隱私權政策 / Privacy Policy

歡迎使用 SnowGame 雪遊中文滑雪學校所營運之網站、課程預約、諮詢、客服及相關服務（以下合稱「本網站」）。為保障您的個人資料與隱私權，並使您瞭解本網站如何蒐集、處理、利用、保存及保護您所提供之個人資料，特訂定本隱私權政策（以下稱「本政策」）。 Welcome to the website, lesson booking, consultation, customer support, and related services operated by SnowGame SnowSport School (collectively, "this Website"). In this Policy, "SnowGame," "we," "us," or "our" refers to the operator of the Website and related services. To protect your personal data and privacy, and to help you understand how we collect, process, use, retain, and protect the personal data you provide, we have established this Privacy Policy (this "Policy").

一、政策適用範圍與法令依據1. Scope and Applicable Laws

本政策適用於您使用本網站或相關服務時，就個人資料所為之蒐集、處理、利用、保存、揭露及保護等事項，但不適用於本網站連結之第三方網站或服務，包括但不限於社群平台、通訊平台、付款服務、合作雪場及其他外部服務。您使用該等第三方網站或服務時，請另行參閱其隱私權政策；本網站不負責其個人資料處理方式或保護措施。 This Policy applies to the collection, processing, use, retention, disclosure, and protection of personal data when you use this Website or related services. It does not apply to third-party websites or services linked from this Website, including but not limited to social media platforms, messaging platforms, payment services, partner ski resorts, and other external services. When you use such third-party websites or services, please refer to their respective privacy policies; we are not responsible for their personal data handling practices or protection measures.

本政策係參考並依適用情形遵循中華民國《個人資料保護法》及日本《個人情報保護法》之相關規定，以提供您適當之個人資料保護。 This Policy is drafted with reference to, and where applicable observes, the Personal Data Protection Act of the Republic of China (Taiwan) and the Act on the Protection of Personal Information of Japan, in order to provide you with appropriate protection of your personal data.

二、個人資料蒐集、處理及利用之原則2. Principles for the Collection, Processing, and Use of Personal Data

本網站對於個人資料之蒐集、處理及利用，僅於特定目的及必要範圍內為之，並遵循誠實信用、目的明確、必要最小化及安全管理之原則。 We collect, process, and use personal data only for specific purposes and within the necessary scope, in accordance with the principles of good faith, purpose specification, data minimization, and security management.

除本政策所明示之情形、為提供您所要求之服務、依法令或主管機關要求、基於契約履行之必要，或由受本網站委託或合作之第三方服務提供者於必要範圍內協助處理外，本網站不會將您的個人資料出售、出租、交換或提供予第三方作為其自行行銷目的使用。 Except as expressly set out in this Policy, as necessary to provide the services you request, as required by law or a competent authority, as necessary for the performance of a contract, or as assisted within the necessary scope by third-party service providers we engage or partner with, we will not sell, rent, exchange, or otherwise provide your personal data to any third party for that third party's own marketing purposes.

您得自由選擇是否提供個人資料；惟若您拒絕提供、提供資料不足或資料有誤時，本網站可能無法受理您的預約、提供課程安排、進行客服聯繫、完成付款或保險程序，或提供完整服務。 You may freely choose whether to provide personal data; however, if you decline to provide it, provide insufficient data, or provide inaccurate data, we may be unable to accept your booking, arrange lessons, provide customer support, complete payment or insurance procedures, or provide our services in full.

三、蒐集之個人資料類別3. Categories of Personal Data Collected

本網站於提供服務之必要範圍內，可能蒐集下列個人資料： Within the scope necessary to provide services, we may collect the following categories of personal data:

（一）身分及聯絡資訊(1) Identity and Contact Information

包括姓名、電子郵件地址、聯絡電話、通訊軟體帳號或 ID、國籍、居住地區及其他可供識別或聯繫本人之資料。 Including name, email address, telephone number, messaging-app account or ID, nationality, area of residence, and other information that can identify or be used to contact you.

