Skip to content

About Us

About Us

Privacy Policy Statement And Personal Information Collection Statement

A. Privacy Policy Statement

  1. Purpose
    Hong Kong Organic Resource Centre (the “Centre” or “we”) respects the privacy of personal data and is committed to complying with the requirements of the applicable laws including the Personal Data (Privacy) Ordinance (the “PDPO”) and the Data Protection Principles contained in it.
    This document comprises two parts, the Privacy Policy Statement (Part A), a general statement about our privacy policies and practices in relation to the personal data we handle, and the Centre’s personal information collection statement (Part B) (“PICS”). When or before we collect personal data from you as a Data Subject, the PICS will be provided to you in accordance with the PDPO.
  2. Collection of personal data
    1. We collect personal data for lawful purposes and by lawful and fair means. The data we collect in relation to a specified purpose shall be adequate but not excessive in respect of the purpose. Upon and before collection of data from an individual (“Data Subject” under the PDPO), we will explicitly inform him/her:
      1. the purpose(s) for which the data is to be collected and the groups of persons to whom the data may be transferred;
      2. whether it is obligatory or voluntary to supply the data, and the consequences of not supplying obligatory data;
      3. his/her right to request access to and correction of data held by us; and
      4. the person responsible for handling data access and correction requests.
    2. We collect personal data of Data Subjects in the course of our daily operations. We may also collect personal data of other individuals who are also Data Subjects. Our handling of this personal data, unless specified otherwise in our communication with the Data Subjects, follows the terms of this statement and the relevant PICS.
    3. We may collect personal data directly from a Data Subject when he/she interacts with us.
    4. We may also collect personal data of a Data Subject indirectly from third parties.
    5. The Centre’s PICS in Part B states:
      1. the kind of Data Subjects’ personal data collected or held by the Centre,
      2. the purposes for which we may use such personal data, and

      The personal data collected by the Centre will be used or disclosed to third parties for the purposes:

      1. for which it is collected,
      2. as specified in the PICS, or
      3. as required or permitted by the PDPO and law.
    6. Where the Centre collects personal data from a Data Subject under the age of 18, we will request the individual to indicate that he/she has consulted his/her parents or such person(s) having parental responsibility for him/her on the contents of this entire document and understands the matters set out herein before providing his/her personal data to the Centre.
  3. The Centre’s website
    1. Information is collected from Data Subjects who visit the Centre’s web portal.
    2. The Centre will normally not use cookies on its website for storage or tracking of users’ information and preferences.
  4. Accuracy and duration of retention of personal data
    We take all reasonably practicable steps to ensure that the personal data collected and retained is accurate. Personal data will be retained in accordance with our prevailing policies and no longer than is necessary for the fulfilment of the purposes for which it is collected or to which the Data Subject has given consent, except for the purposes of fulfilling legal obligations or with subsisting reasons. In some but limited circumstances, certain data may be retained indefinitely, for example, regarding a Data Subject’s participation in some of the Centre’s events or activities which we sometimes record and preserve as part of the Centre’s overall historical records and organisational archives.
  5. Security of personal data
    The Centre takes all reasonably practicable steps and implements internal guidance to ensure that personal data held is protected against unauthorised or accidental access, processing, erasure or other use.
  6. Information to be generally available
    We will generally be able to provide upon request the following information in relation to personal data collected and processed by us:

    1. the kinds of personal data held;
    2. the main purposes for which personal data is used; and
    3. our policies and practices in relation to the handling of such personal data.
  7. Access to personal data and data correction requests
    A Data Subject also has the right to request correction of his/her personal data that is inaccurate at no charge by writing to our HR Officer or Manager.
  8. Amendments and language
    This Privacy Policy Statement and the following PICS are subject to review and change from time to time. Please contact us or visit our website for the latest Privacy Policy Statement and PICS.

B. Personal Information Collection Statement (PICS)

(This PICS shall be read in conjunction with the Privacy Policy Statement in Part A above)

