PERSONAL DATA PROTECTION ACT 2010 (PDPA) NOTICE
The Personal Data Protection Act 2010 (“PDPA”) which regulates the processing and safe-guarding of personal data in commercial transactions applies to Sime Darby Industrial Sdn Bhd (“SDI” or “we” or “us”). For the purpose of this written notice (“Notice”), the term used herein shall have the same meaning as prescribed in the PDPA. “SDI” or “we” or “us” in this notice refers individually or collectively to SDI and/or the entities within SDI group of companies including SDI’s subsidiaries, associate and/or related companies.
This Notice serves to inform you that your personal data is being processed by us or on our behalf and you hereby give your consent to the processing of your personal data by SDI. In this Notice, we also describe how we manage and handle the personal data which we have collected and/or would be collecting from you in compliance with the PDPA.
1. Collection of Personal Data
The personal data that we have previously collected or will be collecting from you, includes, but not limited to, your name, postal/e-mail address, date of birth, phone numbers, identification card or passport number, nationality, race, gender, bank details, credit card(s) details, information in audio and/or video format (including voice, video recording, closed-circuit television and security recording) and images (including photographs), and all other personal data we again collect from you on any subsequent occasion (collectively, “the Personal Data”).
2. Purpose of collection of the Personal Data
Your Personal Data may be processed for various purposes, including, but not limited to:
(a) providing sales/services/products/facilities or benefits offered by SDI or any other third parties appointed by us or on our behalf;
(b) setting up, managing and maintaining your accounts with SDI;
(c) verification of your financial standing through credit reference/reporting checks and / or risk assessment or evaluation;
(d) processing any payment(s) due to you or collection of any payment(s) payable to SDI for any sales of products and/or services;
(e) general administration, periodic credit review and updating of your information and accounts with SDI;
(f) providing / notifying and / or updating you with information on sales/services/product offers, upcoming events, conferences, seminars and / or any form of promotion and marketing activities in relation to the products and services offered by SDI;
(g) conducting internal marketing analysis / statistical analysis on SDI’s pool of customers / vendors and / or relevant third parties;
(h) vendor registration onto Sime Darby Group’s Procurement portal;
(i) registration and / or effecting any dealings with regulatory bodies in relation to the machines / equipment / products sold or services provided by SDI;
(j) monitoring and ensuring the safety and security of our visitors and/or third parties entering into and exiting from any of our facilities/premises;
(k) complying with our Environment, Safety and Health (ESH) rules, including, but not limited to the issuance of the visitor card to visitors and/or third parties entering into any of our facilities/premises;
(l) administering and giving effect to the processing of any documentation in relation to any commercial transaction(s) entered into and/or any potential commercial transactions to be entered into between customers/vendors and/or relevant third parties with SDI;
(m) necessary arrangements / preparation of necessary documentation in relation to entry by employees of SDI and / or relevant third parties to the on-shore and off-shore facilities of SDI’s customers;
(n) communicating with you, responding to any of your queries and / or requests or providing you with information that may be of interest and relevant to you;
(o) for publications and publicity materials in relation to SDI;
(p) for SDI business and/or operational requirements, where necessary;
(q) implementing and maintaining information technology systems;
(r) where SDI considers that such use or disclosure of personal data is necessary to protect our interests and enforcing our rights, to respond to or initiate any claims or legal processes, howsoever arising;
(s) as part of SDI’s corporate governance, audit and compliance purposes with any regulatory, statutory or legal obligations imposed on SDI by any government or regulatory authority in the conduct of our business;
(t) to better manage our business relationship with you;
(u) for participation in forums, surveys, contests and / or any other interactive platforms; and
(v) law enforcement purposes, assisting investigations by police or other government or regulatory authorities and to meet requirements imposed by applicable laws and regulations or other obligations committed to government or regulatory authorities; and
(w) such other purposes authorized by you or directly related or ancillary to the foregoing.
(collectively, “the Purposes”)
It is obligatory that you supply us with the Personal Data marked or specified as compulsory in our forms (collectively, “compulsory Personal Data”). If you fail to provide us with the compulsory Personal Data, we may not be able to process your Personal Data for any of the above Purposes and/or such other purposes related to the Purposes.
