GDPR – General Data Protection Regulation

Last Updated: March 10, 2026

INTRODUCTION

Marwi is committed to protecting the personal data of individuals located in the European Union and European Economic Area.
This page explains how we comply with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and what rights you hold as a data subject.

• DATA CONTROLLER

  The data controller responsible for processing your personal data is:

  Marwi Industrial Co., Ltd.
  56 Chongyi 3rd Road, Dajia District, Taichung City 437, Taiwan
  Email: sales@marwi.com.tw
  Tel: +886 4 26881234

• PERSONAL DATA WE COLLECT

  We may collect and process the following categories of personal data:

  • Identity & Contact Data:

    Full name, company name, job title, email address, phone number, fax number.

  • Inquiry & Communication Data:

    Messages, product inquiries, service requests, and correspondence history submitted through our website forms.

  • Member Account Data:

    Login credentials, account preferences, and transaction records for registered members.

  • Technical Data:

    IP address, browser type and version, time zone, operating system, device identifiers, and cookie data collected automatically when you visit our website.

  • Usage Data:

    Information about how you navigate and interact with our website (pages visited, click paths, session duration).

  • Business & Supply Chain Data:

    Company registration details, procurement requirements, and supply partner information provided through business cooperation channels.

• LEGAL BASIS FOR PROCESSING

  We process your personal data only when we have a lawful basis under GDPR Article 6:

  • Contractual necessity (Art. 6(1)(b)):

    To process inquiries, fulfil product orders, and manage supply chain partnerships.

  • Legitimate interests (Art. 6(1)(f)):

    To improve our website and services, prevent fraud, ensure network security, and conduct direct B2B marketing to existing business contacts.

  • Legal obligation (Art. 6(1)(c)):

    To comply with applicable accounting, taxation, export control, or other statutory requirements.

  • Consent (Art. 6(1)(a)):

    For optional analytics cookies and newsletter subscriptions. You may withdraw consent at any time without affecting the lawfulness of prior processing.

• PURPOSES OF PROCESSING
  • Responding to product inquiries and providing technical support.
  • Processing membership registration and managing user accounts.
  • Delivering requested services, quotations, and business correspondence.
  • Facilitating supply chain management and logistics coordination.
  • Sending product updates, exhibition announcements, and B2B communications (where lawfully permitted).
  • Improving website functionality and user experience through analytics.
  • Analysing website usage to improve performance, content, and user experience.
  • Complying with legal and regulatory obligations.
  • Protecting the security and integrity of our systems.
• INTERNATIONAL DATA TRANSFERS

  Marwi operates globally with production and sales entities across Asia, Europe, and the Americas. When your personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through one or more of the following mechanisms:

  • European Commission Standard Contractual Clauses (SCCs) in accordance with GDPR Article 46(2)(c).
  • Adequacy decisions adopted by the European Commission where applicable.
  • Binding Corporate Rules where applicable within the Marwi Group.

  You may request a copy of the relevant transfer safeguards by contacting us using the details in Section 10 below.

• DATA RETENTION

  We retain personal data only for as long as necessary to fulfil the purposes described in this notice, or as required by applicable law:

  • Inquiry & contact data:

    Up to 3 years from last interaction, unless a business relationship is established.

  • Member account data:

    Duration of active membership plus 2 years following account closure.

  • Contractual & supply chain data:

    Minimum 7 years in compliance with accounting and tax regulations.

  • Technical & analytics data:

    Up to 26 months (Google Analytics default) or less where consent is withdrawn.

  • Cookie data:

    Session cookies expire when you close your browser; persistent cookies expire as specified in our Cookie Policy.

• COOKIES & TRACKING TECHNOLOGIES

  Our website uses the following types of cookies:

  • Strictly Necessary Cookies:

    Essential for website functionality (login session, language preference). No consent required.

  • Analytics cookies:

    Used to understand how visitors interact with our website (e.g., Google Analytics). Activated only upon your consent.

  • Preference Cookies:

    Remember your settings and choices to improve your experience.

  You can manage or withdraw cookie consent at any time via our Cookie Preference Centre or through your browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

• DATA SHARING & THIRD PARTIES

  We do not sell or rent your personal data. We may share data with:

  • Group companies:

    Marwi Group entities for internal business operations.

  • Service providers (processors):

    IT infrastructure, website hosting, CRM, logistics, and marketing service providers who process data only on our documented instructions.

  • Legal and regulatory authorities:

    Where required by law, court order, or to protect the rights and safety of Marwi, its employees, or the public.

  • Business transfer:

    In the event of a merger, acquisition, or asset sale, personal data may be transferred subject to equivalent data protection commitments.

  All third-party processors are contractually bound to process data solely on our instructions and to implement appropriate technical and organisational security measures.

• YOUR RIGHTS UNDER GDPR

  If you are located in the EEA, you have the following rights regarding your personal data:

  • Right of Access (Art. 15):

    Obtain confirmation of whether we process your data and receive a copy.

  • Right to Rectification (Art. 16):

    Request correction of inaccurate or incomplete personal data.

  • Right to Erasure (Art. 17):

    Request deletion of your data where there is no compelling reason for continued processing ("right to be forgotten").

  • Right to Restriction (Art. 18):

    Request that we restrict processing of your data in certain circumstances.

  • Right to Portability (Art. 20):

    Receive your data in a structured, machine-readable format and transmit it to another controller.

  • Right to Object (Art. 21):

    Object to processing based on legitimate interests or direct marketing at any time.

  • Right to Withdraw Consent (Art. 7(3)):

    Withdraw consent at any time without affecting prior lawful processing.

  • Right to Lodge a Complaint (Art. 77):

    Lodge a complaint with your local EU supervisory authority if you believe your rights have been infringed.

  To exercise any of the above rights, please submit a written request to our privacy contact listed in Section 10. We will respond within 30 days. In complex cases this may be extended by a further 60 days, with prior notice provided.

• SECURITY MEASURES

  We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include TLS/SSL encryption for data in transit, access control policies, regular security assessments, and staff training on data protection obligations.

• AUTOMATED DECISION-MAKING & PROFILING

  We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals within the meaning of GDPR Article 22.

• CHANGES TO THIS NOTICE

  We may update this GDPR notice periodically to reflect changes in law, regulatory guidance, or our data practices. The revised date at the top of this page indicates when the notice was last updated. Material changes will be communicated through a prominent notice on our website.

CONTACT OUR PRIVACY TEAM

For any GDPR-related enquiries, data subject requests, or to exercise your rights, please contact:

Marwi Industrial Co., Ltd. – Privacy Officer
56 Chongyi 3rd Road, Dajia District, Taichung City 437, Taiwan
Email: sales@marwi.com.tw
Tel: +886 4 26881234

You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement within the EU/EEA.