Privacy Policy Statement
We, the Yau Tsim Mong District Health Centre Express (“YTM DHC Express”) operated by the Lok Sin Tong Benevolent Society, Kowloon (“Lok Sin Tong”) commits and takes reasonably practicable steps to protect the privacy, confidentiality and security of the personal information collected from a Client in the DHC Scheme, in accordance with the requirements of the Personal Data (Privacy) Ordinance (PD(P)O) and the guidance provided in the information leaflets and other publications issued by the Office of the Privacy Commissioner for Personal Data as well as any other relevant requirements under the laws of Hong Kong.
All personal data collected during a Client’s participation in the DHC Scheme are sensitive data requiring appropriate care and protection:
1. Collection of Personal Data
- Personal information would be collected from participants of the DHC Scheme for particular purposes, such as for processing the DHC membership application, care coordination among health and social Service providers.
- Personal data for identifying and contacting the persons concerned (e.g. name, identity document number, contact information ) would be collected upon registration for the DHC Scheme.
2. Retention of Personal Data
- The personal data would be retained for uses in accordance with the DHC Data Retention Policy. Different retention periods would be applied to different kinds of personal data collected and held by the DHC Scheme in accordance with the DHC Data Retention Policy.
- Personal data which are no longer necessary for the purpose for which they are to be used would be erased.
3. Uses of Personal Data
Participant’s personal data collected and held by the YTM DHC Express or the PHC Commission will be used for the purpose of:
- Improvement of efficiency, quality, continuity and integration of healthcare provided to the DHC participants;
- Research and statistics that are relevant to public health or public safety subject to prescribed conditions; and
- Such purposes of use as permitted by or under the laws of Hong Kong g. court proceedings and criminal investigation.
4. Disclosure of Personal Data
Except with prior consent by the persons concerned, the YTM DHC Express or the PHC Commission would not transfer or disclose any collected personal information to any third party except as stated below –
- Healthcare providers who have obtained sharing consent from the persons for sharing of their personal data for healthcare;
- Person carrying out research and statistics approved in accordance with the requirements under PHC Commission;
- The OH, the HA or a health officer under Prevention and Control of Disease Ordinance (Cap 599) to carry out disease control and surveillance;
- Person to whom the YTM DHC Express or the PHC Commission is required to make disclosure under any law or court order applicable in Hong Kong e.g. court proceedings, criminal investigation, referral to authority for investigation; and
- Personnel, agent, adviser, auditor, contractor or Service provider engaged by us to provide Services or advice (e.g. technical, security or data processing Service) in connection with our operations.
5. Security of Personal Data
- The YTM DHC Expressand the PHC Commission would take reasonably practicable steps to ensure the security of personal data and to protect them against any unauthorized or accidental access, processing, erasure, loss or use.
- Incident reporting and handling system should be in place to investigate and take remedial actions in the interest of the data subjects and the community for security and privacy violations and breaches involving personal
6. Use of Cookies
(a) The YTM DHC Express website (“this website”) will record the number of times users have visited this website, but will not collect any information sufficient to identify the user. The collected browsing count records will only be used to produce statistical reports and investigate computer system problems to help improve the services of this website.
(b) When a user browses a website with a computer, small text files (cookies) are created in the computer. Such files usually contain anonymous and unique identifiers to identify individual computers, but cannot be used to collect any personal information. In other words, it does not have the function of identifying individual users of the website. You can choose to accept or decline to save small text files. If you refuse to save small text files, you will not be able to use certain functions of this website, such as saving your browsing preferences for using this website and logging into certain online services of this website.
7. Other Websites
(a) This website may provide links to other external websites over which we do not have control. You are advised to refer to the privacy policies of these websites for more information.
8. Outsourcing Arrangements
Any third-party Service provider would not have access to personal data collected in the DHC Scheme except when such access is carried out under the supervision of the YTM DHC Express or the PHC Commission or a contractual agreement with the YTM DHC Express or the PHC Commission, whereby clear security and confidentiality requirements and obligations exist and such arrangements would comply with the requirements under Data Protection Principle (DPP)2(3) and DPP4(2) of the PD(P)O.
9. Data Access Request (DAR) and Data Correction Request (DCR)
- Any person or a relevant person on behalf of the person, may make a request to be informed where his / her personal data are held and to be supplied a copy of such personal data, and a correction of inaccuracy (if any) of personal data in the DHC Scheme in accordance with the PD(P)O.
- Requestors for DAR and/or OCR are advised to use request forms for submitting the necessary information in relation to the requests.
- A non-excessive fee may be chargeable by the YTM DHC Expresson behalf of PHC Commission for complying with a DAR.
- When handling a DAR or DCR, the YTM DHC Express would check the identity of the requestor to ensure that he/she is the person legally entitled to make the DAR and/or DCR.
- The YTM DHC Express is required to comply with a DAR or DCR within 40 days after receiving the request. However, the YTM DHC Express may refuse to comply with a DAR and/or DCR in the circumstances specified in the PD(P)O. In this case, the YTM DHC Express would notify the requestor in writing within the 40-day period.
- DCR for personal data of the Clients (e.g. name, identity document number, date of birth and gender) may be handled by the YTM DHC Express or any registered healthcare providers according to the relevant guidelines issued by the PD(P)O.
- DCR for health data of the Client may be referred to and handled by the respective healthcare provider who has contributed such data to the DHC
- A person can submit DAR and DCR to the corresponding
10. Enquiries
Enquiries concerning this Privacy Policy Statement could be addressed to Data Controller of the YTM DHC Express with address of Unit 1216-1219, 12/F, Pioneer Centre, 750 Nathan Road, Prince Edward, Kowloon and email address of ytmdhce@loksintong.org or the PHC Commission. The address of the PHC Commission is 11/F, THE HUB, 23 Yip Kan Street, Wong Chuk Hang, Hong Kong. The email address is phcc@healthbureau.gov.hk.
*Any changes or updates to this privacy policy will be posted on this website and take effect immediately.