Other than the specific purposes of collection and use of your personal data set out in the table above, personal data provided by you may also be used for the following general purposes, for other purposes as shall be agreed between you and us or as required by law from time to time:
- to provide our services to you, including responding to any questions you may have and recommending our products or services;
- to carry out our obligations arising from contracts entered between you and us;
- to monitor the use of, and to improve and protect our websites, products, contents and services;
- to investigate complaints and suspicious transactions; to prevent and detect crimes;
- to satisfy our legal obligations, including responding to requests by government or law enforcement authorities conducting an investigation;
- to understand your preferences and behaviors in order to offer you a better user experience by the use of cookies and data sorting and analysis; and
- to provide marketing materials to you (including regular communications from us with details of our products, services and relevant benefits and information), if you have given the necessary consent regarding direct marketing (please refer to the section“DIRECT MARKETING” of the Policy).
2. The retention period of personal information
We aim to retain your personal information no longer than is necessary for the fulfilment of the purposes of collection unless a longer retention period is required or permitted by the applicable laws, including the following regulations:
The Act on the Consumer Protection in Electronic Commerce, Etc. of South Korea
- Records about cancellation of an order or termination of a contract: 5 years
- Records about payments or provision of products: 5 years
- Records about consumer complaints and disputes: 3 years
The Protection of Communications Secrets Act of South Korea
- Log or access records: 3 months.
Matters relating to Operation of a Mechanism for Automatically Collecting Personal Information
The websites of our TTI Group Entities use cookies which, among other things, help us to improve your experience of our websites and to ensure that they perform as you expect them to. For detailed information on how we use cookies and the purposes for which we use then, please refer to ourCookies Policy.
Sharing of Personal Information
Personal information you provide to us may be disclosed or transferred (whether in South Korea or abroad) to one or more TTI Group Entities and/or third parties through information communication network at the time of collection, etc.Please refer to theWho Will We Share This Data With, Where And When? section for details.
Delegation (and Overseas Transfer) of Processing of Personal Information
Personal information you provide to us may be provided to and accessed by agents, contractors or other third-party service providers who provide data processing, data storage or other professional services to us through information communication network at the time of collection, etc. Please refer to theWho Will We Share This Data With, Where And When? section for details.
Security Measures
All personal data you provide to us will be securely stored with restricted access by authorized personnel only. We utilize encryption/security software for data transmission so as to protect your data via encrypting it in a secure format to ensure its privacy and security from unauthorized access or disclosure, accidental loss, alteration or destruction.
In addition, we will adopt contractual or other means to prevent any personal data transferred to our data processors (i) from being kept longer than is necessary for processing of the data; and (ii) from unauthorised or accidental access, processing, erasure, loss or use, if we are to engage any data processor.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our websites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Destruction of Your Personal Information
The process and means of destroying your personal data are as follows.
1. Procedure
For personal data that is requested to be deleted, the data will be destroyed immediately upon request.
If we achieve the purposes of collection and use of your personal data, we will destroy these records (paper or electronic) after a certain period pursuant to our internal policy or applicable laws and regulations (please refer to the provisions on retention and use period).
Such personal data will not be used for any purpose other than the purpose permitted under the applicable laws and regulations.
In case any item(s) of personal data is required to be retained for a period beyond the period of retention and use as prescribed by applicable law, to the extent technically possible, such information item(s) will be stored or maintained separately from other items of personal data.
2. Method
The personal data that has been printed on paper will be shredded through the use of document shredder or incinerated.
The personal data stored in electronic file form will be deleted by using technical means that will not allow data recovery.
Users’ Rights and Methods to Exercise
As a data subject, you are entitled to assert the rights of a data subject at any time. In particular, you have the right to:
1. obtain information about whether or not and if applicable to which extent we process personal data concerning you;
2. access information, in particular, the following information: stored data concerning you, purpose(s) of the processing, categories of data, recipients to whom we disclose data or duration of storage in the case of processing of personal data concerning you;
3. require us to correct any personal data without undue delay which is inaccurate or incomplete;
4. ascertain our policies and practices (from time to time) in relation to personal data and the types of personal data held by us;
5. require us to delete or cease the collection, processing or use of your personal data without undue delay;
6. withdraw your consent given vis-à-vis us concerning the processing of your data at any time;
7. require the processing of your personal data be restricted; and
8. receive the personal data concerning you which you had provided to us in a structured, standard and machine-readable format, and to transmit these data to another controller.
All requests for access to or correction of personal data should be in writing and addressed to our Legal Department (please refer to the contact details below).
Contact Information
If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch with us via post or email:
Address:29/F, Tower 2, Kowloon Commerce Centre, 51 Kwai Cheong Road, Kwai Chung, New Territories, Hong Kong
Attention: Legal Department
Email:
privacy@tti.com.hk
Last updated: 14 November 2022
|