Hawksford Group privacy notice 

1. Introduction

简介

Hawksford respects your privacy and is committed to protecting your personal data. This privacy notice describes how Hawksford processes the personal data you provide to us or that we collect during the course of our business activities, including from our websites (regardless of where you visit them from).

恒可富尊重您的隐私，并致力于保护您的个人数据。本隐私声明描述了恒可富如何处理您提供给我们的个人数据或我们在业务活动过程中收集的个人数据，包括从我们的网站（无论您从何处访问）收集的个人数据。

This privacy notice aims to give you information on how Hawksford collects and processes your personal data or the personal data of someone connected to you in connection with Hawksford’s provision of services including any data you may provide through this website when making enquiries about becoming a client in order that we may get in touch with you.

本隐私声明旨在说明恒可富在向您提供相关的服务过程中，如何收集和处理您的个人数据或与您有关个人的数据信息。这包括您通过本网站提交成为客户的表格时可能提供的数据，以便我们进行后续联系。

Hawksford is fully aware of the fact that personal data is important to you, and will do its utmost to ensure the security and reliability of your personal data. We are committed to maintaining your trust in us and observing the following principles when protecting your personal data: consistency between rights and liabilities, clear purposes, solicitation of consent, minimum necessary amount, guarantee of security, involvement of personal data subjects, and openness and transparency. Meanwhile, Hawksford warrants that we will put in place necessary safeguards according to well-developed security standards for the industry to protect your personal data.

恒可富深知个人数据对您的重要性，并将尽力确保您的个人数据的安全性和可靠性。我们致力于维持您对我们的信任，并在保护您的个人数据时恪守以下原则：权责一致原则、目的明确原则、获得同意原则、最小必要原则、确保安全原则、主体参与原则、公开透明原则等。同时，恒可富承诺，我们将按业界成熟的安全标准，采取相应的安全保护措施来保护您的个人数据。

Please read carefully and understand the Privacy Notice before using our or services together with any other privacy policy we may provide on specific occasions so that you are fully aware of how and why Hawksford is using your data. This Privacy Notice is formulated in accordance with the Personal Information Protection Law (the “PIPL”), the Cyber Security Law (the “CSL”) and other relevant laws and regulations of the PRC. It supplements other notices and privacy policies of Hawksford. If you disagree with this Privacy Notice, you have the option to discontinue use of our services.

请在使用我们服务前，仔细阅读并了解本隐私声明以及我们可能在特定情况下提供的任何其他隐私政策，以便您充分了解恒可富如何以及为何使用您的数据。本隐私声明系根据《中华人民共和国个人信息保护法》、《中华人民共和国网络安全法》及中国其他相关法律法规而制定。本隐私声明是对恒可富其他声明和隐私政策的补充。如果您不同意本隐私声明，您可以选择拒绝使用或者停止使用我们的服务。

 

2. Important information and who we are

重要信息和我们是谁

This privacy notice is issued on behalf of Hawksford Group Holdings Limited and other companies within the Hawksford Group. Accordingly, references to “Hawksford”, we”, “us” or “our” in this privacy notice are to the relevant company in the Hawksford Group responsible for processing your personal data and include the following:

本隐私声明是代表Hawksford Group Holdings Limited和恒可富集团的其他公司发布的。因此，本隐私声明中提及的“恒可富”、“我们”或“我们的”是指恒可富集团中负责处理您的个人数据的相关公司，包括恒可富集团的以下公司：

Hawksford Group companies: Hawksford 集团公司：

• Hawksford Trust Company Jersey Limited and its affiliates (including Hawksford Funds Services Jersey Limited and Hawksford Executors Limited) are regulated by the Jersey Financial Services Commission.
  • 受泽西岛金融服务委员会监管的Hawksford Trust Company Jersey Limited及其关联机构（包括Hawksford Funds Services Jersey Limited 及 Hawksford Executors Limited）。
• Hawksford Singapore Pte Ltd is licenced as an employment agency by the Ministry of Manpower.
  • 由新加坡人力部许可的职业中介机构Hawksford Singapore Pte Ltd。
• Hawksford Trust Services Pte Ltd is regulated by the Monetary Authority of Singapore for trust company business.
  • 受新加坡金融管理局监管且提供信托及公司业务的Hawksford Trust Services Pte Ltd。
• Hawksford Corporate Services Hong Kong Limited is regulated in Hong Kong by the Registry for Trust and Company Service Providers.
  • 受香港公司注册处监管且提供信托及公司注册服务的Hawksford Corporate Services Hong Kong Limited。
• Hawksford UK Services Limited is registered in England and Wales and is regulated by the ICAEW.
  • 在英格兰和威尔士注册且受英格兰及威尔士特许会计师协会监管的Hawksford UK Services Limited。
• Hawksford International (UK) Limited (formerly Pearse Trust International Limited) regulated in England and Wales by HMRC.
  • 在英格兰和威尔士注册且受英国税务与海关总署监管的Hawksford International (UK) Limited（前身为 Pearse Trust International Limited）。
• Hawksford (Mauritius) Ltd (formerly Griffon Solutions Ltd) is regulated by the Financial Services Commission - Mauritius.
  • 受毛里求斯金融服务委员会监管的Hawksford (Mauritius) Ltd（前身为 Griffon Solutions Ltd）。
• Pulman (Nominees) Ltd is regulated by the Financial Services Commission - Mauritius.
  • 受毛里求斯金融服务委员会监管的Pulman (Nominees) Ltd。
• Griffon Pension Solutions PCC is regulated by the Financial Services Commission - Mauritius.
  • 受毛里求斯金融服务委员会监管的Griffon Pension Solutions PCC。
• Hawksford Management Services B.V. is regulated by the Dutch Central Bank (also referred to as the Dutch National Bank)
  • 受荷兰中央银行（又称荷兰国家银行）监管的Hawksford Management Services B.V.。
• International Business Support B.V. is regulated by the Dutch Central Bank (also referred to as the Dutch National Bank)
  • 受荷兰中央银行（又称荷兰国家银行）监管的International Business Support B.V.。
• Hawksford (Netherlands) BV which is regulated by the Dutch Central Bank (also referred to as the Dutch National Bank)
  • 受荷兰中央银行（又称荷兰国家银行）监管的Hawksford (Netherlands) BV
• Hawksford Patagonia Holdings (Netherlands) BV 
• Hawksford Ireland Limited (formerly Pearse Trust Limited) and certain of its affiliates are regulated by the ROI Department of Justice for trust and company services.
  • 受爱尔兰共和国司法部监管且提供信托和公司服务的Hawksford Ireland Limited（前身为 Pearse Trust Limited）及其关联公司。
• Hawksford Trustess (New Zealand) Limited (formerly Pearse Trust (New Zealand) Limited) regulated by the Department of Internal Affairs in New Zealand.
  • 受新西兰内政部监管的Hawksford Trustess (New Zealand) Limited（前身为 Pearse Trust (New Zealand) Limited）。
• Healy Consultants Group Pte. Ltd regulated in Singapore by the Accounting and Corporate Regulatory Authority.
  • 受新加坡会计与企业管理局监管的Healy Consultants Group Pte. Ltd。
• Hawksford DMCC regulated in the United Arab Emirates by the Ministry of Economy.
  • 在阿拉伯联合酋长国注册且由经济部监管的Hawksford DMCC。
• Hawksford Governance Services Cayman Limited registered in the Cayman Islands and regulated by the Cayman Islands Monetary Authority.
  • 在开曼群岛注册且由开曼群岛金融管理局监管的Hawksford Governance Services Cayman Limited。
• Hawksford Governance Services USA LLC registered in Delaware.
  • 在特拉华州注册的Hawksford Governance Services USA LLC。
• Hawksford Corporate Consulting Services Shanghai Limited is licensed in the People’s Republic of China by the Shanghai Municipal Finance Bureau for book keeping services.
  • 由代理记账管理机构中华人民共和国上海市财政局许可的恒可富企业咨询服务（上海）有限公司。
• Hawksford Corporate Consulting Services Suzhou Limited is regulated in the People’s Republic of China by the Suzhou Municipal Finance Bureau for book keeping services.
  • 由代理记账管理机构中华人民共和国苏州市财政局许可的苏州恒可富企业咨询服务有限公司。

 

The identity of the data controller for data protection purposes will vary depending upon which Hawksford entity you contract with.

出于数据保护的目的，数据控制方以与您所签署合同的恒可富实体为准 。

This Privacy Notice is formulated in accordance with the Personal Information Protection Law (the “PIPL”), the Cyber Security Law (the “CSL”) and other relevant laws and regulations of the PRC. It is important that you read this privacy notice together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why Hawksford is using your data. This privacy notice supplements other notices and privacy policies and is not intended to override them.

本隐私声明系根据《中华人民共和国个人信息保护法》、《中华人民共和国网络安全法》及中国其他相关法律法规而制定。在我们收集或处理您的个人数据时，建议您仔细阅读本隐私声明以及我们可能在特定场合提供的其他相关隐私政策，以全面了解恒可富如何以及为何使用您的数据。本隐私声明作为对其他声明及隐私政策的补充，并不取代或优先于任何其他声明或隐私政策。

Hawksford operates in jurisdictions that are outside the mainland of the People’s Republic of China (“PRC”), with the exception of Hong Kong, Macau, and Taiwan as specified in this notice. Where we share your data with Hawksford Group companies we do so on terms whereby such data is to be kept secure and confidential.

