China Airlines Limited (hereinafter referred to as "we" or "CAL") fully understand the importance of personal data. We wish to use this Privacy Protection Policy ("Policy") to explain how we process and use your personal data, and how to protect the rights and interests with respect to your personal data. This Policy applies to all personal data that CAL processes when you use our website or App or contact us, including but not limited to China Airlines official website, official App, Cargo website, SkyBoutique Duty Free website, eMall Home Delivery website and other CAL's business groups and organizations. In addition, this Policy is listed as one of the core beliefs in China Airlines Group Code of Conduct.

In order to implement privacy protection and comply with the Taiwan's Personal Data Protection Act, the General Data Protection Regulation (GDPR) of the European Union, and other applicable data protection laws and regulations, we have formulated this Policy to achieve the management of personal data privacy and security.

We will, in a reasonable manner, collect and use your personal data within the scope of specific purpose. We ensure that you have the rights and interests with respect to review, erasure, rectification, restriction of using your personal data and withdrawal of your consent, etc. In addition, we make the contingency strategy and plan for handling personal data being stolen, altered, disclosed or damaged. By way of establishing and maintaining appropriate personal data protection mechanism, we are committed to protecting the accuracy and security of your personal data.

This Policy applies when you use our services, you hereby entrust us with personal data. For processing your services, we will disclose or share your personal data to third parties other than CAL group under certain circumstances, such as travel agents, alliance partners, outsourcing vendors, governmental authorities, etc. We will demand such third parties to comply with this Policy for protecting privacy and security of your personal data.