隱私權政策 / Privacy Policy

歡迎來到 SnowGame 雪遊中文滑雪學校（以下簡稱「本網站」或「本服務」）。為保障您的個人資料與隱私權，讓您能安心使用本網站及相關服務，本政策說明我們如何蒐集、處理、利用、保存及保護您所提供之個人資料。 Welcome to SnowGame SnowSport School (hereinafter referred to as "the Website" or "the Service"). To protect your personal data and privacy and to enable you to use this Website and related services with confidence, this Policy explains how we collect, process, use, retain, and protect the personal data you provide.

一、政策適用範圍與依據法令1. Scope and Governing Laws

本政策適用於您使用本網站所提供的各項服務時，有關個人資料的蒐集、利用及保護，但不適用於與本網站連結之其他各網站。凡經由本網站連結的其他網站，關於個人資料的保護，應適用各該網站專屬的隱私權保護政策。該等網站之內容、服務及個人資料處理方式，非本網站所能控制，本網站不負責其個人資料保護措施。 This Policy applies to the collection, use, and protection of personal data in connection with your use of services provided on this Website. It does not apply to any third-party websites linked from this Website. Any website you reach through a link on this Website is governed by its own privacy policy. We have no control over the content, services, or data-handling practices of such third-party websites and are not responsible for their personal data protection measures.

本政策係參考並依適用情形遵循台灣《個人資料保護法》（個資法）及日本《個人情報保護法》（個人情報の保護に関する法律，以下簡稱「個情法」）之相關規定，以提供您適當之個人資料保護。 This Policy is drafted with reference to, and where applicable observes, the Taiwan Personal Data Protection Act ("PDPA") and the Japanese Act on the Protection of Personal Information ("APPI"), in order to provide you with appropriate protection of your personal data.

二、個人資料之蒐集、處理及利用2. Collection, Processing, and Use of Personal Data

本網站對於您個人資料之處理及利用，僅在蒐集之特定目的及相關法令規定之範圍內為之。除本政策所載之服務提供、委託處理、合作服務提供者協助、法令要求或經您同意之情形外，本網站不會將您的個人資料出售、出租、交換或提供予第三人作為其自行行銷目的使用。 We process and use your personal data only within the specific purposes for which it was collected and within the scope permitted by applicable law. Other than as described in this Policy for service delivery, outsourced processing, assistance from partner service providers, legal requirements, or with your consent, we do not sell, rent, exchange, or otherwise provide your personal data to any third party for that party's own marketing purposes.

您可以自由選擇是否提供個人資料，但如您所提供的資料不足或有誤時，本網站可能無法提供完整之服務。 You may freely choose whether to provide personal data; however, if the data you provide is incomplete or inaccurate, we may not be able to provide our services to you in full.

三、蒐集之個人資料類別3. Categories of Personal Data Collected

本網站僅在提供服務之必要範圍內蒐集您之個人資料，類別包括：身分聯繫資訊（姓名、電子郵件、聯絡電話、通訊軟體 ID）、課程相關資訊（年齡、滑雪技術等級、課程偏好）、緊急聯絡人、網站使用紀錄（IP 位址、瀏覽紀錄），以及課程或活動過程中可能產生之照片、影片或其他影像紀錄。 We collect your personal data only to the extent necessary to provide our services. The categories collected include: identity and contact information (name, email address, telephone number, messaging-app IDs); lesson-related information (age, ski skill level, course preferences); emergency contact details; website usage records (IP address, browsing logs); and photographs, videos, or other visual recordings that may be created during lessons or activities.

為確保課程安全，本網站可能會請您揭露影響課程進行之健康狀況（如懼高症、高血壓、心臟病、癲癇、哮喘或懷孕等不適合過度刺激之情況）。就前述健康相關資訊，本網站僅於課程安全評估、緊急應變及保險處理之必要範圍內蒐集、處理及利用，並將於取得您或法定代理人書面或其他可保存紀錄之明示同意後進行。此類資訊可能涉及台灣《個人資料保護法》所稱之特種個人資料，亦可能屬日本《個人情報保護法》所稱之「要配慮個人情報」，本網站將採取較高標準之安全管理措施。 To ensure lesson safety, we may ask you to disclose health conditions that could affect the lesson (such as acrophobia, hypertension, heart disease, epilepsy, asthma, pregnancy, or other conditions that may be unsuitable for strenuous physical activity). We collect, process, and use such health-related information only to the extent necessary for lesson safety assessment, emergency response, and insurance purposes, and only after obtaining the explicit written consent (or another retainable record of consent) of you or your legal representative. Such information may constitute personal data subject to special restrictions under Article 6 of the Taiwan PDPA and Special Care-Required Personal Information ("yō-hairyo kojin jōhō") under the Japanese APPI; we apply enhanced safety-management measures to such data.

