每當你使用本網站，公署將會持有以下三大類個人資料：
Three broad categories of personal data are held when you use the Website:

• 使用者的聯絡方法和基本資料，包括你登記出席國際申訴專員高峰論壇2024暨申訴專員公署35周年慶祝大會（「高峰論壇暨周年大會」）時提供的姓名、稱謂、電郵地址、聯絡電話、機構名稱、通訊地址、機構所在國家或地區、職位或職銜；
  Contact details and basic user information, which may include your firstname, lastname, salutation, email address, contact number, organisation name, correspondence address, country/region of organisation and post / title when you register the International Ombudsman Summit 2024 and Hong Kong Ombudsman 35th Anniversary Reception (“Event”);
• 你發送給我們的任何通訊內容，包括對本網站或其內容的查詢、關注或評論；以及
  Content of any communications you send to us, which include queries, concerns or comments regarding the Website or its content; and
• 裝置和記錄資訊，包括互聯網規約地址、你使用本網站的情況、瀏覽歷程記錄、瀏覽器類型和對話頻率。
  Device data and log information, which include IP addresses, your use of our Website, browsing history, browser type and session frequency;

小型文字檔案（Cookie）概不儲存任何個人資料（有關 Cookie 的詳情，請參閱另文「Cookie 政策」）。
No personal data is stored in cookies. (Please refer to our separate Cookie Policy for further details on cookies.)

公署會在你進行以下活動時收集及處理資料： We collect data and process data when you:

• 在本網站遞交網上表格；
  Submit any online form on the Website;
• 填寫網上調查問卷以提供回饋；
  Complete an online survey to provide feedback;
• 透過電話、電郵或其他方式與公署聯絡；以及
  Correspond with us by phone, e-mail or otherwise; and
• 透過互聯網瀏覽器使用或瀏覽本網站。
  Use or view the Website via your web browser.

你並無義務提供公署直接向你收集的個人資料。然而，你若不提供相關表格上註明必須填寫或附有星號的資料，公署可能無法處理你所提交的事項、為你提供服務或回覆查詢，例如有關高峰論壇的登記。
You are under no obligation to provide the personal data when we seek to directly collect it from you. However, if you do not provide us with certain information marked as mandatory or with an asterisk on the relevant forms, we may not be able to process your submission, provide you with our services or respond to your enquiries such as your registration to the Event.

你若向公署發送任何個人資料，即表示你已年滿 18 歲。假如公署發現可能收集了未滿18歲使用者的個人資料，便會採取合理措施盡快從檔案中刪除。你若發現公署可能收集了18歲以下未成年人士的資料，請透過下列聯絡方法通知我們。
By sending us any personal data, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at the contact details set out in the section below.

保存上述個人資料的目的如下：
The purposes for keeping the above personal data are as follows:

• 根據你的同意，為你提供高峰論壇暨周年大會的登記、通訊及相關活動的服務；
  To provide you the services regarding registration, communications and related activities of this Event with a ground of your consent;
• 根據你的同意，在公署網站／社交媒體／年報等刊物上分享你的圖像或錄像片段；
  To share your pictures or video clips on our websites / social media / publications such as annual report with a ground of your consent;
• 根據你要求登記出席高峰論壇暨周年大會，把你向公署提供的資料轉移給我們位於香港的第三方；
  To transfer your data to us and our third parties located in Hong Kong with a ground of your request of registration to this Event;
• 為確保本網站的安全和完整性，分析趨勢、追蹤使用量並監控網站上的活動；以及
  To analyse trends, track usage, and monitor activity on our Website with a ground to ensure the security and integrity of the Website; and
• 根據控制者應承擔的法律或監管責任，執行合規工作。
  To perform tasks for compliance with a ground of legal or regulatory obligation to which the controller is subject.

處理資料的過程不涉及自動化決策程序，例如個人概況彙編。
There is no automated decision-making process such as profiling when data is processed.

公署會採取適當步驟（例如加密資料）保障所持有的個人資料，防止未獲准許或意外地被查閲、處理、刪除、喪失或使用、修改或披露。
This Office takes appropriate steps to protect the personal data we hold against unauthorised or accidental access, processing, erasure, loss or use, modification or disclosure - for example, data encryption.

公署也會確保任何與我們交易的第三方代為處理個人資料時，須確保所有資料得到保護。
We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

考慮到經互聯網交換資料並非絕對安全，公署無法保證你傳送的資訊不會遺失、被他人非法使用或以欺詐手段修改。我們對你或任何第三方使用資訊不承擔任何責任。有關詳情，請參閱另文的免責聲明。
Considering the data exchanged via the Internet is not 100% secure, we cannot guarantee that the information you send will not be lost, used unlawfully, or modified in a fraudulent manner. We bear no liability for the use of information by you or any third party. Please refer to our separate Disclaimer for further details.

公署已就載有個人資料的記錄訂立保留資料政策並落實執行，以確保個人資料的保存時間不超過使用或擬使用該資料以貫徹其目的所需的時間。
This Office maintains and executes retention policies of records containing personal data to ensure personal data is not kept longer than is necessary for the fulfillment of the purpose for which the data is or is to be used.

一般而言，公署在高峰論壇結束後不會保存你的登記資料超過一年，但某些特殊情況除外，例如為了符合法例或監管要求，或應你的要求提早刪除。
We will keep your registration data for no longer than one year in general after the completion of the Event, except for some specific circumstances, for example, to meet legal or regulatory requirements, or your request of early erasure.

