CNCB (Hong Kong) Investment Limited

政策公告

個人資料私隱政策

CNCB (HONG KONG) INVESTMENT LIMITED
信銀（香港）投資有限公司

Circular to Clients relating to the Personal Data (Privacy) Ordinance
有關《個人資料（私隱）條例》的客戶通知

This Circular is binding on you as a client of CNCB (Hong Kong) Investment Limited and/or its subsidiaries (collectively referred as the "Group", and each member of the Group referred as “Group Company(s)”). For the avoidance of doubt, the Group includes CNCB (Hong Kong) Capital Limited. The following information is brought to your attention in accordance with the Personal Data (Privacy) Ordinance (Cap.486 of the Laws of Hong Kong) (the “Ordinance”). Unless the context otherwise requires, words and phrases in this Circular shall have the meaning given to them by the Ordinance.

本通知對信銀（香港）投資有限公司及/或其附屬公司（統稱為「本集團」，本集團的每一成員亦簡稱為「本集團公司」）的客戶具有約束力。為免生疑問，本集團包括信銀（香港）資本有限公司。根據《個人資料（私隱）條例》（香港法例第486章）（簡稱為「該條例」）之規定提醒客戶注意以下資料。除本通知另有規定之外，本通知中使用的術語和表述與該條例中的含義相同。

I. Collection of Personal Data 個人資料的收集

For the purpose of this Circular, “Data Subject(s)” has the meaning ascribed to it under the Ordinance and includes clients of any Group Company (including person(s) who has/have signed and/or specified as client in an account opening form (the “Client(s)”) in respect of any account of whatsoever nature opened and maintained in the name of the Client with any Group Company (the “Account(s)”) and applicants for dealing, advisory, custody, asset management and/or other financial services and credit facilities provided by any Group Company) and various other individuals (including but not limited to sureties and person providing security or guarantee for credit facilities and/or obligations owed to any Group Company, shareholder, director, officer, manager, sole proprietor, partner, supplier, contractor, service provider, other contractual counterparty supplying data (including personal data as defined under the Ordinance) to any Group Company, beneficiary of Accounts, customers of any Group Company).

就本通知的目的而言，「資料當事人」一詞的涵義與該條例給予該詞的涵義相同並包括任何本集團公司的客戶（包括任何已簽署有關其於本集團公司開設或維持的任何類型帳戶（「帳戶」）的開戶表格或在開戶表格被列為客戶的人或人士（「客戶」），及由任何一間本集團公司提供的交易、諮詢、託管、資產管理及/或其他金融服務和信貸額度的申請者）及其他個人（包括但不限於擔保人及基於對任何一間本集團公司負有的責任及/或為信貸額度而出任擔保人及提供抵押和擔保的人士、股東、董事、公司職員、經理、獨資經營者、合夥人、供應商、承包商、服務供應商及向任何一間本集團公司、帳戶的實益擁有人、任何一間本集團公司的顧客提供資料（包括該條例所界定的個人資料）的其他合約對手）。

1. From time to time, to the extent applicable, it is necessary for Data Subjects to supply the Group and/or any Group Company with data in connection with various matters such as (i) the opening, operation and continuation of Accounts, (ii) the application, obtaining and continuation of credit facilities, (iii) the provision of dealing, securities brokerage, nominee, investment advisory, custody, asset management and/or other financial services and credit facilities provided by any Group Company, and/or (iv) the provision of supplies or services to any Group Company and Data Subjects.

在適用範圍內,資料當事人必須不時向本集團及/或任何一間本集團公司提供與各種事項有關的資料，例如：（1）帳戶開立、運作和延續；（2）信貸額度的申請、獲得和延續；（3）由任何一間本集團公司提供的交易、證券投資、代名人、投資顧問、託管、資產管理及/或其他金融服務及信貸額度；及/或 (4) 向任何一間本集團公司及資料當事人提供資源或服務時。

2. Data may also be collected from the Data Subjects in the ordinary course of continuation of business relationship with the Data Subjects, for example, when Data Subjects issue cheques to, deposit money in or give instructions to any Group Company.

本集團亦可能會從與資料當事人保持日常業務合作關係的過程中收集資料，例如當資料當事人出具支票、存款、或發出指示予任何一間本集團公司。

3. At the same time, data may be collected from the Data Subjects pursuant to laws, regulations, rules or codes binding on the Group, any Group Company, the Group’s associated or related companies, any directors, officers, employees, authorised representatives or advisers of the Group and/or any Group Company or its associated or related companies, and the Users (as defined in Clause 7 below). The Users may or may not reside in Hong Kong.

同時，本集團亦可按照對本集團、任何一間本集團公司、本集團的關聯或相關公司、本集團及/或任何一間本集團公司或其關聯或相關公司的任何董事、公司職員、員工、獲授權代表或顧問以及以下第7條中所界定的使用者具有約束力的法律、法規、規則或守則之規定，向資料當事人收集資料。使用者可能居於香港境內或境外。

4. Failure of the Data Subjects to supply such data may result in the Group and/or any Group Company or the User being unable to provide services to the Data Subjects, to maintain business relationship with the Data Subjects, and to meet its respective legal or regulatory requirements. The Group and/or any Group Company may at any time conduct credit enquiries on the Data Subjects to verify the information they provide to the Group and/or any Group Company through, including but not limited to, the Data Subject’s bankers, brokers and credit agencies.

資料當事人未能提供有關資料則可能導致本集團及/或任何一間本集團公司或使用者未能向資料當事人提供服務、未能維持其與資料當事人的業務關係和遵守有關本集團及/或任何一間本集團公司的各項法律或監管要求。本集團及/或任何一間本集團公司可隨時對資料當事人進行信用調查，包括但不限於透過資料當事人的銀行、經紀及信用調查機構，核實當事人提供給本集團及/或任何一間本集團公司的資料。

II. Purposes of Collection of Personal Data 收集個人資料的目的

5. The purposes for which data are collected from a Data Subject may be used will vary depending on the nature of the Data Subject’s relationship with the Group and/or the Group Companies. To the extent applicable and to the extent permitted by applicable laws and regulations, the Users may use data relating to and/or collected from any Data Subject for any one or more of the following purposes (“Purposes”) subject to the provisions hereunder:-

從資料當事人收集的資料的用途將視乎其與本集團及/或本集團公司的關係性質而有所不同。在適用範圍內及適用法律法規許可的範圍內, 並在以下條款的規限下，使用者可將有關及/或從任何資料當事人處收集的資料用於以下任何一個或多於一個目的（「目的」）：

(a) opening and administering the Accounts;

開設及管理帳戶；

(b) provision of services under the terms and conditions of the Accounts any Data Subject holds with any Group Company;

根據任何資料當事人于任何一間本集團公司持有的帳戶的條款和條件提供的服務；

(c) considering, processing and approving applications for the dealing, securities brokerage, nominee, investment advisory, custody, asset management and/or other financial services and credit facilities provided by any Group Company and/or other services and facilities provided by any Group Company from time to time;

考慮、處理和批核由任何一間本集團公司提供的交易、證券投資、代名人、投資顧問、託管、資產管理及/或其他金融服務及信貸額度，及/或由任何一間本集團公司不時提供的其他服務及授信；

(d) daily operation of the services and credit facilities provided by or to any Group Company or to the Data Subjects including but not limited to (i) executing or giving effect to the Clients’ orders relating to transactions or otherwise, and carrying out the Clients’ other instructions in accordance with the terms and conditions of the Accounts maintained with any Group Company and (ii) purchasing, investing or otherwise disposing of and generally dealing in and with all kinds of financial products on any Client’s behalf;

由或向任何一間本集團公司或向資料當事人提供的服務及信貸額度的日常運作，包括但不限於(i) 執行或實行客戶有關於交易或其他事情之下單或指令，以及根據在任何一間本集團公司維持的帳戶的條款及條件而執行的客戶的其他指示，及(ii) 代表客戶購買、投資或以其他方式處置和一般交易和處理各種金融產品;

(e) verifying the data and information provided by any Data Subject or any third party to any Group Company;

核實由資料當事人或任何第三方向任何一間集團公司提供的資料及資訊；

(f) conducting credit checks, background checks and/or status checks on the Data Subjects;

對資料當事人進行信貸調查、背景調查及/或狀況調查;

(g) ascertaining the Data Subject’s financial situation and investment objectives;

查明資料當事人的財務狀況和投資目標；

(h) assisting other financial institutions to conduct credit checks and collect debts;

協助其他金融機構進行信貸調查及追討債務；

(i) ensuring ongoing credit worthiness and good standing of the Data Subjects;

確保資料當事人持續具有一定的信貸信用及良好聲譽；

(j) operating internal controls of the Group including but not limited to determining the amount of indebtedness owed to or by the Data Subjects;

執行本集團的內部監控措施，包括但不限於確定本集團與資料當事人相互間的債務；

(k) for operational purposes, credit assessment, credit scoring or risk related models, statistical analysis (including but not limited to behaviour analysis and evaluation on overall relationship with the Group which includes using such data to comply with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within the Group and/or any other use of data and information in accordance with any Group-wide programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities), whether on the Data Subjects or otherwise;

為資料當事人或非資料當事人作營運用途、信貸評估、信貸評分或風險相關模式、統計分析（包括但不限於作行為分析及評估與本集團的整體關係，當中包括將該等資料用於遵守本集團內共用資料及資訊的任何義務、規定、政策、程式、措施或安排及/或為符合制裁、預防或偵測清洗黑錢、恐怖分子融資活動或其他非法活動而就本集團內共用方案的資料及資訊的任何其他使用；

(l) researching and/or designing dealing, securities brokerage, nominee, investment advisory, custody, asset management and/or other financial services and/or related products or services for the Data Subjects’ use;

研發及/或設計交易、證券投資、代名人、投資顧問、託管、資產管理及/或其他金融服務及/或相關產品或服務供資料當事人使用；

(m) marketing dealing, securities brokerage, nominee, investment advisory, custody, asset management and/or other financial services and/or related products or services;

行銷交易、證券投資、代名人、投資顧問、託管、資產管理及/或其他金融服務及/或相關產品或服務；

(n) where applicable, marketing reward, loyalty or privileges programmes and related services and products provided by any Group Company from time to time, and services and products offered by any Group Company’s co-branding partners and entities with whom any Group Company provides affinity/co-branded services or products to the Data Subjects;

如適用，行銷獎賞、客戶年資獎賞或優惠計畫及由任何一間本集團公司不時提供的相關服務及產品，由任何一間本集團公司之聯營品牌合作夥伴及實體提供的服務及產品，而該本集團公司與該聯營品牌合作夥伴及實體提供密切關係/聯營的服務或產品予資料當事人；

(o) exercising the Group and/or any Group Company’s rights and obligations, including but not limited to (i) collection of amounts outstanding from the Data Subjects or those providing security for any Data Subject’s obligations and (ii) enforcement of security, charges or other rights and interests against the Data Subjects or those providing security for any Data Subject’s obligations in favor of any Group Company;

行使本集團及/或任何一間本集團公司的權利和義務，包括但不限於(i) 向資料當事人追收未償還的金額或為資料當事人的責任提供抵押品的人士追收欠款及(ii) 向資料當事人或該等為資料當事人的責任提供抵押品的人士執行以任何一間本集團公司為受益人的擔保、抵押或其他權利及權

(p) enabling an actual or proposed assignee or transferee of all or any part of the Group and/or any Group Company’s business and/or assets, or participant or sub-participant of the Group and/or any Group Company’s rights in respect of loans/credit facilities relating to the Data Subjects, to evaluate the transaction intended to be the subject of the assignment, transfer, participation or sub-participation and enabling the actual assignee or transferee to use such data in the operation of the business or rights assigned;

容許本集團及/或任何一間本集團公司全部或任何部份業務及／或資產的實際或潛在承讓人或轉讓人，或本集團及/或任何一間本集團公司對資料當事人的貸款／信貸額度的權利的參與人或附屬參與人, 評估有關承讓、轉讓、參與或附屬參與所涉交易，及容許實際承讓人或轉讓人使用資料經營業務或行使其權利；

(q) complying with the obligations, requirements or arrangements according to:

根據以下所述遵從應予遵守的責任、規定或安排：

(i) any present or future laws, rules, regulations, codes, guidelines or directions of applicable jurisdictions binding on the Group, any Group Company, Data Subjects and/or Users and any rules, regulations, codes, guidelines or directions issued by such local or foreign legal, governmental, regulatory, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations (collectively the “Relevant Authorities”) (including those concerning automatic exchange of financial account information ("AEOI") and the U.S. Foreign Account Tax Compliance Act ("FATCA")), including, where applicable, (i) for the purpose of assisting the Group and/or any Group Company to obtain any exemption, reduction or refund of any withholding or other taxes imposed by any tax authority or other government agency, (ii) meeting the requirements of the Hong Kong Exchanges and Clearing Limited, (iii) fulfilling any disclosure obligations required thereunder, and (iv) commencing, defending or otherwise participating in any legal or administrative proceedings or inquiry before the Relevant Authorities; and

任何對本集團、任何一間本集團公司、資料當事人及/或使用者適用的司法管轄區的現存或將來的法律、規定或法規、守則、指引或指示，及任何由本地或海外法律、政府、監管機構、稅務、執法或其他機關、或自律監管或行業組織或協會 (統稱「有關部門」)所發佈的規定或法規、守則、指引或指示（包括該等有關自動交換財務帳戶資料的法律、規定及國際協議（「自動交換財務帳戶資料」）及美國《海外帳戶稅收合規法案》（「美國海外帳戶稅收遵從法」）），包括（如適用）(i) 為協助本集團及／或任何本集團公司取得有關任何稅務機關或其他政府機構所徵收的任何預扣稅或其他稅項的任何豁免、寬減或退回，(ii) 遵守香港交易及結算所有限公司的要求; (iii) 履行所需的披露義務；及(iv) 在有關部門展開、抗辯或在其他方面參與任何法律或行政程式或研訊；及

(ii) any present or future contractual or other commitment with Relevant Authorities of financial services providers that is assumed by or imposed on the Group, any Group Company, Data Subjects and/or Users by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the Relevant Authorities;

本集團、任何一間本集團公司、資料當事人及/或使用者因其位於或相關金融服務提供者有關部門的司法管轄區的金融、商業、業務或其他利益或活動，而向該等有關部門承擔或被彼等施加的任何現存或將來的合約或其他承諾；

(r) customer services (including but not limited to communicating with the Data Subjects via telephone, mail, e-mail, facsimile or any other means of communications and providing references (status inquiries)) provided by any Group Company;

由任何一間本集團公司提供的客戶服務（包括但不限於透過電話、郵件、電子郵件、傳真或其他方式與資料當事人通訊及提供信用查詢備考（狀況查詢））；

(s) preventing, detecting or reporting any crime or any fraudulent or dishonest behavior, or any other purpose relating thereto;

防止、偵查或報告任何罪案或任何欺詐或不誠信行為，或與此相關的任何其他目的；

(t) any other lawful purposes disclosed in the Group’s website from time to time; and

任何其他在本集團的網站不時披露的合法目的；及

(u) any other lawful purposes directly or indirectly related, associated or incidental to any of the above, including seeking professional legal advice.

任何其他與上述直接或間接有關、關連或附帶的合法目的，包括獲取專業法律意見。

III. Transfer of Personal Data 個人資料的轉移

6. The Group and/or the User will keep the data relating to and/or collected from the Data Subjects confidential and will comply with all applicable data privacy laws, including, where applicable, the Ordinance.

本集團及/或使用者將對有關及/或從資料當事人處收集的資料採取保密措施，並且將遵守所有適用的保護資料及私隱法律規定，包括該條例（若適用）。

7. To the extent applicable and to the extent permitted by applicable laws and regulations, the Group may provide data relating to and/or collected from any Data Subjects to the following persons (“Users”) within or outside Hong Kong for the Purposes:-

在適用範圍內及適用法律法規許可的範圍內, 基於以下目的，本集團可將有關及/或從任何資料當事人處收集的資料提供予香港境內外的以下人士（「使用者」）:-

(a) any Group Company, agent, contractor, sub-contractor or third party service provider (or a subsidiary, holding company or related company thereof) who provides sales, distribution, advisory, professional, administrative, telecommunication, computer, data processing, information technology, payment or securities clearing, debt collection, printing or other services to the Group in connection with the operation of its business or provision of the services;

在本集團的業務營運或提供服務的過程中為本集團提供銷售、分銷、顧問、專業、行政、電訊、電腦、資料處理、資料科技、支付或證券結算、追討欠款、列印或其他服務的任何一間本集團公司、代理人、承包商﹑次承包商或第三方服務供應商（或其附屬公司、股份公司或關聯公司）；

(b) any other person under a duty of confidentiality to the Group and/or any Group Company which has expressly or impliedly undertaken to keep such information confidential;

對本集團及/或任何一間本集團公司負有保密義務並已明示或默示地承諾保密該等資料的任何其他人士；

(c) any actual or proposed assignee of the Group and/or any Group Company, or participant, sub-participant, transferee, delegate or successor of the Group and/or any Group Company’s rights in respect of the Data Subjects or any person to whom the agreement between any Group/any Group Company and the Data Subjects is novated;

本集團及/或任何一間本集團公司的任何實際或擬定承讓人，或者是本集團及/或任何一間本集團公司有關資料當事人的權利的參與人、附屬參與人、受讓人、受委人或繼承人，又或是任何本集團及/或任何一間本集團公司與資料當事人之間的協定的約務更替下的人；

(d) the drawee bank providing a copy of a paid cheque (which may contain data about the payee) to the drawer, or a person making any payment into the Accounts (including those providing a copy of a deposit confirmation slip which may contain the Data Subject’s name);

付款銀行向出票人提供繳款支票的複印本（可能包含有關收款人的資料）,或向帳戶支付任何款項的人（包括提供可能包含資料當事人姓名的存款確認單複印本的人士）;

(e) credit reference agencies and, in the event of default, debt collection agencies;

信貸調查機構，以及在欠帳時則為收數公司；

(f) any bank or financial institution or authorized or regulated entity of similar nature in applicable jurisdictions with which the Data Subjects have dealings or propose to have dealings;

資料當事人有交易或擬與其進行交易的任何銀行、金融機構或其他適用司法管轄區的同等性質的獲授權或受監管機構；

(g) third party financial institutions, insurers, administrators, custodians, trustees, credit card companies, securities and investment services providers and external service providers which the Group and/or any Group Company engages or proposes to engage;

第三方金融機構、保險公司、行政管理人、託管人、受託人、信用卡公司、證券和投資服務供應商及本集團及/或任何一間本集團公司所聘用或打算聘用的外聘服務供應商;

(h) the directors, trustee, investment managers, investment advisors, administrators, custodians, auditors, registrar, financial advisors, brokers of any investment products that are managed or operated by the Group and/or any Group Company;

本集團及/或任何一間本集團公司管理或營運的任何投資產品的董事、受託人、投資經理、投資顧問、管理人、託管人、核數師、登記員、財務顧問及經紀;

(i) any legal, accounting or professional person, firm or body;

任何法律、會計或專業人士、機構或團體;

(j) the Hong Kong Exchanges and Clearing Limited, the Hong Kong Monetary Authority, the Hong Kong Companies Registry, the Hong Kong Securities and Futures Commission, any relevant exchange, any legal, governmental, tax, law enforcement or other regulatory authority, body or entity under any domestic and foreign applicable laws and regulations (including but not limited AEOI and FATCA), rules, codes, guidelines or directions to which the Group (and where applicable, any investment vehicle that the Group and/or any Group Company provides services to) is subject;

香港交易及結算所有限公司、香港金融管理局、香港公司註冊處、香港證券及期貨事務監察委員會、及在對本集團（及（如適用）本集團及/或任何一間本集團公司向其提供服務的任何投資實體）有管轄權的任何國內及國外適用法律及法規（包括但不限於自動交換財務帳戶資料及美國海外帳戶稅收遵從法）、條例、準則、指引或指示下的任何相關交易所、任何法律、政府、稅務、執法或其他監管機構、團體或實體;

(k) any persons giving or proposing to give a guarantee or security to guarantee or secure the Data Subjects’ obligations to the Group and/or any Group Company;

任何人給予或提議提供擔保或抵押以保證或確保資料當事人對本集團及/或任何一間本集團公司的義務；

(l) any nominees in whose name securities or other assets may be registered;

任何以其名義登記證券或其他資產的代名人;

(m) any person who provides financial services or issues, distributes or provides financial products to the Data Subjects through or with the Group and/or any Group Company;

透過或連同本集團及/或任何一間本集團公司向資料當事人提供金融服務或發行、分銷或提供金融產品的任何人士；

(n) any person with whom the Group and/or any Group Company enters into or proposes to enter into a transaction with on behalf of the Data Subjects or the Account, or the persons representing the same;

本集團及/或任何一間本集團公司代表資料當事人或帳戶或其代表與之訂立或擬訂立交易的任何人士;

(o) any other person to whom the Group and/or any Group Company is compelled to make disclosure under the requirements of any laws or regulations or court orders binding on the Group and/or any Group Company;

根據對本集團及/或任何一間本集團公司具有約束力的任何法律或法規或法庭命令的要求，本集團及/或任何一間本集團公司對其承擔法定披露義務的任何其他人士；

(p) any foreign or local governmental, regulatory, supervisory, tax, law enforcement or other authorities, bodies or institutions;

任何外國或本地的政府、監管、監督、稅務、執法或其他機關、組織或機構;

(q) any person to whom information is to be provided with the Data Subject’s express or implied consent;

經資料當事人明示或默示同意向其提供資料的任何人士；

(r) any person where in the Group’s interest requires disclosure;

為集團利益而需要向其作出披露的任何人士；

(s) any person where in the public interest requires disclosure; and

為公眾利益而需要向其作出披露的任何人士; 及

(t) in addition to marketing the above services, products and subjects itself, the Group also intends to provide the data described in Clause 5 above to all or any of the Users for use by them in marketing those services, products and subjects, and the Group and/or any Group Company requires a Data Subject’s written consent (which includes an indication of no objection) for that purpose.

除促銷上述服務、產品及專案之外，本集團亦擬將以上第5條所述的資料提供予全部或任何使用者，以供該等人士用以促銷該等服務、產品及專案，而本集團及/或任何一間本集團公司為此用途須獲得資料當事人書面同意（包括表示不反對）。

8. The Data Subject agrees that data collected in Hong Kong by the Group and/or any Group Company may be transferred in and to a place outside Hong Kong.

資料當事人同意本集團及/或任何一間本集團公司在香港所搜集的資料或會被轉移至香港境內及境外。

9. The Data Subject agrees to allow the Group and/or any Group Company to disclose the Data Subject’s data for the Purposes and to the Users and to use such data pursuant to this Circular.

資料當事人同意容許本集團及/或任何一間本集團公司可為本通知所列之目的及向使用者披露其資料及可按本通知使用該等資料。

10. To the extent applicable and to the extent permitted by applicable laws and regulations, the Group and/or any Group Company may transfer the Data Subject’s name, contact details, products and services portfolio information, transaction pattern and behaviour, financial background and demographic data held by the Group and/or any Group Company from time to time outside Hong Kong to the Group and/or any Group Company’s credit reporting agency(ies) or service provider(s) for providing administrative support and back office services to the Group and/or any Group Company which are situated in places including the Mainland where there may not be in place data protection laws which are substantially similar to, or serve the same purposes as, the Ordinance. This means the Data Subject’s personal data may not be protected to the same or similar level in Hong Kong.

在適用範圍內及適用法律法規許可的範圍內, 本集團及/或任何一間本集團公司可將本集團及/或任何一間本集團公司不時持有的資料當事人的名字、聯絡資料、產品及服務組合的資訊、交易模式和行為、財務背景和人口統計資料轉移至香港境外予本集團及/或任何一間本集團公司位於包括中國內地等其資料保護法律與該條例或不是大體上相同或用作相同目的的地方的信貸報告機構或服務提供者，用以提供行政支援和後勤部門服務予本集團及/或任何一間本集團公司。即資料當事人的個人資料或許無法受到在香港相同或類似程度的保障。

11. If the Data Subjects do not consent to the Group and/or any Group Company for them to transfer the data outside Hong Kong, the Group and/or any Group Company or the User may be unable to provide services to the Data Subjects or to maintain business relationship with the Data Subjects.

如資料當事人沒有同意本集團及/或任何一間本集團公司轉移其資料至香港境外，本集團及/或任何一間本集團公司或使用者或不能向資料使用者提供服務或維持其與資料當事人的業務關係。

12. If the Data Subjects do not wish the Group and/or any Group Company to use or provide to other persons their data for use out of Hong Kong or the Data Subjects wish to withdraw their consent previously given, please inform the Group and/or any Group Company of such decision by sending written notice to the address stated in Clause 24. The Group and/or any Group Company shall then, without charge to the Data Subject, ensure that the Data Subject’s personal data will not be transferred outside of Hong Kong. The withdraw notice shall take effect upon the expiry of three (3) business days from the date of the Group and/or any Group Company’s actual receipt for such notice.

如資料當事人不希望本集團及/或任何一間本集團公司使用或提供其資料予其他人士以作香港境外使用之用途，又或資料當事人希望撤回其早前給予的有關同意，請以書面形式送至以下第24條所列的地址以通知本集團及/或任何一間本集團公司該決定。本集團及/或任何一間本集團公司自此應，在不收取資料當事人任何費用的情況下，確保資料當事人的個人資料不會被轉移至香港境外。該撤回通知應於本集團及/或任何一間本集團公司實際收到該通知之日起計三個工作天后生效。

IV. Use of Personal Data in Direct Marketing 個人資料以供直銷用途

13. The Group and/or any Group Company will not use data collected from the Data Subject for direct marketing unless permitted by the Ordinance or the Group and/or any Group Company has received the Data Subject’s express written consent (which includes an indication of no objection).

本集團及/或任何一間本集團公司不會將從資料當事人處收集所得的資料用於直接促銷, 除非該條例許可或本集團及/或任何一間本集團公司已取得資料當事人的明確書面同意（包括表示不反對）。

14. With the Data Subject’s consent, the Group and/or any Group Company may:

本集團及/或任何一間本集團公司可以在得到資料當事人同意後:

(a) use the Data Subject’s name, contact details, products and services portfolio information, transaction pattern and behaviour, financial background and demographic data held by the Group and/or any Group Company from time to time for direct marketing;

使用本集團及/或任何一間本集團公司不時持有以用作直銷的資料當事人的名字、聯絡資料、產品及服務組合的資訊、交易模式和行為、財務背景和人口統計資料;

(b) conduct direct marketing in relation to dealing, securities brokerage, nominee, investment advisory, custody, asset management and/or other financial services and products that the Group and/or any Group Company, the Group’s associated or related companies, and the Group’s business partner(s) may offer;

進行與本集團及/或任何一間本集團公司、本集團的關聯或相關公司或本集團的生意夥伴可能提供的交易、證券投資、代名人、投資顧問、託管、資產管理及/或其他金融服務及產品有關的直銷；

(c) where applicable, conduct direct marketing in relation to reward, loyalty or privileges programmes and related services and products provided by any Group Company from time to time, and services and products offered by the Group and/or any Group Company’s co-branding partners and entities with whom any Group Company provides affinity/co-branded services or products to the Data Subjects;

如適用，就任何一間本集團公司不時提供的獎賞、客戶年資獎賞或優惠計畫及相關服務與產品，以及由本集團及/或任何一間本集團公司的聯營品牌合作夥伴及實體提供的服務及產品而該本集團公司與該聯營品牌合作夥伴及實體提供密切關係/聯營的服務或產品予資料當事人進行直銷

(d) the above products and services may be provided by the Group and/or any Group Company, and/or any of the following persons:

以上產品及服務有可能由本集團及/或任何一間本集團公司及/或以下人士提供：

(i) any of the Group’s associated or related companies;

任何本集團的關聯或相關公司；

(ii) third party financial institutions;

第三方金融機構;

(iii) securities and investment services providers and external service providers;

證券及投資服務供應商及外聘服務供應商；

(iv) the business partner(s) of the Group and/or any Group Company and/or its associated or related companies providing the products and services set out in sub-paragraph (b) above;

本集團及/或任何一間本集團公司及/或其關聯或相關公司提供上述分段(b)的產品及服務的生意夥伴；

(e) in addition to marketing the above products and services, the Group and/or any Group Company also intends to provide the data described in sub-paragraph (a) above to all or any of the persons described in sub-paragraph (c) above for use by them in marketing those products and services, and the Group and/or any Group Company requires the Data Subject’s written consent (which includes an indication of no objection) for that purpose.

除銷售以上產品及服務，本集團及/或任何一間本集團公司亦擬將上述分段(a)的資料提供予所有或任何上述分段(c)所述的人士，以供他們用作銷售該等產品和服務，而本集團及/或任何一間本集團公司是需要得到資料當事人的書面同意（包括不反對的指示）以將該等資料用作前述目的。

15. If the Data Subjects do not wish the Group and/or any Group Company to use or provide to other persons their data for use in direct marketing as described above or the Data Subjects wish to withdraw their consent previously given, please inform the Group and/or any Group Company of such decision by sending written notice to the address stated in Clause 24. The Group and/or any Group Company shall then, without charge to the Data Subjects, ensure that the Data Subjects are not included in future direct marketing activities. The withdraw notice shall take effect upon the expiry of three (3) business days from the date of the Group and/or any Group Company’s actual receipt for such notice.

如資料當事人不希望本集團及/或任何一間本集團公司使用或提供其資料予其他人士以作上述的直銷用途，又或資料當事人希望撤回其早前給予的有關同意，請以書面形式把該決定送至以下第24條所列的地址通知本集團及/或任何一間本集團公司。本集團及/或任何一間本集團公司自此應，在不收取資料當事人任何費用的情況下，確保資料當事人的個人資料不會被包括在日後的直銷活動。該撤回通知應於本集團及/或任何一間本集團公司實際收到該通知之日起計三個工作天后生效。

V. AEOI & FATCA 自動交換財務帳戶資料及美國海外帳戶稅收遵從法

16. To the extent applicable, under AEOI and FATCA, the Group and/or any Group Company may be required to identify account holders and controlling persons of certain entity account holders who are reportable foreign tax residents and report their data (including but not limited to their name, address, jurisdiction(s) of tax residence, tax identification number in that jurisdiction(s), and account balance and income information) to the local tax authority where the financial institution operates or directly to the U.S. Internal Revenue Service. The local tax authority will provide this information to the tax authority of the reportable foreign tax resident's country of tax residence on a regular, annual basis. Without limiting the generality of this Circular, the Group and/or any Group Company may transmit Data Subjects’ data to the Hong Kong Inland Revenue Department or any other relevant domestic or foreign tax authority for transfer to the tax authority of another jurisdiction. The Group and/or any Group Company may transmit Data Subjects’ data to the U.S. Internal Revenue Service.

在適用範圍內, 根據自動交換財務帳戶資料及美國海外帳戶稅收遵從法，本集團及/或任何一間本集團公司有可能須識別身為須申報外國稅務居民的帳戶持有人及若干實體帳戶持有人的控權人，並向財務機構經營所在地的當地稅務機關或直接向美國國家稅務局報告他們的資料（包括但不限於其姓名、地址、稅務居住地、在該稅務管轄區的稅務編號、帳戶結餘及收入資料）。當地稅務機關會每年定期將此等資料提供予須申報外國稅務居民的稅務居住國的稅務機關。在不限制本通知的一般性的情況下，本集團及/或任何一間本集團公司可將資料當事人的資料交給香港稅務局或任何其他相關境內或境外稅務機關，以移交到另一司法管轄區的稅務機關。本集團及/或任何一間本集團公司可能會將資料當事人的資料交給美國國家稅務局。

VI. Access and Correction of Personal Data 個人資料的查閱及更正

17. To the extent applicable, under and in accordance with the terms of the Ordinance (and the Code of Practice on Consumer Credit Data issued by the Office of the Privacy Commissioner for Personal Data of Hong Kong (the “Code”), if applicable), any Data Subject:-

在適用範圍內, 根據該條例（及香港個人資料私隱專員公署發出的《個人信貸資料實務守則》（「守則」）, 如適用）規定，任何資料當事人：

(a) has the right to check whether the Group and/or any Group Company holds data about him/her and the right of access to such data;

均有權檢查本集團及/或任何一間本集團公司所持有的與其個人有關的資料以及查閱有關資料；

(b) has the right to require the Group and/or any Group Company to correct any data relating to him/her which is inaccurate;

均有權要求本集團及/或任何一間本集團公司更正與其個人有關的任何不實資料；

(c) has the right to ascertain the Group and/or any Group Company’s policies and practices in relation to use of data and to be informed of the kind of data held by the Group;

均有權查明本集團及/或任何一間本集團公司有關使用資料的政策和慣例，並要求本集團告知所持有的資料種類；

(d) has the right to request the Group and/or any Group Company to cease using the data for direct marketing purposes or transferring the data to other persons for such purposes and to notify any persons to whom the Group and/or any Group Company has transferred such data to cease any such use;

均有權要求本集團及/或任何一間本集團公司停止使用其資料於直銷活動或轉移資料予他人用作直銷，以及通知已獲取本集團及/或任何一間本集團公司轉讓資料的任何人士停止使用有關資料;

(e) in relation to consumer credit data (if applicable),

就個人信貸資料而言（如適用），

(i) to be informed, upon request, which items of data are routinely disclosed to credit reference agencies or debt collection agencies;

可以要求獲告知哪些資料會被例行披露予信貸資料服務機構或追討欠款公司;

(ii) provided with further information to enable the making of an access and correction request to the relevant credit reference agency or debt collection agency; and

獲本集團提供進一步資料，以便向有關信貸資料機構或追討欠款公司提出查閱和改正資料的要求; 及

(iii) upon termination of his/her account by full repayment and on condition that there has not been any material default on his/her account, to instruct the Group to make a request to the credit reference agency to delete from its database any account data relating to his/her terminated account within 5 years after account termination.

在帳戶全數清還欠款後結束帳戶時，指示本集團向信貸資料機構要求從其資料庫中刪除與該已結束帳戶有關的任何帳戶資料，惟此項指示須於終止戶口後五年內提出，以及無重大拖欠。

(f) For the purpose of Clause 5(e) above, the Group and/or any Group Company may from time to time access and obtain consumer credit data of the Data Subject from a credit reference agency for reviewing any of the following matters in relation to the credit facilities granted:

就以上第5(e)條之目的而言，本集團及/或任何一間本集團公司可不時向信貸資料機構查閱及提取資料當事人的個人信貸資料，以檢討任何與已授予的信貸相關的下述事項：

(i) an increase in the credit amount;

增加信貸額;

(ii) the curtailing of credit (including the termination of credit or a decrease in the facility amount); or

縮減信貸額（包括終止信貸或降低信貸額）;或

(iii) the putting in place or the implementation of a scheme of arrangement with the Data Subjects.

與資料當事人制訂或實行債務安排計畫。

18. When the Group and/or any Group Company accesses consumer credit data about a Data Subject held with a credit reference agency, it must comply with the Code and other relevant regulatory requirements.

本集團及/或任何一間本集團公司向信貸資料機構查閱資料當事人的個人信貸資料時，必須符合該守則及其他相關的監管規定。

19. In the event of any default of payment relating to an account, unless the amount in default is fully repaid or written off (other than due to a bankruptcy order) before the expiry of 60 days from the date such default occurred, the account repayment data may be retained by the credit reference agency until expiry of 5 years from the date of final settlement of the amount in default. Account repayment data includes amount last due, amount of payment made during the last reporting period (being a period not exceeding 31 days immediately preceding the last contribution of account data by the Group and/or any Group Company to a credit reference agency), remaining available credit or outstanding balance, and default data (being amount past due and number of days past due, date of settlement of amount past due, and date of final settlement of amount in default lasting in excess of 60 days (if any)).

如戶口出現拖欠還款情況，除非拖欠金額在由出現拖欠日期起計60天屆滿前全數清還或撇賬（除了因破產令導致之外），否則由信貸資料機構所持有的帳戶還款資料可在該拖欠款項全數清還後繼續保留五年。帳戶還款資料包括上次到期的還款額，上次報告期間（即緊接本集團及/或任何一間本集團公司最近一次向信貸資料機構提供帳戶資料之前不超過31天的期間）所支付的還款額，剩餘可用信貸額或未償還數額及欠款資料（即過期欠款額，逾期還款日數，清還過期欠款的日期及全數清還超過 60天的欠帳的日期（如有））。

20. In the event any amount in an account is written off due to a bankruptcy order being made against the Data Subject, the account repayment data (as defined in Clause 19 above) may be retained by the credit reference agency, regardless of whether the account repayment data reveal any default of payment lasting in excess of 60 days, until expiry of 5 years from the date of final settlement of the amount in default or expiry of 5 years from the date of discharge from bankruptcy as notified by the Data Subject with evidence to the credit reference agency, whichever is earlier.

如資料當事人因被宣佈破產令而導致戶口任何金額被撇賬，不論其帳戶還款資料（定義見以上第19條）是否顯示有超過60天的欠帳，由信貸資料機構所持有的帳戶還款資料可在該拖欠款項全數清還後繼續保留五年，或由資料當事人獲解除破產令（其須提出證據將此事通知信貸資料機構）的日期起計保留五年（以較先出現的情況計算）。

21. The Group and/or any Group Company may obtain a credit report on or access the database of the Data Subject from a credit reference agency in considering any application for credit or conducting credit reviews from time to time. In the event the Data Subject wishes to access the credit report, the Group and/or any Group Company will advise the contact details of the relevant credit reference agency.

本集團及/或任何一間本集團公司考慮任何信貸申請或不時進行信貸審查時，可向信貸資料機構提取有關資料當事人的信貸報告或查閱資料當事人的資料庫。假如資料當事人希望查閱該信貸報告，本集團及/或任何一間本集團公司會提供有關信貸資料機構的聯絡詳情。

22. Data of a Data Subject may be processed, kept, transferred or disclosed in and to any country as the Group and/or any Group Company or any User who has obtained such data from the Group and/or any Group Company considers appropriate. Such data may also be processed, kept, transferred or disclosed in accordance with the local practices and laws, rules and regulations (including any governmental acts and orders) in such country.

本集團及/或任何一間本集團公司或從本集團及/或任何一間本集團公司取得有關資料的任何使用者可在或可向其認為合適的國家處理、保存、轉移或披露資料當事人的資料。該等資料亦可根據該國當地的慣例和法律、規則和規例（包括任何政府措施和指令）而處理、保存、轉移或披露。

23. In accordance with the terms of the Ordinance, the Group and/or any Group Company has the right to charge a reasonable fee for the processing of any data access or correction request.

根據該條例規定，本集團及/或任何一間本集團公司有權就處理任何資料查閱或更正要求收取合理費用。

24. The person to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of data held are to be sent is as follows:-

有關查閱及更正資料、瞭解本集團使用資料的政策和慣例，以及所持有的資料種類的要求，請發送至以下位址：

Legal and Compliance Department

CNCB (Hong Kong) Investment Limited

2001-2005, 20/F, AIA Central, 1 Connaught Road Central, Central, Hong Kong

香港中環干諾道中1號友邦金融中心20樓2001-2005

信銀(香港)投資有限公司法律合規部收

25. Neither the Group nor any Group Company shall be liable to the Data Subjects if any information supplied by the Data Subjects or on their behalf is incorrect or inaccurate.

如果資料當事人或其代表所提供的資料不正確或不準確，則本集團及/或任何一間本集團公司均不需對資料當事人負責。

26. Data Subjects acknowledge that telephone calls with the Group and/or any Group Company or the Group and/or any Group Company’s staff may be recorded and used as evidence by the Group and/or any Group Company without further notice.

資料當事人知悉在沒有進一步通知的情況下其與本集團及/或任何一間本集團公司或本集團及/或任何一間本集團公司的員工的電話通話有可能被錄音並被本集團用作證據。

VII. Stock Connect Northbound Trading Service滬深港通北向交易服務

27. The Client acknowledges and agrees that when the Group and/or any Group Company is providing Stock Connect Northbound Trading Service to the Client, the Group and/or any Group Company will be required to:

客戶確認及同意, 本集團及/或任何一間本集團公司為客戶提供滬深港通北向交易服務時，本集團及/或任何一間本集團公司需要：

(a) tag each of the Client’s orders submitted to the China Stock Connect System (“CSC”) with a Broker-to-Client Assigned Number ("BCAN") that is unique to the Client or the BCAN that is assigned to the joint account of the Client with the Group and/or any Group Company, as appropriate; and

在提交每一個客戶的交易指令予中華證券通系統（「CSC」）時，在交易指令中附加上客戶唯一的券商客戶編碼（「券商客戶編碼」）或（如適用）客戶于本集團及/或任何一間本集團公司開設的聯名帳戶獲分配的券商客戶編碼；及

(b) provide to the Stock Exchange of Hong Kong Limited (“SEHK”) the Client’s assigned BCAN and such identification information (“Client Identification Data” or “CID”) relating to the Client as the SEHK may request from time to time under the Rules of SEHK.

向香港聯合交易所有限公司（「交易所」）提供客戶的券商客戶編碼及一切交易所按照其規則不時要求索取的關於客戶的身份識別資料（「識別資訊」）。

28. Without limitation to any notification the Group and/or any Group Company has given to the Data Subjects or consent the Group and/or any Group Company has obtained from the Data Subjects in respect of the processing of their personal data in connection with the Accounts and the services provided by Group and/or any Group Company to the Data Subjects, the Data Subjects acknowledge and agree that the Group and/or any Group Company may collect, store, use, disclose and transfer any personal data of the Data Subjects as required as part of the Stock Connect Northbound Trading Service, including as follows:

不受限於本集團及/或任何一間本集團公司就著因應帳戶或提供服務予資料當事人而處理資料當事人的個人資料而給予資料當事人的通知或向資料當事人取得的同意，資料當事人確認及同意，作為滬深港通北向交易服務的一部份，本集團及/或任何一間本集團公司可以作出下述的收集、儲存、使用、披露及轉移資料當事人的個人資料的行為：

(a) to disclose and transfer the Client’s BCAN and CID to the SEHK and the relevant subsidiaries of SEHK from time to time, including by indicating the Client’s BCAN when inputting a China Connect Order into the CSC, which will be further routed to the relevant China Connect Market Operator on a real-time basis;

不時向交易所及相關交易所附屬公司披露及轉移客戶的券商客戶編碼及識別資訊，包括在CSC輸入中華通證券交易指令時顯示客戶的券商客戶編碼，並即時轉傳至相關中華通證券交易營運者；

(b) to allow each of the SEHK and the relevant subsidiaries of the SEHK to: (i) collect, use and store the Client’s BCAN,CID and any consolidated, validated and mapped BCANs and CID information provided by the relevant China Connect Clearing House (in the case of storage, by any of them or via Hong Kong Exchanges and Clearing Limited (“HKEx”)) for market surveillance and monitoring purposes and enforcement of the SEHK Rules; (ii) transfer such information to the relevant China Connect Market Operator (directly or through the relevant China Connect Clearing House) from time to time for the purposes set out in (c) and (d) below; and (iii) disclose such information to the relevant regulators and law enforcement agencies in Hong Kong so as to facilitate the performance of their statutory functions with respect to the Hong Kong financial markets;

容許交易所及各相關交易所附屬公司：

(i) 收集、使用及儲存客戶的券商客戶編碼及識別資訊以及相關中華通結算所提供（以儲存而言，由它們或通過香港交易及結算所有限公司（「港交所」）提供）的合併、核實及配對的券商客戶編碼及識別資訊，以作市場監察及執行交易所規則用途；

(ii) 基於下列(c)及(d)所述目的，不時（直接或通過相關中華通結算所）轉移該等資料予相關中華通證券交易營運者；及

(iii) 披露該等資料予香港相關監管機構及執法機關，以配合其履行關於香港金融市場的法定職能；

(c) to allow the relevant China Connect Clearing House to: (i) collect, use and store the Client’s BCAN and CID to facilitate the consolidation and validation of BCANs and CID and the mapping of BCANs and CID with its investor identification database, and provide such consolidated, validated and mapped BCANs and CID information to the relevant China Connect Market Operator, the SEHK and the relevant subsidiaries of the SEHK; (ii) use the Client’s BCAN and CID for the performance of its regulatory functions of securities account management; and (iii) disclose such information to the Mainland regulatory authorities and law enforcement agencies having jurisdiction over it so as to facilitate the performance of their regulatory, surveillance and enforcement functions with respect to the Mainland financial markets; and

容許相關中華通結算所：

(i) 收集、使用及儲存客戶的券商客戶編碼及識別資訊，以配合其對券商客戶編碼及識別資訊作出合併及核實並與其投資者身份識別資料庫作出配對，及把合併、核實及配對的券商客戶編碼及識別資訊提供予相關中華通證券交易營運者、交易所及相關交易所附屬公司；

(ii) 使用客戶的券商客戶編碼及識別資訊，以履行其證券帳戶管理的法定職能；及

(iii) 披露該等資料予對其具有管轄權的中國大陸相關監管機構及執法機關，以配合其履行關於中國大陸金融市場的監管、監察及執法職能；及

(d) to allow the relevant China Connect Market Operator to: (i) collect, use and store the Client’s BCAN and CID to facilitate their surveillance and monitoring of securities trading on the relevant China Connect Market through the use of the China Connect Service and enforcement of the rules of the relevant China Connect Market Operator; and (ii) disclose such information to the Mainland regulatory authorities and law enforcement agencies so as to facilitate the performance of their regulatory, surveillance and enforcement functions with respect to the Mainland financial markets.

容許相關中華通證券交易營運者：

(i) 收集、使用及儲存客戶的券商客戶編碼及識別資訊，以配合其監察通過使用中華通服務在相關中華通市場進行之證券交易，和執行相關中華通證券交易營運者之規則；及

(ii) 披露該等資料予中國大陸相關監管機構及執法機關，以配合其履行關於中國大陸金融市場的監管、監察及執法職能。

29. By instructing the Group and/or any Group Company in respect of any transaction relating to China Connect securities, the Data Subjects acknowledge and agree that the Group and/or any Group Company may use their personal data for the purpose of complying with the requirements of the SEHK and its rules as in force from time to time in connection with the Stock Connect Northbound Trading. The Data Subjects also acknowledge that despite any subsequent purported withdrawal of consent by them, their personal data may continue to be stored, used, disclosed, transferred and otherwise processed for the above purposes, whether before or after such purported withdrawal of consent.

當資料當事人指示本集團及/或任何一間本集團公司進行任何中華通證券的交易時，資料當事人確認及同意，本集團及/或任何一間本集團公司可以使用其個人資料於遵守交易所的要求及其對滬深港通北向交易不時生效的規則。資料當事人也確認，即使未來他們撤銷同意，他們的個人資料（不論在撤銷同意前或後）會繼續被儲存、使用、披露、轉移或其他方式處理，以達至上述目的。

30. Failure to provide the Group and/or any Group Company with the personal data or consent as described above may mean that the Group and/or the relevant Group Company will not, or no longer able, as the case may be, to carry out the Client’s trading instructions or provide the Data Subjects with the Stock Connect Northbound Trading Service.

客戶及/或其他資料當事人不能如上述向本集團及/或任何一間本集團公司提供個人資料或同意，將可能導致本集團及/或任何一間本集團公司（按情況）不會或不可繼續執行客戶的交易指示或向資料當事人提供滬深港通北向交易服務。

VIII. Miscellaneous 雜項

31. The Group reserves the right, at any time and without prior notice, to add to, change, update or modify this Circular, simply by notifying the Data Subjects of such change, update or modification. If the Group decides to amend or supplement this Circular, those changes will be notified to the Data Subjects either on the Group’s website or in writing so that the Data Subject(s) is/are aware of the change, update or modification. Any such change, update or modification will be effective immediately upon posting.

本集團保留權利，在任何時間且毋須作出事先通知的情況下，對本通知增加內容或作出變更、更新或修訂，而僅會向資料當事人就該等變更、更新或修訂作出通知。如本集團決定修改或補充本通知，該等更改將在本集團網站或以書面形式通知資料當事人，以便資料當事人瞭解情況。任何該等變更、更新或修訂將在公佈時即時生效。

32. Nothing in this Circular shall limit the Data Subjects’ rights under the Ordinance.

本通知並不限制資料當事人在該條例下享有的權利。

33. This Circular is prepared in both English and Chinese and in the event of inconsistency, the English text of this policy shall prevail.

本通知備有中英文版本；如有歧異，概以英文版本為准。

CNCB (HONG KONG) INVESTMENT LIMITED
信銀（香港）投資有限公司
[*] 2021
2021年[*]月