Privacy Policy
Your privacy is of the utmost importance to us. XSquare Communications Corp. (hereinafter referred to as " XSquare", "we", "us", or "our"), with its principal office at 2F., No. 363, Sec. 2, Gongdao 5th Rd., East Dist., Hsinchu City 30069, Taiwan (R.O.C.), are committed to safeguarding your privacy. This Privacy Policy ("Policy") details how we will process your personal data in compliance with the data protection laws of the European Union, namely the General Data Protection Regulation (GDPR).
Per the GDPR definition, XSquare will be a controller of your personal data, while our affiliates or selected partners may also be a controller and/or processor depending on the individual processing.
"Personal data" is information relating to an identified or identifiable natural person. We will process your personal data only if at least one of the following conditions applies:
(a) processing is necessary to perform a contract;
(b) processing is necessary for the purposes of legitimate interests; or
(c ) you have given consent to the processing of your personal data for one or more specific purposes.
Click a link below to jump to that section of the Privacy Policy:
• Data We Collect and Our Purposes
• Cookies and Similar Technologies
• Data Retention
• Transfers of Personal Data
• Your Rights
• Children
• Changes of Purpose
• Changes and Updates
• Our Data Protection Representative
• IP Address
Data We Collect and Our Purposes
a. Inquiries
We may process email and/or phone number data contained in any inquiry you submit to us in order to help us handle and reply to your inquiry. The legal basis for this processing is either consent or the performance of a contract.
b. Website Usage
We may process data about your use of our website and services. Such data may include your IP address, geographic location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths as well as information about the timing, frequency, and pattern of your service use. The legal basis for this processing is either consent or our legitimate interests, namely improving your browsing experience on our sites.
c. Use of Our Services
- Account Data
For certain XSquare services, users are required to register a user account in order to activate their purchased service. Account data may include name, email address, login credentials, and postal address. This data may be processed for the purposes of providing our services, ensuring the security of our services, maintaining our databases, and communicating with you. The legal basis for this processing is either the performance of a contract between you and us or our legitimate interests, namely improving our service standard and/or developing more functionality for users. - Service Data
For our cloud or internet-based services, we may process the personal data you provide in the course of using our services. The service data may include your name, email address, login credentials, browser type, device ID, IP address, MAC address, system settings, network statistics, licence status, activity logs, device hardware status, and access time stamp. This data may be processed for the purposes of providing our services. The legal basis for this processing is either the performance of a contract between you and us or our legitimate interests, namely improving our service standard and/or developing more functionality for users. - Licence and Product Registration Data
We may process information relating to product registration or maintaining applicable licences on your devices. The licence and product registration data may include your name, email address, postal address, device ID, IP address, and MAC address. This data may be processed for the purposes of delivering purchased contracts and/or services to you. The legal basis for this processing is either the performance of a contract between you and us or our legitimate interests, namely improving our service standard and/or developing more functionality for users.
d. Subscriptions
If you provide your opt-in consent to subscribe to marketing information from us, we will process your email address and name for the purpose of sending you marketing information about our products and services. The legal basis for this processing is your consent. You may withdraw your consent at any time.
e. Marketing and customer support
Where we have your consent, we may send you marketing communications including without limit to regarding contests, promotions, rewards, upcoming events, and news about products and services provided by XSquare and our selected partners and may process and deliver contest entries and rewards to and from you. Where we have a legitimate interest in improving your service we provide to you, we may collect and process your data and demographic information (including but not limited to company name, occupation, gender, language preference, country, city, and postcode) obtained from our eNewsletter customer survey forms in order to provide you with better customer support.
Cookies and Similar Technologies
We use cookies and similar tracking technologies to improve your browsing experience on our sites by displaying personalised content based on your preferences. Where required by law, we will obtain your consent before we collect related information from your device or use these technologies. If you do not want your information to be collected through the use of these technologies, you can disable cookies in your web browser settings. However, doing so may impact your browsing experience and limit the online services we may provide you.
a. Third-Party Cookies
We work with third parties to place cookies on our sites. These cookies help to personalise content, serve ads and improve the users’ web experience. These include:
- AdRoll Smart Pixel
AdRoll SmartPixel tracks user visits in preparation for defining the audiences and segments for our retargeting campaigns. Read more: www.adroll.com - Baidu Tracking Code
This provides reports about the source of visitors, user demographics, content viewed on our sites, heatmaps, and other features. Read more: tongji.baidu.com - Crazy Egg Tracking Code
Crazy Egg provides heatmaps, scrollmaps, and other services like A/B testing and recordings. Read more: www.crazyegg.com - Google
We use the following Google services:
—Google AdWords
We use Google's advertising service to promote important keywords and run
marketing campaigns. Read more: adwords.google.com
—Google Analytics
Google Analytics is used to track site statistics and user demographics, interests,
and behaviour on our sites. We also use Google Search Console to help us
understand how visitors find our website and to improve our search engine
optimisation. Visit analytics.google.com to learn more about how this analytics
information may be used and how to control the use of your information.
