The Group Strive Electronic Co., LTD focuses on post-packaging processes, including testing, inspection, and packaging services.
We aim to be the most trusted partner in the semiconductor supply chain,delivering consistent quality and efficiency to empower customer success.
By integrating sustainability into our operations, we strive to create long-term value for customers, employees, and society.
We are committed to providing reliable products through honest collaboration,
ensuring customer satisfaction with highly flexible and efficient processes that respond rapidly to market needs.
The Group Strive Electronic Co., LTD actively embraces corporate social responsibility, embedding sustainable development into daily operations.
We prioritize employee well-being, social contribution, and environmental stewardship,
fostering a balanced and responsible business model that benefits both the company and the community.
We support global environmental initiatives through actions such as energy conservation, carbon reduction, resource recycling, and sustainable operations.
Our commitment to the environment reflects our responsibility to future generations,as we work toward building a cleaner and more sustainable world.
The Group Strive Electronic Co., LTD upholds the principles of integrity, practicality, and sustainable management. The Company places great importance on corporate governance, legal compliance, risk control, and the implementation of ethical conduct standards, and is committed to establishing a transparent, fair, and responsible business environment.
To implement ethical corporate management, the Company has adopted the following measures:
1.Complying with applicable laws and regulations, as well as the Company’s internal management systems.
2.Implementing Company policies, professional ethics, and codes of conduct.
3.Establishing mechanisms for risk identification, assessment, and control.
4.Establishing reporting channels for illegal, non-compliant, or improper conduct, and protecting the lawful rights and interests of whistleblowers and relevant personnel in accordance with applicable laws.
To strengthen internal and external reporting and feedback channels, the Company has established the following reporting channels for ethical corporate management matters:
Reporting Hotline: +886-3-520-6089 ext. 3102
Reporting Email: website@gsetek.com.tw
Reportable matters include, but are not limited to, violations of laws and regulations, violations of Company rules, breaches of ethical corporate management principles, improper transfer of benefits, fraud, conflicts of interest, improper disclosure of information, or any other circumstances that may harm the rights and interests of the Company, customers, suppliers, employees, or stakeholders.
The Company will assign case numbers, create records, investigate, and handle accepted reports according to the nature of each case, and will retain relevant records in accordance with applicable laws and Company regulations. When necessary, the Company will establish a special task force or refer the case to the relevant responsible unit for investigation, and report the matter to the appropriate responsible supervisor or relevant management level.
To facilitate case verification, whistleblowers are encouraged to provide specific evidence, relevant personnel, the time, place, and details of the incident, as well as their name and contact information. The Company will take confidentiality measures to protect the identity of the whistleblower and the content of the report, and will protect the lawful rights and interests of whistleblowers and relevant personnel in accordance with applicable laws.
1. Purpose
To ensure the confidentiality, integrity, and availability of the information assets owned or managed by Group Strive Electronic Co., LTD (hereinafter referred to as “the Company”), and to comply with the requirements of competent authorities, interested parties, the Personal Data Protection Act, its subordinate laws and regulations, and other applicable laws and regulations, this Policy is hereby established to protect the Company’s information assets from intentional or accidental threats, whether internal or external, and to implement the protection and management of information security and personal data.
2. Scope
All information equipment and information systems within the Company are subject to this Policy. The scope includes the following:
2.1 This Policy applies to the systems and personal data processing activities involving all employees of the Company, outsourced service providers, data users (including custodians), visitors, and other relevant parties.
2.2 The scope of information and communications security management covers four major domains: organization, personnel, physical, and technical. The purpose is to prevent various potential risks to the Company arising from improper use, disclosure, alteration, or destruction of data due to human error, intentional acts, natural disasters, or other factors.
3. Policy
The purpose of the Company’s Information and Communications Security and Personal Data Protection Policy is to “effectively utilize resources to ensure the confidentiality, integrity, and availability of information assets, and to safeguard the security and privacy of users’ personal data.” Through the implementation of this Policy, the Company aims to achieve the following objectives:
3.1 Establish a secure and reliable information environment to ensure the security of the Company’s data, systems, equipment, and networks, thereby safeguarding the continuity of the Company’s business operations.
3.2 Protect the security of the Company’s business services by ensuring that information may only be accessed by authorized personnel in accordance with approved access privileges, thereby maintaining its confidentiality.
3.3 Protect the security of the Company’s business services by preventing unauthorized modification of information, thereby ensuring its accuracy and integrity.
3.4 Establish a Business Continuity Plan to ensure the continuous operation of the Company’s information and business services.
3.5 Ensure that the execution of all business services complies with applicable laws and regulations stipulated by competent authorities and relevant interested parties, as well as contractual requirements of business partners.
3.6 Protect the security of personal data related to the Company’s business operations and mitigate the risks of theft, alteration, damage, loss, or disclosure resulting from external threats or improper management and use by internal personnel.
3.7 Enhance the Company’s capabilities in the protection and management of personal data, reduce operational risks, and establish a trustworthy environment for personal data protection and privacy.
3.8 Conduct regular risk assessments of personal data processing activities to identify and determine the level of acceptable risk.
4. Responsibilities
4.1 Information and communications security is the shared responsibility of all employees of the Company, and all employees shall jointly maintain and safeguard information security.
4.2 The Company shall establish an “Information and Communications Security” organization to coordinate and promote relevant information security matters.
4.3 Management shall actively participate in and support the Information and Communications Security Management System, and shall implement this Policy through appropriate standards and procedures.
4.4 All employees of the Company, outsourced service providers, data users (including custodians), visitors, and other relevant parties shall comply with this Policy.
