This Statement concerns the XXX Co.’s personal data processing of its employees.

1. Purpose of data processing
　　XXX Co. collects and processes personal data of its employees for the following purposes:

1. Administration
2. Calculations and payments of various remunerations, provisions and subsidies;
3. Calculations of obligatory or non-obligatory deductions from remunerations as regulated by law;
4. Execution of judiciary decisions and handling of employees’ applications;
5. The handling of other matters relating to remuneration, provisions, subsidies, etc.;
6. XXXXX₁

2. Categories of personal data collected₂
　　For the above purposes, the XXX Co. shall collect and process the following categories of personal data and the related documents, both originals and copies:

1. Identification data: XXXXX；
2. Family information: XXXXX；
3. Employment data: XXXXX；
4. Data relating to remunerations: XXXXX；
5. Other information: XXXXX.

3. Duration for data preservation

1. For administration purpose: one year after end of the employment;
2. For purpose of remunerations, provisions and welfare benefits: a maximum of ten years after end of the employment;
3. For purpose of judicial proceedings: to be extended to six months after the data is delivered to the judiciary or the final decision;
4. For purpose of pension, provident fund or compensations paid to the employee after end of employment: the data, necessary for determining the status, length of employment and changes of salary, to be preserved XX years after the purpose not longer applies.₃

4. Data recipients
　　They include:

1. Entities to be informed in accordance with legal provisions or as requested by the data subject;
2. Financial agencies managing bank accounts for making payment to employees;
3. Entities managing pensions or provident funds;
4. Insurance companies providing services for work or personal accidents.

5. Rights of the employees
　　Employees are entitled by law to the right of information, access and objection. When exercising the right to access, they must apply in writing and pay a reasonable fee.
Note:

1. If there are other purposes that are consistent with the statement heading and content, they can be added.
2. For categories of personal data, the entity or agency concerned can add item descriptions according to its own practical circumstances.
3. The entity or agency concerned can decide its own duration of data preservation. The Office for Personal Data Protection recommends a duration of 5-10 years.

　　The XXX Entity is a non-profit legal person. This Statement concerns this Entity’s processing of personal data for the purpose of organizing activities.

1. Purpose of data processing
　　Activity-organizing, record keeping and archiving.

2. Category of data subject
　　Participants and persons involved in activities organized (hosted, co-hosted or assisted) by this Entity.

3. Categories of personal data
　　To organize activities, this Entity may collect and process the following categories of personal data. The collection of some categories of data may be necessary for the related activity, while that of the others may be based on the voluntary provision of the data subject. Please contact the responsible personnel of the activity for any enquiry.

1. Identification and contact: name, date of birth or age, gender, nationality, address, telephone number, fax number, e-mail address, education, language, types, number and copy of identification document, occupation, position, name of employer or educational organization, types, number and copy of student identification document, photo and etc. When applicable, data of parents or guardians if the data subject is a minor or an interdicted person.
2. Activities data: The audio and video data involved in activities (for example photo, sound recording and video), activities performance, activities assessment, reward and punishment of activities.
3. Financial data: The bank account and data of related party involved in payment of application fee and reward.
4. Other data: Other data that related to activities.

 

4. Data recipients
　　Data recipients include:

1. Entities to be informed in accordance with legal provisions.
2. Entities to be informed with the consent of or as requested by the data subject.
3. Insurance providers involved.

  

5. Rights of the data subject
　　Data subjects are entitled by the law to the right of access and the right of rectification. When exercising the right of access, they can apply to this Entity in writing and may need to pay a reasonable fee.