恒可富在中华人民共和国大陆（ “中国”，本制度下不包括香港、澳门及台湾）以外的司法管辖区（“海外”）开展业务。在与恒可富集团关联公司共享您的数据时，我们严格依据相关条款执行，以保障数据的安全与保密。

 

3. Contact details

联系方式

Hawksford’s PRC Data Protection Officer (DPO) may be contacted in relation to questions arising in relation to this privacy notice or if you have any questions in relation to exercising your legal rights.

如果您对本隐私声明有任何疑问，或者您对行使您的合法权利有任何疑问，请联系恒可富的中国数据保护官（DPO）。

The DPO may be contacted at:  dpoprc@hawksford.com or by post at Room 205,  Yuanshen Financial Building (Tower B), No 355 Yuanshen Road, Pudong New Area, Shanghai, PRC.

DPO的联系方式如下：dpoprc@hawksford.com，或邮寄致中国上海市浦东新区源深路355号源深金融大厦 B栋2层 205室。

You also have the right to make a complaint at any time to the Office of the Central Cyberspace Affairs Commission in PRC (中央网络安全和信息化委员会办公室), the Office of the Information Commissioner in Jersey (https://oicjersey.org), the Office of the Privacy Commissioner for Personal Data in Hong Kong (www.pcpd.org.hk), the Personal Data Protection Commission in Singapore (www.pdpc.gov.sg), the Data Protection Office in Mauritius by emailing dpo22@govmu.org, the Ombudsman of the Cayman Islands via their website: https://ombudsman.ky/data-protection, the Information Commissioner’s Office of the United Kingdom (https://ico.org.uk), the Data Protection Commission Ireland (Homepage | Data Protection Commission) or a supervisory authority in the EU member state of your usual residence or place of work or of the place of any alleged breach of data protection legislation.

您还有权随时向以下机构投诉：

中国中央网络安全和信息化委员会办公室（中央网络安全和信息化委员会办公室）、

泽西岛信息专员办公室（https://oicjersey.org）、

香港个人资料私隐专员公署（www.pcpd.org.hk）、

新加坡个人资料保护委员会（www.pdpc.gov.sg）、

毛里求斯数据保护办公室请发送电子邮件至（dpo22@govmu.org ）、

开曼群岛监察员（https://ombudsman.ky/data-protection）、

英国信息专员办公室（https://ico.org.uk）、

爱尔兰数据保护委员会 (Homepage | Data Protection Commission) 或

您通常居住地或工作地或涉嫌违反数据保护法规的行为所在地的监管机构进行投诉。

We would, appreciate the chance to deal with your concerns before you approach any information commissioner authority so, please contact us in the first instance.

在您联系任何信息主管机构之前，建议您优先联系我们，以便我们有机会先行处理您的疑问。

 

4. The data we collect about you

我们收集的关于您的数据

Personal data, means any information about an individual from which that person can be identified it includes information that you provide to us or which we gather in the course of operating our business.

个人数据是指可以识别个人身份的任何信息，包括您向我们提供的信息或我们在业务运营过程中收集的信息。

Hawksford may collect, use, store and transfer various types of personal data about you including:

恒可富可能会收集、使用、存储和传输关于您的个人数据包括以下类型：

• Identity data (which may include your title, name and passport/driving licence/national identification card information, politically exposed person (PEP) status and personal data available in the public domain);
  • 身份数据（可能包括您的头衔、姓名和护照/驾照/居民身份证信息、政治公众人物 (PEP) 身份以及从公开来源获取的个人数据）；

• Contact data (which may include postal address, email address and telephone numbers);
  • 联系方式数据（可能包括邮寄地址、电子邮件地址和电话号码）；

• Professional/employment data (which may include educational background, professional qualifications, employment, details of directorship and other offices which you may hold);
  • 专业/就业数据（可能包括教育背景、专业资格、就业情况、您可能担任的董事和其他职务）；

• Financial data (which may include sources of wealth, details of your assets, shareholdings and beneficial interest in assets, bank account details, credit history);
  • 财务数据（可能包括财富来源、资产详情、资产中的股份和实益权益、银行账户详情、信用记录）；

• Family relationships data (which may include your marital status, the identity of your spouse/partner and any children you may have);
  • 家庭关系数据（可能包括您的婚姻状况、配偶/伴侣的身份以及您可能有的任何子女）；

• Third party relationships data (which may include your employer, advisors, service providers (including bankers and investment advisers) and entities with which you are associated);
  • 第三方关系数据（可能包括您的雇主、顾问、服务提供商（包括银行家和投资顾问）以及与您有关联的实体）；

• Technical data (which may include your internet protocol (IP) address, how you use our website, browser type and version, time zone setting and location, and other technology available from the devices you use to access our websites);
  • 技术数据（可能包括您的互联网协议 (IP) 地址、使用我们网站的方式、浏览器类型和版本、时区设置和位置，以及您用于访问我们网站的设备所提供的其他技术）；

• Marketing and communications data (which may include your preferences in receiving marketing from us and our third-party providers and your communication preferences).
  • 营销和宣传数据（可能包括您在接收我们和我们的第三方供应商的营销信息方面的偏好以及您的通信偏好）。

We may also collect and process “Special Categories of Personal Data” about you where we are required to for the purposes of our legal and/or regulatory obligations including, but not limited to, legislation and regulatory obligations relating to anti-money laundering and combatting the financing of terrorism and other related legislation. This may include information about your race or ethnicity, religious or philosophical beliefs, political opinions and information relating to criminal convictions. We may also collect Special Categories of Personal Data comprising information about your health to enable us to meet our contractual obligations.

在我们需要履行法律和/或监管义务（包括但不限于与反洗钱、打击资助恐怖主义行为及其他相关法律法规的义务）的情况下，我们还可能收集和处理有关您的 "特殊类别个人数据"。这可能包括与您的种族或民族、宗教或哲学信仰、政治观点有关的信息，以及与刑事定罪有关的信息。我们还可能收集特殊类别的个人数据，包括有关您健康状况的信息，以便我们履行合同义务。

 

Sensitive Personal Data

敏感个人数据

“Sensitive Personal Data” refers to personal data, that, once leaked or illegally used, may easily lead to the infringement of the personal dignity of natural persons or the harm of personal and property safety, including biometrics, religious beliefs, specific identities, medical health, financial accounts, whereabouts as well as personal data of minors under 14 years age.

“敏感个人数据”是指一旦泄露或者非法使用，容易导致自然人的人格尊严受到侵害或者人身、财产安全受到危害的个人数据，包括生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息，以及不满十四周岁未成年人的个人数据。

Hawksford may collect and process your sensitive personal data in accordance with applicable laws, regulations and this Policy, but such actions are only limited to the specific purpose, the extent necessary to provide you with the services, and with your consent. We will take strict protective measures to process or use your sensitive information.

恒可富可能根据适用法律、法规和本声明收集和处理您的敏感个人数据，但仅限于向您提供服务所必要、具有特定目的、且取得您同意的情况下处理相应信息。我们将采取严格保护措施以处理您的敏感信息。

 

If you fail to provide personal data

如果您未能提供个人数据

Where Hawksford is required to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or propose to enter into with you. In this case, we may have to withdraw the service you have with us, but we will notify you if this is the case at the time.

如法律规定或根据我们与您签署的合同条款，恒可富需收集您的个人数据，而您未能按要求提供，则我们可能无法履行已签订或拟签订的相关合同。在此情况下，可能导致服务终止，届时我们将另行通知您。

 

5. How is your personal data collected?

如何收集您的个人数据？

We use different methods to collect data from you and about you including but not limited to:

我们使用不同的方法向您收集数据和关于您的数据，包括但不限于以下方式：

Direct Interactions. You may give us your personal data by filling in forms or by corresponding with us by post, telephone, email or otherwise. This includes personal data you provide when you:

直接互动。您可以通过填写表格或通过邮寄、电话、电子邮件或其他方式与我们联系，向我们提供您的个人数据。这包括您在以下情况下提供的个人数据：

• apply for our services;
  • 申请我们的服务；

• subscribe to our services or publications;
  • 订阅我们的服务或文章；

• request material to be sent to you.
  • 要求向您发送材料。

Third Parties or Publicly Available Sources. We may receive personal data about you from various third parties and public sources including but not limited to:

第三方或公开来源。我们可能会从各种第三方和公开来源收到有关您的个人数据，包括但不限于：

• personal data gathered through client due diligence undertaken to meet regulatory requirements (including through credit reference agents);
  • 通过客户尽职调查收集的个人数据，以满足监管要求（包括通过征信机构）；

• personal data from publicly available sources such as companies registries;
  • 从公开来源（如公司注册登记平台）获得的个人数据；

• personal data received in the course of dealing with advisors, lawyers, regulators, official authorities and service providers;
  • 在与顾问、律师、监管机构、官方机构和服务提供商打交道的过程中收到的个人数据；

• our clients in connection with the services we are providing (for example a settlor may provide personal data on beneficiaries);
  • 与我们提供的服务有关的客户（例如，委托人可能会提供受益人的个人数据）；

• other financial services providers (including from other trust and companies administration service providers);
  • 其他金融服务提供商（包括其他信托和公司管理服务提供商）；

• personal data on potential candidates may be obtained from recruitment agencies, past or current employers, educational institutions and/or professional bodies;
  • 可能从招聘机构、过去或现在的雇主、教育机构和/或专业机构获得潜在候选人的个人数据；

• analytics providers such as Baidu.
  • 百度等分析提供商。

Information that we collect through our websites

通过我们网站收集的信息

Hawksford may collect information from you through your use of our websites, when you request information from us or otherwise in the course of our business. Hawksford operates the following websites: www.hawksford.com and www.healyconsultants.com; You are not required to provide any personal data in order to access our websites.

