成為協會會員
成為協會會員

私隱政策

Privacy Policy Updated on 2022-02-13

IMPORTANT: Chief Happiness Officer Association (CHOA) is committed to protecting and respecting the privacy of our customers.

This Privacy Policy (as defined below) sets out the policies and practices of which any information including Personal Data (as defined below) collected, processed, used and retained by us for the purposes of our operation of businesses, provision of our services to our customers and offering other services or products of Stan Group that may be of interest to our customers.

You should read the following carefully to understand our views and practices regarding Personal Data and how we will treat and protect it in accordance with the provisions of the Personal Data (Privacy) Ordinance (Cap.486) (the “Ordinance”) and in respect of Personal Data collected from individuals in the European Union (“EU”), to whom we offer our goods or services, the General Data Protection Regulation (GDPR) (EU) 2016/679 (“GDPR”) together (“Data Protection Legislation”).

For the purposes of the GDPR, CHOA is the controller of relevant Personal Data.

In this Privacy Policy (“Privacy Policy”):

  • “Personal Data” refers to any information (a) which relates to an identifiable individual; (b) from which it is practicable for the identity of the individual to be directly or indirectly (together with other information) ascertained; and (c) in forms which access or processing of the data is practicable.
  • CHOA (also referred to as “we”, “our” and “us”);
  • “CHOA Website” or “our website” refers to https://www.choassociation.org/
  • “Supplier” refers to any individual, business entity or professional body for which CHOA has no direct ownership in, which provides relevant products and services, with or without fees, to support the operation, legal, marketing, communication and other essential business functions of CHOA.

We may also sometimes collectively refer to handling, collecting, protecting and storing your Personal Data as “processing” such Personal Data.

In this Privacy Policy:

  • Words denoting one gender shall include the other gender and the neuter and vice versa, and words denoting the singular number shall include the plural number and vice versa; and
  • The headings used herein are inserted for convenience of reference only and shall not affect its interpretation.

All non-English versions of this Privacy Policy are translations of the original version in English for information purposes only. In the event of any discrepancy, the English version shall prevail. Please update your own Personal Data held by us from time to time so that it remains accurate.

Contents:

