1. Collector
The collector for this campaign is OEN. For privacy rights or questions about this notice, email support@oen.tw with the minimum information needed to identify the request.
2. Purposes of collection
- Receive and review OEN Switch Stories submissions and verify organizational representation, the public post, and paid-plan eligibility.
- Detect duplicate applications involving the same domain or post, prevent fraud and abuse, and protect campaign and system security.
- Request additional information, notify review and fulfillment results, provide the transaction-fee or subscription-fee reward selected, and administer its 180-day use period.
- Handle support, disputes, audits, and legal obligations. OEN uses a public post for active reposting only when separate, optional marketing consent has been provided.
3. Categories of personal data
- Contact and identity data: OEN account email, submission reference, and necessary communication records.
- Organization data: organization domain, relationship to or representation of that organization, and paid-plan verification result.
- Public post data: post URL, public content, public account identifier, and viewability status.
- Social platform data: the selected X, Facebook, Threads, Instagram, or LinkedIn platform and normalized identity.
- Campaign and reward data: credit type, submission and review status, additional information, fulfillment reference, and audit events.
- Consent and technical security data: disclosure confirmation, terms/privacy version and time, marketing consent and time, plus idempotency, reCAPTCHA, request identifiers, hashes, and necessary security records.
4. Period, location, recipients, and methods of use
- Period: from submission for as long as needed to operate the campaign, administer the 180-day credit, provide support, audit, secure the service, and meet legal retention duties. Data is deleted or de-identified under the retention policy when those purposes end.
- Location: where OEN and its compliant cloud or notification providers deliver the service. Where processing crosses borders, safeguards required by applicable law will be used.
- Recipients: authorized OEN campaign, support, finance, legal/audit, and security personnel; cloud, email, verification, and system providers engaged by OEN where needed for these purposes; and authorities where law requires.
- Methods: automated and non-automated receipt, normalization, hashing, storage, query, manual review, communication, notification, and audit. Public posts remain governed by each platform's visibility and policies.
- Marketing consent is optional and may be withdrawn; it is not a condition of approval or credit. OEN actively reposts only content that has been approved, while consent has not been withdrawn, and while the PRIVATE general-data retention period remains open. OEN stops initiating new repost uses no later than 12 months after the terminal decision. Without consent, or after withdrawal, OEN will not actively repost the post for this campaign purpose.
5. Your rights
- Subject to applicable law, you may request access or review, a copy, correction or completion, cessation of collection/processing/use, and deletion of your personal data.
- To exercise a right or withdraw marketing consent, email support@oen.tw with your submission reference and the minimum information needed to verify identity. OEN may verify identity, charge necessary costs where lawful, and explain any lawful limit on the request.
- Withdrawal stops new repost uses after the withdrawal. It does not invalidate prior lawful processing based on consent or processing needed for campaign delivery, billing, security, or legal duties.
6. Impact of not providing data
If required fields or verification data are missing, incomplete, or cannot be verified, OEN cannot accept or review the submission, request additional information, or provide the credit. Marketing consent is optional; declining it does not affect review, paid-plan verification, or reward fulfillment.
7. Retention and deletion
PRIVATE general data—including email, domain, original post URL, review notes, and consent times/versions—is assigned a TTL exactly 12 months after the submission reaches a terminal decision (REJECTED or FULFILLED). The underlying data service may remove an expired item asynchronously rather than immediately. The 180 days is the credit use period, not the personal-data retention period.
This campaign does not store a separate long-term repost license. Marketing-consent evidence uses the same TTL as other PRIVATE general data; after expiry it is removed or de-identified, and OEN initiates no new repost use. A de-identified permanent profile, status audit, and fulfillment evidence may remain for duplicate prevention, billing, and legal duties, but they do not contain the original email, domain, post URL, or consent content.