—Google Tag Manager
We use Google Tag Manager to deploy and manage website tags. Read more:
www.google.com/analytics/tag-manager/ - Facebook Pixel is an analytics tool that helps us measure the effectiveness and performance of our advertising. The data it collects allows us to understand website visitors’ actions. Read more: https://www.facebook.com/business/help/651294705016616
- Heatmap Tracking Code
We use the Heatmap tracking code to understand user behaviour on our sites in order to improve our content strategy. Read more: heatmap.me - LinkedIn Conversion Tracking
This is used to track the performance of our advertising on Linkedin and to optimise our digital marketing approach in the future. Read more: https://business.linkedin.com/marketing-solutions/conversion-tracking - Marketo Tracking Code
We use this code to analyse user behaviour. Read more: www.marketo.com - Spiceworks
We use JavaScript scripts developed by Spiceworks to track marketing campaigns. Read more: www.spiceworks.com
b. Necessary Cookies
- CookieBubble
This is a jQuery plugin to show the cookie messages. - Cookie Script
"Cookiescriptaccept" is used to record whether a user has accepted our cookie script. Read more: cookie-script.com - Laravel_session
This is used to create a session ID for the user, so that the system itself can identify the user as a unique and individual user, distinct from anyone else looking at the website. - Verification Code
This is used to prevent spam being sent by bots. - Google reCAPTCHA
This is used to prevent spam from bots. Read more: www.google.com/recaptcha - YouTube Tracking Code
We use this tracking code to track the traffic of YouTube videos embedded in our sites. - XSRF-TOKEN
For website security, this cookie is used to stop Cross-site Request Forgery (CSRF).
Data Retention
Your personal data will not be retained in excess of two years after the termination or cessation of our services or purposes, with the exception of when local laws and regulations require it to be retained beyond that period.
Transfers of Personal Data
To offer our products and services, we may need to transfer your personal data to our affiliates or selected partners in non-EU/EEA countries. Any transfers of personal data to outside EU/EEA countries are conducted pursuant to European Commission-approved Standard Contractual Clauses.
Your Rights
As a data subject, your principle rights under data protection law are as follows. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the relevant regulatory authorities for a full explanation of these rights.
*The right to access personal data
*The right to rectify personal data that is incorrect or incomplete
*The right to erase personal data ("the right to be forgotten") if certain grounds are met
*The right to restrict/suspend the processing of personal data
*The right to data portability
*The right to withdraw consent at any time (if processing is based on consent)
*The right to object to processing (if processing is based on legitimate interests)
*The right to object to the processing of personal data for direct-marketing purposes
*The right to complain to a supervisory authority if you believe that we have not handled your personal data in accordance with the GDPR
If you have any concerns or complaints about our use of your personal data or if you wish to exercise any of the above rights, please contact our data protection representative, as listed below. We will respond to any rights that you wish to exercise within a month of receiving your request unless the request is particularly complex or cumbersome. In cases involving the latter, we will respond within three months and will inform you within the first month that it will take longer than one month for us to respond.
Children
XSquare does not knowingly collect information from children, as defined by local law, and does not target our website or services to children. If we learn that we have collected the personal data of children, we will take steps to delete the information as soon as possible.
Changes of Purpose
We may change our processing purposes over time. Any such changes will be executed only following the update of this Policy.
Changes and Updates
This Policy may from time to time be updated when necessary. We therefore reserve the right to change its contents at any time. We will publish the updated version of this Policy on this site. We suggest that you periodically re-examine the Data Protection Notice to stay up to date.
Our Data Protection Representative
If you have any questions, please contact XSquare Communications Corp. at 2F., No. 363, Sec. 2, Gongdao 5th Rd., East Dist., Hsinchu City 30069, Taiwan (R.O.C.) or xs-service@xsquareiot.com.
IP Address
The XSquare website uses IP redirects to detect users’ IPs then points users to the regional website most suitable for them based on their location. This enhances users’ browsing experience by providing them with more relevant information in their local language. XSquare doesn’t collect or store users’ IPs as part of the redirection process.
As of 2nd Dec, 2021