恒可富可能会在您使用我们网站、咨询信息或进行业务往来时收集您的信息。 恒可富运营以下网站： www.hawksford.com 和www.healyconsultants.com；您无需提供任何个人数据即可访问我们的网站。

You may voluntarily choose to provide personal data by signing up for newsletters or other publications.

您可自愿提供个人数据以订阅新闻简报或文章。

Our websites collects the domain names, IP addresses, user statistics, analytics and browsing history of all visitors. For further information please see our Cookies Policy. Hawksford uses this data to promote our services.

我们的网站会收集访问者的域名、IP 地址、用户统计数据以及浏览历史记录。有关详细信息，请参阅我们的Cookies 政策。恒可富将上述数据用于服务推广等用途。

 

6. How Hawksford uses your personal data

恒可富如何使用您的个人数据

Hawksford provides corporate, private client and fund administration services to our clients and we use your personal data for those purposes. Hawksford will use your personal data to:

恒可富为我们的客户提供企业、私人客户服务，我们将您的个人数据用于前述目的。恒可富将您的个人数据用于：

• perform a contract that we are about to enter into or have entered into with you;
  • 订立、履行我们即将或已经与您签订的合同；

• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
  • 出于我们的合法利益（或第三方的合法利益）的需要，且您的利益和基本权利不优先于前述利益；

• comply with a legal or regulatory obligation (to include the prevention and detection of fraud, money laundering and other crimes);
  • 遵守法律或监管义务（包括预防和侦查欺诈、洗钱和其他犯罪）；

• respond to requests, enquiries or complaints received from you or someone connected to you;
  • 响应您或与您有关的人提出的请求、询问或投诉；

• establish, exercise or defend legal proceedings and/or Hawksford’s legal rights;
  • 建立、行使或维护法律程序和/或恒可富的法律权利；

• conduct administrative or operational processes within Hawksford;
  • 在恒可富内部开展行政或运营流程；

• compile statistics in relation to the use of our websites;
  • 汇编与我们网站的使用有关的统计数据；

• send you marketing material;
  • 向您发送营销材料；

• enable us to display relevant targeted advertisements to you about products and services that may be of interest;
  • 使我们能够向您展示您可能感兴趣的产品和服务的相关定向广告；

• where it is necessary for the human resources management implemented in accordance with the labour rules and regulations of the employer formulated according to the law or collective contracts signed according to law;
  • 根据用人单位依法制定的劳动规章实施人力资源管理工作或依法签订的集体合同所必需的;

• respond to a public health emergency, or in an emergency to protect the safety of natural persons’ health and property;
  • 为应对突发公共卫生事件，或紧急情形下为保护自然人的生命健康和财产安全所必需的；

• process personal data that is already made public within the reasonable scope and in accordance with the requirements of the PIPL; and
  • 根据《中国个人信息保护法》规定所处理的个人数据是已经在合理范围内公开的；及

• for other legitimate business purposes or other circumstances permitted by laws and regulations.
  • 其他合法商业目的或法律法规允许的其他情形。

Hawksford does not generally rely on consent as a legal basis for processing your personal data other than in relation to sending marketing communications to you via email. You have the right to withdraw consent to marketing at any time by contacting us.

除通过电子邮件向您发送营销信息以及上述法律法规允许的情形外，恒可富一般不以您的同意作为处理您个人数据的法律依据。您有权随时联系我们撤回对营销的同意。

 

7. How Hawksford Uses AI Tools:

恒可富如何使用AI工具：

We use AI Tools (software applications that incorporate AI technology). Our AI Tools use language models licensed from Azure OpenAI; a service owned by Microsoft. The data processed by AI Tools, is not used to improve Azure OpenAI or any Microsoft products. For more information on data, privacy and security of the Azure OpenAI Service used, please access Microsoft’s data privacy page via this link Data, privacy, and security for Azure OpenAI Service - Azure AI services | Microsoft Learn.

我们使用AI工具（包含AI技术的软件应用程序）。我们的 AI 工具使用 Azure OpenAI 许可的语言模型；Azure OpenAI 是微软拥有的一项服务。AI 工具处理的数据不用于改进 Azure OpenAI 或任何微软产品。有关所使用的 Azure OpenAI 服务的数据、隐私和安全的更多信息，请通过此链接访问微软的隐私页面数据Azure OpenAI 服务的数据、隐私和安全 - Azure AI 服务 | Microsoft Learn。

As a data controller and processor, Hawksford will process personal data (which may include client confidential data). Hawksford has appropriate safeguards in place to ensure your personal data is protected when using AI tools.

作为数据控制者和处理者，恒可富将处理个人数据（可能包括客户机密数据）。恒可富已采取适当的保障措施，以确保您的个人数据在使用 AI 工具时受到保护。

Microsoft cannot access the data processed via the AI Tools used by Hawksford which means your personal data is secure and can only be accessed by Hawksford. Please refer to the attached for more information on how Microsoft sets forth their obligations in relation to the processing and security of personal data: Licensing Documents (microsoft.com).

微软无法访问通过恒可富使用的AI工具处理的数据，这意味着您的个人数据是安全的，只有恒可富可以访问。若您想了解微软如何规定其在个人数据处理和安全方面的义务,请参阅附件许可文件 (microsoft.com)。

Hawksford is committed to maintaining confidentiality and to ensure compliance mandatory training has been provided to all users of our AI Tools. Personnel know how to process personal data in accordance with the relevant data protection regulations and in accordance with our internal data protection policies.

恒可富致力于维护保密性，并确保为我们AI工具的所有用户提供强制性培训。员工知道如何根据相关数据保护法规和我们的内部数据保护政策处理个人数据。

 

8. Purposes for which Hawksford uses your personal data

恒可富使用您的个人数据的目的

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

下表详细列示了我们拟使用您的个人数据的所有具体方式及其相应的法律依据，并在适用情况下说明了我们的合法权益。

We only process personal data which is relevant to the purposes we have told you about and limited only to those purposes.

