Register Information - e-Commerce Service

Evergreen Line and its related partnerships, affiliates and global agencies (hereinafter all together referred to as "Evergreen Line", "we", or "us") respect your privacy and are committed to protecting your personal data.

The "personal data" referred in this Policy has the same meaning as in the EU General Data Protection Regulation 2016/679/EU (GDPR). Essentially, it means information which is connected to a natural person, who can be identified from that information, either by itself or when combined with other data likely to come into our possession. It does not include data where the identification has been removed (anonymous data).

This Policy explains how we collect, process, store, transfer and use (together "processing") the personal data of our clients, suppliers, client’s and supplier’s representative, shareholders, users of our websites, apps and other services (together "you".)

The Privacy terms may be revised from time to time. Please regularly check back changes and updates.

We collect your personal data from the following sources:

• Directly from you: When you are part of any relationship with us(e.g., you interact with us via various communication channels like email or telephone, you provide us with your business card, you attend commercial events organized by us) or when you fill in forms or surveys provided either directly by us or at our websites, apps or other customer service portals.
• Public sources: like regulatory authority, national registration office, enforcement authorities, press, your company’s official website, third parties that collect this information for us.
• Automatically collected: when you download or use any of our systems; when you register, visit or use any features or resources available on or through any of our websites, apps, or services.
• A third person: personal data on shipper, consignee, employees of consignee or other third parties involved in a shipment are often provided by the shipper or contract party to Evergreen Line. It is the responsibility of the shipper/contract party to ensure that the provision of such personal data is compliant with applicable data protection laws.

• Identity and contact details: e.g. name, gender, birthday, age, nationality, salutation, passport number, national identity number, postal address, email address, phone number and any other contact information.
• Business contact and commercial data: e.g. organization/company name, address, business contact information, job title, customer service history, customer survey, customer visit report, professional and personal interests, interactions and engagement with us, attendance at events.
• Marketing data: e.g. preferences of communication channels (email, sms), type and frequency of communication.
• Payment and accounting data: e.g. bank information, payment preferences, invoices.
• Shipping data: such as (i) shipping-related contact details like the shipper’s and consignee’s physical address, email address and telephone number, (ii) signature for proof of delivery (iii) names, email address and telephone numbers of others to whom we are asked to send information of shipments, and (iv) information given to us that helps us access locations to which we provide service, and information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content.
• Public data: e.g. press release, certificate of incorporation, court judgement, Specially Designated National (SDN) list.
• Automatically collected data: e.g. IP addresses, information about your browser, operating system and other personal data that are relevant and necessary for the use of the service and other technical communications information; username; password; security login details; usage data; aggregate statistical information.
• Content you provide: any views, opinions, article and comments that you choose to send to us or if you contact with us, the record of the correspondence.

Generally, we do not seek to collect sensitive or special categories of personal data about you. We may do so only in certain circumstances where we have the legal right to do so, or where you have expressly consented.

If you provide us with any personal data of another person, you are responsible for ensuring that such person is made aware of the information contained in this Privacy Policy and that the person has given you his/her consent for sharing the information with us.

We also collect, use and share Aggregated Data, such as statistical or demographic data, in some cases. Aggregated Data may be derived from your personal data, but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect the Aggregated Data with your personal data, so it can be used, directly or indirectly, to identify you, we shall then treat the combined data as personal data, and will use it in accordance with this Privacy Policy.

We process your personal data based on one or more of the following legal basis:

• Where such data is necessary for the performance of a contract to which you and/or the company you represent are a party to;
• Where you have consented us to process your personal data beforehand;
• Where it is necessary for the purpose of legitimate interests pursued by us, by yourself or by a third party while your fundamental rights do not override those interests;
• Where we are required to comply with a legal or regulatory obligation to which we are subject;
• Where necessary in order to protect vital interests of any person.

If we process your personal data solely based on your informed consent, for example sending you direct marketing information, we will only use the data for the purposes stated in the consent procedure and within the scope outlined. Please refer to Section 13. Direct Marketing for more information.

