OSOM System

Orange TPMS Personal Data Processing and Privacy Statement
Last Updated: September 8, 2026
Version: 1.0

Taiwan Orange Electronic Co., Ltd. (hereinafter referred to as “Orange”) values your personal information and privacy. This Notice is intended to explain how Orange collects, uses, stores, and protects your personal data when you access our appointment services, or when partner tire shops use the Orange TPMS system, vehicle registration document recognition function, and related services.

1. Data Controller

The data controller for the processing of personal data described in this Privacy Notice is:
Taiwan Orange Electronic Co., Ltd.
Address: 5F, No. 29, Keya Rd., Central Taiwan Science Park, Taichung 42881, Taiwan
Privacy Contact Email: mailto:privacy@orange-electronic.com
Telephone: +886-4-2560-2766
Data Protection Officer (DPO) Contact Email: mailto:privacy@orange-electronic.com

Representative in the European Union:
Orange Electronic Netherlands B.V.
Address: Utrecht Businesspart Netherlands 115, 3584BH Utrecht, Netherlands
Email: mailto:privacy@orange-electronic.com

2. Sources of Personal Data

Orange does not obtain all personal data directly from you. When you visit a partner tire shop to receive TPMS, tire, or related vehicle services, the tire shop may use the TPMS programming tool and necessary systems provided by Orange to take a photograph of your vehicle registration document and transmit the relevant data to the systems used by Orange. Orange may also obtain the information you provide directly through appointment/service systems provided by Orange or its partner tire shops.
Therefore, the main sources from which Orange obtains personal data include:
- The partner tire shop where you receive the services
- The Orange TPMS Tool used by the tire shop
- The information you provide through appointment/service systems powered by Orange or its partner tire shops

3. Categories of Personal Data We Process

Depending on the specific services you request or utilize, Orange may collect and process the following categories of personal data:
- Vehicle Identification and Registration Data: Vehicle registration numbers (license plate numbers), Vehicle Identification Numbers (VIN), scanned copies or images of vehicle registration documents, vehicle manufacturer, model, variant, production year, engine specifications, axle loads, and any other technical parameters extracted from the registration certificate.
- TPMS and Technical Service Data: Tire Pressure Monitoring System (TPMS) sensor IDs, protocol versions, sensor status, pressure and temperature readings, tire dimensions, speed/load indices, wheel rim specifications, technical diagnostic codes, and maintenance histories.
- Appointment and Customer Contact Data: Full name, phone number, email address, preferred appointment slots, and communications related to appointments.
- Metadata and Technical Logs: IP addresses, timestamps of data submission, system log files, and transactional records generated during the use of our services.

4. Purposes and Legal Bases for Processing

We process your personal data in strict compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) for the following purposes:
- Performance of Contract and Provision of Services (Art. 6(1)(b) GDPR): Managing, confirming, and executing service appointments; accurately identifying the vehicle to select, program, install, and calibrate the appropriate TPMS sensors, tires, and wheel assemblies; fulfilling our contractual warranties and providing customer and technical support.
- Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Complying with statutory retention and documentation duties under German commercial and tax laws (e.g., § 257 Handelsgesetzbuch – HGB and § 147 Abgabenordnung – AO); fulfilling statutory product safety and recall monitoring obligations.
- Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring IT security, system integrity, fraud prevention, and operational troubleshooting; optimizing our appointment management platform and technical workflows in collaboration with partner workshops; establishing, exercising, or defending legal claims (e.g., defense against product liability claims within statutory limitation periods).
- Consent (Art. 6(1)(a) GDPR): Processing specific data for direct marketing and profiling where you have provided explicit prior consent (see Section 8).

5. OCR Recognition of Vehicle Registration Documents

In order to convert the contents of vehicle registration documents into digital data, Orange engages the following European service provider to provide OCR recognition services for vehicle registration documents:
Autosiastik Software GmbH, Germany
Autosiastik Software GmbH processes the relevant vehicle registration document data solely in accordance with the applicable data processing arrangements and Orange’s lawful instructions, and provides OCR recognition services for vehicle registration documents.
Orange may also use other vetted IT, cloud, or technical service providers. Such service providers may process personal data only to the extent permitted by the applicable contracts, Orange’s lawful instructions, and applicable laws.