付款資訊（信用卡號等）由本網站合作之第三方付款處理服務提供者直接處理，本網站不接觸亦不儲存您的完整信用卡卡號。 Payment information (such as full credit card numbers) is handled directly by our third-party payment processor. We do not access or store your complete credit card number.

四、個人資料之利用方式4. Use of Personal Data

對於您所提供之個人資料，本網站將於下述範圍內利用： We will use the personal data you provide within the following scope:

五、資料分享與揭露5. Data Sharing and Disclosure

除本政策所載情形、為提供您所要求之服務、取得您的同意，或依法令、法院、主管機關或政府機關之合法要求外，本網站不會任意向第三方揭露、出售、出租、交換或提供您的個人資料。 Except as described in this Policy, as necessary to provide the services you have requested, with your consent, or in response to a lawful request from applicable law, a court, a competent authority, or a government agency, we will not disclose, sell, rent, exchange, or otherwise provide your personal data to any third party.

為完成課程預約、付款、保險、客服聯繫、雪場協調、網站維護、服務分析及廣告成效衡量等目的，本網站可能於必要範圍內，將您的個人資料提供予受本網站委託或合作之第三方服務提供者處理。該等第三方僅得於約定目的及必要範圍內處理資料，不得作為其自行行銷目的使用。 For purposes including lesson booking, payment, insurance, customer support, coordination with ski resorts, website maintenance, service analytics, and advertising measurement, we may, to the extent necessary, share your personal data with third-party service providers we have engaged. Such third parties may process the data only for the agreed purposes and within the necessary scope, and may not use it for their own marketing purposes.

關於服務分析、廣告投放及成效衡量 Analytics, Advertising, and Measurement

本網站為提供服務、改善使用體驗、進行網站流量分析、廣告投放管理及成效衡量，可能於《個人資料保護法》及相關法令允許之範圍內，使用第三方服務分析、廣告技術或成效衡量平台。 To provide our services, improve user experience, analyze website traffic, manage advertising, and measure effectiveness, we may use third-party analytics, advertising-technology, and measurement platforms to the extent permitted by the PDPA and other applicable laws.

當您於本網站提供電子郵件、聯絡電話或其他可辨識個人之資訊時，本網站可能於特定目的及必要範圍內，將該等資料經雜湊、加密傳輸或其他合理安全處理方式後，提供予合作服務提供者，用以進行資料比對、統計分析、服務優化及行銷成效衡量。 When you provide an email address, phone number, or other identifying information on this Website, we may, for specific purposes and to the extent necessary, hash, encrypt in transit, or otherwise apply reasonable security measures to such data before sharing it with partner service providers for data matching, statistical analysis, service optimization, and marketing-effectiveness measurement.

本網站不會將上述資料提供予第三方作為其自行行銷目的使用，並將盡合理努力要求合作服務提供者依約定目的及相關法令規範處理資料。 We do not provide such data to third parties for their own marketing purposes, and we will use reasonable efforts to require partner service providers to handle the data in accordance with the agreed purposes and applicable laws.

六、個人資料之刪除與權利行使6. Deletion of Personal Data and Exercise of Rights

依台灣《個人資料保護法》規定，您對自己的個人資料享有下列權利： Under the Taiwan PDPA, you have the following rights with respect to your personal data:

• 查詢或請求閱覽。The right to inquire about or request access to your data.
• 請求製給複本。The right to request a copy.
• 請求補充或更正。The right to request supplementation or correction.
• 請求停止蒐集、處理或利用。The right to request that we cease collecting, processing, or using your data.
• 請求刪除。The right to request deletion.