We might collect and process your personal data for the below listed purposes in order to initiate, implement or terminate a pre-contractual or contractual relationship:

• Provision of shipping and value-added services:
  • To execute the shipping instructions for the transportation of goods from one place to another;
  • To provide you with the requested value-added services;
  • To facilitate the exchange of shipping information;
  • To provide customer with the on-time shipping information, e.g. vessel schedule and container status.
• Commercial relationship management:
  • To maintain a routine administration and communication flow with our customer, vendor and their representatives (the business contacts);
  • To improve service operations, solve customer problems and drive sales growth;
  • To conduct customer survey in order to evaluate customer experience, assess satisfaction, and understand customer’s requirement and expectation.
• Communications and marketing:
  • To recommend new services, corporate news and events which you may be interested (in accordance with privacy preferences you have expressed);
  • To inform you on services, offers, operational matters and rates offers/changes that may be of interest to you;
  • To provide you with on-line services through our websites, e-commerce portals, apps and other tools;
  • To improve the content, functionality and usability of our websites and to personalize your usage experience with our websites;
  • To estimate the audience size and analyze the usage of our websites, apps and e-commerce portals.
• Cybersecurity management:
  • To ensure the security, the availability of the business services and the secure functioning of applications and networks.
• Financial management:
  • For sales and finance arrangement;
  • Corporate audit;
  • Process vendor management.
• Administration & governance:
  • To apply analytics to business operations and data to describe, predict and improve business performance;
  • To detect, investigate, report and prevent suspected violation of laws/ regulations, our Code of Conduct or company policies.
• Litigation management:
  • To establish, to exercise, or to respond to an administrative legal or judicial claim/proceeding;
  • To enforce a judgement.
• Compliance checks:
  • To conduct compliance check and background check (e.g. anti-corruption, due diligence, or conflict of interest);
  • To confirm and verify your identity;
  • To the use of credit reference agencies;
  • To screen against international economic sanctions lists;
  • To fight against fraud and illicit traffic.
• Other purposes:
  • To use for the purposes and scope specifically outlined on individual consent notice.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

• As Evergreen Line’s main business is container shipping and logistic services, we may share personal data with the following parties in order to execute contract party’s instruction of cargo transportation:
  • Our departments, global subsidiaries and agents involved in the transportation of goods.
  • Third-party and service providers such as trucking companies, terminals, depots and feeder companies, which perform tasks on our behalf and under our instruction, to provide you with the transportation services and to perform the contract of carriage.
  • The authorities of the country of transit or destination for customs and tax clearance or for security screening with certain shipment data, as required by the laws of the respective country.
• To manage litigation and claims, we may share the data with government bodies, regulators, courts, local authorities and our professional advisors and third parties who collaborate with us to manage the claim.
• To investigate, to detect, to prosecute criminal offences, or to execute criminal penalties, we may share data with government bodies and local authorities where required.

We require all third parties to respect the security of your personal data and to treat it in accordance with the laws. Where we disclose your personal data to third party data processors, we will only permit them to process your personal data for specified purposes in accordance with our instructions.

Given the global nature of our business, we may transfer your personal data internationally, including to countries that may have different laws and data protection standards as the country you are presiding in, or as the countries in which you originally provided the data.

Any transfer of your personal data from within the EEA to recipients located outside the EEA will be based on an adequacy decision or are governed by Standard Contractual Clauses. Any other, non-EEA originating, international transfers of your personal data, will take place in accordance with the appropriate international data transfer mechanisms and safeguards.

Your personal data will only be retained for the minimum period necessary for the purposes set out in this Policy. The criteria for determining the duration for which we will keep your personal data are as follows:

• We retain your data as long as we have an ongoing relationship with you;
• We retain your data while your account is active, so we’re able to provide services to you;
• We retain your data for the duration of any period required by law to establish, exercise or defend our legal rights.

