Website Usage Regulations  (Please read these regulations carefully before browsing this website)

United Semiconductor (Xiamen) Co., Ltd. (hereinafter referred to as "the Company") provides this website for your browsing in accordance with these regulations.You may browse the information on this website and use the services provided by the website only if you agree to and accept the constraints of these regulations. These regulations may be updated at any time without prior notice. If you do not agree with these regulations, please do not use this website. All information, software, content, photos, charts, etc., provided on this website are for the legal use of customers, employees, and the general public. The Company does not assume responsibility for correcting errors and does not guarantee the accuracy of the website's content. The Company reserves the right to refuse your use of the website at any time. Any website or webpage that links to the Company's official website is not controlled by the Company, and the Company hereby states that it is not responsible for any linked websites and their content. We reserve the right to terminate any links or linked websites at any time.

Copyright Statement and Content Usage Declaration

The ownership and copyright of the website content belong to the Company. Your use of this website does not grant you any rights from the Company. Any use, reproduction, or display without prior written authorization may violate relevant legal provisions.

Trademark Statement

The trademarks, logos, and services displayed on this website are the property of the Company. They may not be used without prior written permission.

Privacy Policy Statement

The purpose of this privacy policy is to explain how the Company collects and processes your personal data. The Company will modify this policy as necessary to comply with personal data regulations applicable in the locations where the Company operates and to meet the needs of the Company's business execution. We recommend that you read this policy carefully and check this website regularly to stay informed of any changes to the policy terms.

1. Applicable Personal Data Subjects

This privacy policy applies to:

(1) Employees of the Company's customers, suppliers, and contractors

(2) Users of the Company's products or services

(3) Visitors browsing the Company's website or visiting the Company in person

(4) Job applicants

All personal data subjects are referred to as "you."

2. Methods of Collecting Personal Data

The Company may collect or obtain your personal data through the following channels:

(1) Data you voluntarily provide to the Company: This includes contacting the Company via email or phone, or providing your personal data when applying for a job with the Company.

(2) Data obtained by the Company through business relationships or commercial cooperation: This includes personal data obtained directly from you during business contacts or commercial activities.

(3) Data you publicly disclose: This includes personal data obtained from information you publicly share on social media related to the Company.

(4) Personal data obtained from the Company's website: This includes personal data obtained when you register or browse the Company's website and/or systems.

(5) Personal data provided by third parties: This includes personal data obtained from credit agencies, law enforcement agencies, or third-party plugins or cookies.

3. Categories of Personal Data (collectively referred to as "Your Personal Data")

(1) General Personal Data

⚫ Personal Information: Name, alias, photo, ID number, passport number, gender, date of birth, age, nationality, ethnicity, financial data.

⚫ Contact Information: Mailing address, phone number, fax number, email address, social media contact information, etc. If you interact with the Company as an employee of a certain company, this may include your name, title, photo, company phone number, and company email address.

⚫ Expertise and Social Information: Education, research areas, language skills, professional skills, employment history, current occupation, qualifications, licenses, work experience, membership in various industry associations, and other personal or institutional relationships.

⚫ Your Consent Records: Your written consent signature, time and date of consent, method of consent, etc.

⚫ Information related to the Company's website: Type of device used, operating system, browser type, browser settings, IP address, language settings, date and time of connection to the website, username, password, encrypted login information, usage data, etc.

⚫ Opinions and Feedback: Feedback you provide to the Company or opinions you publicly express about the Company on social media.

⚫ Others: For example, whether your relatives are employed by the Company or their personal data.

(2) Sensitive Personal Data (hereinafter referred to as Sensitive Data)

In principle, the Company will not collect or process your sensitive data in the course of its daily business, except in special circumstances. However, if it is necessary to process your sensitive data for legitimate reasons, the Company will do so in accordance with the law. The types of sensitive data the Company may collect or process include health check records, criminal records, etc. The Company may process your sensitive data in the following situations:

⚫ To comply with relevant legal regulations

⚫ To investigate or prevent criminal activity

⚫ To assert, exercise, or protect the legal rights of the Company or related parties

⚫ Based on your voluntary consent

When you provide sensitive data to the Company, you must confirm that you have the legal right to do so.