3. Source of Personal Data
Your Personal Data was collected or made available to us from various sources, including, but not limited to:
(a) Agreements entered into with SDI;
(b) Application forms or such other forms executed by you in relation to any commercial transaction(s) entered into and/or any potential commercial transaction(s) to be entered into with SDI ;
(c) Independent third party sources including credit reporting agencies;
(d) Attendance at any events/roadshows organized by SDI;
(e) General enquiries when you contact us using the contact details available on our website;
(f) Any oral or written communication;
(g) Questionnaires/surveys issued by SDI; and
(h) Register / log books etc. belonging to and/or maintained by SDI.
4. Disclosure of Personal Data
Please be informed that if required for any of the Purposes, your Personal Data may be disclosed, disseminated and/or transferred to:
(a) our subsidiaries, associate and/or related companies;
(b) our company secretary and/or share registrar;
(c) business partners;
(d) any person authorised to act as our agent in relation to the distribution of products and services offered by us;
(e) any agent, contractor or third-party service provider including without limitation those who provides administration, data processing, telecommunications, computer, payment, debt collection or securities clearing, technology outsourcing, call centre services, in connection with the operation of our business and the provision of services to you;
(f) other companies that help gather your information or communicate with you, such as research companies and credit reporting agencies;
(g) government or regulatory bodies in any jurisdiction or any person to whom we must disclose data;
(h) any third party organizations involved in any corporate exercises undertaken by SDI, in or outside Malaysia; and
(i) any such third party requested or authorized by you for any of the above Purposes.
5. Right to Access, Make Corrections and Limiting the Processing of the Personal Data
You have a right to request access to and / or make corrections to your Personal Data subject to the following and subject to provisions of the PDPA:
(a) you may, upon payment of a prescribed fee, make a data access request in writing to us; and
(b) we may refuse to comply with a data access request or a data correction request and shall, by notice in writing, inform you of our refusal and the reasons of our refusal.
You may limit the processing of your personal data or to request us to cease or not begin processing your personal data for purposes of direct marketing. You have the right to withdraw your consent previously given to us (in full or in part) by providing us with a notice in writing subject to any applicable legal restrictions and a reasonable duration of time for the withdrawal of consent to be effected.
If you limit the processing or withdraw your consent to any or all use of your Personal Data, we may not be in a position to continue to administer any contractual relationship in place, which in turn may result in us being unable to provide you with any of our services/products and/or the termination of any arrangements/agreements with us.
You may contact us with any enquiries or complaints, or to exercise the above rights in respect of your Personal Data by contacting us through the following methods:
Designation : Head of Communications
By mail : Sime Darby Industrial Sdn Bhd
No.1, Jalan Puchong, Taman Perindustrian Puchong Utama
47100 Puchong, Selangor Darul Ehsan
Malaysia.
By email : sdi.care@simedarby.com
By telephone : +603 8068 8000
6. Third Party Personal Data
We may require your assistance if the Personal Data relating to other persons is required to process your Personal Data for the Purposes and you hereby agree to use your best endeavors to assist us when required. In the event that Personal Data of any third party is supplied by you to us, you shall ensure that such third party has read this Notice and consented to us collecting his/her personal data for any of the Purposes prior to the supply of his/her Personal Data to us. Where another person is providing/submitting any of your personal data to us, you agree that you have authorized the disclosure of your personal data to us and consented to the processing of your personal data by us in accordance with this Notice.
7. Transfer of personal data to places outside Malaysia
We may transfer your personal data to a place outside of Malaysia and you hereby give your consent to the transfer.
8. Conflict
In the event of any inconsistency between the English version and the Bahasa Malaysia version of this Notice, the English version shall prevail over the Bahasa Malaysia version.
7. Amendments
We may update and amend this Notice from time to time. We will notify you of any amendments to this Notice through email or other appropriate means. Any such amendments will be effective upon such notification. By continuing to engage with us after the issuance of such amendment notice, you will be considered as having agreed to this Notice (as amended and updated).