We have implemented appropriate and reasonable administrative, physical and technological security measures to prevent your personal data from being accidentally lost, altered, disclosed, used or accessed in an unauthorized way. In addition, we limit the access to your personal data only to those employees, agents, contractors and third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

In order to protect your privacy as well as our proprietary databases and systems, we recommend you not to share any of your personally identifiable information, such as password or personal identification number, with any third parties that would allow them to access your account information on our website, apps or e-commerce portals. Evergreen Line will never ask you to disclose your password, and will not be held responsible for events arising from third parties gaining unauthorized access to your personal information. If the security of your password has been compromised for any reasons, please change your password immediately and notify us for assistance.

Subject to applicable law, you may have the following rights regarding our collection and processing of your personal data:

• The right not to provide your personal data to us. However, we may be unable to provide you with the full benefits of our websites, apps or services if you do not provide us with your personal data;
• The right to request access to, or copies of, your personal data, together with information regarding the nature, processing and disclosure of those personal data;
• The right to request rectification, correction or updating of any inaccuracies in your personal data;
• The right to have certain personal data transferred to another controller, in a structured, commonly used and machine-readable format, to the extent applicable;
• The right to request erasure of your personal data. Upon receipt of your request, we will close your account and remove your personal data from our records unless a lawful reason exists for us to retain some or all of it;
• The right to object processing of your personal data;
• Where we process your personal data on the basis of your consent, you have the right to withdraw that consent (noting that such withdrawal does not affect the lawfulness of any processing performed prior to the date on which we receive notice of such withdrawal, and does not prevent the processing of your personal data in reliance upon any other available legal basis);
• The right to lodge complaints with a Data Protection Authority regarding the processing of your personal data by us or on our behalf.

Please note that nothing in this Policy affects any of your other statutory rights and that certain personal data may be exempt from the above-mentioned rights pursuant to applicable data privacy or other laws and regulations.

If you wish to exercise one or more of the rights described in this Policy, or to ask a question about these rights, or any other provision of this Policy, or about our processing of your personal data, please contact our Data Protection Team. Please note that we may require specific information from you to help us confirm your identity and your right as the data subject. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request in order to speed up our response.

Our websites do not knowingly collect personal data about any person under the age of 18 years. If we become aware that the data transferred to or collected by us relating to children under the age of 18 years without the consent and supervision of a parent or guardian, we will take appropriate action without undue delay.

When you use our websites or apps, we may place Cookies onto your device, or read Cookies already on your device, subject to your consent, where required, in accordance with applicable law. We use Cookies to record information about your device, your browser and, sometimes, your preferences and browsing habits. We may process your personal data through Cookies in accordance with our Cookie Policy.

We may process your personal data to contact you via email, telephone, direct mail or other communication formats to provide you with information regarding services that may be of interest to you.

You may unsubscribe from our promotional email list/newsletters at any time by clicking the "contact us" button on our websites. After you unsubscribe, we will stop sending you further promotional emails, but may continue to contact you to the extent necessary for the purposes of services you have requested.

Our websites or apps may provide links to third-party websites, plug-ins and applications for your convenience and information. Clicking on those links or enabling those connections may allow third parties to collect or share your data for their own purposes. We do not control these third-party websites, and are not responsible for their privacy statements. Please check the Privacy Policy and terms of use of those third-party websites before using and providing any of your information.

We contract with one or more third parties to host and maintain our websites, webpages and E-Commerce portals. Therefore, any information you submit, includes your personal data, may be placed and stored on a computer server maintained by such third party. Your provision of information, content or data on our websites will constitute your acknowledgment and agreement to have such information, content or data be passed through, and be stored in our contractual third parties’ servers, which are outside our control, and may be accessed by the administrator and others of such sites, who are only authorized to gain access to Evergreen Line’s server or stored files in accordance with the contract terms between Evergreen Line and such third parties.

We have set up a Data Protection Team who are responsible for overseeing questions in relation to this Privacy Policy. If you have any comments, questions or concerns about the information in this Policy, including any requests to exercise your legal rights, please contact the data protection team using the details set out below:

Data Protection Team of Evergreen Line

No. 163, Sec.1, Hsin-Nan Road, Luchu Dist.,

Tauyuan City, 33858

Taiwan

Email: Dataprivacy@tw.evergreen-line.com