4. Purposes and Legal Basis for Processing Your Personal Data

The Company processes your personal data for the following purposes:

(1) To provide products and services;

(2) For business and operational purposes;

(3) For communication and marketing purposes;

(4) For system management purposes;

(5) For supplier management purposes;

(6) To obtain your feedback on the Company's products or services;

(7) To maintain security for the Company and its facilities;

(8) To fulfill legal obligations such as case investigations or compliance with laws;

(9) To assert, exercise, or defend legal rights;

(10) To improve or develop the Company's products and services;

(11) For recruitment purposes.

The Company may also use your personal data for purposes outside of those stated above in the following circumstances:

(1) As required by law;

(2) As necessary to promote public interest;

(3) To prevent danger to your life, body, freedom, or property;

(4) To prevent significant harm to the rights of others;

(5) Based on your consent;

(6) To benefit your rights.

The Company processes your personal data based on the following legal bases:

(1) Your consent.

(2) Necessary for the conclusion or performance of a contract in which you are a party, or necessary for human resource management according to labor regulations and collective agreements.

(3) Necessary for the performance of statutory duties or legal obligations.

(4) Necessary to respond to public health emergencies or to protect the life, health, and property of individuals in emergencies.

(5) Necessary for public interest activities such as news reporting and public opinion supervision, within a reasonable scope.

(6) Necessary to process personal information that you have publicly disclosed or that has been legally disclosed within a reasonable scope.

(7) Other circumstances as stipulated by laws and administrative regulations.

5. Methods of Processing Your Personal Data

(1) Internal Processing

⚫ Management and operation of the Company's website, systems, products, or services.

⚫ Problem detection, improvement planning, and development of the Company's website, systems, products, or services.

⚫ Management, operation, auditing, and monitoring of the Company's various systems.

⚫ Maintenance of physical and electronic security measures for the Company's facilities.

⚫ Compliance with the Company's legal obligations.

⚫ Conducting recruitment and interview activities.

(2) External Processing

⚫ Providing your personal data to third parties managing the Company's website, systems, and obtaining feedback on the Company's products or services.

⚫ Providing your personal data to third parties managing and updating your contact information.

⚫ Using your personal data for investigations, inquiries, and prevention of violations of company regulations and criminal activities.

⚫ Using your personal data and related documents for submission, collection, and review in formal legal proceedings, or submitting facts, evidence, and witness testimonies related to your personal information.

⚫ Sharing your personal data with third parties with your prior consent as per Article 8 of this policy.

6. Cross-Border Transfer of Personal Data

Due to the multinational nature of the Company's business and services, the Company may transfer your personal information to other companies within the Company group, which may have different legal provisions and requirements for personal data protection compared to your location.

If the Company transfers your personal data from the European Economic Area (EEA) to outside the EEA, and the country receiving your personal data has not been recognized by the EU as providing adequate protection, the Company will enter into standard contractual clauses with the recipient. You may request the Company to provide standard contract clauses for your review based on the contact information listed in Article 17 of this policy.

Please note that when you directly transfer any of your personal data to the Company's affiliates outside the EEA, the Company cannot be held responsible for that transfer.

7. Protection of Minors

The Company's services and products are intended for adults in accordance with legal regulations and do not apply to minors. If you are considered a minor under the laws of your country, you may only use the Company's services or products under the supervision of a parent or guardian. The Company does not intentionally collect personal information from children under the age of 13. If the Company discovers that it has inadvertently collected personal information from children under the age of 13, it will delete that information in accordance with legal regulations.

8. Parties with Whom Your Personal Data May Be Shared

(1) The Company may share your personal data with the following parties:

⚫ You and your designated agents.

⚫ Judicial authorities as required by law, or to report any illegal or suspected illegal activities.

⚫ Accountants, auditors, consultants, lawyers, and other professionals who provide consulting services to the Company and have signed confidentiality agreements with the Company.

⚫ Payment service providers, shipping companies, and other global service providers as per the provisions of this policy.

⚫ Relevant parties, authorities, government agencies, law enforcement agencies, or courts when necessary to assert, exercise, or defend legal rights, or to prevent, investigate, or enforce criminal penalties.

⚫ If the Company sells or transfers all or part of its business or assets, or undergoes reorganization, dissolution, or liquidation, it may provide your personal information to the buyer or assignee of that transaction.

(2) If the Company entrusts an information service agency to process your personal data, the Company will enter into a contract with the agency to meet the following requirements:

⚫ The information service agency shall process your personal data only within the scope of the purpose.

⚫ The information service agency shall comply with legal requirements and establish security mechanisms to protect personal data.