我们仅在已明确告知您的特定目的范围内收集和处理相关的个人数据，并严格限定于前述用途。

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

请注意，根据我们使用您的数据的具体目的，我们处理您的个人数据的合法理由可能不止一个。如果您需要详细了解我们处理您的个人数据所依据的具体法律依据，请联系我们。

Purpose/Activity 目的/活动	Type of data 数据类型	Lawful basis for processing including basis of legitimate interest 处理数据的法律依据，包括合法利益的依据
To register you as a new client/recipient of our services 将您登记为我们服务的新客户/客户	(a) Identity 身份 (b)  Contact 联系方式	Performance of a contract with you 履行与您的合同
To process and deliver your services: 为您办理和提供服务以下服务： (a) Administer entities on behalf of clients; 代表客户管理实体； (b) Perform obligations undertaken by client entities; 履行客户实体承担的义务； (c) Manage payments, fees and charges; 管理付款、费用和收费; (d) Collect and recover money owed to us; 收取和收回欠款； (e) Communicate with you 与您沟通。	(a) Identity 身份 (b) Contact 联系方式 (c) Financial 财务 (d) Transaction 交易 (e) Marketing and Communications 营销和宣传	(a) Performance of a contract with you 履行与您的合同； (b) Necessary for our legitimate interests (to recover debts due to us) 出于我们的合法利益（收回欠款）的需要； (c) It is in our legitimate interests to develop and improve our systems and provide our clients with a high standard of services 符合我们开发和改进系统以及为客户提供高标准服务的合法利益。
To manage our relationship with you which will include: 管理我们与您的关系，包括 (a) Notifying you about changes to our terms or privacy policy 通知您有关我们条款或隐私声明的变更； (b) Asking you to take a survey 请您参与调查问卷； (c) Responding to complaints, taking action to put matter right and to answer questions 响应投诉、采取纠正措施和回答问题。	(a) Identity 身份 (b) Contact 联系方式 (c) Profile 个人资料 (d) Marketing and Communications 营销和宣传	(a) Performance of a contract with you 履行与您签订的合同； (b) Necessary to comply with a legal obligation 为履行法律义务所必需； (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) 出于我们的合法利益（更新我们的记录和研究客户如何使用我们的产品/服务）的需要； (d) It is in our legitimate interests to make sure that complaints are investigated (for example to address service standards and to prevent complaints from arising again) 确保对投诉进行调查（例如，解决服务标准问题和防止再次出现投诉）且符合我们的合法利益。
To carry out checks for the purposes of detecting and preventing fraud, money laundering and terrorist financing 为发现和防止欺诈、洗钱和恐怖主义融资而进行核查	(a) Identity 身份 (b) Contact 联系方式 (c) Financial 财务 (d) Transaction 交易	(a) Performance of a contract with you 履行与您签订的合同； (b) Necessary to comply with a legal obligation 必须遵守的法定义务； (c) It is in our legitimate interests to verify the identity of our clients, their owners and controllers, so that we can prevent and investigate fraud, money laundering and other crimes, to check your identity in order to protect our business. 基于我方合法利益，我们需对客户及其实际所有人和控制人的身份进行核查，以防范和调查欺诈、洗钱及其他犯罪行为，并核实您的身份以保障公司业务安全。
To engage the services of third parties on your behalf which will include providing them with information about you 代表您聘请第三方提供服务，包括向他们提供您的以下信息	(a) Identity 身份 (b) Contact 联系方式 (c) Financial 财务 (d) Transaction 交易	(a) Performance of a contract with you 履行与您签订的合同； (b) Necessary to comply with a legal obligation 为履行法律义务所必需。
To  enforce or defend our rights, or the rights of third parties to whom we may have delegated our responsibilities 执行或维护我们的权利，或我们可能委托的第三方的权利	(a) Identity 身份 (b) Contact 联系方式 (c) Financial 财务 (d) Transaction 交易	It is in our legitimate interests to protect our business 保护我们的业务符合我们的合法利益
To check instructions and for training and quality purposes (We may record any communications between us and our clients, including telephone calls, for these purposes) 为了培训和品质的目的，检查说明 (出于这些目的，我们可能会记录我们与客户之间的任何通信，包括电话）	(a) Identity 身份 (b) Contact 联系方式 (c) Financial 财务 (d) Transaction 交易	(a) Performance of a contract with you 履行与您签订的合同； (b) Necessary to comply with a legal obligation 为履行法律义务所必需； (c) It is in our legitimate interests to train our staff and provide our clients with a high standard of services 符合我们培训员工和为客户提供高标准服务的合法利益。
To enable you to complete a survey 为了让您完成调查问卷	(a) Identity 身份 (b) Contact 联系方式 (c) Profile 个人资料 (d) Usage 使用情况 (e) Marketing and Communications 营销和宣传	(a) Performance of a contract with you 履行与您的合同； (b) Necessary for our legitimate interests (to study how clients use our services, to develop them and grow our business) 出于我们的合法利益（研究客户如何使用我们的服务、开发服务和发展我们的业务）的需要。
To administer, support and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) 管理、支持和保护我们的业务和本网站（包括故障排除、数据分析、测试、系统维护、支持、报告和数据托管）	(a)  Identity 身份 (b) Contact 联系方式 (c) Technical 技术	(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) 出于我们的合法利益（经营我们的业务、提供管理和 IT 服务、网络安全、防止欺诈以及在业务重组或集团重组活动中）的需要； (b) Necessary to comply with a legal obligation 为履行法律义务所必需。
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you 向您提供相关的网站内容和广告，并衡量或了解我们为您提供的广告的有效性	(a) Identity 身份 (b) Contact 联系方式 (c) Profile 档案 (d) Usage 用途 (e) Marketing and Communications 营销与宣传 (f) Technical 技术	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) 为我们的合法利益所必需（研究客户如何使用我们的产品/服务、开发产品/服务、发展我们的业务以及为我们的营销策略提供信息）
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences 使用数据分析改进我们的网站、产品/服务、营销、客户关系和体验	(a) Technical 技术 (b) Usage 使用情况	Necessary  for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) 为我们的合法利益所必需（研究客户如何使用我们的产品/服务、开发产品/服务、发展我们的业务以及为我们的营销策略提供信息）
To make suggestions and recommendations to you about services that may be of interest to you 就您可能感兴趣的服务向您提出意见和建议	(a) Identity 身份 (b) Contact 联系方式 (c) Technical 技术 (d) Usage 使用情况 (e) Profile 个人资料 (f) Marketing and Communications 营销和宣传	Necessary for our legitimate interests (to develop our products/services and grow our business) 我们的合法权益所必需（开发我们的产品/服务和发展我们的业务）

 

Hawksford also operates an Official WeChat Public Account “Hawksford恒可富” that collects Big Data. Such information will only be used to reveal patterns, trends, and associations.

恒可富还运营官方微信公众号“Hawksford恒可富”，收集大数据信息，仅用于分析模式、趋势和关联。

 

Change of purpose

目的变更

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

我们仅会将您的个人数据用于最初收集时所设定的目的，除非合理认为该数据需被用于与原始目的相关的其他用途。若需将您的个人数据用于无关的用途，我们将提前通知您，并说明进行此类处理所依据的法律基础。

Please note that we may process your personal data without your knowledge or consent, in compliance with the above purposes, where this is required or permitted by law.

请注意，依据相关法律规定或在法律允许的范围内，我们可能在未事先通知您或未征得您同意的情况下，对您的个人数据进行处理。

 

9. Automated decision-making

自动决策

Your personal data is not subject to automated decision-making processes or profiling.

我们不会对您的个人数据进行自动决策或分析。

 

10. Sharing personal data

共享个人数据

Hawksford may share personal data with our affiliated companies, service providers who act on our behalf, our partners, or others at your direction (the “receiver”) for the following reasons:

出于下列目的恒可富可能会与我们的关联公司、代表我们的服务提供商、我们的合作伙伴或按照您指示的其他方（“接收方”）共享您的个人数据：

• for the provision of corporate services to clients, including but not limited to accounting, tax, banking, corporate, HR, license and permits etc., in collaboration with the external agents in those cities where Hawksford does not have a presence;

为客户提供企业服务，包括但不限于会计、税务、银行、公司、人力资源、执照和许可证等，与恒可富没有存在的城市的外部代理合作;

• as part of the business process in the PRC e.g. submission to the regulators, authorities or governmental body listed in this Section;

作为中国业务流程的一部分, 例如提交给本节中列出的监管机构、当局或政府机构;

The type of the Personal Data we may share including: passport/ID card copies, education certificate, police clearance certificate, resume, personal photo, fiscal code, residence address, mobile phone number, e-mail address, health status (medical check report), marriage certificate, birth certificate, personal schedule, employment contract, work permit.

我们要共享的个人数据包括：护照/身份证复印件、学历证明、无犯罪记录证明、简历、个人照片、税号、居住地址、手机号码、电子邮箱、健康状况（体检报告）、结婚证、出生证明证书、个人日程、雇佣合同、工作许可证。

We are committed to keeping your personal data confidential. If it is necessary to share your information with a third party to provide services to you, we will assess the legality, legitimacy, and necessity of their collection of your personal data. We will require the third parties to take protective measures for your personal data and strictly comply with applicable laws, regulations, and supervision requirements. We will obtain your consent in the form of confirmation as to the contract and specific action under certain circumstances in accordance with the requirements of laws, regulations, and supervision requirements, or confirmation that the third party processes your personal data under the premise of complying with the law.

我们承诺对您的个人数据进行保密。若为了向您提供服务而必需将您的信息共享至第三方，我们将评估其收集您的个人数据的合法性、正当性及必要性。我们将要求第三方对您的个人数据采取保护措施，并严格遵守适用法律、法规及监管要求。我们会按照法律法规、监管规定的要求以确认合同和具体场景下的确认动作等形式征得您的同意，或确认第三方是在符合法律规定的前提下处理您的个人数据。

 

Hawksford may share your personal data with the parties set out below for the purposes listed above.

恒可富可能会出于上述目的与以下各方共享您的个人数据：

Internal. Other companies in the Hawksford Group.

内部：恒可富集团的其他公司。

External. The following third parties:

外部：以下第三方：

• Service providers acting as processors who provide IT and system administration services;

作为处理方提供 IT 和系统管理服务的服务提供商；

• Professional advisers and service providers acting as processors or joint controllers including lawyers, bankers, investment advisers, auditors, brokers, insurers, incorporation agents and accountants who provide, legal, banking, advisory, audit, insurance, company incorporation and accounting services;

作为处理方或联合控制方的专业顾问和服务提供商，包括提供法律、银行、咨询、审计、保险、公司注册和会计服务的律师、银行家、投资顾问、审计师、经纪人、注册代理和会计师；

• Tax authorities, regulators, and other authorities acting as processors or joint controllers who require reporting of processing activities or information for tax, regulatory or legal compliance.

税务机关、监管机构和其他作为处理者或联合控制者的机构，他们需要报告处理活动或信息，以符合税务、监管或法律规定。

• Company registries and stock exchanges acting as processors or joint controllers who require reporting of processing activities or information for regulatory or legal compliance.

公司注册登记机关和证券交易所，作为处理或者联合控制者，需要报告处理活动或信息，以符合监管或法律规定。

• Fraud prevention agencies acting as joint controllers.

