Effective date: 21 October 2026
YenProtek AIoT Co., Ltd. (brand name: YenProtek; hereinafter the "Company" or "we") values your privacy. This policy explains what personal data we collect, how we use it, where it is stored, how long it is kept, and what rights you have when you browse the Company's official website www.yenprotek.com (including its country/region versions, hereinafter the "Website"), use the "Contact Us" form on the Website, or contact us through our LINE Official Account or Facebook Messenger.
This policy does not apply to the Company's apps and cloud services (see the App Privacy Policy), nor to other websites linked from the Website (such as LINE, Facebook, YouTube and LinkedIn).
1. Company Information (Personal Data Controller)
| Company Name | YenProtek AIoT Co., Ltd. (YenProtek) |
|---|---|
| Address | Room 1102, 11F, International Building, No. 43, Sec. 4, Keelung Rd., Da'an Dist., Taipei City 106335, Taiwan |
| Phone | +886-2-7752-3952 |
| Contact email for personal data matters | sales@yenprotek.com |
2. Data We Collect
The Website can be browsed without registration or login, does not sell products, and does not collect payment data. We obtain your data only in the following situations:
2.1 Data you enter in the "Contact Us" form
| Field | Required? |
|---|---|
| Name | Required |
| Required | |
| Inquiry | Required |
| Company Name | Optional |
| Phone Number | Optional |
| Subject | Optional |
| Country/Region | Optional (pre-filled with the country/region version you are browsing; you may change it) |
| Inquiry type (product quotation, project development, distribution partnership, technical support, demo account request, other) | Optional |
Please do not enter sensitive data such as ID numbers, health conditions or financial account numbers in the inquiry; the Website does not need such data.
2.2 Data recorded automatically by the system when the form is submitted
- Submission time (Taiwan time).
- IP address: used to trace abuse and spam and to limit large numbers of submissions within a short time.
- The country/region version you were browsing (for example, the Thailand version or the US version): so that our sales team can reply in a suitable language and time zone.
- Source page: the path of the page you viewed on the Website before arriving at the contact page (only pages of the Website are recorded; nothing is recorded if you came from another website or opened the contact page directly).
- Anti-bot check results: the time between opening and submitting the form (temporarily stored in the form in encrypted form) and whether a field that visitors cannot see was filled in. Based on these results, the system may judge a submission to be from a bot and not save it, or flag it in the internal notes for manual confirmation.
- Internal processing records: whether the notification email was sent successfully, whether the inquiry has been handled, the staff member who handled it, the handling time and internal notes.
2.3 Messages you send through our LINE Official Account or Facebook Messenger
When you add the Company's LINE Official Account, or send a message to the Company's Facebook page through Facebook Messenger, LINE or Meta forwards the message to the Website's system. The system stores the user ID and display name provided by the platform, the language you use, and the message content and time, in order to send automatic replies, to let our colleagues take over the reply, and to create a customer inquiry when you ask for a human reply (the content is the same as the inquiry record in 2.1, but without Email and phone number). Automatic replies are generated by a program running on the Company's own server. For how the LINE and Meta platforms themselves handle your data, please see each platform's privacy policy.
2.4 Data generated automatically when you browse the Website
- Server logs: the Website application records the URL path, response status and processing time of each request for operation and debugging; when an inquiry is received, it records the inquiry number, name and Email; when a submission is suspected to be from a bot, it records the IP address. The web server (IIS) itself also records IP addresses, browser types and access times.
- Cookies: see Section 3.
- Google Analytics 4 statistics: see Sections 3 and 5.
2.5 What we do not do
- We do not use your IP address to determine your location or to change the content of the pages. On your first visit, the Website takes you to the most suitable language version according to your browser's language settings, and you can switch at any time.
- We do not sell or rent your personal data.
- We do not use the Email addresses of people who send inquiries to send newsletters or marketing emails.
3. Cookies and Similar Technologies
A cookie is a small text file that a website stores in your browser. The cookies used on the Website are as follows:
| Name | Set by | Purpose | Retention period | Category |
|---|---|---|---|---|
site_lang | This Website | Remembers the language/country version you selected | 1 year | Functional (essential) |
site_lang_suggest | This Website | After you close the "Switch language" prompt, it is not shown again for the current visit | Expires when the browser is closed | Functional (essential) |
.AspNetCore.Antiforgery.* | This Website | Prevents cross-site request forgery (protects form submission) | Expires when the browser is closed | Security (essential) |
.AspNetCore.Mvc.CookieTempDataProvider | This Website | Shows the "Submitted" message after the form is submitted | Expires when the browser is closed (deleted once read) | Functional (essential) |
_ga、_ga_XK1W2VLX5C | Google Analytics 4 | Distinguishes visitors and browsing sessions to produce traffic statistics | Up to 2 years | Analytics |
.AspNetCore.Identity.Application、admin_lang | This Website | Company back-office staff only: login status (14 days, extended with continued use) and back-office interface language (1 year) | As stated at left | Not issued to ordinary visitors |
Google Analytics 4: the Website loads Google Analytics 4 (measurement ID G-XK1W2VLX5C) only on the production URL, to understand page views, visitor sources, devices used and approximate regions, in order to improve the Website's content. We have not linked GA4 with inquiry form data, and we do not send Google any data that directly identifies you, such as your name or Email. For how Google handles this data, see the Google Privacy Policy. You can install Google's "Google Analytics Opt-out Browser Add-on", or block or delete cookies in your browser; blocking analytics cookies does not affect your browsing of the Website or your ability to submit an inquiry.