9. Personalized Data Analysis and Automated Decision-Making

To prevent data leakage and protect the Company's intellectual property, the Company may analyze your personal data and use it for automated decision-making, such as assessing potential risks to IT systems. Therefore, it is advisable to avoid disclosing your sensitive or confidential data.

10. Security of Personal Data

The Company has taken appropriate technical and organizational security measures (such as setting access permissions) in accordance with relevant laws to prevent your personal data from being accidentally or intentionally destroyed, lost, altered, disclosed without authorization, accessed without authorization, or otherwise processed illegally or without authorization.

Due to the open nature of the internet, transmitting information over the network is not completely secure. Although we have taken all reasonable measures to protect your personal data, we cannot guarantee the complete security of the information transmitted over the network. You assume the risks associated with this transmission process, and please ensure that there are no security issues in the process of transmitting information to us.

11. Accuracy of Personal Data

The Company is committed to taking reasonable measures to ensure that the personal data it processes is accurate. If there are any inaccuracies in your personal data, the Company will correct or delete it in a timely manner. To ensure the accuracy of your data, the Company will confirm with you when necessary.

12. Principle of Minimization in Collecting and Processing Personal Data

The Company is committed to taking reasonable measures to ensure that it collects and processes your personal data only to the minimum extent necessary and that this extent is reasonably related to the purposes stated in this policy.

13. Retention Period of Personal Data

The Company is committed to taking reasonable measures to ensure that it processes your personal data only for the necessary period to achieve the purposes. The Company will retain your personal data based on the following principles:

(1) Duration of the business relationship: For example, from the time you begin business contact with the Company until you notify the Company to cease business contact.

(2) Within the statutory limitation period specified by relevant laws: For example, when a third party exercises legal rights related to your personal data against the Company, the Company may continue to process your personal data for the necessary period to satisfy that request. The Company's processing of your personal data is limited to ensuring the security of that data.

(3) After the agreed retention period between the Company and you expires, the Company will permanently delete or destroy your personal data or anonymize it, such as retaining personal data for five years after the end of business dealings with customers.

(4) For the necessary period to achieve the legitimate purposes stated in this policy.

14. Rights of Personal Data Subjects

According to applicable personal data protection regulations, you have the right to assert the following rights against the Company:

(1) Access your personal information.

(2) Request a copy of your personal data.

(3) Supplement or correct your personal data.

(4) Refuse to provide your personal data. However, please note that if you refuse to provide your personal data, the Company may not be able to fully provide you with its products or services.

(5) Request the cessation of collecting your personal data.

(6) Restrict the processing of your personal data.

(7) Delete your personal data.

(8) Transfer your personal data to other data controllers, where technically feasible.

(9) Withdraw your consent for the Company to process your personal data. Please note that withdrawing your consent will not affect the legality of the Company's processing of your personal data based on your prior consent; if the processing has other legal bases, the Company may continue to process your personal data.

(10) Subject to legal prerequisites, you have the right to object to the processing of your personal data by the Company or third parties acting on behalf of the Company.

If you wish to exercise the above rights or have any questions regarding this privacy policy, please contact the Company using the contact information provided in Article 17 of this policy. Please note that you will need to provide identification to exercise the above rights.

You may file a complaint with the data protection authority regarding the Company's processing of your personal data.

15. Cookies and Other Similar Technologies

When you visit the Company's website or log into the Company's systems, the Company may set cookies on your device or read existing cookies on your device, in accordance with legal regulations or with your consent. The Company may use cookies to record specific information on the browser or to record your preferences and browsing habits. The Company will process your personal data using cookies and other similar technologies in accordance with the Cookie Policy.

16. Direct Marketing

The Company may use your email and other personal data to provide you with information that may interest you, including but not limited to corporate sustainability and corporate social responsibility. When the Company provides you with this information, it may use the contact information you provided to reach out to you.

17. Contact Information

If you have any questions regarding this privacy policy, please contact the Company at the following:

United Semiconductor (Xiamen) Co., Ltd.

Company Address: 899 Wanjia Spring Road, Xiang'an District, Xiamen, Fujian Province

Phone: +86-592-7687888

United Microelectronics Corporation

Company address: No. 3, Li-Hsin Rd. 2, Hsin-Chu Science Park, Hsin-Chu City, Taiwan.

Telephone: 886-3-5782258

Email:z_website_privacyadmin@umc.com

Data Privacy Request Form