Privacy Notice
PRIVACY POLICY / NOTICE
PRIVACY POLICY / NOTICE
PURSUANT TO PERSONAL DATA PROTECTION ACT 2010
(“NOTICE”)
- This notice is issued pursuant to Section 7 of the Personal Data Protection Act 2010 (“the Act”). For the purpose of this Notice, “Personal Data”, “processing” and “data processor” shall have the meaning as defined in the Act.
- This Notice applies to any person whose Personal Data is processed by Bermaz Group of Companies (hereinafter referred to as “we”, “our” or “us”) and/or by our data processor on our behalf.
- In this Notice, “you” shall refer to yourself and such other persons represented by you of which you are providing the Personal Data, including the Personal Data of the directors, shareholders, managers and/or officers of a company; the Personal Data of the partners, managers and/or officers of a partnership; the Personal Data of the officer bearers of a society, club or unincorporated body.
- Your privacy is important to us. This Notice explains how we collect, use, process, store, disclose, transfer, and protect your personal data in accordance with the Act.
- The Personal Data processed by us and/or by our data processor may include:
- name, gender, race, date of birth, nationality, residency status, national registration identity card number, passport number, marital status, postal or correspondence address, contact details including mobile, office and residential telephone number, facsimile number, e-mail address, occupation or profession, employer’s particulars, photograph, property details, shareholding and loan details;
- any such information relevant or required for our provision of automotive related services to you and our compliance with the legal and regulatory requirements, including but not limited to your location, driving patterns, voice control clips and documentations relating to repair; and
- any additional information provided by you or by third parties about you that is not already available in the public domain.
- The Personal Data is collected and processed by us and/or by our data processor for the purposes including:
- to verify your identity and to communicate or correspond with you;
- to send you materials such as newsletters, articles, write-ups as well as other updates;
- to distribute information or details of events, seminars, conferences and talks which may be of interest to you;
- to render our services and for all purposes related thereto;
- to facilitate our compliance with the legal and regulatory requirement;
- to enforce our legal rights and claims;
- for purposes in connection with our operation, administration, record-keeping, billing and collection, audits, reporting and investigations;
- for prevention or detection of crime or for the purpose of investigations of criminal activities, e.g. anti-money laundering activities;
- to make such disclosures as may be required by law or regulations, court order or legal process;
- for any other lawful purposes that is incidental or ancillary or in furtherance to the above.
- The Personal Data is collected from various sources including but not limited to:
- information which you have provided to us at the commencement of our appointment and, from time to time, in the course of our appointment or communication, by whatsoever means and/or in whatever manner;
- information from public domains, credit reporting agencies, government department or agencies, public registries, social media and publications; and
- information obtained independently by us from other lawful sources.
- Your Personal Data provided to us may be disclosed by us to the following third parties, for purposes as set out above:
- any persons as directed by or consented to by you;
- any persons as required in the course of us rendering our services, including but not limited to our principal, dealers, associated companies, counter-parties, financial institutions, insurance companies, regulatory bodies etc.;
- any persons as required for the purposes of us complying with the legal and regulatory requirements;
- any persons as required for the purposes of us enforcing our legal rights and claims;
- our data processor who processes the Personal Data on our behalf; and
- our consultants, solicitors, auditors, employees, insurance companies and any person who is under a confidentiality obligation towards us.
- The Personal Data provided to us may be transferred to and/or stored in a place outside Malaysia for the purposes and/or to such third parties as set out above.
- The provision of the Personal Data is voluntary in nature. You may also elect to limit the way the Personal Data provided to us is to be processed by us.
- In the event the Personal Data provided by you is not sufficient or not satisfactory, or if you limit the way the Personal Data is to be processed, or if you subsequently withdraw your consent to us processing your Personal Data, this may result in us not being able to communicate or correspond with you and/or to provide our services to you under any potential or existing agreement or arrangement with you.
- We will take all practical steps, when processing the Personal Data provided to us, to protect the security of the Personal Data.
- We will retain your Personal Data in compliance with this Notice for the duration of your relationship with us or for such period as we may deem necessary to protect our interests, where otherwise required under any legal, regulatory and/or accountings requirements.
- We shall take all reasonable steps to ensure that all Personal Data is destroyed or permanently deleted if it is no longer required for the purpose for which it was to be processed.
- By providing to us the Personal Data, you hereby consent to us processing the Personal Data in accordance with this Notice and the Act.
- In relation to Personal Data of any third party which are provided by you to us that is not already available in the public domain, you hereby confirm that you have obtained his or her consent that you are providing the Personal Data to us for the purposes as set out in this Notice and that the Personal Data may be disclosed to parties as set out in this Notice.
- Please note that you are responsible for ensuring that the Personal Data provided to us is accurate, complete, not misleading and kept up-to-date. The Personal Data collected and processed by us is deemed to be accurate until and unless you inform us otherwise in writing.
- You may, to the extent as permitted by the Act and upon payment of a prescribed fee: -
- request for access to Personal Data provided by you;
- request for Personal Data provided by you to be corrected where the Personal Data is inaccurate, incomplete, misleading or not up-to-date.
- If:
- you have any enquiries regarding this Notice or complaints in respect of the Personal Data provided by you; or
- you wish to access to the Personal Data provided by you; or
- you wish to correct the Personal Data provided by you; or
- you wish to withdraw your consent to us processing the Personal Data for any of the purposes as set out in this Notice; or
- you wish to withdraw your consent to us disclosing the Personal Data to any of the parties as set out in this Notice;
Bermaz Group of Companies
No 7, Jalan Pelukis U1/46,
Temasya Industrial Park,
Seksyen U1, 40150 Shah Alam,
Selangor Darul Ehsan.
- We reserve our rights to refuse to comply with your request for access and/or request for correction as stated above in circumstances permitted by the Act, in which case we will notify you of the same by notice in writing.
- This Notice may be amended from time to time. By you continuing to engage our services or to communicate with us subsequent to any amendments to this Notice, it would confirm and indicate your acceptance to the amendments to this Notice.
- In the event of any inconsistency or conflict between the English version and the Bahasa Malaysia version of this Notice, the English version shall prevail.
A. The Nature of Personal Data
B. Purpose of Collecting and Processing the Personal Data
C. Sources of Personal Data
D. Disclosure or Transfer of Personal Data
E. Consequences of Non-Provision of Personal Data
F. Security and Retention of Personal Data
G. Personal Data Provided By You
H. Data Access and Correction, Inquiries and Complaints
I. Changes to the Notice
J. Miscellaneous