The Website currently has no cookie consent mechanism; Google Analytics 4 is loaded as soon as you enter the Website.
External services that do not set cookies but receive your IP address: to display fonts, layouts and media, your browser connects directly to the following services when a page is opened, so these services receive your IP address and browser information:
- Google Fonts (web fonts)
- jsDelivr CDN (Bootstrap, the page layout component)
- YouTube video thumbnails (only on event pages that include a video)
- Loaded only when you click: the Google Map on the contact page and the YouTube videos on event pages (using YouTube's privacy-enhanced mode, youtube-nocookie.com)
4. Purposes of Use
| Purpose | Data used |
|---|---|
| Replying to your inquiry, providing quotations, planning projects or cooperation, and providing technical support | Form data, instant messages, country/region version, source page |
| Internal tracking of the progress of inquiry handling | Form data, instant messages, internal processing records |
| Preventing abuse, spam and attacks, and maintaining Website security | IP address, anti-bot check results, server logs |
| Compiling Website usage statistics and improving content | GA4 statistics, source page (used in aggregate) |
| Disclosure required by law or by a competent authority | Within the scope of the request |
Categories of personal data: personal identifiers (name, Email, phone number, instant messaging user ID), employment information (company name), online identifiers (IP address, cookies), and any other data you provide yourself in your inquiry.
We will not use the above data for purposes not described in this policy. If we wish to use it for a new purpose (for example, sending product news), we will notify you in advance and obtain your consent as required by law.
5. Data Sharing and Processors
The Company does not sell or rent your personal data. In order to operate the Website and reply to inquiries, the following parties will access or process your data to the extent necessary:
| Recipient | Data accessed | Reason |
|---|---|---|
| The Company's authorised sales, customer service and Website administration staff | All data of the inquiry | Replying to and tracking inquiries |
| Google LLC (Google Workspace email) | All fields of the inquiry (excluding the IP address) | After submission, the system sends a notification email to the Company's mailbox through Google's mail service, and the notification email is also stored in the Company's Google Workspace mailbox |
| Google LLC（Google Analytics 4） | Statistics, cookie identifiers, IP address (used to estimate region, according to Google) | Website traffic statistics |
| Google Fonts, jsDelivr, YouTube, Google Maps | IP address, browser information | See Section 3 |
| LINE Corporation, Meta Platforms (LINE Official Account, Facebook Messenger) | Messages you send on the platform and user data provided by the platform | Forwarding messages to the Company and delivering replies back to you (Section 2.3) |
| The Company's distributor or partner in your country/region | Data needed to reply to the inquiry | Providing quotations, installation or repair services through the local partner (only with your consent or where necessary to reply to your inquiry) |
| Government authorities, courts | Within the scope of the request | As required by law |
6. Data Storage Location and Cross-Border Transfers
- The Website's servers and database are located in Taiwan, managed by the Company itself and backed up regularly, with backups also kept in Taiwan. Inquiries you submit from any country/region version, and messages sent through LINE or Messenger, are transmitted to and stored in Taiwan.
- Notification emails are stored in the Google Workspace mailbox used by the Company, Google Analytics 4 data is stored on Google's servers, and LINE and Messenger messages also pass through each platform's servers; this data may be stored in countries outside Taiwan (for example, the United States and Japan).
- Taiwan's personal data protection laws may differ from those of your country. We protect your data in the manner described in this policy and with the security measures in Section 8. Supplementary information for visitors from specific countries/regions is in Section 11.
7. Retention Periods
| Data | Retention period |
|---|---|
| Inquiry data (form fields, data recorded automatically on submission, internal processing records) and instant messaging conversation records | Retained as business needs require (for example, follow-up quotations, cooperation and after-sales service); not deleted automatically by the system; you may request deletion at any time (Section 9) |
| Notification emails in the Company mailbox | Retained under the Company's email management practices; deleted together when you request deletion |
| Website application logs (including IP addresses suspected to be bots, and names and Emails recorded when inquiries are received) | Deleted automatically after 30 days |
| Web server (IIS) access logs | Retained as needed for operations; there is currently no fixed deletion period; handled together when you request deletion |
| Database backups | Kept for at least one year and replaced periodically under the Company's backup procedures; data you have asked to delete will be removed when the backups are rotated out |
| Google Analytics 4 statistics | 14 months, according to the Company's GA4 settings |
| Cookie | See Section 3 |
8. Data Security
- The entire Website uses HTTPS encrypted transmission, and HSTS is enabled.
