Purpose of Collecting and Keeping Personal Data 收集及持有個人資料的目的

In order to cater to the needs of Member(s) or client(s) and provide them with relevant activities, programs, and services, the Centre will gather personal data. This may include, but is not limited to, name, correspondence address(es), contact telephone number(s), email address(es), photo record(s), and video record(s). The collected data will be utilized for the development, monitoring, promotion, and review of activities, programs, and services, as well as for the management and administration of membership.

為向會員或服務對象提供相關活動、課程或服務，中心將收集相關人士的個人資料。資料包括但不限於姓名、通訊地址、聯絡電話、電郵地址、相片及影片。收集所得的資料將用於活動和服務的策劃、管理、推廣和檢討；亦將用於與會藉相關的行政及管理方面。

Use of Personal Data related to Direct Marketing 使用個人資料作直接促銷

With the consent of Member(s) or client(s), the Centre will periodically send them updates and promotional materials regarding the availability of activities, programs, and services. This includes information about seminars and events, discounts and offers, networking opportunities, and fundraising initiatives. Communication will be conducted through various channels such as direct mail, email, mobile phones, and social media, utilizing Member(s) or client(s)' name and contact details, including correspondence addresses, contact telephone numbers, and email addresses. The content of the communications will be tailored based on the information collected in Member(s) or client(s)' profiles, specifically relating to the activities, programs, or services they have registered or enrolled in. Member(s) or client(s) always retain the right to modify their preferences regarding the receipt of marketing materials. They can do so by submitting a written unsubscribe request via post to the Office of Member and Community Services at any time.

在獲會員或服務對象的同意下，中心將定期向他們發送有關活動、計劃和服務的資料。這包括研討會、活動、折扣和優惠、交流、籌款等信息。通訊將通過直郵、電子郵件、手機和社交媒體等渠道發佈。這將使用到會員或服務對象的姓名和聯繫方式，包括通訊地址、聯繫電話、和電郵地址。通訊內容將根據收集到的會員或對象的個人資料而制定，當中涉及曾參與的活動、計劃或服務。會員或對象必然享有修改是否接收促銷信息的權利，並可隨時以書面的方式寄出退出促銷名單的要求。

Disclosure of Personal Data 個人資料的披露

The Centre places great emphasis on maintaining the confidentiality of personal data provided by Member(s), client(s) or participants. However, there may be instances where the Centre needs to disclose, transfer, or assign the collected personal data to external third parties in order to fulfill the intended purpose for which the data was collected. In such cases, the personal data will only be made accessible to individuals within the Centre or designated individuals on a need-to-know basis.

Typically, the Centre may disclose, transfer, or assign personal data to agents, contractors, or third-party service providers engaged by the Centre to deliver services on behalf of the Centre. Examples of such entities include insurance providers, professional bodies, sports associations, training organizations, and others. Additionally, the Centre may be obligated to disclose personal data to comply with legal requirements, guidelines, or codes of practice.

It is important to note that personal data may be disclosed, transferred, or assigned both within and outside of Hong Kong. While the Centre takes appropriate measures to safeguard the privacy of personal data, it should be recognized that the data protection laws in the receiving jurisdiction may not be substantially similar to, or serve the same purposes as, the PDPO.

中心非常重視會員、對象或活動參加者所提供個人資料的保密性。然而，為達到收集及持有個人資料原來的目的，中心或需要將所收集的個人資料披露、轉移或委託予外間的第三方。在此情況下，個人資料只會被中心內部或指定的個別人士使用，並按「需要知道」的原則（need-to-know basis）處理。

在通常的情況下，中心或將個人資料披露、轉移或委託給代理商、承包商或中心所委託提供服務的第三方；例如保險機構、專業團體、體育協會、培訓機構等。此外，中心亦有義務在法律要求、法律指引或實務守則的規定下披露個人資料。

需注意的是，個人資料可能在香港境內外被披露、轉移或委託。雖然中心已採取適當的措施保護個人資料。但資料提交者應知道，數據接收方的所在國家，在保護個人資料的法例上，與本港的《個人資料（私隱）條例》存有實質差異；其法例的目的亦不盡相同。

Security of Personal Data 個人資料的保安

The Centre is committed to implementing measures that ensure the protection of personal data from unauthorized or accidental access, disclosure, erasure, loss, modification, processing, transmission, or use. When there is a need to disclose, transfer, or assign personal data to external third parties, the Centre will take necessary precautions to safeguard the privacy of the data involved. For instance, the Centre will require its service providers to maintain strict confidentiality when handling any personal data they come into contact with. These steps are taken to uphold the privacy and security of the personal data entrusted to the Centre.

中心將採取適當的措施以保護其個人資料，免遭未經授權的存取、披露、刪除、遺失、修改、處理、傳輸或使用。當中心需向外間的第三方披露或轉移個人資料時，中心亦會採取適當措施保護所被披露或轉移的個人資料，如要求服務供應商或合作單位承諾保密因活動、課程或服務而獲得的個人資料。