Privacy Addendum for mainland China


Privacy Addendum for mainland China
(this "Privacy Addendum")
 

This Privacy Addendum only applies to you if you are located in mainland China.
 
AIA Vitality is a health and wellness program operated by AIA Group Limited, AIA Company Limited and AIA Vitality (Hong Kong) Limited (together known as "AIA Vitality Operator"), and is administered, managed and distributed in Hong Kong by AIA International Limited (acting through its Hong Kong branch) (collectively referred to as "we", "us" or "our"). We receive ongoing support from Discovery Limited (a company based in South Africa) and/or its affiliates (collectively referred to as "DSY"), the global operators of the AIA Vitality program.
 
We are the controller and processor of your personal data and you may reach us via aiahk.compliance@aia.com. This Privacy Addendum forms part and parcel of the AIA Vitality Personal Information Collection Statement and is specific to individual customers (including individual directors and employees of a corporate customer) who are located in mainland China and receiving our products and/or services from Hong Kong. As required by the laws of mainland China, we may need to seek your consent on how we use your personal data and, in relation to certain personal data which is considered sensitive based on the laws in mainland China, we may need your separate consent. Your personal data will be collected, accessed, processed, used, stored, and/or transferred outside of, mainland China. If you do not consent to this Privacy Addendum, we may not be able to provide you with the AIA Vitality-related product(s) you are purchasing from us and offer you with the AIA Vitality-related services associated with the product(s) and this would also include our inability to provide AIA Vitality-related products or services to a corporate customer which is your employer if you (as an employee) do not consent to this Privacy Addendum.
 
Under the applicable data protection laws in mainland China, we will process your personal data based on your consent, unless your personal data are:
 
  • necessary to conclude or perform a contract in which you are a party;
  • necessary for us to comply with legal obligations;
  • necessary to respond to public health emergencies;
  • necessary to protect individuals' life, health, and property safety;
  • reasonably processed in news reporting and public opinion oversight for public interests; and
  • publicly available, because of your voluntary disclosure or a legal requirement, and reasonably processed.
Certain personal data that we collect about you is sensitive personal data as defined in the applicable data protection laws in mainland China ("Sensitive Personal Data"), which is personal data that may materially impact your rights and interests, if breached or unlawfully used, including but not limited to financial accounts, identification number, health-related information, or any personal data of minors under the age of fourteen. We collect the Sensitive Personal Data only for specific purposes, such as assessing your application for a membership for AIA Vitality and our provision of the AIA Vitality-related products and services, and facilitating payment for products and/or services provided through AIA Vitality.
 
We will retain your personal data for the period necessary to fulfill the purposes outlined in the AIA Vitality  Personal Information Collection Statement and this Privacy Addendum. The criteria used to determine our retention periods may include one or more of the following: as long as we have an ongoing relationship with you; as required by a legal obligation to which we are subject; and as advisable in light of our legal position (such as in regard of the applicable statute of limitation, litigation, audits or regulatory investigation).
 
We may also provide your personal data to DSY, AIA Group Limited and any company that is under its direct or indirect control, any person authorized to act as an agent of the AIA Vitality Operator, the AIA Vitality Partners and their agents, agents, contractors, third party service providers, other companies who assist with statistical or actuarial research relating to AIA Vitality, regulators, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations, actual or proposed assignee, transferee, participant or sub-participant of our rights or business, and external service providers  (each, a "recipient", collectively, "recipients") for the provision of AIA Vitality-related products and services to you. Further, we may provide your personal data with certain recipients that can independently determine the purposes and means with respect to processing activities of your personal data.  A list of such personal data recipients is available at this table.
 
The recipient(s) of your personal data may collect and process your personal data and return to us for the purpose of the provision of AIA Vitality-related products and services to you. The types of personal data that we provide to the recipients include without limitation personally-identifiable information and your financial information. We may deliver your personal data through electronic means or other mode of dispatch to the recipients. In compliance with the applicable rules and regulations of mainland China, we implement maximum security in controlling, processing and transferring of your personal data and Sensitive Personal Data. We also adopt our own security policies to safeguard your personal data and Sensitive Personal Data.

