Privacy Policy

Effective date: 26 May 2026
Data controller: Hong Kong AI International Film Festival Association

1. Overview

This Policy explains how we collect, use, store, and protect personal data when you use HKAIIFF · HACK. We follow applicable Hong Kong privacy principles and process data on a need-to-know basis.

2. Data we collect

We do not sell your personal data.

3. Purposes

• Contract performance (registration and event services)
• Legitimate interests (security, abuse prevention, quality)
• Legal obligations (lawful requests from authorities)

4. Third-party processing

Data may be processed by contracted providers in categories such as cloud storage and databases, video hosting and delivery, email notifications, website hosting, and necessary operational monitoring. All processors are bound by confidentiality and data protection obligations.

4.3 Cross-Border Data Transfer

To provide stable global services, your data may be processed by trusted cloud service providers located outside Hong Kong, primarily in the United States and European Union jurisdictions. We select service partners that meet industry standards and provide sufficient data protection commitments, and sign confidentiality agreements as required by Hong Kong PDPO.

By using the Platform, you consent to such cross-border data processing. If you do not consent, please discontinue use of the Platform.

5. Retention

• Accounts and registrations: up to 7 years after the event cycle unless law requires longer.
• Interview transcripts: same period for audit trails.
• Technical logs: typically rotated within 90 days.

6. Your rights

You may request access, correction, or deletion where permitted by law. Email hack@hkaiiff.org — we respond within 30 days.

7. Cross-border transfers

See §4.3 above. We use contractual and technical safeguards.

8. Cookies

Essential cookies maintain sessions; local storage may remember language preference on legal pages.

8.2 Analytics

We may use anonymized analytics tools to understand general platform usage (not to identify individuals). You may manage cookies in your browser or enable “Do Not Track”.

9. Security measures

9.1 Technical safeguards

• Passwords stored using industry-standard encryption
• HTTPS encryption in transit
• Access controls and audit logs to detect unusual activity

10. Minors

Users under 18 require guardian consent. We do not knowingly market to children.

11. Updates

Material changes will be announced on the Platform. Continued use constitutes acceptance.

12. Contact

Privacy enquiries: hack@hkaiiff.org