Privacy
1. Privacy Statement
Baker Tilly Hong Kong (hereafter referred to as 'BTHK') is committed to ensuring that all personal data provided under various applications and touchpoints are handled in accordance with the relevant provisions of the Personal Data (Privacy) Ordinance.
When you use BTHK's services and provide us with personal information, you acknowledge having read this Statement, and, unless we separately obtain your consent as required by applicable law, you consent to the terms of this Statement (including international transfers as provided in this Statement to countries outside of your country of residence).
Should you disagree with the terms of this Policy and have concerns about the categories of personal data we are requesting from you, please do not submit any personal information to us without contacting us first.
1.1 Your personal information
In order to provide a better service to you, we may collect information when you attend our functions, use our services, register with us or communicate with us. The typical types of information held by BTHK are basic contact details (such as name, job title, company name, address, email, telephone and fax numbers), a record of our contact with you and your areas of interest (i.e. sectors, events, publications, etc). We will normally keep your contact details supplied in the database. We will not disclose any personal information you provide to third parties unconnected with BTHK without your consent, except to our data processors or as otherwise permitted by the relevant data protection legislation.
Addresses, email addresses and other personal details supplied by means of this website will be used for the purposes for which you supply them or as stated on the relevant section of this website. In some cases, they may also be used for statistical analysis.
2. Collection of personal information
When you use BTHK's services, we may collect information about you including through cookies and analytics tools. We may collect personally identifiable information about you either directly from you, or by combining information we collect and maintain through other means (such as client relationship management systems or IP addresses).
2.1 Categories of Personal Information
The personal information we collect may include:
Name, job title, employer, email address, phone number, or your location (country, city) when you:
(a) Sign up for our mailing list, create a user profile, or send an inquiry through our website.
(b) Sign up for our webinars, webcasts and other events. At the time of registration, you might also be asked for your email address and whether or not you would like to receive emails regarding upcoming webinars/webcasts using the contact information you provided and/or your email address. The information collected during registration is used for internal research and analysis in order to understand better who is watching our webcasts and to serve your needs better.
- Your social network ID, such as WeChat ID and LinkedIn profile URL, when you register as an alumnus. An alumnus' personal information submitted to us will only be used to maintain contact with that alumnus and will not be disclosed to any third party without your permission.
- Name and email address when you access our applications (for example, when you respond to a survey or access specific content)
- The information that we collect includes your name, correspondence address, e-mail address, Hong Kong Identity card number, for the purpose of performing our pre-engagement acceptance assessments (which may include anti-money laundering or other regulatory-related assessments) and this information is needed in order to complete such assessments; and to provide our products and/or services to you/your organization/your employer when it is necessary for business purposes.
- Our social networking pages collect information that you have made publicly available on your account, like your name and what you like about our products. These social networks may give us statistics and insights about the kinds of things people do on our pages. Where applicable, we and the social media site(s) have entered into an arrangement which determines our respective responsibilities.
- Content that you provide, including but not limited to postings on any blogs, forums, wikis and other social media applications.
- Upon entering our premises, you may be asked to provide personal identification information (e.g., your Hong Kong Identity card number) for security reasons.
- Any other information you choose to provide to us (e.g. your employment history), for example, when you make use of the "Contact Us" feature of our BTHK website, register for an account, and/or update your profile.
- Using cookies, for example, may allow us to collect personal data indirectly. For more information regarding our use of cookies, please see Cookies.
- As part of our policy, we require you to supply us with the minimum amount of personal information which is necessary for us to complete your request and/or to provide you with BTHK services ("Necessary Personal Information"). You may voluntarily provide BTHK with additional personal information we request, which will help us improve our services and meet your needs more effectively. Your failure to provide us with such additional personal information will not negatively impact your use of the BTHK services.
2.2 Sensitive personal information
Our websites do not typically request personal sensitive information from visitors (for example, personal identifying information, assets, race or ethnic origin, religious beliefs, criminal records, physical or mental health, or sexual orientation). In 2.1 above, we stated that we may collect certain categories of personal data, which may be regarded as sensitive under applicable laws in HKSAR, for purposes of pre-engagement assessments and security purposes (granting access to our premises).
We will not collect and process sensitive personal data unless we have obtained your explicit consent as may be required by applicable law.
3. Use of personal information
In the event we collect Necessary Personal Information, it will be used to complete your specific request and/or to provide you with BTHK Services, which may also include the following:
- Providing, administering, managing, and developing different functions of the products and services we offer, such as conducting pre-engagement acceptance assessments before supplying those products and services;
- Communicating with you, such as responding to your inquiries and/or requests;
- Confirming and authenticating your identity in order to prevent unauthorised access to restricted areas of the site, content, or other services;
- Identifying the organization you work for or with which you are otherwise associated and staying in touch with our business contacts.
For personal information that is not Necessary Personal Information we collect, it will be used to improve BTHK services, to develop new functions of our products and services, and to better serve your needs.
We will use the information that we collect for the above purposes only if and to the extent that such processing is lawful, which may include obtaining any prior consent as may be required by applicable law.
4. Marketing
We may provide you from time to time with information that we think may be of interest to you. This information may be technical updates, information about our services or details of events hosted by BTHK. If you prefer not to receive promotional material from us, please email us at announcements@bakertilly.hk.
5. Cookies
Cookies are used for various purposes. Please refer to our cookies statement.