While we carry out our business, we may use artificial intelligence ("AI") to process your personal data to fulfil the purposes of collecting your personal data.  AI is a technology to simulate the human thought process to perceive, understand, reason and solve problems to augment, improve, or replace human decisions. Common examples for using AI include:- 

  • Customer interaction – natural language processing that converts voice to text and conducts appropriate interaction with customers; 
  • Digital onboarding and servicing processes – application and servicing processes using optical character recognition tool that recognizes text within digital images and validates the accuracy of form contents filled out against the supporting documents; and 
  • Product and portfolio recommendation – AI is used to conduct big data analysis based on our customer database and enables us to understand the needs of our customers. 
In addition to the access and correction rights set forth in the AIA Vitality Personal Information Collection Statement, you have the right to obtain a copy of your personal data held by us and the right to request us to delete such personal data under any of the following circumstances:
 
  • where the purposes of processing your personal data have been achieved or have failed to be achieved, or the personal data is no longer necessary for achieving the purposes;
  • where we have ceased to provide the products or services, or the retention period has expired;
  • where you have withdrawn your consent; and
  • where we have violated the applicable data protection laws and regulations.
To the extent inconsistent with the provisions of this Privacy Addendum, including but not limited to definitions (e.g., sensitive personal information), China's Cybersecurity Law, Personal Information Protection Law, Data Security Law, their implementing measures and other Chinese laws and regulations in relation to cybersecurity and data protection will prevail.
 
We have the right to update this Privacy Addendum from time to time and we will notify you of our updates to this Privacy Addendum by posting it on our website or apps (as the case may be). You may withdraw your consent to our use of your personal data by contacting us through the contact details set out in the AIA Vitality Personal Information Collection Statement. If you withdraw your consent to our processing of your personal data, we may not be able to provide the relevant products and/or services to you.
Last updated: Oct 2024


Privacy Addendum for mainland China
(this "Privacy Addendum")
 

This Privacy Addendum only applies to you if you are located in mainland China.
 
AIA Vitality is a health and wellness program operated by AIA Group Limited, AIA Company Limited and AIA Vitality (Hong Kong) Limited (together known as "AIA Vitality Operator"), and is administered, managed and distributed in Macau by AIA International Limited (acting through its Macau branch) (collectively referred to as "we", "us" or "our"). We receive ongoing support from Discovery Limited (a company based in South Africa) and/or its affiliates (collectively referred to as "DSY"), the global operators of the AIA Vitality program.
 
We are the controller and processor of your personal data and you may reach us at 1903, AIA Tower, Nos. 251 A-301, Avenida Comercial de Macau, Macau. This Privacy Addendum forms part and parcel of the AIA Vitality Personal Information Collection Statement and is specific to individual customers (including individual directors and employees of a corporate customer) who are located in mainland China and receiving our products and/or services from Macau. As required by the laws of mainland China, we may need to seek your consent on how we use your personal data and, in relation to certain personal data which is considered sensitive based on the laws in mainland China, we may need your separate consent. Your personal data will be collected, accessed, processed, used, stored, and/or transferred outside of, mainland China. If you do not consent to this Privacy Addendum, we may not be able to provide you with the AIA Vitality-related product(s) you are purchasing from us and offer you with the AIA Vitality-related services associated with the AIA Vitality-related product(s) and this would also include our inability to provide products or services to a corporate customer which is your employer if you (as an employee) do not consent to this Privacy Addendum.
 
