PRIVACY POLICY

私隐政策声明

 

1.     INTRODUCTION

引言

 

This policy is adopted as the Privacy Policy (this “Policy”) of Business Finance Limited (the “Company”). The purpose of this Policy is to establish the policies and practices of the Company’s commitment to protect the privacy of personal data and to act in compliance with the provisions of the Personal Data (Privacy) Ordinance (Cap.486) (the “Ordinance”) and implementation of the guidelines thereon issued by the Licensed Money Lenders Association. The Company will adhere to the governing principles and minimum standards set forth in this Statement.

此声明乃采纳为东隆物业按揭有限公司（下称「本公司」）的「私隐政策声明」（下称「本声明」）。订立本声明的目的，是为确立本公司全力执行及遵守保障资料原则的政策及实务，以遵守个人资料（私隐）条例（第486章）（下称「该条例」）的各项条款及条文，及施行由香港持牌放债人公会就该条例而颁布的指引。本公司会依从本声明订立的原则及最低标准。

 

2.     KINDS OF PERSONAL DATA HELD BY THE COMPANY

本公司持有的个人资料的种类

 

2.1   Personal data collected or held by the Company regarding the Company’s customers or users of the Company’s services, products or websites (collectively referred to as “customers”)  may include the following :

本公司收集或持有的本公司客户、网站、服务或产品使用者（以下统称为「客户」）的个人资料可能包括下列各项：

 

(a)    name and address, occupation, contact details, date of birth and nationality of customers and spouses of customers and their identity card and/or passport copies, numbers and place and date of issue thereof ; 

客户及其配偶的姓名和地址、职业、联络详情、出生日期和国籍、其身份证及／或护照副本、号码及发出日期和地点；

 

(b)    name and contact details of referees of customers; 

客户咨询人的姓名和联络详情；

 

(c)    current employer, nature of position, salary and other benefits of customers and spouses of customers;

客户及其配偶现时的雇主、职位性质、薪酬及其他福利；

 

(d)    details of properties, assets and/or investments held by customers and their spouses;

客户及其配偶持有的物业、资产及/或投资的详情；

 

(e)    details of all other assets or liabilities (actual or contingent) of customers and their spouses;

客户及其配偶所有的其他资产或负债（实有或或然）的详情；

 

(f)    information obtained by the Company in the ordinary course of the continuation of the business relationship with customers (for example, when customers generally communicate verbally or in writing with the Company, by means of documentation or telephone recording system or on-line facility, as the case may be);

本公司在延续与客户正常业务关系过程中获得的资料（例如，当客户在一般情况下以口头或书面形式与本公司沟通时，本公司亦会收集客户的资料，当中可能以文书形式或电话录音或网上系统收集）；

 

(g)    information as to credit standing provided by a referee, credit reference agency or debt collection agency in connection with a request to collect a debt due from any customer to the Company; and

就要求追收任何客户拖欠本公司款项而由咨询人、信贷资料服务机构或收数公司提供的信用状况资料；及

 

(h)    information which is in the public domain.

可透过公开渠道取得的资料。

 

2.2   The Company may hold other kinds of personal data which it needs in the light of experience and the specific nature of its business.

本公司或会持有鉴于经验及其业务特别性质所需的其他种类的个人资料。

 

3.     PURPOSES OF THE PERSONAL DATA HELD

使用个人资料的目的

 

3.1   It is necessary for customers to supply the Company with data in connection with the opening or continuation of loan accounts and the establishment or continuation of credit facilities or credit instalment or provision of other financial services.

客户在开立或延续信贷户口、建立或延续信贷或分期贷款或提供其他财务服务时，需要不时向本公司提供有关的资料。

 

3.2   It is also the case that data are collected from customers in the ordinary course of the continuation of credit facilities or credit instalment or other financial relationship.

客户与本公司在延续信贷或贷款分期或提供其他财务关系中，本公司亦会收集客户的资料。

 

3.3   The Company may also collect data from the customers when the customers access or use the Company’s websites, other services or products.

当客户浏览或使用公司的网站，其他服务或产品时，公司也可能从客户处收集客户的资料。

 

3.4   The purposes for which data relating to a customer may be used as follows:

客户的资料可能会用于下列用途：

 

(a)    processing of applications for credit facilities and/or other financial services;

处理信贷及/或其他财务服务申请；

 

(b)    the daily operation of the Company’s websites, products, services and credit facilities provided or made available to customers;

提供或许可客户使用本公司的网站、产品、服务和信贷便利给客户之日常运作；

 

(c)    conducting credit checks at the time of application for credit and at the time of regular or special reviews which normally will take place one or more times each year, and carrying out matching procedures (as defined in the Ordinance) by the Company;

在客户申请信贷时进行的信贷调查，及一般每年进行一次或以上的定期或特别审查，及由本公司进行核对程式（根据该条例之定义）；

 

(d)    creating and maintaining the Company’s credit scoring models;

编制及维持本公司的信贷评分模式；

 

(e)    assisting other money lenders and/or financial institutions to conduct credit checks and collect debts;

协助其他放债人及/或财务机构作信用检查及追讨债务；

 

(f)    ensuring ongoing credit worthiness of customers;

确保客户信用维持良好；

 

(g)    designing financial services or related products for customers’ use;

设计提供客户使用的金融服务或有关产品；

 

(h)    determining the amounts owed to or by customers;

计算本公司与客户之间的债务；

 

(i)     conducting insurance claims or analysis;

进行保险索赔或分析；

 

(j)     for operational purposes, credit assessment or statistical analysis of the Company;

为营运需要而进行本公司的信贷评估或统计分析；

 

(k)    collection of amounts outstanding from customers and those providing security for customers’ obligations;

向客户及为客户的责任提供抵押的人士追收欠款；

 

(l)     maintaining a credit history of customers (whether or not there exists any relationship between customers and the Company) for present and future reference of the Company;

维持客户之信贷纪录以作本公司现在或将来之参考（不论客户与本公司存在任何关系与否）；

 

(m)   making disclosure to the relevant Government or regulatory authorities, police or courts of court of law  under the requirements of any law, regulation or court order binding on the Company, or under and for any guidelines issued by regulatory or other authorities with which the Company is expected to comply;

根据本公司须遵守的任何适用法例、规则、法院指令的要求，或预期本公司应遵从的监管及其他机构的指引，向监管机构、警方或法院作出所需披露；

 

(n)    enabling any actual or proposed assignee of the Company, or participant or sub-participant of the Company’s rights in respect of the customer to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation; and

使任何本公司的实在或建议承让人，或本公司对客户的权利的参与人或附属参与人评核意图成为转让，参与或附属参与的交易；

 

(o)    for or in relation to any of the purposes aforesaid, to disclose or exchange all or any of the data to or with any credit bureaus or agencies, banks, financial institutions, debt collection agencies , any other information sources, the Credit Reference System and/or similar systems, local or foreign personal data processors to which the processing of data is to or may from time to time be outsourced, and to use such data for any purposes or disclose to any third parties as specified in the relevant application forms or personal information collection statements, or otherwise disclosed to the relevant customers before collecting the data from them;

就或关于上述任何一项用途，向任何信贷资料机构或代理、银行、财务机构、收债公司或代理或其他资料来源、信贷资料库或相类似的系统，会或可能会承办个人资料处理工作的本地或海外资料处理者，透露或交换所有或任何资料，及按已在相关申请表或收集个人资料声明上订明的，或其他在向相关客户收集资料前已向其披露的用途及第三方，使用及向该等第三方披露该等资料；

 

(p)    subject to the relevant customers’ consent, to use their name and contact details for marketing services or products of the Company and/or selected companies, to exchange such information with such selected companies for such purposes, and to from time to time provide the customers with the services and products information from the Company and/or selected companies through direct contact with the Customer and/or access through any electronic means including but not limited to use of telephone calls, email, fax, SMS/MMS, pre-recorded voice/video messages; and

在相关客户的同意下，使用其姓名和联络详情为本公司及/或特选公司推广财务服务及产品、为此与该等特选公司交换有关资料，及不时向客户提供有关本公司及/或特选公司服务及产品之资料，包括但不限于可直接联络客户及/或透过电子讯息包括以电话、电邮、传真、短讯/多媒体短讯、预先录制语音/视像讯息等方式将有关讯息传送至客户；及

 

(q)    purposes relating to each of the above.

与上述任何一项有关的用途。

 

The purposes listed in paragraphs (a) to (o) (inclusive) and their related purposes under paragraph (q) above are "obligatory", meaning that customers must permit the Company to use their personal data for these purposes if they wish to use the Company's services. The Company may immediately terminate the service agreement with or otherwise cease to provide any service to the customers and the customers may not be able to further or continue their use of any service provided by the Company in case if the customers fail to provide any data or withheld or withdraw its consent for such “obligatory” use by the Company. 

