We recognize and respect your rights regarding your personal information, in accordance with the Personal Data (Privacy) Ordinance (PDPO) and General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:
Your Rights under PDPO:
- Right to Access (Section 18 PDPO): Individuals have the right to request access to their personal data held by an organization.
- Right to Data Correction (Section 22 PDPO): If personal data is inaccurate, incomplete, or misleading, individuals can request correction.
- Right to Object to Direct Marketing (Section 27 & 35 PDPO): Individuals have the right to opt out of receiving direct marketing communications. Consent is required before an organization can use personal data for direct marketing.
- Right to Withdraw Consent for Direct Marketing (Section 35 PDPO): If a person initially consents to marketing but later changes their mind, they can withdraw consent at any time.
Your Rights under GDPR:
- Right of Access (Article 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
- Right to Rectification (Article 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
- Right to Erasure (‘Right to be Forgotten’) (Article 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
- Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
- Right to Data Portability (Article 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
- Right to Object (Article 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
- Right to Withdraw Consent (Article 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.
Exercising Your Rights:
To exercise any of these rights, please contact us at:
We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information. We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.