Under the applicable data protection laws in mainland China, we will process your personal data based on your consent, unless your personal data are:
 
  • necessary to conclude or perform a contract in which you are a party;
  • necessary for us to comply with legal obligations;
  • necessary to respond to public health emergencies;
  • necessary to protect individuals' life, health, and property safety;
  • reasonably processed in news reporting and public opinion oversight for public interests; and
  • publicly available, because of your voluntary disclosure or a legal requirement, and reasonably processed.
Certain personal data that we collect about you is sensitive personal data as defined in the applicable data protection laws in mainland China ("Sensitive Personal Data"), which is personal data that may materially impact your rights and interests, if breached or unlawfully used, including but not limited to financial accounts, identification number, health-related information, or any personal data of minors under the age of fourteen. We collect the Sensitive Personal Data only for specific purposes, such as assessing your application for a membership for AIA Vitality and our provision of the AIA Vitality-related products and services, and facilitating payment for products and/or services provided through AIA Vitality.
 
We will retain your personal data for the period necessary to fulfill the purposes outlined in the AIA Vitality Personal Information Collection Statement and this Privacy Addendum. The criteria used to determine our retention periods may include one or more of the following: as long as we have an ongoing relationship with you; as required by a legal obligation to which we are subject; and as advisable in light of our legal position (such as in regard of the applicable statute of limitation, litigation, audits or regulatory investigation).
 
We may also provide your personal data to DSY, AIA Group Limited and any company that is under its direct or indirect control, any person authorized to act as an agent of the AIA Vitality Operator, the AIA Vitality Partners and their agents, agents, contractors, third party service providers, other companies who assist with statistical or actuarial research relating to AIA Vitality, regulators, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations, actual or proposed assignee, transferee, participant or sub-participant of our rights or business, and external service providers(each, a "recipient", collectively, "recipients") for the provision of AIA Vitality-related products and services to you. Further, we may provide your personal data with certain recipients that can independently determine the purposes and means with respect to processing activities of your personal data.  A list of such personal data recipients is available at this table.
 
The recipient(s) of your personal data may collect and process your personal data and return to us for the purpose of the provision of AIA Vitality-related products and services. The types of personal data that we provide to the recipients include without limitation personally-identifiable information and your financial information. We may deliver your personal data through electronic means or other mode of dispatch to the recipients. In compliance with the applicable rules and regulations of mainland China, we implement maximum security in controlling, processing and transferring of your personal data and Sensitive Personal Data. We also adopt our own security policies to safeguard your personal data and Sensitive Personal Data.
 
While we carry out our business, we may use artificial intelligence ("AI") to process your personal data to fulfil the purposes of collecting your personal data.  AI is a technology to simulate the human thought process to perceive, understand, reason and solve problems to augment, improve, or replace human decisions. Common examples for using AI include:- 

  • Customer interaction – natural language processing that converts voice to text and conducts appropriate interaction with customers; 
  • Digital onboarding and servicing processes – application and servicing processes using optical character recognition tool that recognizes text within digital images and validates the accuracy of form contents filled out against the supporting documents; and 
  • Product and portfolio recommendation – AI is used to conduct big data analysis based on our customer database and enables us to understand the needs of our customers. 
In addition to the access and correction rights set forth in the AIA Vitality Personal Information Collection Statement, you have the right to obtain a copy of your personal data held by us and the right to request us to delete such personal data under any of the following circumstances:
 
  • where the purposes of processing your personal data have been achieved or have failed to be achieved, or the personal data is no longer necessary for achieving the purposes;
  • where we have ceased to provide the products or services, or the retention period has expired;
  • where you have withdrawn your consent; and
  • where we have violated the applicable data protection laws and regulations.
To the extent inconsistent with the provisions of this Privacy Addendum, including but not limited to definitions (e.g., sensitive personal information), China's Cybersecurity Law, Personal Information Protection Law, Data Security Law, their implementing measures and other Chinese laws and regulations in relation to cybersecurity and data protection will prevail.
 
We have the right to update this Privacy Addendum from time to time and we will notify you of our updates to this Privacy Addendum by posting it on our website or apps (as the case may be). You may withdraw your consent to our use of your personal data by contacting us through the contact details set out in the AIA Vitality Personal Information Collection Statement. If you withdraw your consent to our processing of your personal data, we may not be able to provide the relevant products and/or services to you.
Last updated: Oct 2024