上文（a）至（o）（包括）段中列出的目的及其在上文（q）段所述的相关目的是“责任性的”，这意味着客户如果希望使用本公司的服务，将必须允许本公司将其个人资料用于这些目的。如果客户未提供任何资料或不同意本公司将其个人资料用于这些目的，本公司可立即终止与该客户的服务协议，或以其他方式停止向客户提供任何服务，客户可能无法进一步或继续使用本公司提供的任何服务。

 

The purposes listed in paragraph (p) and its related purposes under paragraph (q) above are "voluntary", meaning that customers have a choice whether the Company can use their data for these purposes.

上文（p）段中列出的目的及其在上文（q）段所述的相关目的是“自愿性的”，这意味着客户可以选择本公司是否可以将其数据用于这些目的。

 

 

4.     SECURITY OF PERSONAL DATA

个人资料的保安

 

It is the policy of the Company to ensure an appropriate level of protection for personal data in order to prevent unauthorised access, processing or other use of that data, commensurate with the sensitivity of the data and the harm that would be caused by unauthorised access to that data. It is the practice of the Company to achieve appropriate levels of security protection by restricting physical access to data by providing secure storage facilities, and incorporating security measures into equipment in which data is held. Measures are taken to ensure the integrity, prudence, and competence of persons having access to personal data. Data is only transmitted by secure means.

本公司的政策为按照该条例的规定，为确保个人资料的保安程度，资料的敏感程度及因擅自查阅所造成的损害程度而提供适当的保障，以防止资料被擅自查阅、处理或作其他用途。为达到适当程度的保安，本公司的一贯做法为透过提供安全的储存设施，以及在资料存置设备实施保安措施，来严格限制资料被查阅。本公司亦会采取措施以确保处理该等资料的人士具备良好操守、审慎态度及办事能力。资料只会以妥善保安的方式传送。

 

5.     ACCURACY OF PERSONAL DATA

个人资料的准确性

 

It is the policy of the Company to ensure accuracy of all personal data collected and processed by the Company. Appropriate procedures are implemented to provide for all personal data to be regularly checked and updated to ensure that it is reasonably accurate having regard to the purposes for which that data is used. In so far as personal data held by the Company consists of statements of opinion, all reasonably practicable steps are taken to ensure that any facts cited in support of such statements of opinion are correct.

本公司的政策为按照该条例的规定，为确保所有经由本公司收集及处理的资料均为准确。本公司会实施适当的程式以定期核对及更新所有个人资料，以确保有关的资料就被使用的目的而言是为合理准确。倘若本公司所持有的个人资料含有意见的陈述，本公司会采取一切合理切实可行的步骤，以确保任何声言是支持该项意见陈述中所提及的支持事实，均属正确。

 

6.     COLLECTION OF PERSONAL DATA

个人资料的收集

 

6.1   In the course of collecting personal data, the Company will provide the individuals concerned with a Personal Data Collection Statement informing them of the purpose of collection, classes of persons to whom the data may be transferred, their rights to access and correct the data, and other relevant information.

在收集个人资料的过程中，本公司会向资料当事人提供一份「个人资料收集声明」，述明收集资料的目的、将获转交资料的人士的身份类别、查阅及改正资料的权利，以及其他有关资料。

 

6.2   In relation to the collection of personal data on-line, the following practices are adopted:

有关本公司从互联网收集个人资料，本公司会采纳以下实务：

 

(a)    On-line Security

网上保安

 

The Company will follow strict standards of security and confidentiality to protect any information provided to the Company online. Encryption technology is employed for sensitive data transmission on the Internet to protect individuals’ privacy.

本公司会按照严格的保安及保密标准保障在互联网提供给本公司的任何资料，并会采用加密法在互联网上传输敏感性的资料，以保障个人的私隐。

 

(b)    Cookies

Cookies are small pieces of data transmitted from a web server to a web browser. Cookie data is stored on a local hard drive such that the web server can later read back the cookie data from a web browser. This is useful for allowing a website to maintain information on a particular user.

Cookies are designed to be read only by the website that provides them. Cookies cannot be used to obtain data from a user’s hard drive, get a user’s e-mail address or gather a user’s sensitive information.

