Privacy Policy
The Organiser and/or the Organising Partner (“we” or “us”, or “our”) and our affiliates know how important privacy is to you, and we strive to be clear about how we collect, use, disclose, transfer and store your information for City Innovation and Technology (I&T) Grand Challenge (“the Grand Challenge”). This Privacy Policy explains how we collect and use your information. This Privacy Policy applies to our websites (“individually referred to as “Site”), the Grand Challenge, all Submissions and Deliverables, and any activities that refer to or link to the Privacy Policy (collectively, our “Services”). This Privacy Policy also applies to use of the Site via mobile devices or mobile-optimised websites.
Any terms used in this Privacy Policy are defined in the Terms and Conditions and will have the same meanings as those in the Personal Information Collection Statement (see Appendix 3) for the Grand Challenge unless otherwise specified. This Privacy Policy only applies to the information collected, stored, and used from our Services by us, and does not apply to information collected through any third party services that you may access through our Services.
All Data is collected, used, disclosed and retained by us in accordance with all relevant laws, regulations and/or licence requirements including, without limitation, the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (“Ordinance”).
1. COLLECTION OF INFORMATION
We do not collect more information from you than is necessary to provide you with the Services and to protect your account:
When you participate in any of the Grand Challenge events, including registration, submission, training, Semi-Pitch, public voting, Grand Pitch, trial and adoption, and Showcase (“Events”), you may be asked to provide us with information such as your full name, email address, phone number, affiliated school, year of study, field of study and team name. For Participants under eighteen (18) years old, the consent of parent, legal guardian or teachers is required, and the parent, legal guardian or teacher’s full name and email address will be collected.
When you submit an inquiry or Submission to the Grand Challenge, you may also provide us your ideas, proposal, and comments (“User Generated Content”). Certain data we collect may be defined as personal data under applicable data protection laws (“Personal Data”).
Do not supply Personal Data about others unless you are authorised or required to do so by applicable law or contract and you consent to the Terms and Conditions, and this Privacy Policy on behalf of yourself and the person(s) about whom you supply Personal Data (“Data Subject”). Before supplying Personal Data about others (except as otherwise allowed by law or contract), you must make available for the Data Subject’s review, and obtain their written consent to, said Terms and Conditions and Privacy Policy. By submitting any Personal Data about others, you represent and warrant that you are authorised to do so and that you did all of the foregoing before submitting the information. If applicable law allows you to supply the information without doing the foregoing, you represent and warrant that you have abided by such applicable law and that it allows us to receive and disclose the information under this Policy without any further action on our part. You agree to indemnify, defend and hold us harmless against any failure by you to comply with this paragraph.
If you contact us, we may record your conversation with us and collect additional information to verify your identity.
2. USE OF PERSONAL DATA
We shall use your Personal Data in accordance with the Personal Information Collection Statement (see Appendix 3) provided by us to you on or before the time of collection of your Personal Data. Your Personal Data will be used in connection with the Grand Challenge. Details of the purposes for which such Personal Data will be used will be set out in the relevant Personal Information Collection Statement (see Appendix 3).
3. DISCLOSURE OF PERSONAL DATA
We may disclose and transfer (whether within or outside the jurisdiction of us that is the controller) your Personal Data to our partners and to service providers engaged by us to assist us to provide Services to you or who otherwise process Personal Data for purposes described in this Privacy Policy or notified to you when we collect your Personal Data.
These service providers must abide by our data privacy and security requirements and are only permitted to use your Personal Data in connection with the purposes specified above, and not for their own purposes.
For the purposes specified above, we may share your Personal Data with our affiliates and/or their designated service providers.
When we believe it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person, we may also disclose and transfer your Personal Data to our professional advisers, law enforcement agencies, insurers, government and regulatory and other organisations.
We may also disclose your Personal Data to any other person with your consent to the disclosure.
We retain your Personal Data as long as we have an ongoing legitimate business need to do so for example to provide services or products to you, or as required or permitted by applicable laws, such as tax and accounting laws.
Information you submit to the Site for publication may be made publicly available on the Site and therefore accessible by any internet user. You should exercise caution when deciding what information you submit to us for publication.
We may provide aggregated or anonymised data to third parties, but when we do so, the information we share is in a de-identified format that does not personally identify you.
4. RIGHTS REGARDING PERSONAL DATA
Under the applicable laws, you may have the rights of access to Personal Data held by us and other rights. If you are a Participant or a visitor from the European Union, please refer to “Section 15. VISITORS FROM THE EUROPEAN UNION” below for more information. If you are a Participant or a visitor from Mainland China, please refer to “Section 16. VISITORS FROM MAINLAND CHINA” below for more information.