作为联合控制方的防欺诈机构。

• Courts or other competent judicial or governmental body to comply with legal obligations such as combating money laundering and terrorist financing where such parties would be acting as joint controllers.

法院或其他有权司法机关及政府机构，为履行相关法律义务（如打击洗钱和恐怖主义融资），在此类情形下，各方将作为共同控制人开展工作。

 

11. Data Storage

数据存储

Hawksford holds client data on servers located in various jurisdictions in PRC, Jersey, the UK and EU, Singapore and Hong Kong, and the employee data is held on servers located in PRC and Europe. The personal data we collect and generate in the PRC will be stored in the PRC.

恒可富的客户数据存储于位于中国、泽西、英国和欧盟、新加坡和香港的不同司法管辖区的服务器内，雇员数据存储于位于中国和欧洲的服务器内。我们在中华人民共和国境内收集和产生的个人数据将存储在中华人民共和国境内。

Further information on how we manage personal data when this is transferred outside the PRC is detailed below under the heading International Transfers.

关于个人数据转移到海外时的管理方式，请参见下文“跨境转移”部分中的详细信息。

Public disclosure and assignments

数据的公开披露和转让

We will not disclose or assign your personal data to any third parties, unless with your consent, or in compliance with the laws and regulations.

我们不会公开披露您的个人数据，除非获得您的同意，或是基于法律法规的披露。

 

12. International transfers

跨国传输

In principle, the personal data we collect in PRC will be stored in PRC. If some services involve cross-border business and it is necessary for us to transfer your personal data to overseas institutions, we will implement it in accordance with laws, regulations and regulatory requirements. Before the transmission, we will meet the necessary prerequisites in strict accordance with the provisions of laws and regulations and the requirements of the regulatory authorities, and perform corresponding legal obligations, including informing you of the name and contact information of the overseas recipient, the purpose and method of transmission , the types of personal data transferred, the ways and procedures for you to exercise your rights to overseas recipients, and obtaining your separate explicit consent, etc. We will require the overseas institutions to keep your personal data confidential by signing agreements or taking other effective measures.

原则上，我们在中国境内收集的个人数据将存储在中国境内。如部分服务涉及跨境业务而需要我们向境外机构传输您的个人数据的，我们将会按照法律、法规和监管要求执行。在数据传输前，我们将严格遵循相关法律法规及监管机构要求，确保所有法定前置条件均已充分满足。 并履行相应的法律义务，包括向您告知境外接收方的名称和联系方式、传输目的和方式、传输的个人数据的种类、您向境外接收方行使您的权利的方式和程序以及取得您的单独明确同意等。我们将要求境外机构通过签订协议或采取其他有效措施为您的个人数据保密。

The overseas institutions may fall under jurisdictions governed by different data protection law or even without enacting relevant laws. In such circumstances, we will ensure a compatible degree of protection in PRC is afforded to such data by implementing at least one of the following safeguards:

境外机构可能属于不同数据保护法管辖的地区，该地区甚至可能未设立相关法律。在此类情况下，我们会确保实施至少一项下列与在中国境内同等程度的保护措施：

• Hawksford will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the PRC;

恒可富只会将您的个人数据传输至被中国认为对个人数据具有足够保护水准的国家；

• Hawksford may require certain organisations to use specific contracts recognized in PRC that give personal data the same level of protection as in PRC;

恒可富会要求相应组织机构使用经中国认可的给与个人数据与在中国同等保护的特定合同；

• Where we use providers based outside the PRC, we may use specific contracts which give personal data the same protection as it would have in PRC；

当我们启用中国境外的供应商时，我们会使用特定合同，为个人数据提供与在中国同等的保护；

• Hawksford may rely on other circumstances where the law permits the transfer for example where the transfer is necessary for the performance of a contract. Hawksford will ensure any transfer of your personal data will be compliant with applicable data protection laws. Please contact the DPO if you require further information on the specific mechanism used by Hawksford when transferring your personal data outside of the PRC.

恒可富会参照法律允许传输的其他情况，例如，该传输是履行合同所必要的。 恒可富会保证您个人数据的任何传输都将符合所适用的数据保护法律。如果您需要恒可富提供与将您的个人数据传输至中国境外所使用的特定机制有关的进一步信息，请联系DPO。

 

13. Marketing

市场推广

Hawksford will provide you with choices regarding certain use of your personal data, particularly around marketing and advertising. Hawksford may contact you by email or other means to inform you about news, market updates, services or events which we think may be of interest to you.

恒可富会就部分个人数据的使用为您提供选择，尤其涉及市场营销和广告。恒可富可能通过电子邮件或其他方式与您联系，告知相关新闻、市场动态、服务或活动信息。

You have the right to ask Hawksford to stop sending you marketing messages at any time by adjusting your marketing preferences or by following the opt-out links on any marketing message sent to you or by contacting us at any time at info@hawksford.com.

您可以随时通过调整您的营销偏好、点击任何营销信息中的退订链接，或直接发送邮件至 info@hawksford.com 联系我们，以要求恒可富停止向您发送营销信息。

 

14. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our websites may not be accessible or their functionality may be restricted. For more information about the cookies we use, please see our Cookies Policy.

您可以将浏览器设置为拒绝所有或部分浏览器 Cookie，或者在网站设置或访问 Cookie 时提醒您。请注意，如您禁用或拒绝 Cookie，可能导致本网站部分内容无法访问或部分功能受限。 有关使用我们的 Cookie 的更多信息，请参阅我们的 Cookies 政策。

 

15. Data security

数据安全

Hawksford has put in place appropriate security measures to protect your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

恒可富采取了相关安全措施，旨在防止个人数据的意外丢失、未经授权的使用、访问、篡改或披露。同时，仅有业务需求的工作人员可以访问个人数据，前述人员按照公司规定处理数据并负有保密责任。

Hawksford has put in place procedures to deal with any suspected personal data breach, and we will notify you and any applicable regulator of a breach where we are legally required to do so.

恒可富已建立完善的疑似个人数据泄露处置流程，并将在法律规定的情况下，及时通知您及相关监管机构。

 

16. Data retention: how long will you use my personal data for?  

数据保留：你们会将我的个人数据使用多久？

Hawksford will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

恒可富只会在必要时保留您的个人数据，以实现我们收集数据的目的，包括满足任何法律、监管、税务、会计或报告要求。

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

为了确定个人数据的适当保留期限，我们会考虑个人数据的数量、性质和敏感性，未经授权使用或披露您的个人数据的潜在危害风险、我们处理您的个人数据的目的、我们是否可以通过其他方式实现这些目的及适用的法律要求。

We only retain your personal data within the period necessary for the purpose of this Policy, or within the time limits prescribed by the law, regulations, and supervisory requirements. Your personal data will be deleted or anonymized by us after exceeding the above-mentioned storage period.

我们仅在本隐私声明所述目的的必要期间内或法律、法规、监管规定的时限内保存您的个人数据。超出前述个人数据存储时限后，我们将对您的个人数据进行删除或匿名化处理。

 

17. Your legal rights

您的法律权利

You may have rights under data protection laws in relation to your personal data we process, you have the right to:

按照中国相关的法律、法规、标准以及其他国家、地区的通行做法，我们保障您对自己的个人数据行使以下权利：

• request access your personal data;

要求访问您的个人数据

• request correction of your personal data;

要求更正您的个人数据

• request restriction of the use of your personal data;

要求限制使用您的个人数据；

• request your personal data is erased;

要求删除您的个人数据；

• object to processing of your personal data;

反对处理您的个人数据；

• Obtain a copy of your personal data; and

获取您的个人数据副本；以及

• request the transfer of your personal data to another party.

要求将您的个人数据转移给另一方。

For security purposes, you may be required to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. Your request will be processed within 30 working days following successful verification of your identity.

为保障安全，您可能需要提供书面请求，或以其他方式证明您的身份。我们可能会先要求您验证自己的身份，然后在核实您的身份后30个工作日内再处理您的请求。

For your reasonable request, we do not charge fees in principle, but for repeated requests that exceed reasonable limits, we will charge a certain cost depending on the circumstances. For those that are unnecessarily repetitive, require excessive technical means (for example, requiring the development of new systems or fundamental changes in existing practices), pose a risk to the legal rights of others, or are very impractical (for example, involving information stored on backup tapes), then we reserve the right to deny such requests.

对于您合理的请求，我们原则上不收取费用，但对多次重复、超出合理限度的请求，我们将视情收取一定成本费用。对于那些无端重复、需要过多技术手段（例如，需要开发新系统或从根本上改变现行惯例）、给他人合法权益带来风险或者非常不切实际（例如，涉及备份磁带上存放的信息）的请求，我们保留拒绝此类请求的权利。

Please note that we will not respond, in accordance with applicable laws, regulations and regulatory requirements, to your request under the following circumstances:

请注意，根据适用法律、法规及监管要求，如有下列情形，我们将无法响应您的请求：

• inconsistent with our legal or regulatory responsibilities and obligations;

与我们法定或监管规定的职责和义务不符的；

• directly related to national security and national defence security;

与国家安全、国防安全直接相关的；

• directly related to public safety, public health, and major public interests；

与公共安全、公共卫生、重大公共利益直接相关的；

• directly related to criminal legal proceedings;

与刑事法律程序直接相关的；

• it is proved by sufficient evidence that you have subjective malice or abuse of rights;

有充分证据表明您存在主观恶意或权利滥用的；

• in order to protect the life, property and other major legitimate rights and interests of the personal data subject or other individuals, but it is difficult to obtain the consent of the person;

出于维护个人数据主体或其他个人的生命、财产等重大合法权益但又很难得到本人同意的；

• responding to your request may cause serious damages to the legitimate rights and interests of other individuals and organizations; or

响应您的请求将导致其他个人、组织的合法权益受到严重损害的；或

• in relation with business secret.

