CSI Ltd.
General Data Protection Regulation (GDPR) Compliance Statement and Privacy Policy

Effective Date: November 22, 2019

CSI Ltd. and its subsidiaries and affiliates (collectively, “CSI Ltd.”) are committed to protecting the privacy of our employees, customers, and others interested in our business.

CSI Ltd. and the websites of our subsidiaries and affiliates are owned and operated by Consulting Services Limited. We provide this GDPR Compliance Statement and Privacy Policy in order to describe and explain to users our information collection practice and our commitment to data security.

Contact Information
If you have any questions or concerns in connection with CSI's information collection practice summarized in this Statement, please send an email, with the subject heading "Privacy Statement Question," to In the email, please state your questions or concerns. Our postal address is:

CSI Ltd.
43/F AIA Building
183 Electric Road
North Point
Hong Kong

The Types of Personal Data That We Collect
CSI collects personal data from global users, including in the US and the European Economic Area (“EEA”), who visit our public-facing web site and individual representatives of our corporate customers, suppliers and business partners ("Business Contacts"). This information may include:
• Name
• Phone number
• E-mail address
• IP address

Our activities or services that require the gathering of personal information generally seek full name, physical and/or email addresses, and phone number. Depending on the activity or service a user desires, we also may request personal information. For example, when you contact us by e-mail or through a contact form, the information you provide (your e-mail address, your name and telephone number if applicable) will be stored and/or processed by us to answer your questions. We delete the data that arises in this context after the storage is no longer required.

We may also use non-personal information such as demographic or geographic data to analyze and develop our marketing strategy. For example, we may use non-personal information to determine how you found out about us, what your interests are regarding our services and products, and how to further improve our websites for your use. See additional information below:

• Server Log Information
We log IP addresses to analyze trends, administer the site, track patterns of page views, and gather broad demographic information, such as browser type, for aggregate use. CSI does not, however, link IP addresses to personally identifiable information.

• Cookies
CSI, in common with many web site operators, may use standard technology called cookies on this site. Cookies are small data files that are downloaded onto your computer when you visit a particular web site. You can disable cookies by turning them off in your browser, however, some areas of this site may not function properly if you do so.

Purpose and Legal Basis for the Processing of Personal Data
CSI processes personal data for the purposes of:
• Communicating with corporate business partners about business matters or possible contracts for the operation of the business.
• Conducting relevant tasks for legitimate business purposes including marketing and advertising.
• Evaluating prospective customers, or building mailing lists for services information distribution.
• Meeting legal or regulatory requirements and CSI’s internal policies.
• Management of travel, lodging, and related expenses and Other purposes disclosed at the time of collection.

For EEA Visitors to the CSI websites and those enquire with CSI, the basis for processing personal data is consent. For all other data subjects, such processing has been determined to be limited to processing based on the contractual and/or legitimate interest of CSI and the respective data subject in order to promote a business or employment relationship, as applicable

Recipients of Personal Data
We do not sell or rent, or otherwise dispose of the personal information collected on CSI website or any of its affiliated websites to third parties that are not under contractual obligations to CSI for business related processing (sub-processor). We may, however, disclose your personal information when required by law or in the good-faith belief that such disclosure is necessary to comply with local laws.

In addition, CSI does not process, store, or handle personal data in any other manner other than that directed by the primary data controller. Accordingly, CSI does not share, uniquely identify, or in any way use personal data for any commercial purpose other than that defined by the controller. In some cases in accordance with our client agreements, we may disclose personal data with a subcontractor (sub-processor) contracted to provide services on our behalf, in order to provide service to our clients.

Transfer of Personal Data to a Third Country
Personal data collected by CSI may be stored or processed in Germany or in the country in which a CSI affiliate, subsidiary or third party service provider maintains facilities for the collection of data. EU data subjects visiting CSI websites who provide personal data to CSI consent to the processing and transfer of that data to Germany and around the world to CSI entities.

CSI may also execute agreements with third parties for the transfer of personal data outside of the EU using European Commission-approved Standard Contract Clauses.

Retention Period
Personal data is retained by CSI no longer than necessary to execute its obligations to former employees to provide post-employment benefits or under applicable contracts with clients or business partners. Other information may be kept indefinitely due to requirements of federal regulations and other legal reasons.

Access to, Modification and Deletion of Personal Information - PROCEDURE
EU data subjects are permitted to exercise the right to access, correct, restrict, object to, update, move, or delete any personal data collected and stored by CSI. CSI may have a legitimate or legal basis to retain certain personal information. CSI will respond to all requests within 30 days. To make such a request, please use the privacy link available at Alternatively, you may email or send a letter to:

CSI Ltd.
43/F, AIA Building,
183 Electric Road,
North Point,
Hong Kong

Please help us keep your data accurate by informing us of any personal information change promptly.

There may be cases where restrictions on the amount of information that can be disclosed to data subjects under applicable law (for example, if that would necessarily involve disclosing information about another person). CSI is permitted to withhold some types of personal data in certain circumstances, subject to applicable local law requirements. If there is a dispute, please contact the CSI office secretary at the above address. In addition, data subjects have the right to lodge a complaint with a supervisory authority.

Our Commitment to Data Security
This site incorporates appropriate safeguards using industry standard technology to heighten the security, accuracy and privacy of any personal information we have collected and we have put in place reasonable precautions to protect information from loss and misuse. Our security and privacy policies are periodically reviewed and enhanced as required.

Right to Withdraw Consent
Data subjects whose processing is based upon consent may withdraw that consent at any time however, CSI will not be able to provide or continue to provide services or marketing communications to the data subject. Please make request to withdraw consent pursuant to the instructions above.

When we ask for information from you, you are given the opportunity to ‘opt-in’ to receive additional information, such as site announcements, promotional information, product sampling opportunities and research requests from us and to allow us to share your contact information with certain of our trusted partners and customers. Users who no longer wish to receive these communications, or who do not want their contact information shared as described herein, may stop receiving them by following the Unsubscribe instructions included in any such communication or by following the access procedures above.

Changes to this Statement and Policy
If we alter our privacy policy, any changes will be posted on this page of our site so that you are always informed of the information we collect about you, how we use it and the circumstances under which we may disclose it. Please check back from time to time to ensure you are aware of our current privacy policy.

We appreciate your interest and hope that you enjoy visiting the site.

Contact Details
If at any time you wish to contact Consulting Services Ltd. with any question or complaint or to exercise any of the rights set out in this privacy policy statement you may do so by contacting CSI by any of the methods set out below:

Postal Address:
CSI Ltd.
ATTN: Privacy
43/F, AIA Building,
183 Electric Road,
North Point,
Hong Kong

Phone number:
T +852 2363 1019