（二）課程及預約相關資訊(2) Lesson and Booking Information

包括參加者年齡、單板或雙板經驗、技術等級、課程偏好、預約日期、課程地點、同行人數、語言需求及其他與課程安排相關之資料。 Including the participants' ages, snowboarding or skiing experience, skill level, lesson preferences, booking date(s), lesson location, number of accompanying persons, language requirements, and other information related to lesson arrangements.

（三）健康相關資訊(3) Health-Related Information

為確保課程安全及進行必要之風險評估，本網站可能請您揭露可能影響課程參與或安全管理之健康狀況，例如懼高症、高血壓、心臟病、癲癇、氣喘、懷孕或其他不適合高強度、過度刺激或寒冷環境活動之情形。 To ensure lesson safety and conduct necessary risk assessment, we may ask you to disclose health conditions that could affect lesson participation or safety management, such as acrophobia, hypertension, heart disease, epilepsy, asthma, pregnancy, or other conditions unsuitable for high-intensity, highly stimulating, or cold-environment activities.

前述健康相關資訊可能涉及中華民國《個人資料保護法》所稱之特種個人資料，亦可能屬於日本《個人情報保護法》所稱之「要配慮個人情報」。本網站僅於課程安全評估、緊急應變、保險處理及其他必要目的範圍內蒐集、處理及利用，並將於取得您本人或法定代理人之書面、電子紀錄或其他可保存方式之明示同意後進行。 The foregoing health-related information may constitute special categories of personal data under the Taiwan Personal Data Protection Act, and may also constitute sensitive personal information under the Japanese Act on the Protection of Personal Information. We collect, process, and use it only within the scope necessary for lesson safety assessment, emergency response, insurance handling, and other necessary purposes, and only after obtaining the explicit consent of you or your legal representative, given in writing, by electronic record, or in another retainable form.

（四）網站使用及技術資訊(4) Website Usage and Technical Information

包括 IP 位址、瀏覽器類型、裝置資訊、作業系統、瀏覽紀錄、點擊紀錄、Cookie 識別碼、網站互動紀錄及其他因使用本網站而自動產生之技術資料。 Including IP address, browser type, device information, operating system, browsing records, click records, cookie identifiers, website interaction records, and other technical data automatically generated through your use of this Website.

（五）課程、活動影像及紀錄(5) Lesson and Activity Imagery and Records

包括於課程或活動過程中拍攝或錄製之照片、影片、聲音、課程成果或其他影像資料。如該等資料可直接或間接識別特定個人，將依個人資料相關法令及本政策處理。 Including photographs, videos, audio, lesson outcomes, or other visual materials taken or recorded during lessons or activities. Where such materials can directly or indirectly identify a specific individual, they will be handled in accordance with applicable personal data laws and this Policy.

（六）付款及交易相關資訊(6) Payment and Transaction Information

您的信用卡卡號、付款帳號或其他付款憑證，由本網站合作之第三方付款處理服務提供者直接蒐集及處理。本網站不接觸亦不儲存您的完整信用卡卡號；本網站可能留存交易狀態、付款結果、訂單編號、發票、收據或會計紀錄等與交易管理相關之必要資訊。 Your credit card number, payment account, or other payment credentials are collected and processed directly by the third-party payment processor we engage. We do not access or store your full credit card number; we may retain necessary transaction-management information such as transaction status, payment results, order numbers, invoices, receipts, or accounting records.

四、個人資料之利用4. Use of Personal Data

對於您所提供之個人資料，本網站將於下述範圍內利用： We will use the personal data you provide within the following scope:

五、資料提供、揭露與第三方服務5. Data Sharing, Disclosure, and Third-Party Services

本網站不會任意出售、出租、交換或提供您的個人資料予第三方作為其自行行銷目的使用。惟為提供服務、履行契約、完成交易、安排課程、處理保險、維護系統、改善網站體驗、進行服務分析、廣告投放及成效衡量，或配合法令、法院、主管機關、政府機關之合法要求，本網站可能於必要範圍內提供、揭露或委託第三方處理您的個人資料。 We will not sell, rent, exchange, or otherwise provide your personal data to any third party for that third party's own marketing purposes. However, to provide services, perform contracts, complete transactions, arrange lessons, handle insurance, maintain systems, improve the website experience, conduct service analytics, deliver advertising, measure advertising effectiveness, or comply with applicable law or lawful requests from courts, competent authorities, or government agencies, we may provide, disclose, or engage third parties to process your personal data to the extent necessary.

