Personal Data Protection Act 2010

Notice Pursuant to the Personal Data Protection Act 2010 (Organisation)

 

The Personal Data Protection Act 2010 (PDPA), which regulates the processing of personal data in commercial transactions, applies to Malaysian Bioeconomy Development Corporation Sdn Bhd and its related companies (the Company). For the purpose of this Notice Pursuant to the PDPA (Notice):

 

(a)       the words (wherever appearing) “we”, “us”, or “our” shall be construed as references to the Company, and “you”, “your” or “yours” shall be construed as references to the Organisation (as hereinafter defined); and

(b)       the terms “personal data”, “sensitive personal data” and “processing” shall have the meaning prescribed in the PDPA.

 

1.       This Notice serves to inform you that relevant personal data of your personnel or representatives (Data Subject) is being collected, processed and/or stored by the Company and/or the Company’s authorised service providers acting on its behalf.

 

2.      The Data Subject’s personal data which is being collected, processed and/or stored by us and/or our authorised service providers includes all information contained in each of our relevant forms completed by you and/or the Data Subject and submitted to us together with other information we may have obtained about the Data Subject, including but not limited to, all information (oral or written) provided to, procured by and/or communicated to us through your contractors, vendors or any third parties such as data providers and governmental agencies (collectively as “Third Parties”).

 

3.      The Data Subject’s personal data (oral or written) which is being collected, processed and/or stored by us strictly for the Purposes (as hereinafter defined) may include the Data Subject’s sensitive personal data.

 

4.      The examples of the Data Subject’s personal data which we may collect, process and/or store are the Data Subject’s name, contact details, address, facsimile number, race, sex, date of birth, family details, relevant financial details and/or other information needed for the Purposes.

 

5.      The examples of the Data Subject’s sensitive personal data which we may collect, process and/or store are information about the Data Subject’s health condition, political opinions, religious beliefs and the commission or alleged commission by the Data Subject of any offence.

 

6.       The collection, processing and/or storing of the Data Subject’s personal data includes the collection, processing and/or storing of any additional information you and/or the Data Subject may subsequently provide to us and/or collected by us from Third Parties, for the following purposes:

 

(a)     for internal record keeping, analysis and operation of the Company;

(b)     to provide and improve our services to you;

(c)     to administer or otherwise carry out our obligations in relation to any agreement you have entered with the Company;

(d)     to assess and process your application(s) to the Company;

(e)     to administer your participation in any of the Company’s programmes;

(f)      to conduct activities and/or events;

(g)     to organise and carry out marketing or promotional operations and similar events;

(h)     to provide you with customer support and troubleshoot problems;

(i)      to request feedback or participation in any of the Company’s surveys;

(j)      to anticipate and/or resolve disputes;

(k)     to verify your identity;

(l)      to communicate any relevant messages to you;

(m)   to protect your interest, including but not limited to fraud prevention;

(n)     other legitimate activities of the Company and/or its associated company(ies); and/or

(o)     such other purposes as may be related to the foregoing.

(collectively as “Purposes”).

 

We will retain the Data Subject’s personal data for as long as is necessary to carry out any of the Purposes set out above and to comply with the PDPA and/or applicable laws and orders of competent authorities.

 

It is necessary that you supply us with the Data Subject’s relevant personal data unless otherwise specified by us. If you fail to supply us with such personal data, please note that we may not be able to perform any of the Purposes stated above (whichever is applicable).

 

7.      The Data Subject’s relevant personal data (oral or written) is and/or will be collected from you and/or the Data Subject through the information you and/or the Data Subject have provided and/or will provide to us.

 

8.      The Data Subject shall have the right to access and if necessary, to correct, complete or remove his/her personal data (Request).

 

9.      The Data Subject may contact us for the purpose of the abovementioned Request and/or any enquiries or complaints in respect of the Data Subject’s personal data as follows:

 

Designation of the Contact Person:

 

Phone Number:

 

Mailing address:

 

 

 

 

E-mail address:

 

 

Note   :  We may refuse to comply with the Request pursuant to the PDPA and/or other relevant laws.

 

10.   The Data Subject’s relevant personal data may be disclosed to our stakeholders, subsidiaries, related and/or associated company(ies), licensee(s), governmental and/or quasi-governmental department(s) and/or agency(ies), regulatory authority and/or statutory body(ies), business partner(s) and/or service provider(s) for any of the above Purposes, any other purpose directly related to any of the above Purposes, or any other purpose for which the Data Subject’s relevant personal data are required to be disclosed.

 

11.   The Data Subject’s relevant personal data may be transferred to a place outside Malaysia in accordance with the PDPA.

 

12.   You and/or the Data Subject are responsible for ensuring that the Data Subject’s personal data is accurate, complete and not misleading and that such personal data is kept up to date.

 

13.   If you disclose to us any personal data or information of the Data Subject and/or any other person, you confirm that you are authorised to disclose such personal data or information, and to receive on the Data Subject and/or that person’s behalf any data protection notices issued by the Company from time to time, and the Data Subject and/or that person has consented to the Company’s collection, processing and storing of his/her personal data and information.

 

14.    In the event of any inconsistency between the English version and the Bahasa Malaysia version of this Notice, the English version of this Notice shall prevail over the Bahasa Malaysia version.