We pledge to meet fully, and where possible exceed, internationally recognized standards of personal data privacy protection, in complying with the requirements of the Personal Data (Privacy) Ordinance of Hong Kong. In doing so, we will ensure compliance by our staff with the strictest standards of security and confidentiality.
Personal Data Collection and Use
We collect your personal data information only when we need it to provide service to you. The personal data provided will be used for the specified purposes stated when collecting such data including without limitation processing of subscription, event registration, incident report, enquiry, statistical purposes and other related matters. Refusal to supply personal data may result in HKCERT being unable to process your request.
Like many other websites, we may record your visit through cookies. Cookies are text files used to record the session status and preferences, like choice of language, selected activities on our website. These cookies are harmless. They may be saved permanently in your computer. You may disable these cookies but this may affect your use of our website services such as online event registration. We recommend you to set your browser to clear all cookies after the session.
Security of Personal Data
Our general policy is not to disclose any personal data to third parties except as required by law or with your prior consent. All personal data you provided us are secured with restricted access by us and authorized personnel only. We use SSL protocol to encrypt sensitive information transmitted between server and client to combat sniffing.
Disclosure and Sharing of Personal Data
Our general policy is to keep all personal data confidential except as permitted or required by law. We do not share your personal data with third parties without your prior consent. However, information may be disclosed incidentally to or in the course of our operation to the following parties:
- any personnel who provide services and advice to our operation including advisor and auditor may access data they need to review
- technical personnel who maintain our website may access data transiently stored on the website
- local or overseas organizations who assist in the incident response could access data related to particular incident they are handling
- the person to whom we are required to make disclosure under any law applicable in Hong Kong
Personal Data Access and Correction
Under the Personal Data (Privacy) Ordinance, you are entitled to be informed by us whether we hold your personal data, to have access to such data and to correct such data if they are inaccurate. Any such data access request has to be made in writing and be sent to us by e-mail to "[email protected]" or by mail to "Personal Data Controlling Officer, Hong Kong Productivity Council, HKPC Building, 78 Tat Chee Avenue, Hong Kong". A reasonable fee might be charged for all data access or related requests.
Chinese and English Versions
If there is any conflict or discrepancy between the English version of the statement and its Chinese translation, the English version prevails. If any part of the Chinese translation is unclear, reference should be made to the English version.