Privacy Protection and Information Security Policy for the Chang Gung Medical Foundation Website

Welcome to the Chang Gung Medical Foundation Website. To ensure that you can safely use the services and information provided by our website, it is necessary to introduce our Privacy Protection and Information Security Policy (hereafter referred to as "this policy") according to the regulations and legislative tenets of the Personal Information Protection Act. Please read the following articles carefully in order to protect your rights.

Scope

1. This policy applies to the website of the Chang Gung Medical Foundation (hereafter referred to as "the official website"). "Healthcare System" refers to the general hospital and other branches of Chang Gung Medical Foundation (hereafter referred to as "the CGMF healthcare system").

2. This policy applies to the collection, use, and protection of personal information while you are using the official website.

Limits to Scope

This policy does not apply to other websites which are linked to the system website, or to staff unauthorized to use the system website or not involved in its management.

Collection and Use of Information

1. The system website will not collect any information about your identity if you are simply browsing or downloading files.

2. During general browsing activities, our server will automatically record the IP address of your connecting device, access times, the browser used, and the data you access and click on. These records are for internal use only, to improve the services of our website, and will not be released to the public.

3. In order to provide the best interactive care services, some services on the system website will require you to provide personal information, including network registrations, the online referral registration system, medication enquiries, neonatal screening result enquiries, service mailboxes, satisfaction surveys, newsletter subscriptions, online audio, online video, and Facebook.

4. The system website will not release your personal information to any third party or use it for purposes other than collection without your permission, except to comply with associated laws and regulations or legal orders from related authorities.

Personal Responsibilities and Self-Protection Measures

1. When you select and click on websites other than the system website, you must comply with the privacy protection and information security policies of the chosen website, and respect and protect the third party's legal rights according to the associated laws and regulations of the Republic of China.

2. If you connect to other websites through using our website, and you violate or are suspected to have violated other people's rights, the NTUH Healthcare System and the system website will not be responsible for any legal liabilities: the NTUH Healthcare System and the system website have reminded or notified you that we do not agree with nor wish to aid any violation of a third party's rights.

3. Other websites that are linked to the system website but do not belong to it have neither direct or indirect legal affiliation or a supervisory relationship, nor an alliance or mutual guarantee in place with the NTUH Healthcare System. Therefore, the NTUH Healthcare System is not responsible for the content of linked websites, nor has any legal or factual liabilities or obligations thereof. We remind you to take note of and remember this fact.

4. If you are sharing a computer or using a public computer, you should remember to log out and close all windows after finishing with personalized services, online services, and other programs to prevent other people from using your information.

5. All internet users should comply with national and international laws and regulations, and are responsible for what happens to their personal account and password.

Use of Cookies

1. Cookies are small pieces of information transferred from a site to the browser, and are saved in the user's hard drive. To provide individualized service, the system website will sometimes read and write cookies on your computer when you use our services.

2. You can decide whether or not to allow the use of cookies by changing the settings of your computer or connecting device. If you refuse all cookies, you may encounter some inconvenience or the failure of some functions while using our services.

3. You can change your permission settings for cookies in your browser (including accepting all cookies, being asked each time cookies are requested, refusing all cookies, and so on) by modifying the Security tab under "Tools – Internet Options" in Internet Explorer, the Privacy tab under "Tools – Options" in Mozilla Firefox, or the Privacy heading under "Tools – Options" in Google Chrome.

Information Security and Data Protection

1. To ensure the security and the continuous operation of the system website, the computer servers hosting it have been equipped with information security and safety protection systems such as intrusion detection and prevention, firewall, and anti-virus systems to strictly protect the system website and your personal information.

2. Internet safety protection measures.

A. The firewall has been installed to limit connections to certain communication ports, preventing illegal intrusions and any subsequent illegal use of our website, and thus protecting the rights of users.

B. Vulnerability management software has been installed to regularly scan the network system for vulnerabilities and fix any problems.

Any attempts to violate the confidentiality, integrity, and usability of the system website without authorization are prohibited and may break the law.

Only authorized staff can access your personal information and patient records. They all have signed a confidentiality agreement, and will be handled according to the law if they violate it.

The system website has ensured that data will not be illegally accessed or intruded upon by any third party during data transmission concerning interactive care services or personal information.

Information Security and Data Protection

This policy will be amended upon request and posted on the website.

Enquiries about Privacy Protection and Information Security Policy

If you have any questions or suggestions about this policy, please do not hesitate to contact us.