Baishatun Mazu ESG Pilgrimage Tracker — Privacy Policy
Version v0.2 ｜ 2026-04-04 ｜ Established pursuant to Articles 7 and 8 of the Personal Data Protection Act
1. Data Collector Information
This system is developed and operated by the Formosa ESG 2026 Project Team (hereafter "Team").
Contact: [email protected]
2. Data Collection Purpose
This system collects personal data for the following specific purposes:
- Pilgrimage Activity Management: Recording your pilgrimage route, check-in history, and participation progress
- Carbon Footprint LCA Calculation: Calculating activity-period emissions based on reported transportation, water consumption, and accommodation
- Participation Proof and Identity Verification: Providing identity verification for full participants for redemption with partner merchants (e.g., Family Mart)
- Activity Statistics and Research: Aggregating anonymized data for ESG reports and academic research
- Raffle Notification: If you provide a phone number, using it for future prize notifications
3. Personal Data Categories Collected
| Category | Specific Items | Collection Method | Required/Optional |
|---|---|---|---|
| LINE Account Information | User ID, Display Name, Avatar URL | Automatically obtained via LINE Login | Required |
| GPS Location Data | Real-time coordinates, check-in points, movement trajectory | Browser location API + manual check-ins | Required |
| Photo EXIF Coordinates | GPS coordinates in photos | Extracted on your browser when you select photos; photo files are not uploaded | Optional |
| Survey Responses | Goodwill activities, touching moments, charitable intentions, participation role | You fill out manually | Required (first use) |
| Carbon footprint (Survey Q3-Q6) | Transportation to venue, eco-friendly actions, accommodation, dining | Survey | Required |
| Phone Number | Taiwan mobile number | You provide manually | Optional |
Special Note：
- Photos are not uploaded to the server. GPS coordinates are extracted entirely in your browser; only coordinate values are sent to the system
- GPS data is collected only when you access this page or manually check-in, not continuously tracked in background (stops when you close)
- The system performs geofence matching on your GPS coordinates (determining whether you are along the pilgrimage route). This tag is used solely for route tracking and carbon footprint calculation, not for any other purpose
4. Duration, Area, Parties, and Methods of Data Use
Duration
- Activity Period (from April 12, 2026 through activity conclusion): Used for real-time route tracking, level calculation, push notifications
- Within 6 Months After Activity: Used for ESG report compilation, raffle contact, merchant verification
- After 6 Months: Personally identifiable data will be deleted or anonymized. Anonymized statistics (containing no personally identifiable information) will be retained permanently for research use
Geographic Region
Taiwan. Data stored on Cloudflare global network, but access and management limited to Team only.
Recipients
- Team members (activity management and data analysis)
- Partner merchants (limited to QR code verification, viewing your level and progress only, cannot access other personal data)
- ESG report users (anonymized statistics only)
Usage Methods
- Automatic calculation of carbon footprint and level determination
- LINE push notifications for activity updates
- Generation of personal achievement cards for sharing
- Aggregation of anonymized statistics for ESG reports
5. Your Rights
Pursuant to Article 3 of the Personal Data Protection Act, you have the following rights:
- Right to Query or Request Access: You can view collected data anytime through your personal page
- Right to Request a Copy: You can export your personal data
- Right to Request Correction or Supplementation: You can request correction if data is inaccurate
- Right to Request Cessation of Collection, Processing, or Use: You can press "Pause" or "Complete Pilgrimage" to stop data collection anytime
- Right to Request Deletion: You can request the Team delete all your personal data
To exercise these rights, contact: [email protected]
6. Consent and Withdrawal
- You must explicitly consent to this Privacy Policy before using the system
- After consent, you can withdraw anytime by pressing "Complete Pilgrimage" and emailing to request data deletion
- Withdrawal does not affect data already legally processed
- If you do not consent, you cannot use check-in and route tracking functions
7. Data Security Measures
The Team implements the following security measures:
- All data transmission uses HTTPS encryption
- Database access requires authentication (token-based)
- Admin panel requires password entry
- Partner merchants can only view limited information via QR code, cannot access complete database
- Raw GPS check-in data is temporarily stored in a cache layer with a 3-day automatic expiration (TTL); cached data is deleted once written to the database, reducing data breach risk
8. Minors
This system is not designed for minors under 18. If minors use this system, their legal guardian must consent.
9. Policy Amendments
The Team reserves the right to amend this Privacy Policy. Amendments will be announced via system or LINE notifications. Major changes require your re-consent.
10. Contact Information
If you have questions about this Privacy Policy, contact:
- Email: [email protected]
- LINE Bot: @539fkwjd
Last Updated: April 4, 2026