Welcome to the portal website of the Higher Education Evaluation and Accreditation Council of Taiwan (hereinafter referred to as "HEEACT"). To ensure you can use the various services and information on this website with peace of mind, we hereby explain this website's privacy and information security policy to safeguard your rights. Please read the following content carefully:

1. Collection, Processing, and Use of Personal Data

1. This website does not arbitrarily collect users' personal data. When you simply browse or download webpages from this website, no data that can identify your personal identity will be collected.

2. When you use the "Opinion Box" function on this website, HEEACT will request you to provide necessary personal data, including your real name and email address, depending on the service requirements.

3. Regarding the personal data you provide, HEEACT strictly complies with the provisions of the "Personal Data Protection Act" of the Republic of China (Taiwan) and related regulations. HEEACT collects your personal data solely for the purpose of handling your feedback, contacting you for replies, and conducting relevant internal business management. Your data will be utilized during HEEACT's business execution period within the territory of the Republic of China (Taiwan) to contact you via email or telephone. Unless your consent is obtained or otherwise required by law, HEEACT will never provide your personal data to any third party or use it for other purposes.

2. Use of Server Logs and Cookies

1. When you browse or download content from this website, the web server (IIS) will automatically generate standard W3C web server log records by default. The scope of these records includes: the date and time of the request, client IP address, browser used (User-Agent), referring URL (Referer), requested webpage paths and query parameters, as well as server processing status and execution time (time-taken).

2. The aforementioned records are used solely by HEEACT for website security management, cybersecurity incident forensics, anomaly troubleshooting, and collective data statistical analysis of website traffic and network behavior. All data are aggregated for collective analysis, do not involve the identification of individual users, and will not be linked to your personal data.

3. To provide you with the best service, this website may place and access our Cookies on your computer. If you prefer not to accept the writing of Cookies, you can set your browser to reject them; however, this may result in certain functions of the website failing to operate normally. This website does not embed any third-party tracking or analysis tools (such as Google Analytics, etc.).

3. Information Security and Data Protection

1. HEEACT has established a comprehensive information security management system and has obtained ISO/IEC 27001 Information Security Management Systems international certification. Regular external audits are conducted by professional institutions to ensure website maintenance security and overall information security.

2. The hosts of this website are equipped with information security devices such as firewalls, anti-virus systems, and intrusion detection systems, alongside necessary security protection measures. Regular vulnerability patching and system updates are performed by professional maintenance vendors to protect the website and your personal data from unauthorized access, alteration, or leakage.

4. Exercise of Data Subject Rights

Pursuant to Article 3 of the Personal Data Protection Act, you possess the rights to inquire or request a review of, request a copy of, request to supplement or correct, request to cease the collection/processing/utilization of, or request to delete the personal data collected by HEEACT. If you wish to exercise the aforementioned rights, please contact us through HEEACT’s official service email (service@heeact.edu.tw) . HEEACT will process your request as legally and promptly as possible.

5. Amendments to the Policy
This declaration takes effect immediately. This policy may be amended irregularly in response to changes in regulations, technological developments, or organizational needs. The amended clauses will be posted immediately on this website without further individual notification.