  1. Introduction
    1. From time to time, it is necessary for various individuals (collectively, the “Data Subjects”) to supply the Centre (as defined in our Privacy Policy Statement) with data in connection with various activities in which the Centre is involved.
    2. Failure to supply such data may result in the Centre being unable to provide services, support, assistance, etc., to the Data Subjects.
    3. Data is collected from Data Subjects in the ordinary course of and the continuation of the Centre’s relationship with such Data Subjects, including (without limitation) through their own actions, third parties, the public domain, and the cookies and behavioural tracking tools of the Centre’s websites, and when Data Subjects interact with the Centre in person (e.g. as visitors or guests) or through other media (e.g. through the internet or by post).
    4. When or before collecting your personal data, we will provide to you or the party to whom you have authorised to provide your personal data on your behalf, a copy of the Privacy Policy Statement and this PICS in one document, either electronically, by way of a webpage link or in hard copy. Unless a different PICS (e.g. a Bespoke PICS (paragraph 7)) is provided to you when a data collecting Unit requests personal data from you, this PICS applies to personal data provided by you from time to time.
    5. Through this PICS or our staff member, you will be informed whether it is obligatory or voluntary for you to provide the personal data when we seek to collect the data from you. If provision is obligatory, you will be informed of the consequences for you if you do not supply such data.
    6. If you are under the age of 18, you shall consult your parents or such person(s) having parental responsibility for you on the contents of the Privacy Policy Statement in Part A above and this PICS and ensure that you understand their contents before providing your personal data to us.
    7. It is sometimes necessary for the Centre in certain of its activities (recurring or otherwise) to collect and handle specific types of personal data for enabling and facilitating the activities. The personal information collection statement custom-made for these activities (“Bespoke PICS”) shall be read in conjunction with this PICS and unless any terms in the Bespoke PICS state otherwise (in which case, such terms shall prevail), the contents of this PICS apply to you in full.
    8. Nothing in this PICS shall limit the rights of Data Subjects under the Personal Data (Privacy) Ordinance.
  2. Privacy Information
    1. Types of personal data
      Your personal data collected or held by us includes:
       Types

      Examples

      (illustrative only)

      (1)identification and personal information
      • name
      • date of birth
      • gender
      • identity card/passport details
      • visual and audio recordings
      • photographic images

       

      (2)contact details
      • address
      • telephone number
      • email address
      • social media account
      • emergency contact
      (3)provided by you or third parties (e.g. spouse, employer or parents/guardian) to us
      • bank account number
      • credit card account number
      (4)evaluative data created by us (including our staff members, agents or service providers)
      • academic results
      • assessment records
      (5)information collected by means of cookies (when you access our website)
      • webpage(s) visited
      • options chosen
      • links clicked to access
      (6)additional personal data set out in any Bespoke PICS 
    2. Purposes for which your personal data is collected
      The purposes for which data relating to a Data Subject may be used vary depending on the nature of the Data Subject’s relationship with the Centre. In general, the personal data you provide to us will be used for the following purposes from time to time:
      1. our provision of services
      2. our administration, management and recordkeeping
      3. communication and delivery of information and invitations to you
      4. survey, quality assurance, surveys, review or statistical analysis
      5. promotion of the Centre’s events, and services, and related publicity activities
      6. implementation of and monitoring compliance with our policies and procedures
      7. protection of the personal safety and health of the Centre
      8. direct marketing to which you have consented
      9. provision of referrals, references or recommendations
      10. handling your complaints or enquiries
      11. all other purposes directly related to any of the above
      12. purposes as set out in any Bespoke PICS

      Direct marketing

      Subject to your consent through an opt-in mechanism, the Centre may use your personal data (such as name and contact details) to send communications that may be considered to be direct marketing/promotional material which are relevant to you. These may cover promotional activities related to a Data Subject’s materials or activities that are integral parts of or viewed as value added to the ongoing relationship between the Data Subject and the Centre, such as news or information about the Centre’s latest initiatives and developments.

      In contrast, there are communications intended to serve the primary purpose of offering opportunities, such as inviting application to activities or courses, or soliciting interest in services provided by the Centre. These communications will be treated as direct marketing or sending of promotional materials. We are required by law to give you the opportunity to not receive these communications. As such, you will be given the opportunity to indicate your consent, or otherwise, to receive such communications through the opt-in mechanism referred to above. Please keep in mind that by declining to receive these communications, you may miss important information related to our activities or various benefits or offers that may affect your participation in the Centre.

    3. Disclosure and transfer of your personal data
      In connection with the above purposes, we may disclose or transfer your personal data to the following parties:
      1. any party who owes a duty of confidentiality to the Centre and is obliged to keep
        the personal data confidential
      2. third parties engaged by us to provide services to us and/or you
      3. financial institutions whose services are used by either the Centre or you
      4. credit rating agencies
      5. any parties within the Centre on a need-to-know basis
      6. regulators and authorities, including any adjudicative bodies (e.g. courts)
      7. third parties who have the right to access such data
      8. our professional advisors, such as lawyers, accountants and auditors
      9. parties as set out in any Bespoke PICS
    4. Access to personal data and data correction requests
      You have the right to request access to and to request correction of your personal data. Please refer to paragraph 7 of the Privacy Policy Statement in Part A above on the procedures and the party to whom such a request should be made.
    5. Enquiries
      If you have any queries, please contact: enq@hkorc.org