- Inquiry data and conversation records can be viewed only by back-office accounts with the corresponding permissions; the back office requires account login, passwords are stored as hashes, and an account is temporarily locked after 5 consecutive failed logins.
- The form has anti-bot checks and a submission limit (at most 5 submissions per 10 minutes from the same IP address); messages from LINE and Messenger have their platform signatures verified to confirm that they really come from that platform.
No network transmission or system can be guaranteed to be 100% secure. If a personal data breach that may affect your rights occurs, we will notify you and the competent authority in accordance with applicable laws.
9. Your Rights
Under Article 3 of Taiwan's Personal Data Protection Act, you may exercise the following rights against the Company regarding your personal data:
- Inquire about or request to review your data;
- Request a copy;
- Request supplementation or correction;
- Request cessation of collection, processing or use;
- Request deletion.
Under the laws of your location, you may additionally have the rights to withdraw consent, object to processing, restrict processing, data portability, and lodge a complaint with the local competent authority (see Section 11).
How to exercise: Please email sales@yenprotek.com or call +886-2-7752-3952, describe your request, and provide the Email or instant messaging account you used when submitting your inquiry so that we can verify your identity. We will reply within the statutory period (Taiwan's Personal Data Protection Act: within 15 days for inquiries, review and copies; within 30 days for correction, cessation and deletion, which may be extended where necessary with notice to you); where a copy is provided, a fee to cover costs may be charged where necessary. Where retention is required by law or is necessary for carrying out our business, we may be unable to delete immediately, and we will explain the reason to you.
10. Effects of Not Providing Data
You are free to choose whether to provide personal data. If the required fields of the form (name, Email, inquiry) are not filled in, the form cannot be submitted and we cannot reply to you; you may also contact us directly by phone or Email. Blocking analytics cookies does not affect browsing of the Website.
11. Supplementary Information for Visitors from Specific Countries or Regions
The Company is a company located in Taiwan, and the Website provides country/region versions in multiple languages. Under the laws of your location, you may have more rights than those described in this policy; if you have any questions, please contact us as described in Section 9 and we will handle them in accordance with applicable laws. The following is general information and does not mean that the Company has completed an assessment or registration under each of these laws.
- Visitors from Thailand: Under Thailand's Personal Data Protection Act (PDPA), you may have the rights of access, to obtain a copy, data portability, objection, erasure, restriction of processing, rectification and withdrawal of consent, and you may lodge a complaint with the Office of the Personal Data Protection Committee of Thailand (PDPC). Our basis for processing your inquiry data is: responding to your request made before entering into a contract, and the Company's legitimate interest in replying to business inquiries.
- Visitors from Brazil: Under Brazil's General Personal Data Protection Law (LGPD), you may have the rights to confirmation of processing, access, correction, anonymisation or deletion, data portability, information about the parties with whom data is shared, and withdrawal of consent, and you may lodge a complaint with Brazil's National Data Protection Authority (ANPD). The basis for processing is the same as above (pre-contractual procedures carried out at your request, and legitimate interests).
- Visitors from Saudi Arabia: Under Saudi Arabia's Personal Data Protection Law (PDPL), you may have the rights to be informed, to access, and to request correction and destruction, and you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
- Visitors from the European Economic Area (EEA): The Website has no country version for the EU, but if you submit an inquiry from the EU, under the General Data Protection Regulation (GDPR) you may have the rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent, and you may lodge a complaint with the data protection authority in your country. Our legal bases are: responding to your pre-contractual request (Article 6(1)(b) of the GDPR) and the Company's legitimate interests (Article 6(1)(f), for Website security and statistics). To our knowledge, Taiwan does not currently hold an EU adequacy decision.
- Cross-border transfers: No matter which country you submit an inquiry from, the data is transmitted to and stored in Taiwan (Section 6). By submitting the form or sending a message, you acknowledge this transfer, which allows us to reply to your inquiry.
12. Minors
The Website is intended for business customers and professionals. If you are a minor under the laws of your location, please provide personal data with the consent of your legal representative; a legal representative may contact us under Section 9 to access or delete the data.
13. Other Websites and Messaging Apps
The Website provides links to our LINE Official Account, Facebook page and Messenger, YouTube, LinkedIn and other platforms. When you browse or interact with us on these platforms, your data is handled by each platform under its own privacy policy. Messages you send to the Company through the LINE Official Account or Messenger are handled by the Company under Section 2.3 and used only to reply to you.
14. Amendments to This Policy
We may amend this policy due to changes in laws or Website functions. Amendments will be published on this page with an updated effective date, and material changes will be announced prominently on the Website. The original text of this policy is in Traditional Chinese; other language versions are translations, and in case of any inconsistency the Traditional Chinese version prevails.
15. Contact Us
If you have any questions about this policy or your personal data, please contact:
YenProtek AIoT Co., Ltd. (YenProtek)
Address: Room 1102, 11F, International Building, No. 43, Sec. 4, Keelung Rd., Da'an Dist., Taipei City 106335, Taiwan
Phone: +886-2-7752-3952
Email: sales@yenprotek.com