Hong Kong Organic Resource Centre
Privacy Policy Statement and
Personal Information Collection Statement
A. Privacy Policy Statement
- Purpose
Hong Kong Organic Resource Centre (the “Centre” or “we”) respects the privacy of personal data and is committed to complying with the requirements of the applicable laws including the Personal Data (Privacy) Ordinance (the “PDPO”) and the Data Protection Principles contained in it.
This document comprises two parts, the Privacy Policy Statement (Part A), a general statement about our privacy policies and practices in relation to the personal data we handle, and the Centre’s personal information collection statement (Part B) (“PICS”). When or before we collect personal data from you as a Data Subject, the PICS will be provided to you in accordance with the PDPO. - Collection of personal data
- We collect personal data for lawful purposes and by lawful and fair means. The data we collect in relation to a specified purpose shall be adequate but not excessive in respect of the purpose. Upon and before collection of data from an individual (“Data Subject” under the PDPO), we will explicitly inform him/her:
- the purpose(s) for which the data is to be collected and the groups of persons to whom the data may be transferred;
- whether it is obligatory or voluntary to supply the data, and the consequences of not supplying obligatory data;
- his/her right to request access to and correction of data held by us; and
- the person responsible for handling data access and correction requests.
- We collect personal data for lawful purposes and by lawful and fair means. The data we collect in relation to a specified purpose shall be adequate but not excessive in respect of the purpose. Upon and before collection of data from an individual (“Data Subject” under the PDPO), we will explicitly inform him/her:
- We collect personal data of Data Subjects in the course of our daily operations. We may also collect personal data of other individuals who are also Data Subjects. Our handling of this personal data, unless specified otherwise in our communication with the Data Subjects, follows the terms of this statement and the relevant PICS.
- We may collect personal data directly from a Data Subject when he/she interacts with us.
- We may also collect personal data of a Data Subject indirectly from third parties.
-
The Centre’s PICS in Part B states:
(a) the kind of Data Subjects’ personal data collected or held by the Centre,
(b) the purposes for which we may use such personal data, and
The personal data collected by the Centre will be used or disclosed to third parties for the purposes:
(a) for which it is collected,
(b) as specified in the PICS, or
(c) as required or permitted by the PDPO and law. - Where the Centre collects personal data from a Data Subject under the age of 18, we will request the individual to indicate that he/she has consulted his/her parents or such person(s) having parental responsibility for him/her on the contents of this entire document and understands the matters set out herein before providing his/her personal data to the Centre.
(1) Information is collected from Data Subjects who visit the Centre’s web portal.
(2) The Centre will normally not use cookies on its website for storage or tracking of users’ information and preferences.
We take all reasonably practicable steps to ensure that the personal data collected and retained is accurate. Personal data will be retained in accordance with our prevailing policies and no longer than is necessary for the fulfilment of the purposes for which it is collected or to which the Data Subject has given consent, except for the purposes of fulfilling legal obligations or with subsisting reasons. In some but limited circumstances, certain data may be retained indefinitely, for example, regarding a Data Subject’s participation in some of the Centre’s events or activities which we sometimes record and preserve as part of the Centre’s overall historical records and organisational archives.
The Centre takes all reasonably practicable steps and implements internal guidance to ensure that personal data held is protected against unauthorised or accidental access, processing, erasure or other use.
We will generally be able to provide upon request the following information in relation to personal data collected and processed by us:
(1) the kinds of personal data held;
(2) the main purposes for which personal data is used; and
(3) our policies and practices in relation to the handling of such personal data.
A Data Subject also has the right to request correction of his/her personal data that is inaccurate at no charge by writing to our HR Officer or Manager.
This Privacy Policy Statement and the following PICS are subject to review and change from time to time. Please contact us or visit our website for the latest Privacy Policy Statement and PICS.