Data Subject Rights Notice

• Access — receive a copy of your personal data and information about how we use it.
• Correction / rectification — have inaccurate data corrected.
• Erasure — ask us to delete data we no longer need, subject to retention rules.
• Restriction — ask us to pause certain processing while a dispute is resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — at any time, without affecting past processing.
• Automated decisions — we do not make solely automated decisions with legal or similarly significant effect about you.

Send a written request to dpo@als-analytical.hk containing:

• Your full name and preferred contact channel.
• The right you wish to exercise and the scope of the request.
• Sufficient detail to locate the data (e.g. company you contacted us through, portal user ID, approximate dates).
• A copy of a government-issued photo ID with sensitive fields redacted (we need name and photo only).

Portal users can also raise a request from the ‘Privacy’ tab; the request is routed to the DPO and receives a ticket ID for tracking.

We acknowledge requests within 3 business days and respond substantively within 30 calendar days. Complex or high-volume requests may be extended by up to two further months, with notice within the initial 30-day window.

Requests are handled at no charge. Where a request is manifestly unfounded or excessive (in particular because of its repetitive character) we may charge a reasonable administrative fee not exceeding HKD 200 per hour, or refuse to act, in each case with reasons.

• Where fulfilling the request would infringe a third party’s rights.
• Where the data is needed to establish, exercise or defend legal claims.
• Where retention is required by regulation (e.g. ISO/IEC 17025 5-year raw-data retention).
• Where we cannot verify your identity to a reasonable standard.

You may appeal any outcome first to our Managing Director (managing.director@als-analytical.hk) and then to the relevant supervisory authority listed in the Privacy Policy §12.