日本《個人情報保護法》亦賦予本人類似之權利，包括第 33 條之開示請求權、第 34 條之訂正請求權、第 35 條之利用停止請求權，以及第 33 條第 5 項之第三者提供紀錄開示請求權。 The Japanese APPI grants similar rights to the data subject, including the right to request disclosure under Article 33, the right to request correction under Article 34, the right to request cessation of use under Article 35, and the right to request disclosure of third-party transfer records under Article 33, Paragraph 5.

如欲行使上述權利，請透過本政策下方所列聯絡方式與本網站聯繫，並說明您的請求。在確認您的身份無誤後，本網站將於合理時間內回覆並處理。 To exercise any of the above rights, please contact us using the contact information listed at the bottom of this Policy and describe your request. After verifying your identity, we will respond and act on your request within a reasonable time.

七、個人資料之保護措施7. Data Protection Measures

本網站高度重視您個人資料之安全。依台灣《個人資料保護法》及日本《個人情報保護法》關於「安全管理措置」之要求，本網站採取下列多層次保護措施，主動降低個人資料外洩、遺失或被竄改之風險： We take the security of your personal data seriously. In accordance with the safety-management requirements of the Taiwan PDPA and the Japanese APPI, we have implemented the following layered protection measures to proactively reduce the risk of leakage, loss, or unauthorized alteration of personal data:

（一）組織性管理措施(1) Organizational Measures

• 明確界定個人資料之蒐集、處理、利用範圍與責任歸屬。Clearly defining the scope of, and accountability for, the collection, processing, and use of personal data.
• 內部人員依職務需要設定不同等級之資料存取權限，落實最小權限原則。Granting tiered access to personal data based on job function in accordance with the principle of least privilege.
• 定期檢視資料保護政策與作業流程；發生問題時立即通報處理。Regularly reviewing data-protection policies and procedures, and promptly escalating and addressing any issues that arise.

（二）人員管理措施(2) Personnel Measures

• 內部人員均負有保密義務並簽署保密合約。All personnel are bound by confidentiality obligations and have signed confidentiality agreements.
• 定期對處理個人資料之人員進行資料保護教育訓練。We provide regular data-protection training to personnel who handle personal data.
• 若有違反保密義務者，將依法律及內部規定處置。Breaches of confidentiality are handled in accordance with applicable law and internal rules.

（三）物理性管理措施(3) Physical Measures

本網站使用之雲端服務、網站代管服務及第三方系統，係由相關服務提供者依其安全管理機制進行實體環境及系統基礎設施之保護。本網站內部亦會依業務需要限制資料存取人員，避免非必要人員接觸個人資料。 The cloud services, hosting providers, and third-party systems we use rely on the physical and infrastructure security controls maintained by those service providers. Internally, we also restrict access to personal data based on business need to prevent contact by unauthorized personnel.

（四）技術性管理措施(4) Technical Measures

本網站採用第三方雲端服務及網站代管服務提供之安全機制，並依服務性質採取 HTTPS / TLS 加密傳輸、存取權限控管、帳號安全設定、異常流量防護及必要之系統更新等措施。付款資料由合作之第三方付款處理服務提供者依其安全標準及相關規範處理，本網站不接觸亦不儲存完整信用卡卡號。 We rely on the security mechanisms provided by our third-party cloud and hosting services, and apply measures appropriate to each service, including HTTPS/TLS encryption in transit, access control, account-security settings, anomaly-traffic protection, and necessary system updates. Payment data is processed by our third-party payment processor in accordance with its security standards and applicable regulations; we do not access or store complete credit card numbers.

為服務改善與成效衡量之目的，傳送至第三方服務平台之電子郵件與電話等資料，將盡可能先經雜湊或其他安全處理方式轉換，以降低直接識別個人身分之風險。惟該等資料於法令上仍可能屬於個人資料，本網站仍將依本政策及相關法令規範處理。 For service-improvement and measurement purposes, email addresses, phone numbers, and similar data transmitted to third-party service platforms will, where reasonably possible, first be hashed or otherwise subjected to security processing to reduce the risk of direct identification of an individual. Such data may nevertheless constitute personal data under applicable law, and we will continue to handle it in accordance with this Policy and applicable laws.

如因業務需要委託第三方提供服務時，本網站將依服務性質，透過契約、服務條款、隱私設定或其他合理方式，要求或確認合作服務提供者於約定目的及法令允許範圍內處理個人資料。 When we engage third parties to provide services for business needs, we will — depending on the nature of the service — require or confirm, through contracts, service terms, privacy settings, or other reasonable means, that the partner service provider handles personal data within the agreed purposes and the scope permitted by law.