If you have any questions regarding this Privacy Policy or if you wish to access or correct your Personal Data as a user of the Site, you may send your request to dpo@hkstp.org.
If and to the extent permitted by applicable law, we may charge you a fee for the processing of any request you make regarding your Personal Data.
5. COOKIES
We use "cookies" to store specific information about you and track your visits to the Site, either through a computer or via a mobile device. It is not uncommon for websites to use cookies to enhance identification of their visitors.
A "cookie" is a small amount of data that is sent to your browser and stored on your computer's or mobile device’s hard drive. If you do not de-activate or erase the cookies, each time you use the same browser or mobile device to access the Site, our servers will be notified of your visit to the Site and in turn we may have knowledge of your visit and the pattern of your usage. The cookies will enable us to remember your information so you do not have to re-enter it every time you use the Site.
In addition, we use cookies to manage the security of our Site, to gather information about usage by users; to research visiting patterns and conduct interest-based advertising; to assist our partners to track user visits to the Site and process orders; and to track progress and participation in the Grand Challenge Events.
For these additional purposes identified above, you can determine if and how a cookie will be accepted by configuring the privacy setting of the browser you are using to access the Site or the privacy setting of your mobile device. As the means by which you can refuse cookies through your web browser controls vary from browser to browser, you should visit your browser's help menu for more information. If you adjust the privacy setting in the browser, your mobile device will continue collecting data unless you adjust the privacy setting of the device, and vice versa.
You have the right to decide whether to accept or reject cookies. If you choose to set your web browser controls to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted.
In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.
Certain features of the Site depend on cookies. Please be aware that if you choose to block cookies, you may not be able to sign in or use those features, and preferences that are dependent on cookies may be lost.
We use two types of cookies: session cookies (which are erased once you close the browser or shut down the device) and persistent cookies (which remain even after closing the browser or shutting down the device/application and which are activated each time you visit the Site). The session cookies use encrypted data to unambiguously authenticate you. The persistent cookies do not store account numbers or passwords.
We use both first party cookies (cookies that are set by us and serve mainly to enable basic functionality on our Site, including analytics cookies that help us understand how users use our pages and how we can improve their use) and third party cookies (these cookies are not set by us, but by our selected partners).
In addition, we also use social media cookies. Some pages on our Site allow you to "share" content through social media such as Facebook, Instagram, LinkedIn and Twitter. Sometimes we embed videos from websites like YouTube. These websites set their own cookies on which we have no influence. To refuse their cookies, please follow the instructions on their websites. In addition, these websites have their own privacy policy, which you can find on the respective websites.
Our Site uses Google Analytics, an internet analytics service provided by Google, Inc., 1600 Amphitheater Parkway Mountain View, California, 94043, USA ("Google"). Google Analytics uses "cookies", which are text files that are stored on your computer and used to analyse the use of the Site. For example, Google's cookies allow us to tell us which pages our users are viewing, which ones are most popular, what time of day our Site are visited, if users have previously visited our Site, from which website users are redirected to our Site were and the like. The data generated by the cookies about your use of the Site will be transmitted to Google and stored by Google on servers in the United States.
We use an anonymisation tool of IP addresses so that the IP addresses are truncated within the territory of the Member States of the European Union and the other members of the agreement on the European Economic Area. The non-truncated IP address are only exceptionally transmitted to Google’s servers in the US and then truncated there.
Google uses the data on behalf of the website operator to evaluate your use of the website, to compile reports on website activity for the website operators and for other website activity and internet usage services. Google may disclose this information to third parties under the terms of the law or for further processing by third parties on behalf of Google.
For more information about Google Analytics cookies, visit the Google Help pages and Privacy Policy:
Google Privacy Policy: https://policies.google.com/privacy
Google Analytics Help Center: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookies-usage
The IP address that your browser will pass on to Google Analytics will not be associated with any other data stored by Google. Through your browser settings, you can block cookies; however, this can lead to problems with the use of some functionalities of our website. Through the add-on "Google Analytics Opt-out" you can through your current browser opt-out to the use of Google Analytics from then on: http://tools.google.com/dlpage/gaoptout?hl=en.
More information can be found here: https://support.google.com/analytics/answer/6004245.
6. MINORS
In the event where applicable, such as Secondary School Group and Primary School Group of the Grand Challenge, minors (those under the age of 18) should only provide Personal Data with parental, guardian or teacher’s consent. If a minor has provided us with Personal Data without parental, guardian or teacher’s consent, the parent or guardian should contact us through email dpo@hkstp.org to remove the information.
7. SECURITY MEASURES
We employ commercially reasonable security methods to prevent unauthorised access to the Site, to maintain data accuracy and to ensure the correct use of the information we hold.
