← VSTREL

隱私權政策

最後更新日期：2026 年 9 月 13 日

VSTREL（中文名稱：維斯托，下稱「本公司」）重視您的個人資料保護。本政策依據《個人資料保護法》（下稱「個資法」）第八條之規定，向您說明本公司蒐集、處理及利用個人資料之情形。

一、適用範圍

本政策適用於本公司所經營之網站 vstrel.com 及其子網域，以及本公司提供之各項產品與服務。

本政策不適用於本服務所連結之第三方網站或服務。您於該等第三方網站所提供之個人資料，適用該第三方之隱私權政策。

二、蒐集之個人資料類別

本公司視您所使用之服務內容，可能蒐集下列類別之個人資料：

識別與聯絡資料：姓名、公司或商號名稱、電子郵件地址、電話號碼、通訊地址。
帳號資料：帳號名稱、密碼（以不可逆方式加密儲存）、註冊與登入紀錄。
業務往來資料：您於使用服務時所提供之訂單、貨物、行程、交易與往來紀錄。
資格驗證資料（僅於特定服務中，且經您主動提供）：駕駛執照、車輛行照、營業登記或其他為確認資格所必要之證明文件。
位置資料（僅於您授權後）：行動裝置之定位資訊。
技術與使用資料：IP 位址、瀏覽器與裝置類型、作業系統、造訪時間與頁面瀏覽紀錄。

本公司不會主動蒐集個資法第六條所定之特種個人資料（如病歷、醫療、基因、性生活、健康檢查及犯罪前科）。

三、蒐集之目的

提供、維護、驗證及改善本公司之產品與服務。
建立與管理使用者帳號，並確認使用者身分與資格。
處理訂單、媒合、付款、對帳、開立憑證及客戶服務。
進行服務通知、系統公告及必要之聯繫。
維護服務安全，防範詐欺、濫用與違法行為。
履行法令所定之義務，或配合主管機關之要求。
經您同意時，寄送產品資訊或行銷訊息（您可隨時取消訂閱）。

四、個人資料之利用期間、地區、對象及方式

期間	自蒐集之日起至蒐集目的消失時止，或依相關法令所定之保存期間屆滿時止，並得依您之請求提前刪除（法令另有規定者除外）。
地區	中華民國境內，以及本公司所使用之雲端服務供應商之伺服器所在地區。
對象	本公司本身；為提供服務所必要而委外之服務提供者（例如雲端代管、資料庫、金流、地圖與定位、推播通知、電子郵件寄送服務）；因交易而有必要之相對使用者（僅限完成交易所必要之最小範圍）；依法令規定或主管機關、司法機關之要求而應提供之對象。
方式	以自動化機器或其他非自動化之方式，於前述目的必要範圍內進行處理與利用。

本公司不會將您的個人資料出售、出租或以營利為目的提供予第三人。

五、您得行使之權利

依個資法第三條規定，您就本公司保有之個人資料得行使下列權利：

查詢或請求閱覽。
請求製給複製本。
請求補充或更正。
請求停止蒐集、處理或利用。
請求刪除。

行使方式：請以註冊時之電子郵件地址來信至 tim@vstrel.com，本公司將於確認身分後儘速處理。本公司依法得酌收查詢、閱覽或製給複製本之必要成本費用。

您得自由選擇是否提供個人資料；惟若您拒絕提供服務所必要之個人資料，可能導致本公司無法提供完整之服務，或您無法完成註冊或使用特定功能。

六、Cookie 與類似技術

本網站可能使用 Cookie 或瀏覽器本機儲存（localStorage）以記錄您的語言偏好及維持登入狀態，以提升使用體驗。您可透過瀏覽器設定拒絕或刪除 Cookie，惟部分功能可能因此無法正常運作。

七、資料安全

本公司採取合理之技術與管理措施保護個人資料，包括傳輸過程之加密（HTTPS/TLS）、密碼之不可逆加密儲存、資料庫存取權限控管，以及僅由有處理必要之人員接觸個人資料。惟網際網路傳輸無法保證絕對安全，本公司無法擔保資料傳輸之絕對無虞。

八、委外與第三方服務

本公司為提供服務，可能委由第三方服務商處理部分作業（例如雲端代管與資料庫、金流服務、地圖與定位服務、推播通知、電子郵件寄送）。本公司將要求受託者採取與本政策相當之保護措施，並依個資法規定進行適當監督。