6. European Cloud and Remote Authorized Access

The relevant personal data is stored in Orange’s Cloud/database environment located in Europe.
For system administration, technical support, system maintenance, and other legally authorized activities that are necessary for business purposes, authorized personnel of Orange and its affiliated companies may remotely access the relevant personal data from their respective locations for necessary business purposes.
Orange will restrict access to personal data based on business necessity and implement appropriate technical and organizational security measures, including appropriate authentication, access controls, and access logs, to prevent unauthorized access, use, or disclosure.
Where such access involves countries or regions outside the European Economic Area (EEA), Orange will implement the applicable safeguards for international data transfers in accordance with Chapter V of the GDPR, including the applicable safeguards under GDPR Article 46 and necessary supplementary security measures. If you wish to obtain further information about the applicable safeguards for international data transfers, you may contact Orange through the contact details provided in this Privacy Notice.

7. Retention Period for Personal Data

Orange follows the GDPR principle of limiting the retention period for personal data and retains personal data only for the period necessary to achieve the specific purposes of processing. Different categories of data and processing purposes may be subject to different retention periods. Where applicable laws require a longer retention period, Orange will comply with such legal requirements.
Original data obtained through specific means (for example, vehicle- and service-related data), where the data identification or conversion process has been completed and there is no longer a necessity to retain such data, will be deleted or irreversibly anonymized by Orange after a reasonably necessary period.
If you consent to the use of your personal data for email marketing or related personalized analysis / profiling, Orange will process such data for as long as the relevant processing purpose remains necessary and there is a valid legal basis for such processing. After you withdraw your consent, Orange will cease the relevant processing based on such consent. Where specific data is subject to another independent lawful basis, Orange may continue to retain such data to the extent and for the period necessary under that lawful basis.
When personal data is no longer necessary for the original processing purposes and there is no other lawful basis for continued retention, Orange will, in accordance with applicable laws, delete, destroy, or irreversibly anonymize such personal data, and will implement corresponding retention and deletion rules according to different categories of data and processing purposes.
When determining the actual retention period, Orange will consider factors including: whether the relevant processing purposes have been fulfilled, whether the service relationship is still ongoing, whether the relevant consent remains valid, whether there is a statutory retention obligation, whether it is necessary to handle legal claims or disputes, and the necessity of maintaining information security and compliance records.

8. Email Marketing and Profiling

Orange will use your personal data for the following additional purposes only after you have provided your explicit and voluntary consent, based on your separate choices.
(1). Email Marketing: If you consent, Orange may use your personal data and email address to send you marketing information regarding Orange’s products and services by email. The legal basis for this processing is GDPR Article 6(1)(a) — Your consent. Consent to email marketing and consent to profiling are separate and independent choices.
(2). Profiling: If you provide separate consent, Orange may use your personal data to conduct personalized analysis and profiling relating to customer preferences, usage behavior, or other matters related to Orange’s products and services. The legal basis for this processing is GDPR Article 6(1)(a) — Your consent.
You may separately choose whether to consent to email marketing and profiling. Your consent is entirely voluntary. If you do not consent to email marketing or profiling, this will not affect your ability to receive appointment, TPMS, or tire services. You may withdraw your consent to either of the above at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of valid consent before its withdrawal. To withdraw your consent, please contact: mailto:privacy@orange-electronic.com

9. Explanation of Profiling

If you consent to profiling, Orange may analyze appointment, vehicle, TPMS, tire, or other relevant data provided by you or generated during the service process, in order to understand your needs, preferences, or usage behavior in relation to Orange’s products or services.
If you separately consent to email marketing, Orange may, within the scope of your consent, use the results of such analysis to provide you with information about Orange’s products and services that may be more relevant to your needs or preferences.
Unless separately and expressly informed and provided with an appropriate legal basis, Orange will not make solely automated decisions based on the above profiling that produce legal effects concerning you or similarly significantly affect you, as referred to in GDPR Article 22.

10. Recipients of Personal Data

Depending on the actual service requirements, your personal data may be provided or made accessible to:
- Authorized personnel of Orange and its affiliated companies
- Partner tire shops providing the relevant services
- Autosiastik Software GmbH (the vehicle registration document OCR service provider in Germany)
- Cloud and IT service providers used by Orange
- Lawfully authorized technical support and system maintenance service providers
- Competent authorities, courts, or law enforcement agencies where required by law
Orange and its affiliated companies only permit personnel who have a business need and are appropriately authorized to access the relevant personal data. Orange requires entrusted data processing service providers to process personal data in accordance with applicable GDPR data processing obligations, relevant contractual requirements, and Orange’s lawful instructions. If any of the above recipients or authorized personnel are located outside the European Economic Area (EEA), Orange will implement appropriate safeguards in accordance with applicable GDPR requirements concerning international transfers of personal data.