For registered users of the Site, some of your information can be viewed and edited through your account, which is protected by a password. We recommend that you do not divulge your password to anyone. Our personnel will never ask you for your password in an unsolicited phone call or in an unsolicited email. If you share a computer with others, you should not choose to save your log-in information (e.g., login ID and password) on that shared computer. Remember to sign out of your account and close your browser window when you have finished your session.
No data transmission over the internet or any wireless network can be guaranteed to be perfectly secure. As a result, while we try to protect the information we hold for you, we cannot guarantee the security of any information you transmit to us and you do so at your own risk.
8. YOUR RIGHT TO OPT OUT
You understand that we will send you information relating to the following:
8.1 any updates and announcements from time-to-time for the Grand Challenge; and
8.2 research and questionnaires about the Grand Challenge.
By making your Submission, you indicate your consent for us to use your name and email address for direct marketing purposes in accordance with the above, unless you have ticked the opt-out box indicating that you object to such use.
9. THE INFORMATION WE DO NOT INTEND TO COLLECT
Some Personal Data such as your mental health condition, sexual orientation, medical history, or criminal record is considered “sensitive” in some jurisdictions, and is subject to heightened regulation than the other types of Personal Data. We do not intend to collect such sensitive Personal Data from you and any such sharing of sensitive Personal Data is entirely at your own sole discretion and risk.
10. HYPERLINKS
This Privacy Policy only applies to this Site. If you click on any advertisement or hyperlink linking to another website, you will leave our Site for another location. We shall not be responsible for the privacy and security practices or the content of such websites and you should always check the privacy policy of all websites you clicked in.
11. YOUR PARTICULAR CONSENT
You are giving us the following particular express, voluntary, and informed consent to a few activities relating to your Personal Data that is disclosed in furtherance of our mission and operations, or for a purpose directly related to such purpose:
Consent to Electronic Notice If There is a Security Breach: We will safeguard your Personal Data and prevent such information from unauthorised access, disclosure, or use. If we are or a Recipient is required to provide notice of unauthorised access to or other invasion of certain security systems, you agree that we (or they) may do so when required (or voluntarily) by posting notice on our Site or sending notice to any email address we have for you, in our (or their) good faith discretion. You agree that notice to you will count as notice to others for whom you are acting, and agree to pass the notice on to them.
Media Consent: You provide the following consent to us, its affiliates and sub-licensees to take photos, digital images, audio and/or video footages of you, and to use your Image (defined below) in any form of media for the purpose of promoting the Grand Challenge and/or us. The term “Image” refers to the full set of attributes of your personality, including but not limited to your image, voice, family name and forenames, signature and business name/logo. You grant the Grand Challenge an exclusive, worldwide, perpetual, irrevocable, unrestricted, royalty-free, assignable, transferable and fully sub-licensable license to all present and future rights, title and interest in all intellectual property (including, without limitation, any trademark, copyright, publicity, and database rights, and the right to prepare derivative works) you have in your Image, to store, use, reuse, edit, modify, adapt, reproduce, display, host, publish, circulate, or distribute your Image as we deem appropriate in its sole and absolute discretion. You represent and warrant that you have all rights to grant such licenses to us without infringement or violation of any third party rights. We are not obligated to submit any promotional and other materials to you, or your organisation for approval, or to produce, distribute or utilise any of the rights granted herein. You irrevocably and unconditionally waive any and all moral and similar rights vesting in your Image to the extent legally permissible.
12. RETENTION PERIOD
We will retain your Data in compliance with the Ordinance. We will retain such information for no longer than seven (7) years after such information has been submitted to us or for such other period as is permitted under the relevant laws and regulations of Hong Kong that are applicable from time to time, whichever is the shorter. We may discard Personal Data in our discretion, so you should retain your own records, and not rely upon our storage of any Personal Data, content, or other data.
Subject to applicable laws and regulations, you may have the right to inquire and request for a review of, request a copy of, make supplements or corrections to, discontinue collection, processing or use of, or request to delete some or all of your Personal Data at our possession. Please contact us if you have any inquiries as to what information we have concerning you, and submit your new information if your Personal Data has changed. A fee may be charged by us in this regard.
13. ENGLISH VERSION PREVAILS
In the event of any discrepancy between the English version and the Chinese version of this Privacy Policy, the English version shall prevail.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws. Any changes to this Privacy Policy will be communicated by us posting an amended Privacy Policy on the Site. Once posted on the Site, the new Privacy Policy will be effective immediately. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
15. VISITORS FROM THE EUROPEAN UNION
This section of the Privacy Policy applies only if you use our Site or services covered by this Privacy Policy from a country that is a Member State of the European Union, and supplements the information in this Privacy Policy.
If you are in the European Economic Area (“EEA”), your controller is us (incorporated in Hong Kong). For contact details, please see “Section 17. CONTACT US” below.