九、未成年人

本服務主要提供予企業與成年使用者。未滿十八歲者使用本服務，應由法定代理人或監護人閱讀、瞭解並同意本政策之全部內容後，始得使用。

十、政策之修訂

本公司得因法令變更、技術更新或服務調整而修訂本政策，並於本頁面公告修訂後之內容及生效日期。建議您不定期查閱本頁面。

十一、聯絡方式

個人資料保護相關事宜聯絡窗口：tim@vstrel.com

本政策以中文版本為準；英文版本僅供參考，如有歧異，以中文版本之內容為準。

Privacy Policy

Last updated: 13 September 2026

VSTREL (Chinese name: 維斯托; "we", "us") takes the protection of your personal data seriously. This policy explains how we collect, process and use personal data, in accordance with Article 8 of Taiwan's Personal Data Protection Act (the "PDPA").

1. Scope

This policy applies to the website vstrel.com and its subdomains, and to the products and services we provide. It does not apply to third-party sites or services linked from ours, which are governed by their own privacy policies.

2. Categories of personal data collected

Depending on the service you use, we may collect:

Identity and contact data: name, company or business name, email address, telephone number, postal address.
Account data: username, password (stored using irreversible hashing), registration and login records.
Transaction data: orders, cargo details, journeys, transactions and related correspondence you provide when using the Services.
Verification data (only for specific services, and only where you provide it): driving licence, vehicle registration, business registration or other documents necessary to verify eligibility.
Location data (only with your permission): device location information.
Technical and usage data: IP address, browser and device type, operating system, visit times and page views.

We do not actively collect the special categories of personal data defined in Article 6 of the PDPA (such as medical records, healthcare, genetic data, sex life, health examination results or criminal records).

3. Purposes of collection

To provide, maintain, verify and improve our products and services.
To create and manage user accounts and verify identity and eligibility.
To process orders, matching, payment, reconciliation, invoicing and customer support.
To send service notifications, system announcements and necessary communications.
To maintain the security of the Services and prevent fraud, abuse and unlawful conduct.
To comply with legal obligations or requests from competent authorities.
With your consent, to send product information or marketing messages (you may unsubscribe at any time).

4. Period, territory, recipients and means of use

Period	From collection until the purpose ceases to exist, or until the end of any retention period required by law; earlier deletion is available on request, save where the law requires otherwise.
Territory	The Republic of China (Taiwan), and the regions in which the servers of our cloud service providers are located.
Recipients	VSTREL itself; processors engaged as necessary to provide the Services (cloud hosting and databases, payment gateways, mapping and location services, push notifications, email delivery); counterparty users where necessary for a transaction (limited to the minimum required to complete it); and any person to whom disclosure is required by law or by a competent or judicial authority.
Means	By automated or non-automated means, within the scope necessary for the purposes above.

We do not sell, rent or provide your personal data to third parties for profit.

5. Your rights

Under Article 3 of the PDPA you may, in respect of personal data we hold about you:

enquire about or request to review it;
request a copy;
request supplementation or correction;
request that we cease collecting, processing or using it;
request deletion.

To exercise these rights, email tim@vstrel.com from your registered email address. We will act promptly once your identity is confirmed. We may charge the necessary cost of an enquiry, review or copy as permitted by law.

You are free to decide whether to provide personal data. If you decline to provide data that is necessary for a service, we may be unable to provide that service in full, or you may be unable to register or use certain features.

6. Cookies and similar technologies

We may use cookies or browser localStorage to remember your language preference and keep you signed in. You can refuse or delete cookies in your browser settings, though some features may then not work correctly.

7. Data security

We apply reasonable technical and organisational measures, including encryption in transit (HTTPS/TLS), irreversible password hashing, database access controls, and restricting access to personnel who need it. No transmission over the internet can be guaranteed to be completely secure.

8. Processors and third-party services

We may engage third-party providers to carry out parts of the Services (cloud hosting and databases, payment gateways, mapping and location services, push notifications, email delivery). We require them to apply protection comparable to this policy and supervise them as required by the PDPA.

9. Minors

The Services are intended primarily for businesses and adult users. Anyone under 18 may use the Services only after their legal representative or guardian has read, understood and agreed to this policy.

10. Changes to this policy

We may revise this policy following changes in law, technology or our services, and will publish the revised version and its effective date on this page.

11. Contact

Data protection contact: tim@vstrel.com

The Chinese version of this policy prevails. This English version is provided for reference only; in the event of any discrepancy, the Chinese version governs.