前述第三方可能包括付款處理服務提供者、預約系統服務商、網站代管或雲端服務提供者、客服與通訊平台、合作雪場、保險服務相關單位、服務分析平台、廣告投放與成效衡量平台，以及其他為提供服務或履行法定義務所必要之合作或受託單位。 Such third parties may include payment processors, booking-system providers, web-hosting or cloud-service providers, customer support and messaging platforms, partner ski resorts, insurance-related parties, analytics platforms, advertising-delivery and measurement platforms, and other partner or engaged entities necessary to provide services or fulfill legal obligations.

第三方服務提供者僅得於約定目的及必要範圍內處理個人資料，不得將資料作為其自行行銷目的使用。本網站亦將盡合理努力，要求該等服務提供者採取適當之安全管理措施，並遵守相關個人資料保護法令及契約義務。 Third-party service providers may process personal data only for the agreed purposes and within the necessary scope, and may not use the data for their own marketing purposes. We will also use reasonable efforts to require such service providers to adopt appropriate safety-management measures and to comply with applicable personal data protection laws and contractual obligations.

為提供服務、改善網站體驗、分析網站流量及衡量廣告成效，本網站及合作之第三方服務平台可能使用 Cookie、像素標籤、網站標籤、裝置識別碼或其他類似技術，以蒐集您對本網站之使用情形及互動紀錄。您可透過瀏覽器設定拒絕、封鎖或刪除 Cookie；惟若停用 Cookie，可能導致本網站部分功能、預約流程、內容顯示或服務體驗無法正常運作。 To provide services, improve the website experience, analyze website traffic, and measure advertising effectiveness, we and our partner third-party service platforms may use cookies, pixel tags, web tags, device identifiers, or other similar technologies to collect information about your use of, and interactions with, this Website. You may refuse, block, or delete cookies through your browser settings; however, disabling cookies may prevent some features, the booking process, content display, or service experiences on this Website from functioning properly.

當您於本網站提供電子郵件、聯絡電話或其他可識別個人之資訊時，本網站可能於特定目的及必要範圍內，將該等資料經雜湊、加密傳輸或其他合理安全處理方式後，提供予合作服務提供者，用以進行資料比對、統計分析、服務優化、廣告受眾管理及行銷成效衡量。前述雜湊或加密處理不當然表示該等資料已成為不可識別之匿名資料；因此，本網站仍將依個人資料相關法令及本政策予以管理。 When you provide an email address, telephone number, or other identifying information on this Website, we may, for specific purposes and to the extent necessary, hash, encrypt in transit, or otherwise apply reasonable security measures to such data before providing it to partner service providers for data matching, statistical analysis, service optimization, advertising-audience management, and marketing-effectiveness measurement. Such hashing or encryption does not necessarily render the data anonymous or non-identifiable; accordingly, we will continue to manage it in accordance with applicable personal data laws and this Policy.

六、個人資料相關權利6. Rights Regarding Personal Data

依中華民國《個人資料保護法》及日本《個人情報保護法》之規定，您得於適用法令範圍內，就本人之個人資料向本網站行使相關權利，包括： Under the Personal Data Protection Act of Taiwan and the Act on the Protection of Personal Information of Japan, you may, within the scope of applicable law, exercise the following rights with respect to your personal data:

1. 查詢、請求閱覽或開示。To inquire about, request access to, or request disclosure of your data.
2. 請求製給複製本。To request a copy.
3. 請求補充、更正、訂正或追加。To request supplementation, correction, rectification, or addition.
4. 請求停止蒐集、處理、利用或停止第三方提供。To request that we cease collecting, processing, or using your data, or cease providing it to third parties.
5. 請求刪除、消除或停止利用。To request deletion, erasure, or cessation of use.
6. 請求開示第三方提供紀錄。To request disclosure of records of third-party provision.

