The HKIA Community Lodge (“Airport Lodge”), operated by HKIA Accommodation Limited (“we”, “our” or “us”), attaches great importance in protecting your personal data and is committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) of the laws of the Hong Kong Special Administrative Region (the “PDPO”) and observing the relevant codes of practice which may be issued by the Privacy Commissioner for Personal Data from time to time. We respect your legal rights of privacy and are committed to comply with the PDPO.
We value your continued trust in us and we are dedicated in observing and complying with the core principles and fundamental values of transparency, security and integrity when dealing with your personal data. We pledge to uphold the Data Protection Principles as set out in the PDPO when collecting and using your personal data in the following manner:
Purpose and Manner of Collection:
We will only collect personal data through lawful and fair means for a lawful purpose directly related to a function or activity of the Airport Lodge and will only collect data that is necessary and adequate but not excessive for such purpose.
Accuracy and Duration of Retention:
We will take all practicable steps to ensure your personal data is accurate and is not kept longer than is necessary for the fulfilment of the purpose for which the data is used.
Use of Data:
We will not use your personal data for any new purpose which is not or is unrelated to the original purpose when we collect your personal data, unless we have obtained your express consent.
Data Security:
We will take all practicable steps to protect your personal data which we hold against unauthorised or accidental access, processing, erasure, loss or use.
Openness and Transparency:
We will take all practicable steps to ensure openness of our personal data policies and practices, the kind of personal data held by us and the main purposes for holding it.
Access and Correction:
We respect your right to request access to and correction of your own personal data held by us, and we will comply with such requests to the extent that we are able to.
This Privacy Policy sets out details on our data protection policies and practices, including how we collect and use your personal data and what your rights are for different types of services we provide to you.
(A) Meaning of personal data
Throughout this Privacy Policy, the term “personal data” means any data relating directly or indirectly to you, from which it is practicable for your identity to be directly or indirectly ascertained, and in a form in which access to or processing of the data is practicable.
(B) Purpose of Collection and Use
As a provider of lodging within the vicinity of HKIA, we use your personal data to provide you with us and related-facilities, amenities, services and deliverables and perform our other activities related to our operations.
We collect personal data (title, name, email address, photo, postal address, telephone number, employment details, and identification documents) from you when you contact us for enquiries, submit an accommodation application, subscribe to our updates, or provide feedback. The personal data collected will be used by us for processing your application, managing your stay, handling such enquiry, subscription, or feedback, contacting you when we reply and other purposes directly related to the foregoing.
We also collect personal data when you request for facility usage, or participate in the our activities via our official website. Such personal data will be used for providing you with the required facility, facilitating such participation, handling your requests for related services and achieve other purposes directly related to the foregoing.
If other occasions or needs arise where we collect personal data, we will inform you of the purposes for which they are collected at the time or prior to your submission of such personal data, and such personal data will only be used for those purposes.
Should you join any Airport Lodge events or activities, you may be photographed by our staff or authorised personnel and the resulting photographs may be published on our online or other materials for promotional purposes. Participation constitutes unconditional agreement to be photographed during the activities.
It is voluntary for you to use our services and/or request for our assistance, and provide the personal data as described above.
If you opt-out of using our services, requesting for our assistance and/or providing the requested personal data, this means that we may not be able to provide you with the accommodation, related services, or other services, responses and/or assistance, and your personal data will not be collected or retained by us.
We may use your personal data for direct marketing purposes, but we will not do so unless we have separately obtained your express consent. With your consent, we may use your email and/or phone number for carrying out direct marketing activities including but not limited to providing you with targeted advertisements, content, deals and offers.
You may withdraw your consent to receive direct marketing materials from us through the customer services hotline or online enquiry form in the “Contact Us” section of our website or such other channels as we may announce from time to time at no cost to you.
(C) Confidentiality and Disclosure
Your personal data will be kept confidential and will not be disclosed to any third party except as set out in this Privacy Policy or such disclosure as permitted or required under the applicable laws or as allowed under the PDPO.
We may engage third party service providers (who may be located outside Hong Kong) who are acting for, on behalf of or jointly with us, to achieve the above purposes, and in this connection we will provide your personal data to such service providers provided that they shall use and handle your personal data in accordance with this Privacy Policy.
In general, we may transfer your personal data with the following classes of transferees:
Any person or company (including third party agent or sub-contractor) or the Airport Authority who is acting for, on behalf of or jointly with us, or any of our service providers including accommodation service providers, administration service providers, third party IT hosting providers, system maintenance providers, email service providers, SMS service providers etc.; in all such cases, disclosure may take place to fulfil any of the purposes, provided that such third parties to whom your personal data is communicated are subject to confidentiality and privacy obligations that are materially equivalent to those set out in this Privacy Policy;
Any financial institutions, charge or credit card issuing companies, credit information or reference bureaus, payment gateway service providers or collection agencies where necessary to establish and support the payment of any products and services being requested by you; and
Any other third party where such disclosure is mandated by statutory or contractual obligations or as required by law or court of law, or where such disclosure is necessary to protect our interests (as permitted by law).
