Section 32

The data subject has the right to object the collection, use, or

disclosure of the Personal Data concerning him or her, at any time,
in the following circumstances:

(1)Where the Personal Data is collected with the exemption to consent

requirements under section 24 (4) or (5), unless the Data Controller can prove that:

(a)the collection, use, or disclosure of such Personal Data can be

demonstrated by the Data Controller that there is a compelling legitimate ground;

(b)the collection, use, or disclosure of such Personal Data is carried

out for the establishment, compliance or exercise of legal claims, or defense of legal claims;

(2)the collection, use, or disclosure of such Personal Data is for the purpose of direct marketing;

(3)the collection, use, or disclosure of the Personal Data for the purpose of scientific,

historical or statistic research, unless it is necessary to performance of a task carried
out for reasons of public interest by the Data Controller.

In the event that the data subject exercises his or her right to object in paragraph one,

the Data Controller shall no longer be able to collect, use, or disclose such Personal Data,
and the Data Controller shall immediately distinguish such personal data clearly from the
other matters at the time when the data subject gives the notice of objection to the Data Controller.

In the event that the Data Controller rejects the objection by the reasons in (1)

(a) or (b) or (3), the Data Controller shall record such rejection of objection request
together with reasons in the record as prescribed in section 39 .