涉及商业秘密的。

Where we have relied on consent or our legitimate interests to process your personal data, you have the right to withdraw consent at any time. If you choose to do so, we may not be able to provide our services to you.

如果我们处理您的个人数据是基于您的同意或我们的合法利益，您有权随时撤回同意。如果您选择这样做，我们可能无法向您提供服务。

If you wish to exercise any of the rights set out above please contact the DPO.

如果您希望行使上述任何权利，请联系 DPO。

 

18. How we process the children’s personal data

我们如何处理儿童的个人数据

Our Websites and Services are primarily intended for adults. Children should not create their own personal data account without the consent of their parents or guardians.

我们的网站和服务主要面向成人。如果没有父母或监护人的同意，儿童不应创建自己的个人数据主体账户。

In cases where a child's personal data is collected with parental consent, we will only use or publicly disclose this information as permitted by law, with the explicit consent of a parent or guardian, or as necessary to protect the child.

对于经父母同意而收集儿童个人数据的情况，我们只会在受到法律允许、父母或监护人明确同意或保护儿童所必要的情况下使用或公开披露此信息。

If we find that we have collected a child's personal data without prior verifiable parental consent, we will seek to delete the relevant data as soon as possible.

如果我们发现自己在未事先获得可证实的父母同意的情况下收集了儿童的个人数据，则我们会设法尽快删除相关数据。

"Children" as used in this Policy refers to minors under the age of fourteen.

本隐私声明所称的“儿童”是指十四周岁以下的未成年人。

 

19. Changes to the privacy notice and your duty to inform us of changes

隐私声明的变更以及您通知我们变更的义务

This Privacy Notice is updated on and effective from 14 July 2025.

本隐私声明的更新及生效日期为 2025 年 7 月 14 日。
We may make changes to this Privacy Notice from time to time, and we will post any changes to this privacy notice on this page. We will not reduce your rights under this privacy notice without your express consent.

我们可能会随时更改本隐私声明，我们会在本页面上发布对本隐私声明所做的任何变更。未经您明确同意，我们不会减少您按照本隐私声明所应享有的权利。

If the following material changes are made to this privacy notice, we will explicitly inform you of such updates by sending an email, system notification, and pop-up prompts or other means:

本隐私声明如有以下重大变更，我们将以发送电子邮件、系统通知、弹窗提示等方式明确向您告知该等更新:

• changes about our ownership, e.g. those changes caused by merger, acquisition, reorganization, or other events;

我们的所有权发生变化，如：兼并、收购、重组引起的所有权变更；

• changes in the scope, purpose and rules for the collection, storage and use of personal data;

收集、存储、使用个人数据的范围、目的、规则发生变化；

• changes of the object, scope, and purpose of providing personal data to a third party;

对第三方提供个人数据的对象、范围、目的发生变更；

• changes in your means to access and manage your personal data;

您访问和管理个人数据的方式发生变化；

• changes of data security capabilities and information security risks;

数据安全能力、信息安全风险发生变化；

• changes in the channels and mechanisms for user inquiries and complaints, as well as external dispute resolution agencies and contacts;

用户咨询和投诉的渠道和机制，以及外部争议解决机构和联系方式发生变更；

• other changes that may have a significant impact on your personal data rights.

其他可能对您的个人数据权益造成重大影响的变化。

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

我们所持有的关于您的个人数据必须是准确和最新的。如果您的个人数据在与我们的合作期间发生变化，请及时通知我们。

Purpose of this document.

This Candidate Privacy Notice explains how Hawksford looks after your personal data and your rights as a data subject.

Hawksford is committed to protecting the privacy and security of your personal information.

Hawksford is a "controller" in relation to personal data. This means that we are responsible for deciding how we hold and use personal information about you. This privacy notice is relevant to you if you are applying for work with us (whether as a potential employee, worker or contractor). Its purpose is to make you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for. It provides you with certain information that must be provided under data protection legislation including, where applicable, the General Data Protection Regulation (GDPR).

Data protection principles

We will comply with relevant or applicable data protection laws and principles, which means that your data will be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.

The kind of information we hold about you

In connection with your application for work with us, we will collect, store, and use the following categories of personal information about you:

• The information you have provided to us in your curriculum vitae and covering letter.
• The information you have provided on our application form, including given name, preferred name, title, residential address, telephone number, personal email address, date of birth, gender, employment history (including start and end dates with previous employers), qualifications, skills and experience.
• Any information you provide to us during an interview.
• CCTV footage collected at entry points of our offices.
• National Insurance number (UK), Social Security number (Jersey), Social Security Bureau (China) or equivalent.
• Information about your remuneration, including pension and benefits information.
• Information regarding your entitlement to work and residential status (Jersey only) and/or work permits as applicable to the jurisdiction.
• Any other information which you feel is relevant for which Hawksford needs to make reasonable adjustments as part of the recruitment process.

How is your personal information collected?

We collect personal information about candidates from the following sources:

• You, the candidate.
• From the recruitment agency, including credit reference and/or other background checks which may be completed as part of their screening process to fulfil our obligation under the law as part of the recruitment process.
• From publicly accessible sources, such as LinkedIn, etc., where we collect your full name, email, work history, and other data included on your profile.

How we will use information about you

We will use the personal information we collect about you to:

• Assess your skills, qualifications, and suitability for the role
• Communicate with you about the recruitment process.
• Keep records related to our hiring processes.
• Comply with legal or regulatory requirements.

Having received your CV and covering letter we will then process that information to decide whether you meet the requirements to be shortlisted for the chosen role. If you do, we will decide whether to invite you for an interview. If selected for an interview, we will use any disclosed information provided to Hawksford to understand and assess your suitability for the role against all other applicants. If we decide to offer you the role and you accept, we will then take up references and/or any other checks before confirming your appointment.

Legal basis for processing

We process your personal data based on one or more of the following legal grounds:

• Performance of a Contract or Pre-Contractual Steps: To evaluate your suitability for the role and enter into an employment contract if you are selected.
• Legal Obligation: To comply with legal requirements, such as verifying your eligibility to work.
• Legitimate Interests: To select suitable candidates for employment, including assessing your application and maintaining a fair recruitment process.
• Consent: If we ask for your consent for specific activities (e.g., processing sensitive data or conducting background checks), we will obtain your explicit consent. You have the right to withdraw your consent at any time.

How we use particularly sensitive personal data

We will use your sensitive personal data only in so far as we are permitted by law to do so:

• Any sensitive data disclosed prior to or during the interview process will be processed accordingly in order to make any reasonable adjustments required.
• We will use data about your nationality or ethnicity, to assess whether a work permit and a visa will be necessary for the role.

If you fail to provide personal information

If you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a CV outlining employment history and details of experience and you fail to provide us with relevant details, we will not be able to take your application further

Data sharing

Your information may be shared internally for the purposes of the recruitment process. This includes members of our People team, interviewers involved in the recruitment process and managers in the business area with the vacancy.

Hawksford will not share your data with third parties unless your application for employment is successful, and an offer of employment is made and formerly accepted at which point Hawksford will share your data with third parties as part of our on-boarding process.  We will only permit them to process your personal data for specified purposes in accordance with our instructions.

In sharing your personal data for the reasons set out within this Candidate Privacy Notice, we may need to transfer it to other entities, including other Hawksford companies, located in jurisdictions which are considered to provide an adequate level of protection for your personal data in accordance with GDPR.

If we transfer your personal data to entities, including Hawksford companies, in countries outside the European Union which do not have equivalent legislation to GDPR, we will ensure that your personal data will always be protected by appropriate safeguards to give you enforceable rights and legal remedies. You may ask us at any time what safeguards have been put in place to protect your personal data.

Data security

We have put in place appropriate physical, technical and organisational security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Data retention

How long will you use my information for?

If you accept an offer of employment by us, any relevant personal data collected during your pre-employment period will become part of your personnel records and will be retained in accordance with local data retention and destruction requirements.

If your application for employment is unsuccessful, Hawksford will hold your data on file for up to 6 months after the end of the relevant recruitment process (except in Europe where it will be held for 12 months). We retain your personal information for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. After this period, we will securely destroy your personal information in accordance with our data retention and destruction policy.

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

• Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party. 

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact either the Head of People in writing or the DPO via DPO@Hawksford.com.