  1. What Personal Data we collect and how we collect it
  2. Cookies
  3. Retention of Personal Data
  4. Storing and transferring your Personal Data
  5. Purposes for collection and use of Personal Data
  6. Security of Personal Data
  7. Consent (excluding individuals located in the EU)
  8. Legal basis for processing your Personal Data (individuals located in the EU only)
  9. Your rights
  10. Changes to Privacy Policy
  11. Contact and complaints
  1. What Personal Data we collect and how we collect it
    1. We will request you to provide, or we will otherwise collect various types of your Personal Data including (without limitation) personal identification information (i.e. names); contact information (such as telephone numbers, mailing addresses, email addresses; business information such as company name, business title and associated contact information; interests, personal reference or comments. Such information will be collected through the following categories in particular:
      1. Membership forms: When you would like to apply for membership, you will need to provide your Personal Data by filling out our membership forms, including your name, email address, telephone number; company name, company stock code, address, number of employees, date of formation, business registration number, , social media platform links, website; representatives’ names, position, department, telephone, email; standards and expectations; method of payment; referee name, position and company and any other Personal Data voluntarily provided by you when you apply.
      2. Information about your visit to the CHOA Website: For CHOA ‘s research purposes, we collect certain categories of Personal Data when you use the CHOA Website including your IP address, the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page (including browser type);
      3. Survey and research information: Collected from you by online or offline channels for market research;
      4. Information we collect from your interaction with social media platforms: If you interact with CHOA on social media platforms (for example if you “Like” CHOA’s Facebook page), depending on your settings or the privacy policies for social media and messaging services such as Facebook, LinkedIn and Instagram, we may collect your Personal Data from your social media accounts; and
      5. Information we collect from other sources: We also collect Personal Data from other sources, third party data providers, and/or public sources, such as social networks, company websites, and other online sources. However, no sensitive data or special category data from the aforesaid third party sources which would include personal information about your health, race, ethnic origin or political beliefs will be collected from the aforesaid sources.
      6. Payment information: When you would like to apply membership, we need to collect, process and store certain information relating to the payment including the last four digits of your credit card number and in certain limited scenarios your full credit card number. This information will be used exclusively to process your payment and to enable us to comply with our legal obligations in respect of accounting.
        Supply of Personal Data to us is non-obligatory but certain Personal Data is required to be provided by local laws and failure to do so may result in us being unable to process your application of membership. 
  2. Cookies
    1. Cookies are text files containing a small amount of information which are downloaded to your device when you visit a website or use an online application.
    2. Cookies are used on all online tools available to you including, without limitation, CHOA Website to distinguish you from other online users, to analyse how viewers navigate CHOA Website with a view to optimize its design, to establish and maintain your information across multiple pages within or across one or more sessions of the CHOA Website.
    3. The cookies we set do lots of different jobs, like help us to improve the CHOA Website and deliver a better and more personalised service, remember your preferences, and generally improve the user experience. You can find more information about cookies at http://www.allaboutcookies.org/.
    4. You should understand that while cookies in general do not tell us your email address or other Personal Data, however, if you voluntarily provide such information or Personal Data to us by, for example, registering an account with us or subscribing for any of our services, such information may be linked to the data in the cookie.
    5. In addition to the information we collect through cookies, we also collect behavioural Personal Data and store such Personal Data for analytical purposes so as to conduct marketing research and improve the quality of the CHOA Website. Such Personal Data includes information about your visit such as your server address, the date and time of your visit, the page you accessed, the information you downloaded and the type of internet browser you used.
    6. The use of any information we collected either through the use of cookies or otherwise shall be subject to this Privacy Policy.
    7. Most web browsers are initially set up to accept cookies. You may choose to edit your browser options to block cookies. If you block cookies, certain features on the CHOA Website may not work properly.
    8. Please take note that cookies from third parties unaffiliated with CHOA or our business partners may be set before, during or after browsing our website. We do not and cannot control those cookies set by third parties and you should check with those third-party websites for more information about their cookies.
  3. Retention of Personal Data
    1. Personal Data provided by you will be retained for such a period as may be necessary for carrying out the purposes stated in this Privacy Policy or as required to comply with any legal obligations to which we are subject.
  4. Storing and transferring your Personal Data
    1. Personal Data collected by us in order to carry out the purposes or directly related purposes stated in this Privacy Policy will be stored on our databases. The databases owned and managed by CHOA or Suppliers store Personal Data including customers’ names, address, email address, and/or phone numbers.
    2. We may also share your personal information with:
      1. Hong Kong CHO Limited;
      2. third parties, including data processors, who help us operate and provide our products and services to our customers, such as third party providers that provide payment processing services, customer relationship management software or third parties to help CHOA administer and improve the quality of CHOA’s Website or mobile applications and to analyse usage of the same etc. These providers have access to your personal information only for the purpose of performing their services and in compliance with applicable laws and regulations;
      3. companies outside CHOA for marketing purposes, when you have provided the consent required in accordance with Data Protection Legislation;
      4. law enforcement agencies, other governmental agencies or third parties if we are required by law to do so, or in other limited circumstances (for example if required by a court order or regulatory authority, or if we believe that such action is necessary to prevent fraud or cyber-crime or to protect CHOA Website, our technology assets or the rights, property or personal safety of any person);
      5. other business entities should we plan to merge with or be acquired by that business entity, or if we undergo a re-organisation with that entity; and
      6. any successor in interest, in the event of a liquidation or administration of a company within CHOA.
    3. CHOA takes reasonable steps and exercises due diligence to ensure that Personal Data, after being transferred to recipients located in other countries, will not be stored, processed, or used in any manner which would be a contravention of applicable Data Protection Legislation.
  5. Purposes for collection and use of Personal Data
    1. Our primary purpose in collecting user information is to provide you with a safe, smooth, efficient, and customised experience and to provide the goods which you have requested. We may also use the information that you have provided to ensure that the content on our website is presented in the most effective manner for you.
    2. We use your Personal Data for the following specific purposes, which include:
      1. to process and administer your reservation application;
      2. to fulfil and process requests submitted by you for any services, products, facilities offered by us;
      3. to provide and maintain the CHOA Website or any of our other services to you;
      4. to improve the CHOA Website and your account with us, including, without limitation, to address your queries and notify you of any proposed or actual changes to the CHOA Website;
      5. to compile and produce anonymous statistics about users of the CHOA Website, and provide related usage information to relevant third parties, which will not in any event enable any third party to identify individuals;
      6. to provide and/or market the goods and/or services provided by us and/or our affiliated business partners (e.g. sending you updates on our latest offers and promotions in relation to our services from time to time);
      7. to manage the relationship between you and CHOA (including for communication with you by email, mail, fax, phone or other means regarding your enquiries);
      8. to facilitate and process the payment of services and products offered to you by us. For this purpose, you hereby authorize us to furnish, transfer and disclose any necessary data, including but not limited to, verification of credit card details to any party to collect overdue payment and/or to conduct matching procedures against databases of known fraudulent transactions (maintained by CHOA, associated companies and/or business partners or third parties);
      9. to facilitate our business operations including the fulfilment of any legal requirements;
      10. to evaluate, develop, offer and promote services provided by us and/or our affiliated business partners; and
      11. for promoting and soliciting donations or contributions for charitable or non-profit making causes.
    3. We will not use your Personal Data to conduct direct marketing via email, push message, mail, telephone, fax and/or other form of communication, or to provide you with information about goods and/or services which are part of services offered to you by CHOA unless you have agreed to receiving marketing materials in such a manner when providing your Personal Data to us.
    4. The intended categories of Personal Data to be used are all kinds of your Personal Data which will necessarily enable us to establish contact with you; and to market or promote a variety of our services, facilities and related goods and/or services offered by us and/or affiliated businesses. However, we shall not process your Personal Data otherwise than in accordance with Data Protection Legislation.
    5. Your consent to the use of your Personal Data for the specific direct marketing use as indicated in paragraph 5.3 above can be given in the following ways:
      1. By clicking “Okay, I agree” with our updated Privacy Policy, it indicates your consent when providing us with your Personal Data through the CHOA Website, or forms; or your consent to our customer representative when providing us with your Personal Data through telephone; or your consent when checking in or staying at any of our Facilities.
      2. You may opt-out from receiving marketing communications at any time, free of charge, by the following ways: following the “opt-out” instructions contained in the marketing communications indicating your withdrawal; or writing to us at the address listed below under section 11 – “Contact and complaints”.
  6. Security of Personal Data
    1. You acknowledge and understand that the transmission of information via the Internet is not completely secure. Although we have taken practical steps (including implementing appropriate technical and organisational measures) to safeguard your Personal Data, to prevent unauthorized access, and have implemented high standard security measures to protect any information received, we do not guarantee the security of your Personal Data transmitted via Internet, and you acknowledge and accept that any transmission is at your own risk.
    2. You may also want to be cautious about providing any information or Personal Data through Wi-Fi or any other wireless Internet connection. You should understand and accept that the risks associated with such connection methods are out of CHOA’s responsibility and no security system or system of transmitting information over the Internet is guaranteed to be secure.
    3. We take your online security seriously and have implemented appropriate technical and organisational measures including adopting accepted industry standards of technology and operational security to protect your personal information from loss, misuse, alteration or destruction. Once we have received your information we will ensure that the collection and use of your information is in accordance with the Data Protection Legislation. All Personal Data stored in our databases are encrypted and treated as confidential information and are protected.
  7. Consent (excluding individuals located in the EU)
    1. By using services provided by us and/or the CHOA Website or by providing any Personal Data to us via registering an account with us, you consent to the collection and/or use of your Personal Data as stated in this Privacy Policy and as set out elsewhere in any legal notices. You should not provide us with any Personal Data if you do not consent to such collection and/or use.
  8. Legal basis for processing your Personal Data (individuals located in the EU only)
    1. The GDPR permits us to process your Personal Data because such processing is necessary for:
      1. the performance of contracts to which you will be a party to and in order to take steps at your request prior to you entering into those contracts;
      2. for the purposes of legitimate interests pursued by us; and/or
      3. in order to comply with a legal obligation to which we are subject.
    2. Where our processing is based on the legitimate interest grounds described above, those legitimate interests are:
      1. collecting personal information to provide you with a smooth and efficient customer experience;
      2. for the running our business;
      3. to provide the services you have requested;
      4. to prevent fraud;
      5. for the purposes described above in this Privacy Policy; and
      6. for our own marketing, research and product development.
  9. Your rights
    1. You may request to access and to correct your Personal Data held by us. If you wish to obtain a copy of any such Personal Data, if you believe that such Personal Data is incorrect, or if you believe that such Personal Data was used beyond the scope of the purposes or directly related purposes as stated in this Privacy Policy or was acquired by fraudulent or unlawful means, please write to us at the address listed below under section 11 – “Contact and complaints”.
    2. In order to process your request efficiently, we ask that a request for access or correction to, or deletion of Personal Data, or to obtain a copy of the Privacy Policy must be in writing and send to us at the address listed below under section 11 – “Contact and Complaints”.
    3. We may require sufficient identification information from you before we will process your request under 9.1 so as to ensure that your Personal Data is only disclosed to you.
    4. We will process such request in accordance with Data Protection Legislation including responding within statutory time limits and where permitted to do so by Data Protection Legislation, we may charge a reasonable fee for complying with a request.
    5. If at any time you wish to withdraw your consent for us to process your personal data, in the manner described above, as far as consent is the applicable basis for processing your personal data or do not wish to remain a subscriber to our mailing list, you are able to unsubscribe from our mailing list by clicking on the “Unsubscribe” link on the email from us, or contact us either by emailing info@choassociation.org with the subject “Unsubscribe”, We will process your request within 10 business days or such other period prescribed by the Data Protection Legislation.
    6. All Personal Data is handled in accordance with the applicable Data Protection Legislation. Should any provision of this Privacy Policy be found by any court or administrative body of competent jurisdiction to be invalid or unenforceable, the invalidity or unenforceability of such provision shall not affect the other provisions of this Privacy Policy. All provisions not affected by such invalidity or unenforceability shall remain in full force and effect.
    7. If you are an individual located in the EU, you have the following additional rights:
      1. to ask us to delete your information, if you consider that we do not have the right to hold it;
      2. to restrict processing of your information where appropriate;
      3. to limit data portability (moving some of your information elsewhere within an IT environment) in certain circumstances;
      4. object to your information being processed in certain circumstances;
      5. not to be subject to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your information.
    8. If you wish to exercise any of your rights in relation to your Personal Data please send an email to us at info@choassociation.org marked with the subject “Data Subjects Rights”. We will process such a request in accordance with the Data Protection Legislation.
  10. Changes to Privacy Policy
    1. Any changes we make to our Privacy Policy in the future will be posted on this page and if appropriate will be notified to you.
    2. Any revised version of this Privacy Policy shall be effective as at the date of publication on the CHOA Website.
  11. Contact and complaints
    1. You may visit us at choassociation.org or contact us at info@choassociation.org if you have any concerns, complaints or requests about this Privacy Policy or how we have been using your Personal Data.
    2. If you are located in the EU and you have any concerns about our use of your information, you also have the right to make a complaint to the data protection regulator in your country. It would be useful if you raise your concerns with CHOA, in the first instance, in order to provide CHOA the opportunity to address your concerns.