財團法人法律扶助基金會

Legal Aid Foundation (LAF) Privacy Policy

The LAF values your privacy and the protection of your personal data. In accordance with the Personal Data Protection Act, the Cyber Security Management Act, and other relevant laws and regulations, the LAF has established the following privacy policy.

Scope of application

This policy applies to the collection, processing, and use of your personal data when you apply for LAF services, participate in activities (such as registering for seminars and courses or subscribing to newsletters), and make inquiries or suggestions via telephone, fax, or the LAF website contact form.

For any third-party websites linked from the LAF website, the collection and protection of personal data shall be governed by the privacy policies of those independent third parties or websites. The LAF bears no responsibility for them.

Collection, processing, and use of personal data

When you apply for services or participate in activities organized by the LAF, we may request that you provide necessary personal information (such as name, ID, contact number, email address, contact address, and household registration address). Your personal data will be collected, processed, and used only within the scope of the specific purpose.

During the processing of your personal data, the LAF will comply with relevant procedures and internal regulations, and implement necessary personnel controls in accordance with information security requirements.

The LAF will not give your personal data to any individual, group, or institution, except under the following circumstances (as provided under Article 20 of the Personal Data Protection Act) :

• As required by law
• Where necessary to further public interest
• To prevent harm to the life, body, freedom, or property of the data subject
• To prevent material harm to the rights or interests of others
• Where public authorities or academic research institutions, based on public interest, require statistical or academic research, and the data has been processed to prevent identification of specific individuals
• With the consent of the data subject
• Where it is in the interest of the data subject

Period, territory, recipients, and methods of use of personal data

• Period: For the duration of the specific purpose of collection, within the retention period prescribed by law or contract, or for the period necessary for the LAF to perform its duties.
• Territory: Within the jurisdiction of the Republic of China (Taiwan) or regions necessary for the LAF and its branches to conduct their operations.
• Recipients: The LAF (including its branches), legally authorized investigative or auditing authorities, and the LAF’s supervisory authorities.
• Methods: By paper or other appropriate methods in accordance with applicable technology.

In accordance with Article 3 of the Personal Data Protection Act, you have the right to :

• Review or request copies of your personal data held by the LAF. The LAF may charge necessary fees as permitted by law.
• Request to supplement or correct of your personal data, provided you offer an appropriate explanation as required by law.
• Request that the LAF cease collection, processing, or use of your personal data, or request its deletion. However, this shall not apply where the data is necessary for the LAF to perform its duties or conduct its business as required by law.

Website and service system protection policy

When you browse the LAF website or download its files, no personal data will be collected. However, when you use the Legal Aid Online Reservation System, you may be required to provide necessary personal data, depending on the nature of the activity.

When browsing the LAF website, the server will automatically record your device’s IP address, the time of access, and the pages visited. These data are used solely for internal analysis to improve website service quality and will not be disclosed to the public.

All online transmissions of personal data through the LAF website use secure socket layer (SSL) encryption to ensure data security and prevent unauthorized interception.

To maintain website security and ensure the continuous operation of LAF service systems, we implement the following security measures:

• Use of intrusion detection systems to monitor network traffic and identify unauthorized uploads, alterations, or malicious activities.
• Installation of firewalls to prevent illegal intrusions, destruction, or data theft, thereby protecting your rights.
• Installation of antivirus software and regular virus scans to provide a safer browsing environment.
• Periodic simulated hacker attacks to test system recovery procedures in case of security incidents, with appropriate defense mechanisms in place.
• Daily data backups stored on backup servers.

Other provisions

If you have any questions or comments regarding this policy, please contact us at legalaid@laf.org.tw.

If any department of the LAF violates this policy, please let us know in writing or submit a complaint.