Nikko HK Privacy Policy Statement (Hong Kong) – Page 4

Access to records and data without appropriate management authorisation are strictly prohibited. Authorisations are granted only on a “need to know” basis that is commensurate with an individual’s company responsibilities and their training.
Where the Company holds, uses and/or transmits the Customers’ personal data it will be adequately protected from accidental and/or unauthorised disclosure, change and/or destruction.
7 ACCESS AND CORRECTION OF PERSONAL DATA Under the Ordinance, individuals have the right to:
(a) Ascertain whether the Company holds any personal data relating to them and, if so, obtain copies of such data (“right of access”);
(b) Require the Company to correct personal data in its possession which is inaccurate for the purpose for which it is being used by means of a data access request (right of correction); and
(c) Ascertain the Company’s policies and practices in relation to personal data, which are those policies and practices set out in their entirety herein.
An individual may exercise his or her right of access by:
(a) Completing the “Data Access Request Form” as prescribed by the Privacy Commissioner for Personal Data or the “Personal Data (Privacy) Ordinance – Data Access Request Form”;
(b) Sending the completed form, along with appropriate proof of identity (a copy of the applicant’s Hong Kong Identity Card or Passport) and the prescribed fee to the at the address listed below;
There, staff will verify your identity and stamp the completed form appropriately. Please send the stamped form and processing fee to the Company at the address listed below for processing. The Company will, upon satisfying itself of the authenticity and validity of the access request, make every endeavour to comply with and respond to the request within the period set by the Ordinance (i. e. within 40 days after receiving the request).
An individual may exercise their right of correction by writing to the Company at the address listed below, specifying the data obtained through the Data Access Request mentioned above which needs to be corrected.
Satisfactory proof and/or explanation of the inaccuracy is essential before the Company would consider correcting the specified data.
Upon satisfying itself of the authenticity and validity of the correction request, the Company will comply with and respond to the request as required by the Ordinance.
8 HANDLING OF PERSONAL DATA IN RECRUITMENT
During the recruitment process, job applicants may be required to provide sufficient personal data so that the Company may, as appropriate and/or applicable:
(a) Assess the applicant’s suitability for the position being applied for;
(b) Assess the applicant’s suitability for other positions the Company may have available;
(c) Determine preliminary remuneration and benefit packages;
(d) Verification of credentials and/or experience; and
(e) Perform security vetting and/or integrity checking.
At a minimum, such personal data (“Recruitment Personal Data”) will include:
(a) The applicant’s name and contact details, including address and telephone number(s);
(b) Previous employment and relevant experience; and
(c) Education and relevant training.
Additional information may also be required dependent on the nature of the position being
applied for.
The applicant is responsible for ensuring all personal data they provide is accurate and complete. The provision of inaccurate information or the withholding of requested information may:
(a) Prevent the Company from making an offer of employment;

Next Page