No fee usually required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Right to withdraw consent

By applying for a role, you provided consent to us processing your personal information for the purposes of the recruitment exercise. You have the right to withdraw your consent for processing for that purpose at any time. To withdraw your consent, please contact DPO@Hawksford.com. Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to our retention policy, we will dispose of your personal data securely.

Automated decision-making

We do not use automated decision-making or profiling as part of our recruitment process.

Cookies 

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our websites may not be accessible or their functionality may be restricted. For more information about the cookies we use, please see our Cookies Policy. 

Data protection officer

We have appointed data protection officers across our jurisdictions to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact DPO@Hawksford.com. You have the right to make a complaint at any time to the applicable Information Commissioner‘s Office or equivalent regulatory body, as determined by your place of residence, with respect to data protection issues.

Changes to this Candidates Privacy Notice

We reserve the right to update this Candidates Privacy Notice from time to time to reflect any changes in the way that we process your personal data, and the current version will always be available on our website.

This Privacy Notice is dated 14/07/2025

恒可富候选人隐私政策

 

本文件的目的

本《候选人隐私政策》（“隐私政策”）阐述了恒可富如何保护您的个人数据和您作为数据主体的权利。

恒可富致力于保护您个人信息的隐私和安全。

恒可富是个人数据的“控制者”。这意味着对于决定如何持有和使用您的个人信息，我们负有责任。如果您正在申请与我们一起工作(无论是作为潜在雇员、工作人员、实习生或合同工)，那么本隐私政策与您息息相关。其目的是让您了解您的个人数据将如何及为何会被用于招聘活动的，以及这些数据通常会保存多久。本隐私政策向您提供了根据相关数据保护的法律法规（包括《通用数据保护条例》简称GDPR，在适用的情况下）必须提供的特定信息。

 

数据保护原则

我们将遵守相关或适用的数据保护法律和原则，这意味着您的数据将：

• 被合法、公平、透明地使用。
• 仅为了已向您明确告知的合理目的而被收集和使用，且不会用于其他用途。
• 仅用于我们告知您的相关目的。
• 准确并保持更新。
• 仅在我们向您告知的目的所需的时间内保存。
• 被安全地保存。

 

我们收集的您的信息类型

在您申请与我们一起工作时，我们将收集、保存和使用您的以下各类个人信息：

• 您在简历和求职信中提供给我们的信息。
• 您在申请表中提供的信息，包括姓名、惯用名、头衔、住址、电话号码、个人电子邮件地址、出生日期、性别、工作经历（包括与前雇主的工作起止日期）、资质、技能和经验。
• 您在面试过程中向我们提供的任何信息。
• 在我们办公室入口处收集的闭路电视录像。
• 国家保险号码（英国）、社会保险号码（泽西岛）、社保账号（中国）或同等信息。
• 您的薪酬信息，包括养老金和福利信息。
• 有关您的工作和居留身份（仅限泽西岛）和/或工作许可（适用于该司法管辖区）的信息。
• 您认为与恒可富在招聘过程中需要进行合理调整的任何其他相关信息。

 

如何收集您的个人信息？

我们通过以下途径收集候选人的个人信息：

• 作为候选人的您本人。
• 来自招聘机构，包括信用调查和/或其他背景调查，这些调查可能作为其筛选过程的一部分完成，以履行我们在招聘过程中的法律义务。
• 从领英等可公开访问的来源，我们会收集您的全名、电子邮件、工作经历以及您的个人资料中包含的其他数据。

 

我们将如何使用您的信息？

我们将把收集到的个人信息用于以下目的：

• 评估您的技能、资历和是否适合该职位；
• 与您沟通招聘流程；
• 保存与招聘流程相关的记录；
• 遵守法律法规要求。

在收到您的简历和求职信后，我们将对相关材料进行审核，以评估您是否符合所申请职位的筛选标准。若符合条件，我们将据此决定是否邀请您参加面试。如果进入面试环节，您提交的信息将用于评估您与其他候选人对该岗位的适配度。 在您确认接受我们发出的录用通知后，我们将在正式录用前开展推荐信核查及/或其他必要背景调查。

 

处理个人信息的法律依据

我们基于以下一个或多个法律依据处理您的个人数据：

• 合同履行或合同签订前的步骤：对您的岗位适配性进行评估，并在您被正式录用后与您签订劳动合同。
• 法律义务：遵守法律要求，例如核实您的工作资格。
• 合法权益：选择符合条件的候选人，包括对申请进行评估并确保招聘流程的公正性。
• 同意：如果我们需要就特定活动（如处理敏感数据或进行背景调查）征求您的同意，我们将在获得您的明确同意后进行上述活动。您有权随时撤销同意。
  
  

我们如何使用特别敏感的个人数据？

我们仅在法律允许的范围内使用您的敏感个人数据：

• 所有在面试前或过程中披露的敏感信息均将受到妥善处理，以确保能够根据需要实施合理的调整措施。
• 我们将使用有关您国籍或种族的数据，以评估该职位是否需要工作许可和签证。

 

如果您未能提供个人信息

如您未能按要求提供我们评估您的申请所需的相关信息（包括资格证明或工作经历），您的申请将无法获得成功处理。 例如，若我们要求您提交一份涵盖工作经历和相关经验的简历，但您未能按要求提供详细信息，我们将无法继续推进您的申请流程。

 

自动决策

我们不会对您的个人数据进行自动决策，包括个人档案分析。

 

数据共享

出于招聘流程的目的，您的信息可能会在内部共享。这包括我们的人事团队成员、参与招聘过程的面试官以及用人部门经理。

恒可富仅在您求职申请成功、收到录用通知并接受后，作为入职流程的一部分，与第三方共享您的数据。第三方根据恒可富的指示，仅为特定目的处理您的个人数据。

根据本《候选人隐私政策》的相关规定，在共享您的个人数据时，我们可能会将数据传输给其他实体，包括位于被认为能够依据GDPR为您的个人数据提供充分保护的司法管辖区的其他恒可富公司。

如需将您的个人数据传输至位于欧盟以外的国家的实体（包括恒可富公司），且该等国家的相关法律未达到 GDPR 等同水平，我们将采取适当的保障措施，确保您的个人数据获得持续有效的保护，并确保您享有可执行的权利及法律救济。您可随时向我们咨询已实施的数据保护措施。

 

数据安全

我们已采取适当的物理、技术和组织安全措施，以防止您的个人信息意外丢失、使用或以未经授权的方式访问、篡改或披露。此外，我们只允许有业务需要的员工、代理、承包商和其他第三方访问您的个人信息。他们只能按照我们的指示处理您的个人信息，并负有保密义务。

我们已制定了处理任何可疑数据安全漏洞的程序，并将在法律要求的情况下通知您和任何适用的监管机构。

 

数据保留

我们将会使用您的信息多久？

如果您接受了我们的聘用，在聘用前收集的任何相关个人数据都将成为您人事档案的一部分，并将根据当地的数据保留和销毁要求予以保留。

如果您的求职申请没有成功，恒可富将在相关招聘流程结束后保留您的数据6 个月（欧洲将保留 12 个月）。在此期间，我们会保留您的个人信息，以便在可能出现法律索赔时用于证明招聘过程未存在被禁止的歧视行为，并且招聘活动始终遵循公平和透明的原则。 在该期限届满之后，我们将根据我们的数据保留和销毁政策安全地销毁您的个人信息。

 

访问、更正、删除和限制的权利

您在个人信息方面的权利

在特定情况下，根据法律规定，您有权：

• 要求访问您的个人信息（通常称为 "数据主体访问请求"）。这使您能够获得我们所持有的您的个人信息的副本，并检查我们是否在合法处理这些信息。
• 要求更正我们所持有的关于您的个人信息。这使您能够更正我们所持有的关于您的不完整或不准确信息。
• 要求删除您的个人信息。如果我们没有正当理由继续处理您的个人信息，您可以要求我们删除或移除这些信息。在您行使了反对处理权的情况下，您也有权要求我们删除或移除您的个人信息（见下文）。
• 反对处理您的个人信息。当我们以合法利益（或第三方的合法利益）为依据处理您的个人信息，而您的特殊情况使您希望以此为由反对处理您的个人信息时，您有权提出反对。当我们出于直接营销目的处理您的个人信息时，您也有权提出异议。
• 要求限制处理您的个人信息。这使您能够要求我们暂停处理您的个人信息，例如，如果您希望我们确定信息的准确性或处理信息的原因。
• 要求将您的个人信息转移给另一方。

如需访问、核实、更正或请求删除个人信息，反对个人数据处理，或要求将个人信息副本转移至其他方，请以书面形式联系公司人事主管，或通过 dpoprc@hawksford.com 与数据保护官进行沟通。

 

通常无需付费

您可以免费访问您的个人信息或行使相关权利。但如果您的请求无理、重复或过多，我们可能会收取合理费用，甚至拒绝您的请求。

 

我们可能需要您提供的信息

我们可能需要您提供特定信息，以帮助我们确认您的身份，确保您有权访问您的个人数据（或行使您的任何其他权利）。这是一项安全措施，以确保个人数据不会泄露给无权接收的任何人。我们还可能与您联系，要求您提供与您的请求有关的进一步信息，以加快我们的回复速度。

 

