St. Paul’s College (the “Owner”) takes all reasonably practicable precautions and exercises due diligence to comply with the requirements under the Personal Data (Privacy) Ordinance, Cap 486 ("PDPO"). The policy of the Owner in handling personal data is stated in this Privacy Policy Statement which is publicly accessible on the Owner's website at https://www.spc-connect.net/sponsoredwalk/index.php .

The kinds of personal data held

The kinds of personal data held by the Owner include and are not limited to student and alumni records which include personal data in applications for participation in events by the Owner; records collected on webservers and the Owner server which include email addresses, login ID and passwords and the communications between the Owner and the members through the Owner. Information on the website traffic and access hits of the contents of the Owner website are tracked without identifying any individual when providing these online services. In the process, no personal data is collected;

Other miscellaneous records which include enquiries from the media and non-members and related communications; and personal data held in minutes and records of meetings personal data of members of the Owner, its committees and working parties and panels; all of which is collected by the Owner during the performance of its administrative and executive functions; and personal data collected by the Owner when exercising its referral and approval functions.

Main purposes of using the personal data

Personal data held in :-

Student and alumni records are kept for the purposes of enabling the Owner to perform its functions in connection with matters relating to members' welfare;

Member records are kept for the purposes of enabling the Owner to perform its functions and powers under the applicable laws and regulations and to provide information to members;

Records collected on webservers and the Owner server are kept for the purposes of administering the web services and the services provided by the Owner;

Other miscellaneous records are kept by the Owner’s general office for the purposes of performing its administrative and executive functions and of giving support and assistance to the Council, committees, sub-committees and working parties of the Owner and the carrying out of education, social, recreational and other programmes or activities organized or supported by the Owner.

Personal data access and correction requests

A data subject has the right to request access to and to request the correction of his personal data. Any data access request should be made by completing the specified Data Access Request Form (OPS003) prescribed under the PDPO and sending it to the following person : -

The Data Protection Officer, St. Paul’s College, 69 Bonham Road, Hong Kong.

A fee is chargeable by the Owner for complying with a data access request.