當公署不再需要為持續的合法業務處理你的個人資料時，便會把資料刪除或匿名化。
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

公署一般會把你的資料保存在香港寄存的伺服器上，並可能轉移你的個人資料給位於香港的第三方以提供服務。以下列舉的第三方可能不時需要存取你的個人資料： The Office will generally hold your data on the servers hosted in Hong Kong, and may transfer your personal data to third parties located in Hong Kong to deliver the services. These third parties may from time to time need to have access to your personal data. These third parties may include:

• 服務供應商：代公署提供行政、分配、資料處理和管理、電腦系統、活動管理、網站維護和寄存、審計和其他功能，以協助公署營運業務，例如向你發送有關高峰論壇暨周年大會的郵件和電郵，以及協助公署管理本網站；
  Service providers , who provide administrative, distribution, data processing and management, computer system, event management, website maintenance and hosting, auditing and other functions on our behalf to help us operate our business, such as sending postal mail and e-mails to you about the Event and helping us manage the Website;
• 政府及／或監管機構：為履行法律或監管責任；以及
  Government and/or regulators on a legal or regulatory basis;
• 其他第三方：為偵察、預防或以其他方式處理詐騙、保安或技術問題，保障使用者或公眾的權利、財產或安全免受損害。
  Other parties , for the purposes of detecting, preventing or otherwise addressing fraud, security or technical issues, protecting against harm to the rights, property or safety of our users or the public.

歐洲經濟區以外未取得歐盟委員會就資料足夠保障程度作出評估決定的國家／城市（例如香港）（「受限制第三國」），不提供與歐盟相同程度的資料保障。公署僅會在下列情況下轉移你的個人資料：
Countries / Cities (e.g. Hong Kong) outside the European Economic Area which there is no adequacy decision by the European Commission (“restricted third country”) do not offer a level of data protection identical to that in the European Union. We only transfer your personal data if

• 接收資料方設有適當的保障或資料保護措施；
  appropriate safeguards or data protection measures are provided by the recipient;
• 你已遞交要求，以登記出席高峰論壇暨周年大會；以及
  you have submitted the request of registration to the Event; and
• 公署為向你提供服務而需要轉移資料（例如關於高峰論壇暨周年大會的登記和重要通知）。
  the transfer is necessary for us to provide you the services (e.g. registration and important notices about the Event).

公署致力確保你完全了解你所有的保障資料權利。
The Office would like to make sure you are fully aware of all of your data protection rights

根據香港《個人資料（私隱）條例》，你有權：
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right:

• 查核公署是否持有你的個人資料及查閱該資料；
  to check whether we hold personal data about you and to access such data;
• 要求公署改正不準確的資料；以及
  to require us to correct inaccurate data; and
• 確定公署在個人資料方面的政策及實務，以及公署所持有個人資料的種類。
  to ascertain our policies and practices in relation to personal data and the kind of personal data held by us.

假如你身處歐盟成員國，在某些局限及／或限制下，歐盟的數據保障條例賦予你以下權利：
If you are in an EU Member State, subject to certain limitations and/or restrictions, you have the right under the data protection laws in the EU:

• 查閱你的個人資料；
  to access your personal data;
• 改正或更新你認為不準確或不完整的個人資料；
  to correct or update any of your personal data you believe is inaccurate or incomplete;
• 刪除你的個人資料；
  to erase your personal data;
• 反對或限制處理你的個人資料；
  to object to or restrict processing of your personal data;
• 個人資料的可攜權利；
  to have data portability of your personal data;
• 撤回你的同意；以及
  to withdraw your consent(s); and
• 向公署的保障資料主任或你國家的保障資料監管機構投訴。
  to lodge a complaint with our data protection officer, or your national data protection supervisory authority.

如需行使上述權利，請以電郵（enquiry@ombudsman.hk）聯絡公署的保障資料主任徐女士（總行政主任），提出你的要求。就任何查閱個人資料的要求，公署在提供資料前必定查核提出要求者的身份，並使用資料當事人登記或提交表格的電郵向其確認。
To exercise your rights, you can send a request to our data protection officer, Ms TSUI (Chief Manager) at enquiry@ombudsman.hk . We will always verify the identity of anyone making subject access request before handling over any information. Confirmation will be asked from the data subject using the email they used to create their registration or submit the form.

公署會盡快處理所有要求，並在接到要求後五個工作天內回覆。若拒絕要求，公署會發出通知及說明拒絕的理由。授予同意與撤回同意所需的人手處理時間相同。
All requests will be promptly attended to and the response will be made no later than 5 working days after its receipt. Where a request is refused, the requester will be advised of the refusal and the reason for refusal. The manual time for processing a consent giving is same as that for withdrawal of consent.

本網站載有Facebook、Youtube等其他網站的連結。本文所述的私隱政策僅適用於本網站。你若點擊連結到其他網站，請參閱該等網站的私隱政策。
This Website contains links to other websites such as Facebook and Youtube. This privacy policy applies only to this Website, so if you click on a link to another website, you should read their privacy policy.

英文原文與譯本如有任何歧義，概以英文本為準。
In the event of any discrepancies between the English version and translated versions, the English version will take precedence.

如有查詢，請聯絡我們： For enquires, you may contact us at: