Community Health Services Limited T/A CHC Group Medical Practice (the “Company”)

Personal Data      

1. General Statement 概括聲明
   • This notice is given pursuant to the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (“Ordinance”) in relation to the supply of patient’s Personal Data (defined hereinafter) to the Company for the maintaining of patients medical records (the “Records”) for providing medical consultation, health checkup services and other related services (the “Services”) provided by the Company or the compliance with applicable laws, guidelines or in response to requests by any regulatory or statutory authority in Hong Kong. 此通知乃依據香港法例第486章個人資料 (私隱) 條例 (“條例”) 就有關病人向本公司提供之個人資料 (以下定義)，為使本公司保留病人醫療記錄 (“記錄”) 以提供醫療診治、身體檢查以及其他相關服務 (“服務”)，或為遵從適用法例、指引或因應規管機構或其他當局之要求時而發出。
   • The Company’s Personal Data Privacy Policy (the “Policy”) set out herein specifically addresses the Company’s obligation in respect of the applicable data privacy laws including the Ordinance and forms a part of general terms and conditions of the Services provided to the patients by the Compan 本公司之個人資料私隠政策 (“政策”) 特別專注於本公司就適用資料私隠法例之責任而設，並組成本公司與病人提供服務的協議之條款及細則的一部分。
   • The Company deems that patients have agreed by using our Services subject to general terms and conditions for the Services including the Policy enforced by the Company and the Company reserves the right to add, amend or cancel any terms and conditions including the Policy without any notice to the patients from time to time and the contents are also subject and subordinate to applicable laws, rules and regulatory directions enforced in Hong Kong from time to time. 病人在使用本公司的服務時，已被視為同意本公司提供服務的協議之條款及細則，包括此政策，和本公司保留不作事前通知不時修改、變更或取消此任何其條款及細則之權利，而內容將遵從在香港不時適用之法例、指引或規管機構的指示。
2. Personal Data 個人資料
   • In the Ordinance, “Personal Data” is defined as “any recorded information relating to a living individual from which his/her identity can be directly or indirectly ascertained”. 在該條例中，“個人資料”被界定為“可直接或間接地確定有關個人身份的任何已紀錄之資料”。
   • For the purpose of the maintaining of the Records or the compliance with applicable laws, guidelines or requested by any regulatory or statutory authority in Hong Kong, you may be requested by the Company to provide Personal Data such as, but not limited to, the following:-為保留醫療紀錄或遵從適用法律、指引或香港規管機構或機構要求，本公司可要求 閣下提供個人資料如 (惟不限於) 下述各項：-

(a) Name, Gender , Date of Birth and Residential Address姓名、性別、出生日期和地址; (b)Hong Kong identification number and/or passport number 香港身分證和/或護照號碼; (c) Telephone number, fax number and e-mail address電話號碼、傳真號碼及電郵地址; (d) Medical records  and treatment records醫療記錄和治療記錄; (e) Where appropriate, sick leave and referral record(s)病假和轉介記錄(如適用)

3. Purposes of Collection 收集之目的
   • The Personal Data supplied by patients to the Company and in any documentation which comes into existence as a result of patient’s keeping of the Records for Services provided by the Company, will be used by the Company for the following purposes:- 病人向本公司提供之任何文件，及本公司在提供予病人服務時所保留之醫療記錄的個人資料將被本公司作為下列用途：-

• Achieving and maintaining the appropriate medical practice; 提供及維持適當的醫療服務；
• Processing the assessment of the medical examination to other Government bureaus/departments or relevant parties such as employer (in case the patients are sent for employment related checkup services) and/or insurer where appropriate; 如有需要提供予其他政府部門或有關人士如僱主(若病人被要求進行僱員健康檢查)有關醫療檢查的評估；
• Keeping you informed about the Services supplied to the patient(s) and other Services made available by the Company; 通知閣下本公司向病人提供之服務及其他可提供服務之有關事宜；及
• Any agent, contractor, professional adviser or third party service provider or the Company who is under the duty of confidence; 為任何代理人、承包商、專業顧問或第三方服務供應商或本公司在保密責任下使用；
• Any debt collection agent in the event of default of payment of fees for the Services; and 為任何債務代理人在拖欠服務付款的情況下作追收款項之用途；及
• Any other purposes as may be agreed between the patient(s) and the Company in writing from time to time. 病人與本公司不時就任何其他目的以書面同意之相關事宜。

