Personal Data Protection Act
Privacy Policy
This policy explains how the Tai Yu-wen Campaign Office collects, processes and uses the personal data you provide on this website, and what rights you can exercise.
This policy is written to cover the information required by Article 8 of the Personal Data Protection Act. Where it conflicts with the law, the law prevails.
This is a campaign website. All policy content describes the candidate’s proposals and plans; it is not a current service or live information of the Hualien City Office. Any proposal involving funding, statutory authority or inter-agency cooperation must proceed through budget procedures and applicable regulations.
Clauses 1–4
Collector, purposes, categories and use
1. Collector
The Tai Yu-wen Campaign Office (the “Office”).
This is a campaign website, not an official website of the Hualien City Office. This policy applies only to this website and not to any government agency website.
2. Purposes of collection
Personal data is collected and used on this website only for the following specific purposes:
- Handling, replying to and analysing municipal suggestions
- Volunteer recruitment, contact and task assignment
- Subscription to and delivery of campaign information
3. Categories of personal data collected
This website currently has three forms. The table lists the fields each form actually collects; they match the fields stored on the server exactly, with no hidden fields.
| Form | Required fields | Optional fields | Automatically recorded |
|---|---|---|---|
| Municipal suggestion | Topic, content of the suggestion | Name, email address | Submission time, browser User-Agent, hashed IP address, consent record |
| Volunteer sign-up | Name, phone number | Email address, preferred service area, skills or how you can help | Submission time, browser User-Agent, hashed IP address, consent record |
| Campaign newsletter subscription | Email address | None | Submission time, browser User-Agent, hashed IP address, consent record |
4. Period, territory, recipients and method of use
- Period: from the moment you submit your data until the purpose disappears or this campaign ends.
- Territory: within the Republic of China (Taiwan).
- Recipients: the Tai Yu-wen Campaign Office, and service providers engaged by the Office to process data (see clause 8).
- Method: automated or non-automated processing within the purposes above — contacting, replying, compiling statistics and sending information. Your personal data is never sold, rented or traded.
Clauses 5–7
Your rights, the effect of not providing data, and retention
5. Your rights and how to exercise them
Under Article 3 of the Personal Data Protection Act you may exercise the following rights over personal data held by the Office:
- To inquire about or review the data
- To request a copy of the data
- To request supplementation or correction
- To request that collection, processing or use be stopped
- To request deletion
Please contact the Office by phone or in writing using the details in clause 11. Once the Office has verified your identity it will decide within 15 days under Article 13 of the same Act; where necessary this may be extended by no more than a further 15 days.
6. Effect of not providing personal data
You decide whether to provide personal data, but some fields are necessary for processing:
- Municipal suggestion: without the topic and the content, or without consent, the Office cannot accept the suggestion.
- Volunteer sign-up: without a name and phone number the Office cannot contact or schedule you.
- Newsletter subscription: without an email address the Office cannot send campaign information.
- Optional fields (name, email, service area, skills) can be left blank without affecting your submission or any other right.
7. Retention period and deletion
- Retention: until the purpose disappears or this campaign ends, after which the data is deleted or de-identified.
- Earlier deletion: you may request deletion at any time under clause 5. Contact the Office by phone or in writing with your email address (or your name and contact details); the Office will delete that record within 15 days and reply with the outcome.
- Deletion: the record is removed from the database, including the consent record, the hashed IP address and the browser User-Agent; backup copies are deleted when that backup cycle is overwritten.
Clauses 8–11
Storage, cookies, changes and contact
8. Where data is stored, and who processes it
Form data on this website is stored on Cloudflare services: the site and the forms API run on Cloudflare Workers, and form submissions are stored in a Cloudflare D1 database. Cloudflare acts as a data processor for this website, handling data only on the Office’s instructions and under this policy, and never for its own purposes.
Technical safeguards: the database enforces a NOT NULL constraint on the consent column, so a submission without consent cannot be written at all. Each of the three forms allows at most five submissions per IP address per hour, which blocks repeated automated posting.
De-identification: the hashed IP address is the first 32 hexadecimal characters of a salted hash and cannot be turned back into the original IP; the browser User-Agent is truncated to 200 characters. Both are used solely for rate limiting and abuse investigation, never to identify you.
Newsletter subscriptions compare email addresses case-insensitively; a duplicate subscription succeeds without creating a second record, and this website never reveals whether an email address is already on the list.
To prevent automated abuse the Office plans to enable Cloudflare Turnstile human verification; it is not enabled at present. Once enabled, the check will send your IP address to Cloudflare’s siteverify service for comparison; the Office will update this page and give notice when that happens.
Apart from the above, legal requirements or your consent, the Office does not provide your personal data to third parties.
9. Cookies and analytics
This website currently uses no cookies and no web-analytics or advertising trackers.
Your text-size preference is stored only in your own browser (localStorage). It is never sent to a server and is not used to identify you.
Forms do not use cookies to identify you; the server uses only a hashed IP address for rate limiting and abuse protection, and does not build a personal profile.
The video section on the home page embeds the campaign office’s YouTube videos in privacy-enhanced mode (youtube-nocookie.com). If you play a video, YouTube (Google) may process your connection information under its own policies; this website cannot access that data, and you may choose not to play it.
10. Changes to this policy
If this policy changes, this page will be updated and the revision date shown. If a change widens the purposes or categories of data collected, the Office will give clear notice.
11. Contact
- Phone
- 03 832 0373
- Postal address
- No. 188, Fujian St., Zhuhe Village, Hualien City, Hualien County 970, Taiwan (R.O.C.)
Effective from：2026 (ROC year 115); this policy takes effect on the day this website launches.