(A) Statement of policy
German Swiss International School (“GSIS”) respects personal data and is committed to complying with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486). You may be invited to provide personal data to GSIS on a voluntary basis. GSIS will specify the collection purpose and intended usage of your data when it invites you to provide such information. Personal data are kept for the fulfilment of the purpose or its directly related purpose for which the data are used.
(B) Statement of practice
Kinds of Personal Data Held & Main Purposes of keeping Personal Data
There are five general categories of personal data held by GSIS:
Information collected when you visit our websites
GSIS’s internal IT systems are developed and maintained by in-house staff and a third-party service providers. The third-party service providers do not have access to personal data stored in the IT system except when it is carrying out trouble-shooting on it at GSIS under the supervision of GSIS staff.
The GSIS websites are developed and maintained by in-house staff and a third-party service providers. All GSIS service providers are bound by contractual duty to keep confidential any data they come into contact with against unauthorised access, use and retention.
GSIS takes appropriate steps to protect the personal data we hold against loss, unauthorised access, use, modification or disclosure.
GSIS maintains and executes retention policies of records containing personal data to ensure personal data is not kept longer than is necessary for the fulfilment of the purpose for which the data is or is to be used. Different retention periods apply to the various kinds of personal data collected and held by GSIS.
Disclosure of personal data
Unless permitted or required by law, GSIS will not disclose any personal data to any third parties without prior written consent.
Data access and correction
You should make your data access request by completing the Data Access Request Form (OPS003)
(http://www.pcpd.org.hk/english/resources_centre/publications/forms/files/Dforme.pdf) and sending the completed Form directly to the Data Protection Officer by email at email@example.com , or in person or by mail to:
German Swiss International School
Attn. Data Protection Officer
11 Guildford Road
When handling a data access or correction request, GSIS will check the identity of the requester to ensure that he/she is the person legally entitled to make the data access or correction request. A service fee may be payable to GSIS for complying with a data access request. A Data Protection Log Book is maintained as required under section 27 of the Ordinance.
Personal Information Collection Statement
When we collect personal data from individuals, we will provide them with a Personal Information Collection Statement ("PICS") on or before the collection in an appropriate format and manner (e.g. in the same paper form or web page that collects the personal data, or in a notice posted up at the reception area of GSIS for reference).