Personal Data Collection Statement

The personal data provided in the Application Form for Pre-qualification and any documents submitted to the Authority in relation to an Application of an Applicant and the relevant individuals and in any subsequent updates thereof, if any, and also the tender submissions to be made by the Applicant (collectively, the “Personal Data”), will be used by the Authority for one or more of the following purposes, or purposes directly related thereto (the “Collection Purposes”):

all activities relating to the reviewing and processing of the Application, the suitability assessment of the Applicant, and the verification of the data provided by the Applicant (“Applicant’s Provided Data”);
all activities relating to the approval, renewal, suspension of pre-qualification status and/or removal of the Applicant’s listing from the Pre-qualified Lists including the review of any decisions thereon by any Government departments, statutory authorities, public bodies or any other parties established for the purpose of conducting review of such decisions;
all activities relating to the tendering process and the tender assessments under the Scheme;
all activities relating to the performance assessment of the Applicant;
making appropriate referrals and/or reports to law enforcement agencies (including but not limited to Competition Commission, Hong Kong Police Force and Independent Commission Against Corruption) as may be reasonably necessary to facilitate the detection or prevention concerning of crime in connection with building maintenance procurements and implementation;
all activities relating to contract procurement and management, consultant management, contractor management, regulating action, promotion of the construction industry and other matters in relation thereto;
enabling and facilitating communication amongst the Authority, the Applicant, and the relevant individuals;
handling enquiries, claims, complaints and investigations;
managing legal matters and litigation, or matters in connection with compliance with the laws, regulations, court orders and/or government directions or policies;
reviewing, evaluating and enhancing the Scheme and other services and products of the Authority and identifying market patterns, trends or indications of possible collusion (including conducting research, survey and analysis for those purposes);
auditing purposes; and
all other purposes, activities or circumstances which the Authority considers to be related to any of the above purposes.

The provision of the Personal Data is voluntary. As the Personal Data is necessary for the Authority to process and assess the Applicant’s Application and to evaluate its continued suitability or qualification to remain on the Pre-qualified Lists, failure to provide sufficient and/or accurate Personal Data may result in the Applicant’s Application being rejected or discontinued, or the Applicant has its pre-qualification suspended or removed from the Pre-qualified Lists.

Applicants and related personnel may be required to provide authorisation and consent to other third parties for the purposes set out in the first paragraph above of this section and sign additional “Authorisation and Consent Letter(s)” to give authorisation and consent to such other third parties at a later stage. Where authorisations and consents are required under the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”), the Applicant represents and warrants that such authorisations and consents given in the “Authorisation and Consent Letter” by each individual are given voluntarily. Where any such authorisations and consents have not been given or have subsequently been withdrawn by the relevant individuals, the Authority may be unable to continue to process the Applicant’s Application, or to maintain the status of the Applicant on the Pre-qualified Lists.

Classes of Transferees

The Personal Data may be disclosed or transferred to URA, and other Government authorities and departments (including but not limited to Companies Registry, Buildings Department, Electrical and Mechanical Services Department, Labour Department, Fire Services Department), law enforcement agencies (including but not limited to Hong Kong Police Force, Independent Commission Against Corruption, and Competition Commission), statutory authorities or public bodies, organisations, professional bodies/associations or registration authorities (including but not limited to Hong Kong Institute of Architects, Architects Registration Board, Hong Kong Institute of Surveyors, Surveyors Registration Board, Hong Kong Institute of Engineers and Engineers Registration Board), eMPF Platform Company Limited, Mandatory Provident Fund Schemes Authority and relevant trustees, administrators and/or participating employers, the current and former employer(s) of the relevant individuals, and where applicable, any third-party contractors, consultants and service providers (including information technology service providers and data research consultants) engaged by the Authority to support its operations for the Collection Purposes (collectively “Transferees”) and the respective representatives of the Transferees.

Data Security

The Authority will take all reasonably practicable steps to protect the Personal Data held by the Authority against unauthorised or accidental access, processing, erasure, disclosure, loss, or use in accordance with Principle 4 of Schedule 1 to PDPO. Where third-party service providers are engaged to process the Personal Data on the Authority ’s behalf, contractual or other appropriate safeguards will be imposed to ensure compliance with applicable data protection requirements under PDPO.

Data Retention

The Personal Data will be retained only for as long as is necessary to fulfil the purposes for which it is collected. Upon expiry of the applicable retention period, the Personal Data will be securely destroyed or anonymised in accordance with prevailing standards including, without limitation, Section 26 of PDPO and Principle 2 of Schedule 1 to PDPO.

Access to Personal Data

Individuals to whom the Personal Data collected by the Authority relates shall have a right to request access to and the correction with respect to their Personal Data as provided for under Sections 18 and 22 of PDPO and Principle 6 of Schedule 1 to PDPO.

Enquiries

Requests for access to or correction of an individual’s Personal Data should be made in writing to:

Henri Lui
Senior Manager
Building Rehabilitation (Policy and Standards)
Urban Renewal Authority,
26/F COSCO Tower,
183 Queen’s Road Central,
Hong Kong