澳 門 特 別 行 政 區 政 府 Governo da Região Administrativa Especial de Macau 個 人 資 料 保 護 辦 公 室 Gabinete para a Protecção de Dados Pessoais Authorization No. 03/2007 Exemption from the Obligation of Notification Data Processing Relating to Non-Profit Legal Person’s Collection of Membership Fees or Contact with Members This authorization is promulgated in accordance with Numbers 2 and 3, Article 21, Act 8/2005. The controllers concerned can carry out personal data processing within the scope of this authorization, with exemption from the obligation of notification as stated in No. 1, Article 21 of the above Act. Article 1 Purposes of the Processing This authorization of exemption applies to the automated processing of personal data by non-profit legal person, including associations and foundations, and associations and special committees without legal personality as defined by Articles 186-191 of the Civil Code, for the purposes of collection of membership fees and contact with members within the scope of activities as stated by their respective charters. Article 2 Categories of Personal Data The personal data processed for the purposes stated above is confined to the following categories: 1. Identification information: Name, age or date of birth, place of birth, sex, language used, type of identification document, identification document number, contribution number, membership number, address, telephone number, fax number, email address, occupation, education and photograph; 2. If the data subject is a minor or an interdicted person, the identification data above should include the names and contact information of the people exercising parental rights or the guardian’s name and contact information. 澳 門 特 別 行 政 區 政 府 Governo da Região Administrativa Especial de Macau 個 人 資 料 保 護 辦 公 室 Gabinete para a Protecção de Dados Pessoais 3. Family information: Marital status, name of spouse, name of the person supported by him/her and contact information, name of the minor in his/her custody; 4. Other information: amount of the membership fee, bank information, types of membership and position. Article 3 Duration for Data Preservation 1. The maximum duration for keeping the above data is three years after the termination of membership status. 2. It may be extended, as necessitated by judicial proceedings, for six months after the data is handed over to the judiciary or after the final verdict. Article 4 Data Recipients Data recipients include: 1. Entities to be informed in accordance with legal provisions or relevant charters; 2. Banks through which membership fees are paid; 3. Insurance companies with which insurance contracts are established. Chan Hoi Fan, Coordinator of the Office for Personal Data Protection 30 November 2007