The Personal Data Protection Act

The Personal Data Protection Act（hereinafter, the "PDPA"）is enacted to regulate the collection, processing and use of personal data so as to prevent harm on personality rights, and to facilitate the proper use of personal data.

1.Collecting Entity Name: Taiwan Semiconductor Research Institute (hereinafter referred to as "the Institute").

2.Purpose of Collection: The Institute collects your personal data for the purposes of conducting various technological research activities, technology talent management, internal statistical surveys and analysis, and fulfilling legal obligations set forth by the Institute.

3.I hereby consent to the use of my personal data for the following purposes:

036 Deposits and Remittances.

136 Communication and Database Management.

040 Marketing (including joint marketing activities with financial institutions).

145 Employment and Service Management.

052 Internal Management of Lists of Shareholders, Members (including representatives appointed by shareholders or members), Directors, Supervisors, Trustees, Auditors, or other members of corporations or organizations.

157 Investigation, Statistics, and Research Analysis.

090 Consumer and Customer Management and Service.

158 Student (Member) Data Management, including graduates and alumni.

091 Consumer Protection.

159 Academic Research.

109 Consumer Protection.

181 Other business activities in accordance with the business registration or organizational charter.

129 Accounting and related services.

182 Other consulting and advisory services.

4.Categories of Personal Data Collected:

The categories of personal data collected fall under the definitions set by the Ministry of Justice regarding the types of personal data to be protected under the Personal Data Protection Act. The collection is conducted in accordance with the content published by the competent authority. This consent form collects the following categories:

C001/Personal Identifier.　　C038/Occupation. 　　　　　C056/Works.

C052/Qualifications or Skills.　　C102/Agreements or Contracts.　　　Others: Email address, address, and contact information.

5.Period, Region, Recipients, and Methods of Use：

　(1) The period of use of personal data is for the duration of the organization or business's existence, and the geographical area of use is not limited.

　(2) Methods and Recipients of Use:

　　a. Used for various business operations announced for the purposes of the Institute's collection, including all necessary contacts and notifications required for business operations.

　　b. Used when requested by government agencies or competent authorities for specific purposes under their statutory jurisdiction.

6.Rights and Interests regarding Personal Data

　(1) In accordance with the law, you have the right to exercise the rights specified in Article 3 of the Personal Data Protection Act, including:
　　a.Inquire or request access. b.Request copies. c.Request supplementation or correction. d.Request cessation of collection, processing, or use. e.Request deletion.

　(2)Requests for exercising these rights should be made in formal writing by the involved party, specifying the type and content of the rights to be exercised, as well as the contact information of the involved party. If the abovementioned conditions are not met, the request procedure is considered incomplete. The Institute may request additional documents, and only after completing the required documents will the request procedure be considered complete. The processing period will commence after completing the necessary documents, to prevent unintentional or improper harm to the rights of the involved party due to insufficient data.

7.When the Institute collects your personal data and certain fields are marked as optional, choosing not to provide such personal data will not affect any of your rights.

8.The Institute reserves the right to revise this consent form. If changes are made to the content of this consent form, the Institute will notify you through the contact information provided by you. If you do not raise any objections, it will be understood that you have agreed to the modified content.

I have read and understood the above information and agree to the terms and conditions stated above.