6. Security of information
The data controller of the information described in this statement is BTHK unless specified otherwise.
To protect personal information from loss, misuse, alteration, or destruction, generally accepted standards of technology and operational security have been implemented. Responsible personnel are expected to keep personal information confidential, and only authorised individuals are permitted access to this information.
7. Transfers of personal information
Your personal data may be transferred to, processed by and stored with, the following classes of transferees/categories of recipients for the purposes as described in this Statement:
7.1 Network Member Firms
As Baker Tilly (hereafter referred to as 'BT') is a global network with Member Firms around the world, your personal information may be transferred to other BT Member Firms (and their respective subsidiaries and affiliates). Other BT Member Firms may process your personal information on behalf of the Data Controller for the same purposes as described in this policy. Additionally, each BT Member Firm with whom you share your information can decide jointly with other BT Member Firms how your personal information is to be processed.
7.2 Third-party service providers
Your personal data may also be transferred to a third party service provider who is not part of the BT network so that it can be processed on behalf of a BT member firm. Data we collect may be transferred or disclosed to third parties or subcontractors of BT Member Firms (and their subsidiaries and affiliates), as well as other third parties, including those who provide IT services, identity management, website hosting and management, data analysis, data back-up and archiving, security and storage services (including cloud service providers), event management, and other services with respect to the operation of our business. We use these third parties to help us deliver our BTHK services.
When we transfer your personal data to third parties, it is for the purposes stated in this Statement, for the administration and maintenance of our website and associated systems, and/or for other internal or administrative purposes.
Generally, we use only third-party service providers who are bound to maintain appropriate levels of security and confidentiality, as well as to process personal information only as instructed by us pursuant to the contract between us. Nevertheless, third-party service providers may be entitled to use their respective subsidiaries and affiliates, as well as their own third-party subcontractors with access to personal data (sub-processors) to meet the stated purposes of disclosure and/or transfer.
7.3 Other disclosures
Under the following circumstances, we may disclose personal information to third parties:
- In the case of explicit requests from you, including delivering publications or reference materials requested by you;
- When facilitating conferences or co-hosting an event with a third party, registration forms for events may collect personal information and the type of information collected will differ. We may share such information with third parties for purpose associated with the event;
- Depending on applicable laws and regulations, your information may be disclosed to law enforcement, regulatory, and other government agencies and authorities, professional bodies, and other third parties. This may include disclosures to countries or regions outside of where you reside.
8. Retention of personal information
According to our policy, we will retain personal information only as long as is necessary to fulfil the purposes for which the data are to be used, or as required by law, regulation, or professional standards, as well as to establish, exercise, or defend our legal rights.
We retain contact information (such as mailing list information) until a user unsubscribes or requests that the information is deleted. We may keep certain limited information about you if you decide to unsubscribe from a mailing list so that we may honour your request.
9. Right to access and control your personal information
Under applicable laws, you may have certain rights pertaining to the personal information we hold about you, including:
- Right to request a copy of certain categories of personal information, such as basic information, identification information, health information (if applicable) and educational information;
- Right to update or correct inaccurate information;
- Right to request deletion of your personal information;
- Right to request cancellation of your account; and
- Right to withdraw consent to processing of your personal information (to the extent that such processing is based on consent and consent is the only basis for processing). Upon your consent withdrawal, we will cease to process the corresponding personal data. You may, however, withdraw your consent without affecting the processing of personal information previously conducted under your authorization.
We ask that you contact our Privacy Team if you wish to exercise any of these rights. We will treat your requests in accordance with applicable legal requirements.
We may charge a fee for processing your request to access your information if necessary.
10. Your emails
The message and any attachment is private and confidential and may also be legally privileged and is intended for the recipient(s) identified. If you have received a message by mistake, please immediately notify the sender and delete the message. You are not entitled to use or copy the message, or to disclose it to any third party.
Email is not a secure medium, meaning that there is risk of interference, hacking or virus attack. Whilst we adopt and apply industry standards in guarding against such risks and take precautions to ensure that our electronic communications are uncorrupted and virus free, it is the responsibility of the recipient(s) of the message to ensure that the content of the message and any attachment is intact and virus-free. If you require us to provide you with greater degrees of security, we can encrypt / password protect emails and their attachments. Please contact the sender of the message if you would like us to provide you with any such increased protection.
11. Changes to this Privacy Policy
We will occasionally amend this Privacy Policy to reflect firm, client and other feedback. We encourage you to periodically review this policy to be informed of how we are committed to protecting your information and providing you with improved content on our website. By using this site, you signify your agreement with the terms of this Privacy Policy.
12. Contact information
If you have any questions about this Privacy Policy, please contact us by email at our Contact Us page or by letter to Baker Tilly Hong Kong, Level 8, K11 ATELIER King's Road, 728 King's Road, Quarry Bay, Hong Kong.
Appendix 1
The term "Member Firm" refers to a legal entity or partnership that is part of the worldwide network of Baker Tilly firms and entities, each of which is a separate and independent legal entity. For more information, please visit https://www.bakertilly.global/#.
For a list of countries and regions where BT firms are located, please see https://www.bakertilly.global/en/shared/worldwide-directory/
- "Data Controllers" of personal information are one or more of the BT Members Firms, that either alone or jointly or in common determine the purposes and means of processing personal data.