如您欲行使上述權利，請透過本政策所列聯絡方式與本網站聯繫，並具體說明您的請求內容。本網站為確認請求人身分，得請您提供必要之身分確認資料。於確認身分無誤後，本網站將依適用法令於合理期間內回覆並處理您的請求。 To exercise any of the above rights, please contact us using the contact methods listed in this Policy and specify the content of your request. To verify the requester's identity, we may ask you to provide necessary identity-verification information. After confirming your identity, we will respond to and process your request within a reasonable time in accordance with applicable law.

惟於依法令、契約、爭議處理、保險、會計、稅務或其他正當事由而有保存或利用必要時，本網站得於法令允許範圍內拒絕或限制部分請求，並向您說明理由。 However, where retention or use is necessary for legal, contractual, dispute-handling, insurance, accounting, tax, or other legitimate reasons, we may, within the scope permitted by law, refuse or limit part of a request and will explain our reasons to you.

七、個人資料之保護措施7. Data Protection Measures

本網站重視個人資料安全，並依中華民國《個人資料保護法》及日本《個人情報保護法》關於個人資料安全維護及安全管理措施之要求，採取合理且適當之組織性、人員性、物理性及技術性措施，以降低個人資料遭未經授權存取、洩漏、竄改、毀損、滅失或不當利用之風險。 We value the security of personal data and, in accordance with the requirements for safeguarding and managing the security of personal data under the Taiwan Personal Data Protection Act and the Japanese Act on the Protection of Personal Information, adopt reasonable and appropriate organizational, personnel, physical, and technical measures to reduce the risk of unauthorized access to, leakage, alteration, damage, loss, or improper use of personal data.

（一）組織性管理措施(1) Organizational Measures

本網站將依個人資料蒐集、處理及利用之目的，明確界定資料處理範圍與責任歸屬，並依業務需要設定不同層級之資料存取權限，落實最小權限原則。 Based on the purposes of collecting, processing, and using personal data, we clearly define the scope of data processing and the allocation of responsibility, and grant tiered data-access permissions according to business need, implementing the principle of least privilege.

本網站亦將視實際營運狀況，定期檢視個人資料保護政策、內部作業流程、委外服務管理及相關安全措施。若發生個人資料安全事件或疑似事件，將依事件性質進行通報、調查、處理及必要之改善措施。 We will also, in light of actual operating conditions, periodically review our personal data protection policies, internal procedures, management of outsourced services, and related security measures. If a personal data security incident or suspected incident occurs, we will, according to the nature of the incident, carry out reporting, investigation, handling, and any necessary remedial measures.

（二）人員管理措施(2) Personnel Measures

本網站將要求因業務需要接觸個人資料之人員負保密義務，並視情形要求相關人員遵守內部資料保護規範或簽署保密約定。 We require personnel who access personal data for business needs to be bound by confidentiality obligations and, as appropriate, require such personnel to comply with internal data-protection rules or sign confidentiality agreements.

對於處理個人資料之人員，本網站將視實際需要進行個人資料保護、資訊安全及保密義務之教育或提醒。若有違反保密義務或不當處理個人資料之情事，本網站將依法律、契約及內部規範處理。 For personnel who handle personal data, we will, as actually needed, provide education or reminders regarding personal data protection, information security, and confidentiality obligations. Any breach of confidentiality or improper handling of personal data will be addressed in accordance with applicable law, contracts, and internal rules.

（三）物理性管理措施(3) Physical Measures

本網站使用之雲端服務、網站代管服務、付款服務、預約系統及其他第三方系統，係由相關服務提供者依其安全管理機制進行實體環境、設備及系統基礎設施之保護。本網站內部亦將依業務需要限制個人資料之接觸人員及接觸範圍，避免非必要人員接觸、查看、複製或保存個人資料。 The cloud services, web-hosting services, payment services, booking system, and other third-party systems we use rely on the relevant service providers' security-management mechanisms to protect physical environments, equipment, and system infrastructure. Internally, we also restrict the personnel and scope of access to personal data according to business need, to prevent unauthorized personnel from accessing, viewing, copying, or retaining personal data.

（四）技術性管理措施(4) Technical Measures

本網站依服務性質採取 HTTPS / TLS 加密傳輸、帳號權限控管、密碼及登入安全設定、系統更新、異常流量防護、資料備份、存取紀錄管理及其他合理技術措施，以維護個人資料之安全。付款資料由合作之第三方付款處理服務提供者依其安全標準及相關規範處理，本網站不接觸亦不儲存完整信用卡卡號。 Depending on the nature of the service, we adopt HTTPS/TLS encryption in transit, account-permission control, password and login security settings, system updates, protection against abnormal traffic, data backup, access-log management, and other reasonable technical measures to safeguard personal data. Payment data is processed by the third-party payment processor we engage in accordance with its security standards and applicable regulations; we do not access or store full credit card numbers.

儘管本網站已採取合理保護措施，任何資訊系統均無法保證絕對安全。若發生個人資料遭竊取、洩漏、竄改、毀損、滅失或其他安全事件，本網站將依事件性質及適用法令要求，採取必要之應變措施，並於法令要求之範圍內通知當事人及／或主管機關，以降低可能造成之影響。 Despite the reasonable protection measures we have adopted, no information system can guarantee absolute security. If a security incident occurs involving theft, leakage, alteration, damage, loss, or other compromise of personal data, we will take response measures appropriate to the nature of the incident and the requirements of applicable law, and will notify affected individuals and/or competent authorities within the scope required by law in order to mitigate any potential impact.

八、未成年人之個人資料8. Minors' Personal Data

本網站提供之滑雪課程可能包含未成年學員。若參加者為未滿 18 歲之未成年人，應由其法定代理人或經其法定代理人同意後，始得提供預約資料及參與課程。 The skiing and snowboarding lessons provided through this Website may include minor participants. If a participant is under 18 years of age, booking information should be provided, and participation should take place, by the minor's legal representative or with the legal representative's consent.

當您為未成年人填寫資料、代為預約課程或提供健康、安全等相關資訊時，即表示您已取得必要授權，並已閱讀、瞭解及同意本政策內容。 By completing information for a minor, booking a lesson on a minor's behalf, or providing health, safety, or other related information, you represent that you have obtained the necessary authorization and that you have read, understood, and agreed to this Policy.

九、課程影像及宣傳使用9. Lesson Images, Recordings, and Promotional Use

參加本網站課程或活動者，視為同意本網站於課程或活動過程中進行照片、影片或其他影像紀錄，並同意本網站得將課程或活動中拍攝之影像，使用於本網站、社群媒體、廣告素材、課程介紹、品牌推廣及其他宣傳用途。 By participating in lessons or activities offered through this Website, you are deemed to consent to photographs, videos, or other visual recordings being taken during such lessons or activities, and to our use of images or recordings captured during lessons or activities on this Website, on social media, in advertising materials, lesson introductions, brand promotion, and other promotional purposes.

若您不同意本人或未成年參加者之影像用於上述用途，請於課程或活動開始前主動告知。我們將於合理可行範圍內避免拍攝、使用或公開可識別您或該未成年參加者之影像。 If you do not consent to the use of your own images, or those of a minor participant, for the above purposes, please notify us before the lesson or activity begins. We will, to the extent reasonably practicable, avoid taking, using, or publishing images that can identify you or that minor participant.

十、隱私權政策之修正10. Amendments to This Policy

本網站得因服務內容、營運需求、市場環境、技術發展或法令變更，不時修訂本政策。 We may amend this Policy from time to time in response to changes in our services, operational needs, market environment, technological developments, or applicable law.

修正後之政策將公布於本網站，並更新本政策上方所載之「最後更新日期」。若修正內容涉及重大變更，本網站將以網站公告方式提示相關變更。 The amended Policy will be published on this Website, and the "Last updated" date shown at the top of this Policy will be revised accordingly. Where the amendments involve material changes, we will indicate the relevant changes by means of a website announcement.

您於本政策修正後繼續使用本網站或相關服務者，視為您已閱讀並瞭解修正後之內容；惟依法令另有要求者，本網站將依適用法令辦理。 If you continue to use this Website or related services after the Policy is amended, you are deemed to have read and understood the amended content; however, where the law requires otherwise, we will act in accordance with applicable law.