China Construction Bank (Asia) - Terms and Conditions

Privacy Policy Statement

Welcome to the China Construction Bank (Asia) Corporation Limited Mobile App. The Bank safeguards the information you provide to us via this Mobile App.

Types of Personal Data Held by the Bank

There are two broad categories of personal data held by the Bank. They comprise personal data contained in the following:

a.

Customers’ personal data

It includes the data or information which is necessary for our customers or prospective customers to supply to the Bank in connection with the opening or continuation of accounts and the establishment or continuation of banking facilities or provision of banking services.

b.

Our employees’ personal data or the data collected from the job applicants

It includes but is not limited to the name, information of identification documents, contact information, educational background and curriculum vitae of employees.

Purposes of Collection or Retention of Personal Data

1.

In relation to Customers or Prospective Customers

(i)

processing of applications for banking and/or other financial services and facilities;

(ii)

the daily operation of the services and credit facilities provided to customers;

(iii)

conducting credit checks at the time of application for credit and at the time of regular or special reviews which normally will take place one or more times each year;

(iv)

creating and maintaining the Bank's credit scoring models;

(v)

assisting other financial institutions to conduct credit checks and collect debts;

(vi)

ensuring ongoing credit worthiness of customers;

(vii)

conducting customer surveys and/or designing financial services or related products for customers' use;

(viii)

marketing services, products and other subjects; (Please refer to the Bank's Notice to Customers relating to the Personal Data (Privacy) Ordinance for details)

(ix)

determining amounts owed to or by customers;

(x)

enforcing the Bank's rights, including without limitation, collection of amounts outstanding from customers and those providing security for customers' obligations;

(xi)

complying with the obligations, requirements or arrangements for disclosing and using data that apply to the Bank or any of its branches or that it is expected to comply according to:

(1)	any law binding or applying to it within or outside the Hong Kong Special Administrative Region existing currently and in the future (e.g. the Inland Revenue Ordinance and its provisions including those concerning automatic exchange of financial account information);
(2)	any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside the Hong Kong Special Administrative Region existing currently and in the future (e.g. guidelines or guidance given or issued by the Inland Revenue Department including those concerning automatic exchange of financial account information);
(3)	any present or future contractual or other commitment with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers that is assumed by or imposed on the Bank or any of its branches by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authority, or self-regulatory or industry bodies or associations;

(xii)

complying with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within the group of the Bank and/or any other use of data and information in accordance with any group-wide programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;

(xiii)

enabling an actual or proposed assignee of the Bank, or participant or sub-participant of the Bank's rights in respect of the customer to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation;

(xiv)

updating, comparing and/or verifying any and all of customers' personal information that may be held by any affiliates, group companies or agents of the Bank;

(xv)

exchanging information with any financial institution, credit card acquirer and merchants accepting credit cards and entities with whom the Bank provide affinity/co-brand/private label credit/debit/charge card services; and

(xvi)

purposes relating thereto.

2.

In relation to the Bank's Employees or the data collected from the job applicants

(i)	Processing employment applications;
(ii)	Reviewing salaries, bonuses and other benefits;
(iii)	Consideration for promotion, training, secondment or transfer;
(iv)	Consideration of eligibility for staff loans, provident fund scheme and similar schemes, administration of medical and other benefit or compensation arrangements and for the completion of relevant documents;
(v)	Providing employee references;
(vi)	Obtaining legal advice;
(vii)	Meeting requirements to make disclosure in any court proceedings, or under the requirements of any law/regulatory requirements binding on, or pursuant to the request of the regulator of, the Bank, any of its branches, holding company, subsidiaries or affiliates, and purposes relating thereto;
(viii)	Monitoring compliance with internal rules of the Bank or holding company, checking integrity and possible conflict of interest;
(ix)	Determining the suitability of the employee's continuance in employment;
(x)	Purposes relating to the above.

To comply with the requirements of the Personal Data (Privacy) Ordinance, on or before the Bank collecting personal data, the Bank will provide the individuals and employees about purpose of collection, classes of persons to whom the data may be transferred, their rights to access and correct the data and other relevant information by providing a "Notice to Customers relating to Personal Data (Privacy) Ordinance" or "Personal Data (Privacy) Ordinance Notification to Employees and Potential Employees" or other means which is deemed appropriate by the Bank. For more details about our privacy policy on personal data handling, please read our Notice to Customers relating to the Personal Data (Privacy) Ordinance.

Personal Data Security

The Bank takes all reasonably practicable means to protect the data, such as, by restricting the access of data by authorized personnel only and incorporating security measures into equipment in which data is held. Encryption technology is employed for sensitive data transmission. If the Bank engages data processors to handle or process personal data on the Bank's behalf (whether within or outside Hong Kong), the Bank would adopt contractual or other means to prevent any unauthorized or accidental access, processing, erasure, loss or use of the transferred data by the data processors.

Retention of Personal Data

The personal data provided by customers and/or the employees will not be kept longer than necessary for the fulfillment of the purposes for which the personal data are or are to be used at the time of the collection and for compliance with the legal, regulatory and accounting requirements from time to time.

Disclosure of Personal Data

Unless the Bank is authorized by you, or is required to do so by law, the Bank will not disclose, share, sell or divulge it to external organizations.

Regarding the disclosure of consumer credit data or commercial credit data, you may refer to "A Guide to Greater Credit Data Sharing" and "A Commercial Credit Reference Agency for Hong Kong" issued by the Hong Kong Association of Banks.

Outsourcing of Personal Information - The personal data collected from you may be transferred to, stored, processed or otherwise administered by our head office or other branch(es) located in the People's Republic of China, who provides administrative, telecommunications, computer and other data mining and processing services.

Revision of Privacy Policy Statement

This Privacy Policy Statement is subject to review and change from time to time. Please approach the Bank or visit the Bank's website for the latest Statement regularly.

Collection of Information

The Mobile App will track and record the pages customers visit. The aggregate information about the number and types of visits will be used by the Bank for statistical purpose. No customer personal data and no personally identifiable information will be stored in the Mobile App.

For technical reasons, it may be not possible for customers to opt out of the online behavioral tracking in the Mobile App. You should stop using the Mobile App if you do not agree to have your usage data collected and used by the Bank.

The Bank will not transfer customers’ usage behavioral information collected from the Mobile App to any third party. The Bank will not work with any third party to record customers’ personal data.

The Bank will not combine the collected usage data with other information to track or profile customers.

Data Access Requests and Data Correction Requests

The person to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of data held are to be addressed is as follows:

The Data Protection Officer
China Construction Bank (Asia) Corporation Limited CCB Centre
18 Wang Chiu Road
Kowloon Bay
Kowloon
Fax：3718 2500