CityLinkers is committed to adopting a Privacy Management Programme in the protection of personal data of its staff, customers, suppliers, subcontractors, etc. and ensuring that all personal data are handled in accordance with the provisions of the Personal Data (Privacy) Ordinance. The Company upholds the following principles in data privacy management:
• Collect adequate, but not excessive, personal data by lawful and fair means only for lawful purposes related to the Department’s functions or activities;
• Take all reasonably practicable steps to ensure that the personal data collected or retained are accurate, having regard to the purposes for which they are to be used;
• Take all reasonably practicable steps to ensure that the personal data are not kept longer than is necessary for the purposes for which they are to be used;
• Use the personal data collected only for purposes or directly related purposes for which the data were to be used at the time of collection, unless the individual concerned has given express consent for a change of use or such use is permitted by law;
• Take all reasonably practicable steps to ensure that personal data are protected against unauthorised or accidental access, processing, erasure or other use;
• Take all reasonably practicable steps to ensure that a person can be informed of the kinds of personal data that the Department holds and the purposes for which the data are to be used; and
• Permit persons to access and correct personal data of which they are the data subjects and process any such access/correction requests in a manner permitted or required by law.
• Collect adequate, but not excessive, personal data by lawful and fair means only for lawful purposes related to the Department’s functions or activities;
• Take all reasonably practicable steps to ensure that the personal data collected or retained are accurate, having regard to the purposes for which they are to be used;
• Take all reasonably practicable steps to ensure that the personal data are not kept longer than is necessary for the purposes for which they are to be used;
• Use the personal data collected only for purposes or directly related purposes for which the data were to be used at the time of collection, unless the individual concerned has given express consent for a change of use or such use is permitted by law;
• Take all reasonably practicable steps to ensure that personal data are protected against unauthorised or accidental access, processing, erasure or other use;
• Take all reasonably practicable steps to ensure that a person can be informed of the kinds of personal data that the Department holds and the purposes for which the data are to be used; and
• Permit persons to access and correct personal data of which they are the data subjects and process any such access/correction requests in a manner permitted or required by law.