(D) Data Security and Retention
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We strive to protect personal data against unauthorised access or processing. Our web servers are hardened, protected by “firewalls”, and monitored by Intrusion Detection Systems in order to prevent unauthorised access. The security of your personal data also depends on your protection of your login password. Please do not disclose your password to anyone.
We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will not retain your personal data, including any tokenised personal data, for a period longer than it is necessary for us to achieve the purposes set out or referenced in this Privacy Policy, including to prepare statistics and conduct analytics and research for the continuous improvement of our operation of as well as our facilities and services. Due to the different purposes for which we collect and use the personal data, we may apply different retention periods for the personal data we hold. All personal data you provide us in your application for accommodation or residency that directly identifies shall be retained specifically for two (2) years after the end of each stay with us.
Notwithstanding the aforesaid, if any personal data is required as specified under applicable laws or in connection with any legal proceedings to be kept for a period of time which may be longer than is expressly provided in this Privacy Policy, the same will be retained but we will take all practical steps to ensure that such data will not be kept longer than is necessary for the fulfilment of such purposes.
(E) Third Party Personal Data you provide to us
When you provide personal data of a third party to us, you agree that you have secured the relevant third party’s consent to provide us with their personal data (to be collected, used and stored in accordance with this Privacy Policy) prior to such provision by you.
(F) Personal Data collected by third parties
Where applicable, we may feature embedded links, “share” buttons or widgets on our websites or app(s) which enable you to connect to third party sites, including social media sites. These third-party sites may set cookies which can identify you as an individual when you are logged in to their services. We do not control these cookies or how these sites collect and handle your personal data.
(G) Links to Other Websites
This Privacy Policy applies only to Airport Lodge services including the Airport Lodge website.
When using our website, if you click on a hyperlink on to another website including that of our operator of HKIA Community Lodge or any other third parties, you will leave our site. We are not responsible for the privacy practices of other sites. Please refer to their privacy policies.
If the services you use require payment of money, you will be redirected to a secure third-party website belonging to our payment gateway service provider to complete payment of any purchase. Payment-related personal data (including but not limited to the cardholder’s full name, card number prefix, cardholder’s billing address, card verification value (CVV) and card expiry date) will be collected by the payment gateway service provider for processing your order’s payment as well as other incidental purposes. We will not be able to provide Airport Lodge services to you if you do not provide the data.
When you visit HKIA Community Lodge or our other venue or accommodation, certain third parties there which are unrelated to us may also collect and use your personal data when you use their services or where they are authorised by law to do so. This includes (but is not limited to) catering and any other third-party service providers, their personnel and authorized persons within the HKIA Community Lodge or our other venue or accommodation. The collection and use of your personal data by such third parties are subject to the privacy policies and terms and conditions of such third parties. We do not control such collection and use of your personal data by such third parties and we will not be responsible for the same.
(H) Your Access Rights
You have the right to access, verify or update your personal data held by us. A data access request form can be downloaded from the Office of the Privacy Commissioner for Personal Data, Hong Kong website. You may also request correction of inaccurate data. We will handle your request as soon as possible. Under the PDPO, we have the right to charge a reasonable fee for complying with a data access request.
The above requests can be addressed to the General Personal Data Officer (see the “Contact Us” section below).
(I) Use of Cookies by Us
Enquiries, feedback, service requests, or other information submitted via our website will be retained in a database for statistical purposes. Cookies will be stored on your device to collect non-personal information, including:
Browser language
New/Returning user
Network service provider
User location
Time of access
Time on page
Pages visited
Click-through data
Device type
Browser type
You have a choice not to accept the cookies or deny access to functions through your device, but if you do so, certain functionality may not be available. Most browsers are initially set up to accept cookies. You can also set up your browser to refuse cookies if you wish.
(J) Language
Where terms of this Privacy Policy are available in other languages, the English version shall be the governing version and shall prevail whenever there is a discrepancy amongst versions.
(K) Contact Us
We are committed to protecting privacy in respect of any personal data you provide. If you have any questions about this Privacy Policy or our practices, (including in relation to any of your rights under this Privacy Policy or any other questions you may have), please contact our General Personal Data Officer via the below address:
General Personal Data Officer
HKIA Accommodation Limited
HKIA Tower
1 Sky Plaza Road
Hong Kong International Airport
Lantau Island
Hong Kong
(L) Minors
We do not use our website(s) or app(s) or service(s) to knowingly solicit any personal data or other information from any persons under the age of 18. If you are under 18, by providing us with your personal data, you agree that you have informed your parents and guardians about the Privacy Policy prior to such provision, and they have approved of such provision by you based on the terms of the Privacy Policy.
(M) Changes
We regularly review this Privacy Policy, and the most up-to-date version of this Privacy Policy will be shown on this page.
