1. Personal data provided by you

We will obtain personal data you enter on the SYS Skin website or app, or provide through telephone, letter, email, communication software or other means, including:

• Membership data

Membership data are yours and frequent traveler’s personal data including identification, characteristics, account number and password. You can choose whether to update the membership data or not. If you do not choose to update your basic data and frequently-used traveler data, we will not be able to automatically insert your order and traveler data by the system when you order products. However, we recommend that you update your password regularly to keep your account safe.

• Order data

• Orderer/recipient/traveler/contact data

When you purchase a product, you will be required to provide the personal data of different personnel, including identification and characteristics, etc. (for example, you may need to provide your passport name and passport number in both Chinese and English when purchasing foreign tour products; and the recipient's name and address will be required for purchase of pre-mailed physical ticket products). You may also choose whether to update the data to the membership data.

• Payment and financial data

Credit card information (card number, expiry date and security code) and other payment method information.

• Refund evidence data

Depending on the reason for your cancellation/refund, medical and health records may be included.

• Cooperating partners’ data(such as data of participants who join the affiliate program, bloggers, photographers, Youtubers, website commissioners, etc.)

When you are interested in becoming our cooperating partner, we need to obtain your personal data, including:- Basic data and contact data such as identification, characteristics and working situation- Evidence data for requirement review- Financial account data for the payment

• Travel-planning enquirers’ data

When you ask us to help you plan the tour, we need to obtain basic data and contact data such as identification.

• Activity participants' data

When you participate in various activities held by us (such as filling in questionnaires, competitions, psychological tests, lucky draw and other survey or marketing activities), we need to obtain your personal data, such as identification and characteristics, according to the content of the activities.

• Customer service inquirers’ data

When you make inquiries, feedback or complaints to us through various contact methods, we need to obtain your basic data and contact data such as identification and characteristics. When we communicate over the phone, we may record the whole conversation.

2. Obtained from a third-party service provider

• When you register as a member of a third-party service provider (Facebook, LINE, Google),we will obtain your data(such as name, picture, email address and any information you choose to provide) and UID according to your settings at the third-party service provider.

• We will also obtain relevant data from third-party service providers about your interactions with SYS Skin on their websites or apps(such as your likes or comments on SYS Skin's Facebook fan page).

3. Automatic collection via online behavior

When you use the SYS Skin website or app, we will use cookies or similar technology to obtain your personal data and record your online behavior, such as:

• IP address.

• Your stay, browsing or clicking on the SYS Skin website or app page.

• Traffic data.

• The webpage you visited before linking to the SYS Skin website.

See the more information on Cookie Policy.

4. Provided by cooperating business

If you participate in marketing activities jointly organized by us and our third-party business, we may obtain your personal data (such as prize winners' data) from the business to the extent necessary.

5. Obtained through a subsidiary or branch

We may also obtain your personal data from the subsidiary or branch, which locates in the same place as you, and add the data to our database to the extent necessary.

1. Member management

When you register as a member, we will create a membership profile for you so that we can manage all membership data. You can do the following in the “Account Settings”:

• Update basic data and frequently-used traveler data to facilitate you to automatically insert the necessary information when ordering products.

• Update the password to maintain the security of your account.

2. Order management (fulfillment/termination)

• After you purchase the products, we will collect the personal data of the orderer/recipient/traveler/contact person according to the needs of the products for the purpose of performing the contract, such as:

• booking your tour.

• sending you products you purchase (such as ticket, SIM card, WIFI device, etc.).

• handling your payment.

• Providing you with information about the products you ordered (such as confirmation letter or advance notice) or contact you or the contact person for products you ordered.

• If you intend to cancel the order/apply for refund, we may also require additional personal data for the purposes of refund and requirement review.

3. Activity managementt

• When you participate in any of our activities (such as questionnaires, competitions, psychological tests, lucky draws, etc.), we may contact you to communicate the content of the activities, or disclose the data to the extent necessary (such as the accounts of prize winners).