The Company will only use cookies as a session identifier and will not store user’s sensitive information in cookies. Once a session is established, all the communications will use the cookies to identify a user. The cookies will expire once the session is closed. If users try to disable cookies from their web browsers, they may not be able to access the Company’s Internet and other financial services.

 

「曲奇」档案

「曲奇」档案是由网站伺服器传送至浏览器的小段资讯。这些资料储存于电脑硬碟中，使网站伺服器能于稍后再从浏览器内读取。这有助网站保存个别使用者的资料。

「曲奇」档案被设计成只可让发出的网站读取，但不能用作取得使用者的硬碟资料、电邮地址或收集使用者的敏感性资料。

本公司只利用「曲奇」档案来在浏览段落作识别标记，而不会把使用者的敏感性资料存置于「曲奇」档案内。当使用者浏览本公司网站时，所有联系将会利用「曲奇」档案去鉴定使用者身份。当使用者结束浏览本公司网站时，「曲奇」档案亦会无效。倘若使用者尝试将其网络浏览器的「曲奇」档案设定为停止运作，便未必能使用本公司的网上及其他金融服务。

 

(c)    On-line Correction

Personal data provided to the Company through an on-line facility, once submitted, it may not be facilitated to be deleted, corrected or updated on-line. If deletion, correction and updates are not allowed online, users should approach our Data Protection Officer in accordance with paragraph 9.2 below.

网上改正资料

透过网上设施提供给本公司的个人资料一经呈交，便未必能在网上取消、改正或更新。使用者如未能在网上作出取消、改正或更新，便须按下述第9.2段的方法联络本公司的资料保障主任。

 

(d)    On-line Retention

Personal data collected on-line will be transferred to the Company’s relevant departments or branches for processing. Personal data will not generally be retained in web server’s database of the Company.

网上保留资料

在网上收集的个人资料会被转送到本公司有关部门或分行处理。个人资料一般不会存置于网站伺服器。

 

7.     DATA ACCESS REQUESTS AND DATA CORRECTION REQUESTS

查阅资料要求及改正资料要求

 

7.1   It is the policy of the Company to comply with and process all data access and correction requests in accordance with the provisions of the Ordinance, and for all staff concerned to be familiar with the requirements for assisting individuals to make such requests.

本公司的政策为按照该条例的规定，依从及处理一切查阅资料及改正资料要求；及让所有有关职员熟悉有关的规定，以协助各人士作出有关要求。

 

7.2  The Company may, subject to the Ordinance, impose a moderate fee for complying with a data access request. If a person making a data access request requires an additional copy of the personal data that the Company has previously supplied pursuant to an earlier data access request, the Company may charge a fee to cover the full administrative and other costs incurred in supplying that additional copy.

本公司或会在符合该条例的规定下，就查阅资料要求征收适当费用。倘若任何提出查阅资料要求的人士要求本公司提供按早前的查阅资料要求提供过的个人资料的额外副本，本公司或会收取费用以全数弥补因提供该额外副本而涉及的行政成本或其他成本的费用。

 

7.3  Data access and correction requests to the Company may be addressed to the Data Protection Officer (“DPO”) or other person as specifically advised.

有关查阅及改正资料的要求，可向资料保障主任或其他相关指定人员提出。

 

8.     OTHER PRACTICES

其他实务

 

The following are maintained by the Company to ensure compliance with the Ordinance:

为确保依从该条例所载的规定，本公司备有：

 

8.1   A Log Book as provided for in section 27 of the Ordinance;

资料记录簿，即该条例第27条所规定的记录簿；

 

8.2   Internal policies and guidelines on compliance with the Ordinance for use by staff of the Company.

内部政策及指引以供本公司员工使用，以确保各员工遵守该条例的规定。

 

9.     APPOINTMENT OF DATA PROTECTION OFFICER

资料保障主任的委任

 

9.1   To co-ordinate and oversee compliance with the Ordinance and the personal data protection policies of the Company, a DPO has been appointed by the Company.

本公司已委任资料保障主任，以负责统筹及监察该条例及本公司保障个人资料政策的遵守情况。

 

9.2   The contact details of the DPO are as follows:

        The Data Protection Officer
        资料保障主任的联络资料如下︰

        东隆物业按揭有限公司
        香港干诺道中200号信德中心西座2011室
        Tel: 28585333
        Fax: 28585111

 

10.   In the event of any inconsistency between the English and Chinese versions of this Policy, the English version shall prevail.

本声明的中英文本文义如有歧异，以英文本为准。