, event promotions or other marketing messages is your separate choice, and no box is pre-ticked. Declining marketing does not affect member or event services unrelated to marketing.
The Association provides a free and easy way to opt out in its first and every subsequent marketing message. You may opt out through the unsubscribe option in the message or through the contact channels in Section 10, and the Association will immediately stop using your personal data for marketing.
The website may use cookies or similar technologies to maintain login, verification, preference settings and website functions. If Google Analytics or other non-essential analytics tools are used, the Association will explain the tool, its purpose, the main data involved and the retention period before enabling it, and will process data on a lawful basis. Where consent is required, the tool will be enabled only after consent is obtained.
You can manage cookies through your browser or the settings provided on the website. Disabling necessary cookies may affect some functions; declining non-essential analytics does not affect basic services unrelated to analytics.
6. Data Security and Incident Handling
According to the nature and risk of the data, the Association takes appropriate technical and organizational security measures, including access permissions, staff confidentiality, necessary transmission protection, supervision of outsourcing and incident response management.
Vendors may process data only within the scope of their engagement. According to the engagement, the Association manages their data security, sub-contracting, incident notification, and the return or deletion of data when the engagement ends.
If a personal data security incident occurs or is suspected, the Association will promptly take containment, investigation, remediation and recording measures. Where the law requires notifying the people affected or reporting to the authorities, the Association will do so. Notices will include the facts of the breach and the measures taken and, where appropriate, advice on self-protection.
7. Your Rights and How to Exercise Them
As provided by law, you may request the following regarding personal data held by the Association:
1.Inquiry or review.
2.A copy.
3.Supplementation or correction.
4.Cessation of collection, processing or use.
5.Deletion.
These rights may not be waived in advance or unlawfully restricted. Where processing is based on consent, you may withdraw your consent; withdrawal does not affect the validity of lawful processing before withdrawal.
Please submit requests using the contact details in Section 10. The Association may verify your identity in a way proportionate to the risk of the request and will ask only for necessary verification information. For requests made by an agent, appropriate proof of authority may be required.
Requests for inquiry, review or copies will in principle be decided within 15 days. Where necessary, this may be extended by law by no more than 15 days, with the reason given in writing.
Requests for supplementation, correction and other requests under Article 11 of the Personal Data Protection Act will in principle be decided within 30 days. Where necessary, this may be extended by law by no more than 30 days, with the reason given in writing.
Where the law requires data to be kept or a request cannot be met in full, the Association will explain the specific reason and scope and will not refuse in general terms merely citing ordinary operational needs. If a necessary cost is charged for inquiry, review or copies, this will be explained in advance. There is no charge for opting out of marketing.
8. Consequences of Not Providing Data
You may choose whether to provide personal data.
If you do not provide data necessary for membership application, identity verification, account linking, event registration or customer service, the procedure or service may not be completed. Not providing optional data, declining marketing or declining non-essential analytics does not affect unrelated services.
If you request that the Association stop processing or delete data essential to providing a service, the Association will explain the specific functions affected.
9. Minors and Amendments to This Policy
When a minor uses a service involving an application, authorization or other legal act, the legal representative must act on the minor's behalf or give the necessary permission, according to the minor's legal capacity and applicable law. The Association will use appropriate confirmation procedures according to the nature of the service and will not assume that the necessary permission has been given merely because the service continues to be used.
When the Association revises this policy, it will update the date and announce the revision on the website. Where important rights are affected, the Association will also give notice in an appropriate manner.
Where a revision involves new purposes, data categories, recipients or other matters that require separate notice or consent by law, the Association will complete the necessary procedures before implementation and will not replace required consent with an announcement or your continued use.
10. Contact
If you have any questions about this policy or the handling of personal data, or wish to exercise your rights, please contact the Association through "Contact" on the website, the Association's LINE Official Account, or the following:
