私隱政策及收集個人資料聲明

KINDS OF PERSONAL DATA HELD
所持有的個人資料種類

There are two broad categories of personal data. They comprise personal data as set out below:
我們持有的個人資料主要分為兩大類。分別由以下各項所含個人資料組成：

1. Data Subject records, which includes the data or information that are necessary to supply to us in connection with the opening or operation of accounts, the establishment and/or continuation of credit facilities and/or the provision of any other services and/or serviced by the Company, and/or generally communicate verbally or in writing with the Company.

   資料當事人記錄，包括就開立或運作賬戶、設立及/或延續信貸及/或本集團所提供的服務和產品，及/或在一般情況下以口頭或書面形式與我們溝通時，需不時向本集團提供有關的資料。

2. Personnel records, which are employee records and the other individual record：
   個人記錄，即員工及其他個別人士記錄：
   
   1. employee records are including but not limited to personal contact details; educational background, curriculum vitae; job application forms; references; appraisal and disciplinary records; salary, pension and benefits details; background reference checks; sickness records; bank account and tax details of employees and relevant personal data of family members of employees. (including potential employees, as applicable); and any other information relevant to the purposes set out in this Statement.員工記錄包括但不限於員工（包括潛在員工，如適用）的個人聯絡詳細資料、 教育背景、履歷、職位申請書、推薦書、考績與懲戒記錄、薪資、年金及福利詳情、背景查核、生病記錄、員工銀行戶口與稅務詳細資料、員工家屬的相關個人資料以及有關本聲明所列目的之其他任何資訊。
   2. other individual records are including but not limited to any personal data in operational and administrative records and contact details of the Company’s suppliers, contractors, service providers, business partners, landlords, visitors, other contractual counterparties of the Company and the employee(s) of the above-mentioned parties (if applicable).其他個別人士記錄包括但不限於任何載有個人資料的運作及行政方面之記錄，以及本集團的供應商、承建商、服務供應商、業務夥伴、業主、訪客、其他合約締約方及上列各方之僱員（如適用）的聯絡詳細資料。

PURPOSES OF THE PERSONAL DATA HELD
持有個人資料的目的

1. In relation to data subject, we may use the collected data for the purposes of:
   關於資料當事人，我們所收集之資料可能被用作下列用途：
   
   1. assessing the suitability of the data subjects as actual or potential applicants for related financial services and products and facilities and/or processing and/or approving their applications, renewals, cancellations考慮及評估資料當事人作為有關本集團的產品及服務的實際或準申請人的優點和適合性，及/或處理及/或審批其申請；
   2. the daily operation of the services and credit facilities provided to the data subjects 為資料當事人提供信貸服務所涉及的日常運作；
   3. conducting credit checks whenever appropriate (including but not limited to, at the time of application for credit and at the time of regular or special reviews which normally will take place one or more times each year) 於適當時進行信用檢查（包括但不限於在資料當事人申請信貸時及定期或特別信貸覆核時，通常每年一次或多於一次)；
   4. creating and maintaining the Company’s credit scoring models編制及維持本集團的信貸評分模型；
   5. providing reference提供信用查詢備考書；
   6. assisting credit reference agencies, other financial institutions and debt collection agencies to conduct credit checks and collect debts 協助信貸資料服務機構、其他財務機構及債務追收代理進行信用檢查及追討欠債；
   7. ensuring ongoing credit worthiness of data subjects確保資料當事人持續維持可靠信用；
   8. designing financial services and/or related products for data subjects’ use設計供資料當事人使用的信貸服務及／或有關產品；
   9. marketing services, products and other subjects (please see further details in Notice to Customers and Other Individuals Relating to the Personal Data (Privacy) Ordinance and the Code of Practice on Consumer Credit Data) 推廣服務、產品及其他標的 (詳情請參閱致各客戶及其他個別人士關於個人資料(私隱)條例及個人信貸資料實務守則的通知)；
   10. determining amounts owed to or by the data subjects 確定本集團對資料當事人或資料當事人對本集團的債務金額；
   11. collection of amounts outstanding from the data subjects and those providing security for the data subjects’ obligations向資料當事人及為資料當事人債務提供擔保或抵押品的人士追討欠款；
   12. complying with the obligations, requirements or arrangements for disclosing and using data that apply to the Company or any of its branches or that it is expected to comply according to履行根據下列適用於本集團或其任何分行或被期望本集團或其任何分行遵守的就披露及使用資料的義務、規定或安排：
       
       1. any law binding or applying to it within or outside the Hong Kong Special Administrative Region existing currently and in the future 不論於香港特別行政區境內或境外及不論目前或將來存在的對其具法律約束力或適用的任何法律；
       2. any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside the Hong Kong Special Administrative Region; and 不論於香港特別行政區境內或境外及不論目前或將來存在的任何法律、監管、政府、稅務、執法或其他機關，或金融服務供應商的自律監管或行業組織或協會作出或發出的任何指引或指導；及
       3. any present or future contractual or other commitment with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers that is assumed by or imposed on the Company or any of its branches by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authority, or self-regulatory or industry bodies or associations本集團或其任何分行因其位於或跟相關本地或外地的法律、監管、政府、稅務、執法或其他機關，或自律監管或行業組織或協會的司法管轄區有關的金融、商業、業務或其他利益或活動，而向該等本地或外地的法律、監管、政府、稅務、執法或其他機關，或金融服務供應商的自律監管或行業組織或協會承擔或被彼等施加的任何目前或將來的合約或其他承諾。
   13. complying with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within the Company and/or any other use of data and information in accordance with any company-wide programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities本集團根據任何為遵從制裁或預防或偵測清洗黑錢、恐怖分子資金籌集或其他非法活動的計劃下而作出本集團內的資料及信息分享及／或任何其他使用資料及信息的任何責任、規定、政策、程序、措施或安排；
   14. enabling an actual or proposed assignee of the Company, or participant or sub-participant of the Company’s rights in respect of the data subjects to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation使本集團的實在或建議承讓人，或本集團對資料當事人的權利的參與人或附屬參與人評核意圖成為轉讓，參與或附屬參與的交易；
   15. comparing data of data subjects or other persons for credit checking, data verification or otherwise producing or verifying data, whether or not for the purpose of taking adverse action against the data subjects 與資料當事人或其他人士的資料作比較以進行信貸調查，資料核實或以其他方法產生或核實資料，不論有關比較是否為對該資料當事人採取不利的行動；
   16. maintaining a credit history or otherwise, a record of data subjects (whether or not there exists any relationship between data subjects and the Company) for present and future reference; and 作為維持資料當事人的信貸記錄或其他記錄，不論資料當事人與本集團是否存在任何關係，以作現在或將來參考用；及
   17. any other purposes incidental, associated or relating to the purposes listed above. 一切與與上述目的有聯繫、有附帶性或有關的用途。
2. In relation to the employee, we may use the collected data for the purposes of:
   關於員工，我們所收集之資料可能被用作下列用途：
   
   1. processing employment application; 處理聘用員工的申請；
   2. determining, calculating and reviewing employees’ salary, bonuses and any other staff benefits including insurance plan; 釐訂、計算及審查員工薪酬、奬金及其他員工褔利包括醫療保險計計劃；
   3. consideration for employees’ promotion, training, transfer, redeployment or career development and for enabling the Company to make decisions and/or policies concerning its employees generally; 考慮員工晉升、培訓、借用、調配或職業發展及使本集團對有關員工的決策及/或政策作出整體的考慮；
   4. providing references to previous and potential employers, financial institutions, legal representatives, and other appropriate bodies; 向前僱主、財務機構、法律代理人及其他合適的機構進行參考查核；
   5. managing administrative affairs relating to payment of employees’ salary, other authorised expenses or benefits to employees’ account or by any other means; 管理任何有關員工員工薪酬、其他授權費用、或福利轉至員工戶口或以其他方式之付款的日常運作及行政事務；
   6. monitoring compliance with regulatory requirements and the Company’s internal policy requirements; 監控對規例規定之遵循情形及本集團內部政策規定；
   7. any purpose required by law or regulation and/or complying with any statutory requests received from relevant authorities;  and任何法律或規例所規定之目的及或遵守相關機關之任何相關法定請求；及
   8. taking appropriate action in event of emergencies. 出現緊急事故時採取適當措施。
3. other individual, we may use the collected data for the purposes of engaging, managing, monitoring and assessing the business relationship with the vendors, third party service providers, contractors, business partners and their staff who provide services to the Company and facilitating the related daily operation and administration and daily operation.
   關於其他個別人士，我們所收集之資料可能被用作對供應商、第三方服務供應商、承建商、業務夥伴及其提供服務予本集團的員工之聘請、管理、監督及業務關係評估，以及便利有關的行政工作及日常運作的用途。

COLLECTION AND USE OF PERSONAL DATA
個人資料的收集及使用

1. In the course of collecting the personal data, the Company will provide the Data Subject with a Notice to Customers and Other Individuals Relating to the Personal Data (Privacy) Ordinance and the Code of Practice on Consumer Credit Data and/or (as and where applicable) the individuals concerned with a copy of relevant notice in connection with the collection of personnel records, informing them of the purpose of collection, classes of persons to whom the data may be transferred, their rights to access and correct the data, and other relevant information. 在收集個人資料的過程中，本集團會向資料當事人提供一份致各客戶及其他個別人士關於個人資料(私隱)條例及個人信貸資料實務守則的通知，及/或(如適用)向個別人士提供一份就有關個別人士記錄的通知述明收集資料的目的、將獲轉交資料的人士的身分類別、查閱及改正資料的權利，以及其他有關資料。
2. In relation to the collection of personal data and information on-line, please refer to Online Privacy Policy and Personal Information Collection Statement. 有關本集團從互聯網收集的個人資料，請參考重要通知及互聯網私隱政策。

RETENTION OF PERSONAL DATA AND ACCURACY
個人資料的保留及準確性

Personal data collected by the Company will be transferred to the Company’s relevant departments or branches for processing only for such period as is reasonably necessary for the data collection purpose and thereafter such personal data will be destroyed or retained only as required by the Company policy or by law or regulation. As a general rule, personal data will not be retained in web server’s database of the Company. 所收集的個人資料會在只限用於收集資料的擬定目的情況下，被轉送到本集團有關部門或分行於合理地必需的期限內處理，隨後該等個人資料會依從本集團政策或法律或規例所規定予以銷毀或保留。一般而言，個人資料不會存置於本集團的網站伺服器。

Appropriate and reasonable procedures are implemented to ensure all personal data are accurate and up-to-date. 本集團實施適當及合理的步驟以確保所有個人資料為準確及最新的。

USE OF COOKIES
Cookies的使用

Our website uses Cookies, Pixel tags, website logs, Google tags, Meta tags and the others (Technologies) to help us improve our services to you. Please read our Online Privacy Policy and Personal Information Collection Statement which is available on our website for further information.

本集團的網站使用了 Cookies、Pixel tags、website logs、Google tags、Meta tags 及其他技術等（統稱「科技」）協助我們優化提供予閣下的服務。請參閱本集團網站的重要通知及互聯網私隱政策了解更多資訊。

DATA ACCESS REQUESTS AND DATA CORRECTION REQUESTS
查閱資料要求及改正資料要求

The Company would ensure to comply with and process all data access and correction requests in accordance with the provisions of the Ordinance and all relevant statutory requirements. 本集團會確保遵循及在一切查閱資料要求及改正資料要求之處理上符合該條例及所有相關的法定規定。

The Company may, subject to the Ordinance, impose a moderate fee for complying with a data access request. 本集團可按照該條例依從查閱資料要求徵收合理的費用。

ENQUIRY
聯絡資料

Data access and correction of data or of information regarding our policies and practice requests to the Company shall be addressed to：任何有關查閱或改正資料，或索取關於資料政策及慣例或所持有的資料種類的要的要求，應向下列人士提出：

The Data Protection Officer
Credit Station Limited
Room 1211-12, 12/F Gala Place, 56 Dundas Street, Mong Kok, Kowloon, Hong Kong.

資料保障主任
信貸站有限公司
香港九龍旺角登打士街56號家樂坊12樓1211-12室

In the event of any inconsistency between the English and Chinese versions, the English version will prevail. 中英文版本如有歧異，以英文本為準。

最後更新日期︰2024年1月

 PPPICS_2024013101_P