• When you win the prize, if necessary, we will send the prize to you via your email address or receiving address.

• If your prize amount reaches the legal threshold, we also need to obtain the necessary personal data from you to declare in accordance with the law.

• We will also recommend our products to you from time to time.

4. Customer service

When you make inquiries, feedback or complaints to us, we will use your contact information to explain the processing progress to you, or provide your data to the supplier or the company commissioned by us (such as cash flow or logistics provider) according to the specific needs in order to assist the handling of the case. If any dispute arises or is likely to occur, we will also use the communication records between both parties (such as emails or telephone recordings) as evidence.

5. Product marketing

If you are a member of SYS Skin or our cooperating partners, or you have ordered any product from us, participated in our activities, inquired about product information (potential customers), we will use your contact information to recommend the latest itineraries, product discount information, other newsletters or product information you may be interested in, or deliver advertisement to you on third-party platforms (such as Facebook).

6. Survey, statistics and analysis

• We will survey your comments on the products from time to time.

• We will analyze users’ behavior on the SYS Skin website and app to optimize our performance and service and improve our product planning.

• We will analyze the data you left through your online activities (such as products you search and browsing or clicking behaviors, etc.) or your participation in various activities (such as questionnaires you fill out and competitions, quizzes or lucky draws you participate, etc.) to assess products you may be interested in.

• SYS Skin will add up and analyze the collected data to evaluate customer willingness to purchase products and the product items which customers like, develop marketing strategies, improve services quality, predict the future trend of hot selling products, or recommend suitable products.

7. Exercise of rights/fulfill statutory obligations

• In case of disputes over consumption, non-performance of contract, infringement or criminal acts, we will use personal data to the extent necessary to make a legal request or defense, such as providing the data to the competent authority or judicial authority.

• If required by law, SYS Skin will also provide your personal data to the competent authority or judicial authority in order to fulfill its statutory obligations.

8. In the event any of the following occurs, we may also use personal data for other purposes:

• Obtaining the consent of the parties.

• Explicit provisions in the law.

• In the case where it is necessary considering the public interest, such as when we assess that your actions may be illegal, we may provide personal data to the judicial authority.

• To save the life, body, liberty or property of the party from danger.

• To prevent material harm to the rights and interests of others.

• In the case where it is beneficial to the rights and interests of the parties.

1. Access to your personal data,including the right to make an inquiry of or to request to review or make a copy of his/her personal data. Except any of the following occurs, we will not refuse the exercise of your rights:

• Impairing national security, diplomatic and military confidentiality, overall economic interests or other vital national interests.

• Obstructing the performance of statutory duties by government agency.

• Impairing significant interests of SYS Skin or a third party

2. Supplementary or correction (Depending on the situation, you may need to provide appropriate explanation)

3. Requesting to stop collecting, processing or using personal data or requesting to delete personal data

• If you think that we collect your personal data illegally, you have the right to ask us to stop collecting, processing and using your personal data. You also have the right to ask us to delete your personal data.

• If the accuracy of your personal data is in dispute, you have the right to request us to stop processing or using your personal data. However, this limitation shall not apply in the case where it is necessary for us to execute the business, or where you agree us to continue to process or use your personal data in writing (and noting the dispute over the accuracy of personal data).

• When SYS Skin's purpose of collecting your personal data disappears (that has been achieved or no longer exists, such as in the case where you want to terminate the membership) or the term expires, you have the right to request us to delete or stop processing or using your personal data. However, this limitation shall not apply in the case where it is necessary for us to execute the business (such as during the statutory retention periods or account processing not yet completed, etc.), or where you agree us to continue to process or use your personal data in writing.

4. Requesting to stop using personal data for marketing purposes

When we use your personal data to market to you (for example, by sending a product information email), you may reject the marketing.

5. Right to personal data portability

You may login to access, supplement and correct your personal data, or you may contact SYS Skin customer service mailbox via support@sysskin.com to exercise the rights abovementioned.

You may also lodge a complaint about the dispute related to your personal data with the competent authority where SYS Skin is located.