Hong Kong Emergency Medical Services Corps ('the Corps') considers the safeguarding of the privacy of personal data as highly important, and is committed to complying with the principles and provisions of the Cap. 486 Personal Data (Privacy) Ordinance in the following aspects. This Policy explains how we may collect and use the information you give us, the conditions under which we may disclose it to others and how we keep it secure.

香港緊急醫療服務團（簡稱「本隊」）非常重視保障個人資料的私隱權，並承諾會盡力遵守香港法例第 486 章《個人資料（私隱）條例》的原則及規定。本隊承諾盡力遵守「保障個人資料（私隱）政策聲明」，妥善收集、使用、處理及保存個人資料。

Purpose of Collection of Personal Data

收集個人資料的目的

• All personal data obtained by the Corps is only used for purposes stated in item 2 below of this Policy Statement.
• Unless the data subject gives consent, or as required or authorized by or under law for legal proceedings, the Corps limits the use of personal data to the stated purposes.

What type of personal information is collected

收集個人資料的種類

The personal information we collect from you is limited to what is necessary to enable us to carry out the purposes for which it is collected. The type of personal information we collect depends on the context of your interactions with Hong Kong Emergency Medical Services Corps and the choices you make, including your privacy settings.

The data we may collect, store and use can include the following:

• Name and contact information
• Passwords for authentication and account access
• Payment information for processing payment
• Any personal information which you choose to provide us with in correspondence with you
• Photographs, videography and CCTV footage
• Your I.P. address (or Internet Protocol Address)
• We may collect other online identifiers including cookies information, the internet browser and devices you are using and the pages you visited on our website and how long you visited us for

You have choices about some of the personal information we collect. When you are asked to provide personal information, you may decline. Please note that if you choose not to provide personal information that is necessary to enable us to carry out your request, we may not be able to fulfil that request.

In some cases, you might make a donation to us via a third-party payment processor, in which case you should check the privacy policy of that third party as the data controller of your personal information.

How we collect your personal information

收集個人資料的方法

There are various ways you might share your personal information with Hong Kong Emergency Medical Services Corps, depending on how you interact with us. At present we offer the following channels of communication:

• Websites / online forms
• Paper forms
• Call-centres
• E-mail
• Text
• Face to face

For instance, you might provide personal information when making a donation to us through our websites, by text, by telephone or by completing a direct debit form which you send to us by post. When you visit our websites, we use marketing analytics products and providers to measure the effectiveness of our websites, which may entail the collection of personal information in the form of online identifiers. You might send us an e-mail requesting support with a product or service, and personal information might be collected by us to enable us to deal with your enquiry.

Some of our premises and vehicles are monitored by CCTV and footage may be captured for security and safety purposes.

We may also obtain personal information from third parties. We protect data obtained from third parties according to the practices described in this Privacy Policy Statement, plus any additional restrictions imposed by the source of the data.

Use of Personal Data

個人資料的使用

In general, the Corps will only use personal data collected:

• to facilitate communication between the Corps and its members;
• to process membership application or appointments to the Corps boards, committees and units;
• to process recruitment, appointment, assessment and promotion of paid staff;
• to process application for training activities and admission to training programs;
• to process nominations for awards;
• to process application for participation in activities in Hong Kong, the Mainland and overseas locations;
• to analyze membership data in order to optimize the utilization of human resources and to develop strategy;
• to nominate or endorse members to participate in programmes / activities organized by government departments or other organizations; and
• for other purposes directly related to Hong Kong Emergency Medical Services Corps.

We will not sell or rent your information to third parties.

Direct marketing

直接傳銷

The Corps, with the written consent or indication of no objection from a data subject, will use the personal data for dissemination of training and programme information, product / facility / service promotion and fundraising appeal. The data subject has the opt-out right requesting to cease to use the data at any time without cost.

For any personnel who would like to raise an opt-out request regarding the use of his / her personal data by the Corps, please inform the Corps of the request by forwarding the full name and contact phone number by email (info@hkemsc.org.hk).

Outsourcing arrangements

外判安排

When acquiring third-party service for personal data processing, all service providers are bound by a contract or a non-disclosure agreement to keep all the personal data confidential and secured, and to prevent unauthorized access.

Transfer of personal data to places outside Hong Kong

個人資料轉移至香港以外地方

The Corps may transfer personal data to places outside Hong Kong in order to carry out the stated purposes in item 2 "Use of Personal Data" only when deemed necessary.

CCTV monitoring systems

閉路電視監察系統

The Corps has installed CCTV monitoring systems in vehicles and in the public areas in some of the offices and premises for security reasons. In principle, video records will be kept for not more than 12 months and only authorized persons are allowed to access the video records strictly for security issues.

Disclosure of personal data

個人資料的披露

The Corps may provide the personal data to third-party for purposes related to the Corps on a need-to-know basis, including but not limited to the following circumstances:

• to banks for bank account matters of the Corps units;
• to any agent, contractor or third party service provider who provides service to the Corps;
• with data subject’s consent; and
• to satisfy any applicable law, regulation, legal proceedings, enforceable governmental request, emergency situations or administrative requirements.

Accuracy and Duration of Retention of Personal Data

個人資料的準確及銷毀

• The Corps takes all feasible measures to ensure the personal data collected and stored in the systems are accurate.
• The Corps will regularly review and reconfirm the necessity for retaining any personal data and will delete and destroy information that is no longer needed.

Security of Personal Data

個人資料的安全

• Personal data provided by the members is properly and securely stored. Only authorized persons allow to access to such data and only for the purposes set out in item 2 above, and their access rights are limited according to their needs.
• All authorized persons must strictly follow guidelines and operation codes issued by the units, if any, when accessing and using such data.
• The Corps takes appropriate precautions to ensure all personal data are not viewed, handled, deleted or otherwise used by any unauthorized person.

Communication on the use of, accessing and updating Personal Data

個人資料的存取及更新

• The Corps ensures members are well-informed through different channels about this Privacy Policy Statement.
• All members have the right to access their own personal data held by the Corps. If their personal data needs to be changed, they should request updating. Please inform the Corps of the request by forwarding the full name and contact phone number by email (info@hkemsc.org.hk).

The Corps reserves the right to revise this Privacy Policy Statement when necessary. The amendment will be announced and the updated Statement can be downloaded from the Corps.

本隊保留在必要時修改本「保障個人資料 (私隱) 政策聲明」的權利。 修訂內容會被公佈，而修訂後的「保障個人資料 (私隱) 政策聲明」可從本隊網站下載。

For further information or any inquiry, please contact us.

如需更多的資訊或有任何查詢，請聯絡我們。

In case of any discrepancy between the English and Chinese versions of this Statement, the English version shall apply and prevail.

如中、英文版本有任何抵觸或不相符之處，應以英文版本為準。

30 January 2021