4.5 All employees of the Company, outsourced service providers, and data users (including custodians) are responsible for reporting information and communications security incidents or vulnerabilities through appropriate reporting mechanisms.
4.6 Any act that endangers information and communications security or personal data protection shall, depending on the severity of the circumstances, be subject to civil or criminal liability, or disciplinary action in accordance with the relevant regulations of the Company.
5. Management Metrics
To ensure the achievement of the organization’s information and communications security management objectives and performance targets, maintain consistency with the objectives of the Information and Communications Security Policy, and ensure the effective implementation of the Information and Communications Security Management System, the Company shall establish an “Information and Communications Security Objectives Achievement Plan.”
6. Information and Communications Security Management Objectives
6.1 Information and communications security is one of the key elements for the Company to achieve its critical business objectives. The Company shall maintain an appropriate level of information and communications security and implement relevant security controls to ensure the confidentiality, integrity, and availability of information assets throughout their entire lifecycle.
6.2 Maintain consistency in the information and communications security of the Company’s operating environment while balancing information security requirements with the need for information sharing.
6.3 All information and communications security management requirements shall comply with applicable laws, regulations, and policy requirements related to information and communications security.
6.4 All measures related to information operations shall ensure the security of the Company’s information and communications and prevent the leakage or loss of critical information.
6.5 Information assets, including software, hardware, network communication facilities, databases, and other related assets, shall be appropriately protected against damage caused by unauthorized access or operational negligence. Relevant disaster recovery plans shall be established and tested regularly.
6.6 Information and communications security awareness and training shall be conducted regularly to strengthen awareness and understanding of the Information and Communications Security Policy.
7. Management Review
This Policy shall be reviewed by management at least once a year to reflect the latest developments in government laws and regulations, technology, the operating environment, emerging issues, and business operations, thereby ensuring the Company’s ability to maintain business continuity.
Any information and communications security-related feedback from interested parties, including the Information and Communications Security organization, competent authorities (or as required by applicable laws and regulations), experts, and scholars, shall be included as discussion topics in management review meetings.
8. Implementation
This Policy shall take effect upon being developed and approved by the Information and Communications Security and Personal Data Protection Management Organization. The same procedure shall apply to any amendments to this Policy.
To protect the security and privacy of personal data, The Group Strive Electronic Co., LTD has established this Privacy Policy in accordance with applicable personal data protection laws and the Company’s internal management systems. This Policy explains how the Company collects, processes, uses, and protects personal data.
1. Scope of Application
This Policy applies to all business activities of the Company, including but not limited to:
1.Customer and supplier data management.
2.Employee personal data management.
3.Internal production and quality system management.
4.The official website and other information systems.
2. Categories of Personal Data Collected
The personal data that the Company may collect includes, but is not limited to:
1.Basic information: name, job title, company name, national identification number, or other necessary identification information.
2.Contact information: telephone number, email address, and address.
3.Transaction information: orders, shipments, account reconciliation, and related business transaction data.
4.System information: IP address, login records, and usage records.
5.Other information collected as required by laws, contracts, or business necessity.
3. Purposes of Personal Data Collection
The Company collects personal data for the following purposes:
1.Customer service and order processing.
2.Supply chain management and procurement operations.
3.Employee management and human resources operations.
4.Quality traceability, product history management, and abnormality investigations.
5.Legal compliance, customer audits, and internal management requirements.
4. Use of Personal Data
Personal data collected by the Company will be used only for specified purposes and within the necessary scope of business operations, in accordance with the following principles:
1.Personal data will not be arbitrarily provided to third parties, except where required by law, contractual obligation, or with the consent of the data subject.
2.Access will be granted only to necessary personnel based on job requirements.
3.Personal data will be used only within the necessary scope of internal operational management, system access management, customer service, supply chain management, quality traceability, and legal compliance.
5. Data Protection Measures
The Company adopts appropriate security measures to protect personal data, including but not limited to:
1.Account, password, and access control management.
2.System access restrictions.
3.Firewalls, antivirus measures, and information security protection mechanisms.
4.Backup and data retention management.
5.Employee training and internal management systems.
6. Data Retention Period
Personal data will be retained for the duration necessary to fulfill the purposes for which it was collected, or in accordance with legal requirements, contractual agreements, or the Company’s internal management needs. Upon expiration of the retention period or when retention is no longer necessary, the Company will delete, cease using, or anonymize the personal data by appropriate means.
7. Recipients of Data Disclosure
Except as required by law or contractual obligation, the Company will not arbitrarily provide personal data to third parties. However, personal data may be provided within the necessary scope under the following circumstances:
1.Where required by law or for lawful investigation by government authorities.
2.Where necessary for business cooperation with partners, such as shipment, logistics, information services, customs declaration, or other outsourced operations.
3.With the consent of the data subject.
8. Rights of Data Subjects
In accordance with applicable personal data protection laws, data subjects may exercise the following rights with respect to their personal data held by the Company:
1.To make inquiries or request access.
2.To request copies.
3.To request supplementation or correction.
4.To request cessation of collection, processing, or use.
5.To request deletion.
Upon receiving such requests, the Company will process them in accordance with applicable personal data protection laws and the Company’s internal procedures.
9. Policy Amendments
The Company reserves the right to amend this Policy at any time. Any amendments will be announced on the Company’s website or through other appropriate channels.
10. Contact Information
For any questions regarding the Company’s ethical corporate management, feedback channels, information security policy, privacy policy, or the collection, processing, use, and protection of personal data, please contact the Company through the following channels:
Contact Department: Information Management Department
Email: website@gsetek.com.tw
Telephone: +886-3-520-6089 ext. 3000