儘管本網站已採取上述合理保護措施，仍須提醒您：世上沒有任何資訊系統可以保證百分之百不被入侵。若發生個人資料遭竊取、洩漏、竄改、毀損、滅失或其他安全事件，本網站將依法令要求及事件性質，採取必要之應變措施，並於法令要求之範圍內通知當事人及／或主管機關，以降低可能造成之影響。 Despite the reasonable protection measures we have adopted, please note that no information system can guarantee absolute security. If a security incident occurs involving theft, leakage, unauthorized alteration, damage, loss, or other compromise of personal data, we will take response measures appropriate to the nature of the incident and the requirements of applicable law, and we will notify affected individuals and/or competent authorities within the scope required by law in order to mitigate any potential impact.

八、Cookie 及類似技術之使用8. Cookies and Similar Technologies

為便於提供您所需之服務、改善網站體驗、分析網站流量及衡量廣告成效，本網站及合作之第三方服務平台可能會使用 Cookie、像素標籤、網站標籤或其他類似技術，以蒐集您對本網站之使用情形。 To deliver the services you request, improve the website experience, analyze website traffic, and measure advertising effectiveness, this Website and our third-party service platforms may use cookies, pixel tags, web tags, and other similar technologies to collect information about how you use this Website.

您可透過瀏覽器設定拒絕或刪除 Cookie；惟若停用 Cookie，可能導致本網站部分功能、預約流程或內容顯示無法正常運作。 You can disable or delete cookies through your browser settings. However, disabling cookies may prevent some features, booking flows, or content on this Website from functioning properly.

九、網站對外的相關連結9. External Links

本網站之網頁可能提供其他網站之網路連結（例如 LINE 客服、社群媒體、合作雪場等）。您經由本網站連結至其他網站時，該連結網站不適用本網站之隱私權保護政策，請您另行參考該連結網站之政策。 This Website may contain links to other websites (for example, LINE customer support, social media, and partner ski resorts). When you follow a link to another website, this Privacy Policy no longer applies; please refer to the privacy policy of the linked website.

十、未成年人之資料10. Minors' Data

本網站提供之滑雪課程經常包含未成年學員。若參加者為未滿 18 歲之未成年人，應由其法定代理人或經其法定代理人同意後提供預約資料。當您為未成年人填寫資料或代為預約課程時，視為您已取得必要授權，並已閱讀、瞭解及同意本政策內容。 Our ski lessons frequently include minor participants. If a participant is under 18, booking information must be provided by, or with the consent of, the minor's legal representative. By submitting information on behalf of a minor or booking a lesson on a minor's behalf, you represent that you have obtained the necessary authorization and that you have read, understood, and agreed to this Policy.

十一、課程影像及宣傳使用11. Lesson Imagery and Promotional Use

本校於課程或活動過程中，原則上可能拍攝照片、影片或其他影像，作為教學紀錄與留念。如本校擬將該等影像用於網站、社群媒體、廣告素材或其他宣傳用途，將於事前以適當方式告知；於您未表示反對之情形下，本校得於告知之範圍內使用。您可隨時表示不同意，本校即不再將您（或您所代理之未成年學員）之影像用於宣傳用途，並於合理範圍內移除。就涉及未成年學員之宣傳使用，本校將特別審慎處理。 During lessons or activities, we may in principle take photographs, videos, or other imagery as a record of the lesson and as keepsakes. Should we wish to use such imagery for our website, social media, advertising materials, or other promotional purposes, we will give prior notice by appropriate means; absent your objection, we may use it within the scope of that notice. You may object at any time, after which we will no longer use your imagery (or that of a minor in your care) for promotional purposes and will remove it where reasonable. We take particular care with respect to any promotional use of imagery involving minors.

十二、隱私權保護政策之修正12. Amendments to This Policy

依據市場環境或法規之改變，本網站可能不時修訂本隱私權政策。修正後之版本將公布於本頁面，並更新最上方之「最後更新」日期；重大變更時本網站將透過網站公告通知。 We may update this Privacy Policy from time to time in response to changes in the market or regulatory environment. The updated version will be posted on this page with the "Last updated" date at the top revised accordingly. For material changes, we will notify you through a website announcement.