11. Your Rights under the GDPR

Subject to the conditions set out under the GDPR, you have the following rights:
- Right of Access: To know whether Orange processes your personal data and to obtain access to such data.
- Right to Rectification: To request the correction of inaccurate or incomplete personal data.
- Right to Erasure: To request the deletion of your personal data where the statutory conditions are met.
- Right to Restriction of Processing: To request the restriction of processing in certain circumstances.
- Right to Data Portability: Where applicable, to receive your personal data in a portable format.
- Right to Object: To object to the processing of your personal data where permitted under the applicable legal basis.
- Right to Withdraw Consent: For email marketing and profiling where consent is the legal basis, you may withdraw your consent separately at any time.
Where your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time, including profiling to the extent that it is related to such direct marketing. Once you object to direct marketing, Orange will no longer process your personal data for such direct marketing purposes.

12. How to Exercise Your Rights

You may contact Orange through the following contact details:
Taiwan Orange Electronic Co., Ltd.
Email: mailto:privacy@orange-electronic.com
Address: 5F, No. 29, Keya Rd., Central Taiwan Science Park, Taichung 42881, Taiwan
Telephone: +886-4-2560-2766
You may also contact Orange through the European Union representative listed in this Privacy Notice.
To prevent personal data from being disclosed to unauthorized persons, Orange may require you to verify your identity to the extent reasonably necessary.

13. Right to Lodge a Complaint with a Data Protection Authority

If you believe that Orange’s processing of your personal data violates the GDPR, you have the right, in accordance with the GDPR, to lodge a complaint with a competent data protection authority in the European Union / European Economic Area (EEA).

14. Changes to This Privacy Notice

Orange may update this Privacy Notice due to changes in the services provided, applicable legal requirements, or changes in the way personal data is processed. In the event of material changes, Orange will provide updated information by appropriate means in accordance with applicable laws.
The latest version will be published at: www.orange-electronic.com/orange_privacy.pdf

Online Shopping Terms of Service

【Explanation and Consent】

1. You are welcome to use the OSOM system - Orange Electronic TPMS Management System (hereinafter referred to as this website), we will provide users with online shopping services on this website in accordance with the terms of this online shopping service. When you complete the user registration procedures on this website or start to use this website to shop online, it means that you have read, understood and agreed to accept all the terms of this online shopping service. If you have any questions, please feel free to contact us at ______________.
2. You agree not to use the online shopping service of this website for any illegal purpose or in any illegal manner, and promise to abide by the relevant laws and regulations of your country and the international practice of using online shop.
3. You have understood and agreed that our service personnel can order products on this website according to your instructions after obtaining your consent when shopping for the first time. Such ordering operations are based on your consent and supervision. You agree that such ordering operations are equivalent to the results of your own use of this website to order products, and you promise that our service personnel are not responsible for any ordering operations performed with your consent.
4. You agree that whether you operate or order products on this website by our service personnel according to their instructions, if there is any behavior that we deem inappropriate and causes trouble or damage, we may refuse the transaction or disqualify the user as the case may be.

【Important Notice】

1. If there is any error in the product pricing and other advertisements, promotions or related information on this website, we will make corrections through official announcements at any time. Please pay attention to the announcements at all times. You must purchase in accordance with the quantity, specifications, pictures, descriptions, prices or relevant transaction conditions indicated on the products on this website. If the aforementioned indications have obvious or identifiable errors, we have the right to refuse or revoke them after you complete the ordering process.
2. After you use this website to order goods, if you have any questions about the order, please contact our service staff____________________.

【Disclaimer】

1. All functions provided by us on this website are provided and used according to the current status of the functions at that time, and we do not undertake any express or implied guarantee responsibility for their performance, integrity, security, correctness, etc.
2. We will maintain the normal operation of this website in a manner and technology that meets the current reasonable expectations. If any direct or indirect damage is caused due to Force Majeure, we have the
3. We reserve the right to change the content of these online shopping service terms by adding or revising at any time. Any changes will be announced on this website, and we will no longer notify users individually. If the user continues to use the online shopping service on this website after the change, it will be deemed that you have understood, agreed and accepted the change; if you do not agree, you should immediately terminate the use of the online shopping service of this website.
4.If there is anything not covered in this Online Shopping Term of Service, it will be supplemented and handled in accordance with relevant laws.