4. Patient’s Obligation to provide Personal Data 客戶提供個人資料之責任
   • It is obligatory for patient to supply the Personal Data as required by the Company. If patient fails to supply the required Personal Data, the Company may refuse to provide the Services to patients as the Company and the relevant medical practitioner must ascertain the present and past personal and medical conditions of the patient. 病人有責任向本公司提供所需之個人資料。因有關醫務人員需確認病人過去及現在之個人及健康狀況，如病人未能提供所需之個人資料，本公司可拒絕向病人拒絶提供服務。
   • When providing any Personal Data to the Company, please ensure that the Personal Data is accurate and updated by having regard to patient’s obligations under the Ordinance. 鑒於病人在條例下之責任，當向本公司提供個人資料時，病人須確保所提供的為準確及最新之個人資料。
5. Retention and Security of Personal Data 個人資料之保存及安全性
   • Subject to Clauses 3.1 and 7, all Personal Data collected and held by the Company will be kept confidential and the Company retains the patient’s Personal Data for as long as is necessary to fulfil the original or directly related purpose for which they were collected.

受文中第3.1及 7條之規限下，由本公司收集並保管之全部個人資料會予以保密。只要是為有需要滿足收集此個人資料之原本或直接相關之目的時，本公司會保存 閣下之個人資料。

• The Personal Data are securely stored and accesses to the Personal Data without appropriate authorization are strictly prohibited and authorizations are granted only on a “need to know” basis. 本公司會將個人資料儲存妥當。凡未有適當授權之人士嚴禁查閱個人資料。授權查閱僅按“必須知道”之基礎而授予。

6. Accuracy of Personal Data 個人資料之準確性
   • The Company from time to time will validate the Personal Data provided by the patient and request the patient the original documentation before the Personal Data may be used, such as with the identification documents and/or the proof of the address. 本公司會不時核實由 閣下提供之個人資料，並在可能使用該等個人資料之前要求 閣下提供文件正本，如身份證明文件及/或地址證明。
7. Disclosure of Information 資料之披露
   • The Company will keep the Personal data confidential but the Company may transfer such may, as it deems necessary, disclose to other Government bureaus/departments or relevant parties such as employer (in case the patients are sent for employment related checkup services) and insurer for the purposes of processing the assessment of the medical examination. 本公司會將個人資料保密，但在其認為有需要之情況下，可能會披露予其他政府部門或有關人士如僱主(若病人被要求進行僱員健康檢查)以處理有關醫療檢查的評估。
8. Access to and Correction of Personal Data 查閱及改正其個人資料
   • The Company fully complies with the “Right of Access and Correction” obligations of the Ordinance. In accordance with the terms of the Ordinance, the patient may request access to the Personal Data supplied by the patient to ascertain whether the Company hold any Personal Data and, if so, obtain such Personal Data and may request the Company to correct any inaccurate Personal Data for the purpose for which it is being used. 本公司已全面履行該條例所規定之「查閱及改正資料的權利」責任。按照該條例之條款規定，病人可要求查閱其所提供之個人資料，以確定本公司有否保管任何個人資料；如有，病人可取得該等個人資料並可要求本公司改正任何不準確之個人資料以達致使用該資料之目的。
   • Patient also has the right to ascertain the Company’s policies and practice in relation to the Personal Data. 病人亦有權就有關個人資料確定本公司之政策及做法。
   • The Company will, upon satisfying itself of the authenticity and validity of the access request from patient, make every endeavor to comply with and respond to the request within the period set by the Ordinance (i.e. within 40 days after receiving the request) and shall be entitled to charge a reasonable administrative fee for processing of any Personal Data access request from patient. 本公司信納病人有關查閱要求之真確性及有效性後，會盡力依從該要求，並在條例規定的期限內予以回覆(亦即在本公司收到查閱資料要求後40日內)。本公司有權就處理任何查閱個人資料要求向病人收取合理之行政費用。
9. Direct Marketing 直接促銷
   • The Company will not provide your Personal Data to third parties for their use in direct marketing unless the Company has received your written consent. 除非收到 閣下之書面許可，本公司不會向第三者提供 閣下之個人資料以供其作直接促銷用途。
10. Governing Language 管轄語言
    • In the event of any discrepancies between the English and Chinese version of this Agreement, the English version shall prevail. 若本協議中、英文版本有歧義之處，一概以英文版本為準。
11. Enquiries 查詢
    • Enquiries concerning the Personal Data provided by Patient to the Company, including the request for access and corrections should be addressed to the Company.

如病人對向本公司提供之個人資料有任何查詢，包括要求查閱及改正該等個人資料，可致函本公司。