Privacy policy / 隱私權政策

1. Scope and contact

This policy covers the ICOBM 2026 website and the ICOBM 2026 iOS and Android conference information apps. Website member services and the current native apps have different data practices, described separately below. For privacy enquiries, contact the ICOBM 2026 Secretariat at icobm@kmu.edu.tw.

2. Current iOS and Android apps (version 1.0.0)

The current native apps display conference information, the agenda, speakers and venue information using bundled content that can be read offline. The selected interface language is saved on your device and is not uploaded to us. These native apps do not include advertising or behavioural analytics SDKs.

The Sign In link opens the website in a browser. The current native apps do not provide their own account sign-in or receive your website password, browser session cookies or signed-in status. If you register, sign in, pay or submit materials on the website, the website practices below apply. You can read the native conference information without a website account.

Venue map links use the conference venue address; the current apps do not request or collect your device location. External websites and map services have their own privacy practices. Browser storage and any device backups are managed separately by your browser or operating system.

3. Website information we process

When you use member services, we process information you provide for registration and conference administration, such as your name, email, organisation or affiliation, registration category, attendance choices and dietary or other special requirements. If you submit academic materials, we process the submission, abstract, keywords and co-author information. Orders, payment status and receipt records are used to administer payments and refunds.

Authentication uses your account information, password hashes where applicable, and identifiers or profile information supplied by a Google or KMU sign-in provider you choose. Website session cookies, local preferences, saved agenda selections, optional browser push subscriptions, security logs and administrative audit records support website operation and security.

For an account deletion request, we record the confirmed account email, your optional explanation, verification and review history, our replies and any documented retention decision. Confirmation tokens expire after one hour and are stored as hashes. Short-lived abuse prevention counters use keyed hashes of network addresses.

Website Google Analytics is currently enabled to help us understand website use, including page interactions, clicks on app store download links, and device or browser information. Download links include fixed campaign labels to measure referrals from this website in Google Play's reports. Website analytics is separate from the native apps. We do not initialise it on the sign-in, account deletion or institutional email verification routes.

4. Purposes and service providers

We use this information to authenticate members, administer registration, payments, submissions and conference logistics, deliver requested notifications, respond to privacy requests, protect the service and address disputes or applicable recordkeeping obligations. Dietary requirements are used for catering and related conference safety arrangements.

Authorised staff and service providers for hosting, email, payments and chosen identity services receive information as needed for these purposes. Where enabled, the optional website AI and analytics providers process the information described above. We do not sell personal information or share it for third parties' independent marketing.

5. Protection and retention

We use authentication, access restrictions, protected transport and administrative audit records to protect personal information. Access is limited to authorised personnel according to their duties.

We retain information only as needed for conference administration, financial settlement, applicable legal recordkeeping and the resolution of outstanding disputes. When those purposes end, information should be erased or de-identified. For an individual deletion request, we explain the specific records that must be retained, the reason or applicable basis, and their retention period or the criteria for determining it. Having a payment record is not, by itself, a blanket reason to refuse deletion of an account and unrelated personal data.

6. Account and associated data deletion

You can submit an account deletion request using the public online form linked below, without signing in or installing an app. Enter your account email, open the verification email and press Confirm. This verifies control of the mailbox and starts the review; simply opening the link does not delete your account.

Only authorised Secretariat administrators handle requests. We will provide an initial review response within 7 business days of email confirmation. This is an initial response commitment, not a promise that erasure will be completed within that period. We check registration, payments/refunds, submissions and necessary retention, then explain the outcome, any additional information needed, and the expected completion date or next update.

Submitting a deletion request does not automatically cancel registration or issue a refund. Approval and completed erasure are separate stages. After approval, the account and associated personal data that need not be retained are erased; suspension alone is not deletion. If specific records must be retained, we explain their categories, basis and retention period. We retain only necessary request and response evidence for handling the request and accountability.

7. Your choices and future changes

You may contact icobm@kmu.edu.tw to request access to or correction of your personal information. Use the online deletion form for account deletion. Optional AI use and browser push notifications are not required to read conference information; browser notification permission can be withdrawn in browser settings.

If future iOS or Android versions introduce native account sign-in, new data collection or analytics, we will update this policy and the relevant App Store and Google Play disclosures to reflect the features and data practices before their release.