(i) Legal basis for data processing
We process Personal Data for the purposes set out in this Privacy Policy, as described above. Our legal basis to process Personal Data will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect and process Personal Data about you only where it is: necessary for the performance of any contract between you and us (e.g., to provide you with the services you request and to identify and authenticate you so you may use the Site); necessary to comply with legal requirements (e.g., to comply with applicable accounting rules and to make mandatory disclosures to law enforcement); necessary for our legitimate interests and not overridden by your rights; and/or where it is based on your consent.
If we collect and use your Personal Data in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our Site and services, manage our relationship with you and communicate with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to your queries, improving our Site and our services, undertaking marketing, or for the purposes of ensuring the security of our Site and services and detecting or preventing illegal activities such as fraud. We may have other legitimate interests and if appropriate we will make clear to you at the relevant time what those legitimate interests are.
If we ask you to provide Personal Data to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Data is mandatory or not (as well as of the possible consequences if you do not provide your Personal Data). In some instances, you may be required to provide us with Personal Data for processing as described above, in order for us to be able to provide you all of our services, and for you to use all the features of our Site.
We retain your Personal Data as long as we have an ongoing legitimate business need to do so, for example to provide services or products to you, or as required or permitted by applicable laws, such as tax and accounting laws. When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymise it or, if this is not possible (e.g., because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.
If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Data, please contact us using the contact details provided under “Section 17. CONTACT US” below.
(ii) International Transfers of Personal Data
Our business may require us to transfer your Personal Data to countries outside of the EEA, including to countries that may not provide the same level of data protection as your home country. We take appropriate steps to ensure that recipients of your Personal Data are bound to duties of confidentiality and we implement appropriate measures to ensure your Personal Data will remain protected in accordance with this Privacy Policy, such as standard contractual clauses. A copy of those clauses can be obtained by contacting dpo@hkstp.org.
(iii) Your Rights
If you are a resident of the EEA, you have the following data protection rights, which you can exercise at any time by contacting us using the contact details provided under “Section 17. CONTACT US” below:
The right to access, correct, update or request deletion of your Personal Data.
The right to object to processing of your personal information when it is based on our legitimate interests, and separately the right to object to direct marketing.
The right to ask us, in some situations, to restrict processing of your personal information or request portability of your personal information.
The right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), please contact us using the contact details provided under “Section 17. CONTACT US” below.
If we have collected and process your personal information with your consent, then you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
16. VISITORS FROM MAINLAND CHINA
Personal information processing statement: For the purposes of the Grand Challenge (including for the purpose of any Submission and the fulfilment of any Deliverables), if the Participant is based in the Mainland of the People’s Republic of China (“Mainland China”), we, through our wholly foreign-owned entity in Shenzhen, Hong Kong Science and Technology Parks (Shenzhen) Limited (“HKSTP Shenzhen Branch"), may need to obtain and process personal information provided by you (which may include but is not limited to any individual’s name, surname, WeChat ID, title, title, mobile phone number, email address). A complete set of personal data collection policy of HKSTP Shenzhen Branch for the purpose of complying with the relevant personal data protection laws and regulations of Mainland China can be found at this link:
English Version:
https://www.hkstp.org/media/ixsbhst1/hkstp-sz_pics_english_20231121.pdf
Chinese Version:
https://www.hkstp.org/media/s3gpbii0/hkstp-sz_pics_sc_20231121.pdf
In addition, we may need to transfer such personal information across the border to us in Hong Kong so that we can coordinate with the Organiser and/or the Organising Partner on the Grand Challenge and all matters arising out of or in relation to this event (including your Submission and any Deliverables). When HKSTP Shenzhen transfers your personal information from Mainland China to other countries or regions, HKSTP Shenzhen has reasonable measures in place to ensure that overseas recipients of your personal information will handle such information in a manner that meets or exceeds the protection standards required under relevant personal data protection laws and regulations of Mainland China.
Should you have any questions, complaints or suggestions about this personal information processing statement, or you wish to request to exercise your rights related to our use of such personal information, you can contact the Organising Partner using the contact details provided under “Section 17. CONTACT US” below.
You hereby confirm that (i) you have the right to provide us with the personal information you have provided to us (through our HKSTP Shenzhen Branch), (ii) that the person whose personal information you have provided is fully aware of such disclosure to us (through our HKSTP Shenzhen Branch) and of his/her rights under hereunder, and (iii) such individual’s full and clear consent to the disclosure and processing of his/her personal information in the manner referred to and contemplated under these Terms has been obtained.
17. CONTACT US
You may write to us at dpo@hkstp.org for any privacy concerns and requests relating to this Privacy Policy, or our Site and Services.