撤销同意的权利

在申请职位时，即表示您同意我们为招聘目的而处理您的个人信息。您有权随时撤销基于该目的来处理您个人信息的同意。如需撤销同意，请联系 dpoprc@hawksford.com 。一旦我们收到您撤销同意的通知，我们将不再处理您的申请，并根据我们的保留政策，安全地处理您的个人数据。

 

自动决策

在招聘过程中，我们不会使用自动决策或特征分析。

 

Cookies

您可以将浏览器设置为拒绝所有或部分浏览器 Cookie，或者在网站设置或访问 Cookie 时提醒您。如果您禁用或拒绝 Cookie，请注意我们网站的某些部分可能无法访问，或其功能可能受到限制。有关我们使用的 Cookies 的更多信息，请参阅我们的 Cookies 政策。

 

数据保护官

我们已在各司法管辖区任命了数据保护官，以监督本隐私政策的遵守情况。如果您对本隐私政策或我们如何处理您的个人信息有任何疑问，请联系 dpoprc@hawksford.com 。您有权随时就数据保护问题向您居住地的监管机构投诉。

 

本《候选人隐私政策》的变更

我们保留随时更新本《候选人隐私政策》的权利，以反映我们在处理您的个人数据方式上的任何变化。

 

本隐私政策更新日期为 2025 年 7 月 14 日。

 

This notice is provided in connection with your investment in, or other relationship with, an entity continuing as an entity incorporated under the laws of Jersey (the "Managed Entity"). The Managed Entity is required to comply with the provisions of the Data  Protection  (Jersey) Law 2018 (as amended) and, in respect of any EU data subjects, the EU General Data Protection Regulation (together, the "Data Protection Legislation").

The purpose of this document is to provide you with information on the Managed Entity's use of your personal data in accordance with the Data Protection Legislation.

If you are an individual, this will affect you directly. If you are an institution that provides the Managed Entity with personal data on individuals connected to you for any reason in relation to your investment or other relationship with the Managed Entity, this will be relevant for those individuals and you should transmit this document to such individuals or otherwise advise them of its content. 
 
Your personal data will be processed by the Managed Entity, and by persons engaged by the Managed Entity. Under the Data Protection Legislation, you have rights, and the Managed Entity has obligations, with respect to  your  personal  data. The purpose of this notice is to explain how and why the Managed Entity, and persons engaged by the Managed Entity, will use, store, share and otherwise process your personal data. This notice also sets out your rights under the Data Protection Legislation, and how you may exercise them.

 

Your personal data

By virtue of making an investment in the Managed Entity (including the initial application and ongoing interactions with the Managed Entity and persons engaged by the Managed Entity) or by virtue of you otherwise providing the Managed Entity with personal information on you or individuals connected with you (for example directors, trustees, employees, representatives, shareholders, investors, clients, beneficial owners or agents), you will provide the Managed Entity with certain personal information which constitutes personal data within the meaning of the Data Protection Legislation.

In particular, you will provide the Managed Entity with personal information within the forms and any associated documentation that you may complete if subscribing for any shares or securities of the Managed Entity; when you provide personal information to the Managed Entity or its service providers in correspondence and conversations (including by email); when you enter into or conduct transactions with respect to the Managed Entity; and when you provide remittance instructions.

The Managed Entity may also obtain personal data on you from other public accessible directories and sources. These may include websites; bankruptcy registers; tax authorities; governmental agencies and departments and regulatory authorities to whom the Managed Entity has regulatory obligations; credit reference agencies; sanctions screening databases; and fraud prevention and detection agencies and organisations, including law enforcement.

This includes information relating to you and/or any individuals connected with you such as: name, residential address, email address, contact details, corporate contact information, signature, nationality, place of birth, date of birth, tax identification, credit history, correspondence records, passport number, bank account details, source of funds details and details relating to your investment activity (if any).

 

How the Managed Entity may use your personal data

The Managed Entity, as the data controller, may collect, store and use your personal data for purposes including the following:

- As necessary for the performance of a contract, including:

• administering or managing the Managed Entity;
• processing any subscription or investment by you in the Managed Entity, such as entering your information in the register of shareholders or noteholders;
• sending you statements relating to your investment;
• facilitating the continuation or termination of the contractual relationship between you and the Managed Entity; and
• facilitating the transfer of funds, and administering and facilitating any other transaction, between you and the Managed Entity or its affiliates.

- As necessary for compliance with applicable legal or regulatory obligations, including:

• undertaking due diligence including anti-money laundering and counter-terrorist financing checks, including verifying the identity and addresses of the Managed Entity's investors (and, where applicable, their beneficial owners);
• sanctions screening and complying with applicable sanctions and embargo legislation;
• complying with requests from regulatory, governmental, tax and law enforcement authorities;
• surveillance and investigation activities;
• carrying out audit checks, and instructing the Managed Entity's auditors;
• maintaining statutory registers; and preventing and detecting fraud;

- In pursuit of the Managed Entity's legitimate interests, or those of a third party to whom your personal data is disclosed, including:

• complying with a legal, tax, accounting or regulatory obligation to which we or the third party are subject;
• assessing and processing requests you make;
• sending updates, information and notices or otherwise corresponding with you in connection with any investment in, or other relationship with, the Managed Entity;
• investigating any complaints, or pursuing or defending any claims, proceedings or disputes;
• providing you with, and informing you about, investment products and services;
• managing the Managed Entity's risk and operations;
• complying with audit requirements;
• ensuring internal compliance with the Managed Entity's policies and procedures;
• protecting the Managed Entity against fraud, breach of confidence or theft of proprietary materials;
• seeking professional advice, including legal advice;
• facilitating business asset transactions involving the Managed Entity or related entities;
• monitoring communications to/from the Managed Entity (where permitted by law); and
• protecting the security and integrity of the Managed Entity's IT systems.

The Managed Entity will only process your personal data in pursuit of its legitimate interests where the Managed Entity has considered that the processing is necessary and, on balance, its legitimate interests are not overridden by your legitimate interests, rights or freedoms.

The Managed Entity continues to be a data controller even though it may have engaged an administrator (the "Administrator") and/or other third parties to perform certain activities on the Managed Entity's behalf.

 

Sharing your personal data

The Managed Entity may share your personal data with its affiliates and delegates. In certain circumstances the Managed Entity may be legally obliged to share your personal data and other financial information with respect to your interest in the Managed Entity with relevant regulatory authorities such as the Jersey Financial Services Commission or Revenue Jersey. They, in turn, may exchange this information with foreign authorities, including tax authorities and other applicable regulatory authorities.

The Managed Entity’s affiliates and delegates may process your personal data on the Managed Entity's behalf, including with the Managed Entity's banks, accountants, auditors and lawyers which may be data controllers in their own right. Additionally, a service provider may use your personal data where this is necessary for compliance with a legal obligation to which it is directly subject (for example, to comply with applicable law in the area of anti- money laundering and counter terrorist financing or where mandated by a court order or regulatory sanction). The service provider, in respect of this specific use of personal data, acts as a data controller.

In exceptional circumstances, the Managed Entity will share your personal data with regulatory, prosecutory and other governmental agencies or departments, and parties to litigation (whether pending or threatened) in any country or territory.

 

Sending your personal data internationally

Due to the international nature of the Managed Entity's business, your personal data may be transferred to jurisdictions that do not offer equivalent protection of personal data as under the Data Protection Legislation. In such cases, the Managed Entity will process personal data or procure that it be processed in accordance with the requirements of the Data Protection Legislation, which may include having appropriate contractual undertakings in legal agreements with service providers who process personal data on behalf of the Managed Entity.

Retention and deletion of your personal data

The Managed Entity will keep your personal data for as long as it is required, for example, in pursuit of its legitimate business purposes, to perform its contractual obligations, or where law or regulation obliges it to. The Managed Entity will generally retain your personal data throughout the lifecycle of the transaction you are involved in with the Managed Entity. Some personal data will be retained after your relationship with the Managed Entity ends. The Managed Entity expects to delete your personal data (at the latest) once there is no longer any legal or regulatory requirement or legitimate business purpose for retaining your personal data.

 

Automated decision-making

The Managed Entity will not take decisions producing legal effects concerning you, or otherwise significantly affecting you, based solely on automated processing of your personal data, unless it has considered the proposed processing in a particular case and concluded in writing that it meets the applicable requirements under the Data Protection Legislation.

 

Your rights

You have certain data protection rights, including the right to:

• be informed about the purposes for which your personal data are processed;
• access your personal data;
• stop direct marketing;
• restrict the processing of your personal data;
• have incomplete or inaccurate personal data corrected;
• ask the Managed Entity to stop processing your personal data;
• be informed of a personal data breach (unless the breach is unlikely to be prejudicial to you);
• complain to the Jersey Office of Information Commissioner (https://oicjersey.org); and
• require the Managed Entity to delete your personal data in some limited circumstances. 

 

Contact

The Managed Entity is committed to processing your personal data lawfully and to respecting your data protection rights. If you have any questions about this notice or the personal data the Managed Entity holds about you, please contact dpo@hawksford.com marking your communication "Data Protection Enquiry".