1. 適用範圍與聯絡窗口

本政策適用於 ICOBM 2026 官方網站，以及 ICOBM 2026 iOS 與 Android 會議資訊 App。網站會員服務與目前原生 App 的資料利用情形不同，以下分別說明。隱私權問題請聯絡 ICOBM 2026 秘書處：icobm@kmu.edu.tw。

2. 目前 iOS／Android App（1.0.0 版）

目前原生 App 使用內建資料顯示會議資訊、議程、講者與會場資訊，並可離線閱讀。您選擇的介面語言儲存在裝置上，不會上傳給我們。目前原生 App 沒有廣告或行為分析 SDK。

「登入／Sign In」連結會在瀏覽器開啟官方網站。目前原生 App 沒有自己的帳號登入，也不會取得您的網站密碼、瀏覽器工作階段 Cookie 或登入狀態。若您在網站註冊、登入、付款或投稿，適用以下網站資料處理說明。閱讀原生 App 的會議資訊不需要網站會員帳號。

會場地圖連結使用固定會場地址，目前 App 不會要求或蒐集裝置定位。外部網站及地圖服務另有其隱私權政策；瀏覽器儲存及裝置備份則由瀏覽器或作業系統另行管理。

3. 網站處理的資料

使用會員服務時，我們會處理您提供的報名與會議管理資料，例如姓名、電子郵件、機構／服務單位、報名身分類別、參與活動選項，以及飲食或其他特殊需求。若您投稿，另會處理投稿檔案、摘要、關鍵字及共同作者資訊。訂單、付款狀態與收據紀錄用於付款及退款管理。

身分驗證使用帳號資訊、適用時的密碼雜湊，以及您選用 Google 或高醫登入服務所提供的識別碼或個人檔案。網站工作階段 Cookie、本機偏好設定、收藏議程、選用的瀏覽器推播訂閱、安全紀錄與管理稽核紀錄，用於網站運作與安全。

帳號刪除申請會記錄經確認的帳號信箱、您選填的說明、驗證及檢核歷程、我們的回覆，以及必要資料保留決定。確認權杖於一小時後失效，資料庫僅保存其雜湊值；短期防濫用計數使用網路位址的加密金鑰雜湊。

網站目前啟用 Google Analytics，用於了解網頁互動、App 商店下載連結的點擊，以及裝置／瀏覽器等網站使用情形。下載連結包含固定活動標籤，以便在 Google Play 報表中統計來自本網站的流量。網站分析與原生 App 分開。登入、帳號刪除及機構信箱驗證路徑不會初始化此分析工具。

4. 利用目的與服務提供者

資料用於會員驗證、報名、付款、投稿與會議庶務管理、提供您選用的通知、處理隱私權申請、維護服務安全，以及處理爭議或適用的紀錄保存義務。飲食需求用於餐飲及相關會議安全安排。

經授權人員，以及主機、郵件、付款及您選用的身分驗證服務提供者，會在上述目的所需範圍內處理資料。啟用時，選用的網站 AI 與分析服務會處理前述資料。我們不出售個人資料，也不將其提供給第三方作獨立行銷用途。

5. 保護與保存

我們使用身分驗證、存取權限限制、受保護的傳輸及管理稽核紀錄保護個人資料，並依職務限制經授權人員的存取範圍。

資料僅在會議管理、財務結算、適用的法定紀錄保存及未結爭議處理所需期間保存；目的結束後應刪除或去識別化。處理個別刪除申請時，會說明須保留的具體紀錄、理由或適用依據，以及保存期限或決定期限的標準。有付款紀錄本身，不會成為概括拒絕刪除帳號及無關個人資料的理由。

6. 帳號與相關資料刪除

您可使用下方公開線上表單申請帳號刪除，不需要先登入或安裝 App。填寫帳號信箱、開啟確認郵件，再按下確認按鈕，即可完成信箱控制權驗證並開始檢核；單純開啟連結不會刪除帳號。

申請僅由秘書處獲授權的管理人員審核。我們會於信箱確認後 7 個工作天內回覆初步檢核結果；這是初步回覆承諾，不是七個工作天內完成刪除的承諾。我們會核對報名、付款／退款、投稿及必要保留紀錄，並告知結果、是否需補充資訊，以及預計完成日期或下一次回覆日期。

提出申請不會自動取消報名或辦理退款。「核准」與「實際刪除完成」是不同階段。核准後會刪除帳號及無須保留的相關個人資料，僅停用帳號不等於刪除。若須保留特定紀錄，會告知資料項目、依據與保存期限。申請及回覆證據也僅在處理申請與必要問責範圍內保存。

7. 您的選擇與未來變更

您可透過 icobm@kmu.edu.tw 申請查詢或更正個人資料；帳號刪除請使用線上申請表。AI 助理及瀏覽器推播均非閱讀會議資訊的必要功能，您可於瀏覽器設定撤回通知權限。

若未來 iOS／Android 版本加入原生會員登入、新的資料蒐集或分析功能，我們會在發佈前更新本政策，以及 App Store 與 Google Play 對應的資料利用聲明。