Personal Data Protection Notice for 168 Park Mall

LOT 168 SELAYANG SDN. BHD., its group of companies and related entitles (“Company”) respects and is committed to the protection of your personal information and your privacy. The term “we”, “us”, or “our” refers to the Company, and “you” and “your” includes third parties whose personal data you have provided to the Company.

This personal data protection notice (“PDP Notice”) explains how we collect and handle your personal information, including your sensitive personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”).

The terms “personal data”, “processing”, “commercial transactions”, “data subject” and “relevant person” used in this PDP Notice shall have the meaning prescribed in the PDPA.

 

Types of Personal Data

The personal data provided by you during your course of dealings with us in any way or manner including pursuant to any commercial transactions and/or communications made from/ with us such as at events organised or participated by the Company and/or obtained independently by us from other lawful sources (if any such as from public depositories, trade/online directories, credit reporting agencies, public domain and other authorized third parties) in our forms, agreements, website, and/or other similar documents which may include any information concerning your name, address (such as correspondence and permanent address), phone numbers (such as mobile phone, home and office phone numbers), email address, identity card number, passport number, specimen signature, age, date of birth, place of birth, gender, race, nationality, marital status, country of permanent residence, company name, occupation, salary, job position, vehicles information, sponsoring body details, referee information (such as name of referee, job position, address, contact number and email address), previous examination results, transcripts, academic qualifications, academic records, bank details (such as name of bank, bank’s address and bank account number), images (including photographs) information in audio and/or video format, closed-circuit television (“CCTV”) and security recording and Sensitive Personal Data (as defined below) which are provided by you to the Company via these channels:-
· our website and 3rd party website affiliated with the Company and/or 168 Park Mall;
· electronic forms;
· email; and/or
· social media and other communication messaging platform

The “Sensitive Personal Data” that you provide or have provided to us includes but is not limited to information about your physical or mental health or condition, political opinions, religious or philosophical beliefs or other beliefs of a similar nature and details about any commission or alleged commission of an offence or any other Personal Data which is sensitive in nature.

Source of Personal Data

We may collect your Personal Data given directly or indirectly by you or via a third party such as your legal representatives, agents, employers and/or credit reference agencies (collectively “authorised representative”) when you and/or your authorised representative send us enquiry, application, registration forms and/or credit application forms via various means, including online and physical hardcopies.

Purposes of Collecting and Processing Your Personal Data

We may collect and process your Personal Data for but not limited to, the following purposes:

• to communicate with you;
· to consider and/or process your application/ transaction with us;
· to respond to your enquiries or complaints and resolve any issues and disputes which may arise in connection with any dealings with us;
· to facilitate your participation in any contests or events;
· to contact you regarding products, services, upcoming events, promotions, advertising, marketing and commercial materials to you;
· to share any of your Personal Data with our business partners to jointly develop products and/or services or launch marketing campaigns;
· to conduct credit reference checks and establish your credit worthiness ; for internal administrative processes and record-keeping;
· to comply with our legal and regulatory obligations in the conduct of our business;
·to carry out due diligence or other monitoring or screening activities (including background checks) in accordance with legal or regulatory obligations or risk management procedures that may be required by law or that may have been put in place by us;
·to administer and give effect to your commercial transaction (e.g. tender award, contract for service, tenancy agreement);
· to process any payments related to your commercial transaction;
· to enable us to perform our obligations and enforce our rights under any agreements or documents that we are a party to; and/or
• for any other purposes required to operate, maintain and better manage our business and your relation with us.

All information requested for in the relevant forms is obligatory to be provided by you unless stated otherwise. Should you fail to provide the relevant information, we would be unable to process your request and/or provide you with the relevant services.

Disclosure of Personal Data

We may disclose your personal data to the following third parties where necessary:

• Our group of companies including the Company’s parent/ holding company, subsidiaries, related and/or affiliates, within or outside Malaysia;
· Successors-in-title to us;

• Professional advisors and corporate service providers, including but not limited to lawyers, auditors, company secretary and consultants;
· Advertising and marketing partners;
· Payment processors;
· Customer support and communication;
· Social media platforms;
• Financial institutions, such as banks or credit reporting agencies;
• Government agencies, regulatory authorities, or law enforcement agencies as required by law;
• Any third party (and its advisers/ representatives) in connection with any proposed or actual corporate transactions such as re-organisation, merger, acquisition, restructuring, sale, consolidation, joint venture, assignment, transfer, funding exercise or asset sale relating to any portion of the Company;
· Foreign embassies and agencies appointed by the foreign embassies;
· Any party in relation to legal proceedings or prospective legal proceedings;
· Any person under a duty of confidentiality to which has undertaken to keep your Personal Data confidential which we have engaged to discharge our obligations to you; and/or
· Any other person reasonably requiring the same in order for us to operate and maintain or carry out our business activities.
You agree not to hold the Company responsible for any loss or damage suffered arising from any access by third party where the Company has taken reasonable steps to protect the Personal Data from any loss, misuse, modification, unauthorized or accidental access or disclosure, errors in transmission, alteration or destruction.

Notwithstanding the aforesaid, the Company may process your Personal Data without your consent if it is permitted under the PDPA, or any other relevant legislation.

Accuracy, Retention, and Security of Your Personal Data

The accuracy of your Personal Data is essential for us to process your request and/or provide you with the relevant services.

If the Personal Data given by you or obtained from you (or your authorised representative) is inaccurate or is out of date, you shall notify us promptly.

We will retain your Personal Data for as long as it is necessary for the purposes for which it was collected. We will securely delete or anonymize your Personal Data in line with our retention policies and applicable laws once it is no longer needed for the said purposes unless its further retention is required to meet our operational, legal, regulatory, tax or accounting requirements.

We will endeavour to take all measures to safeguard your Personal Data and will implement appropriate security measures to protect it from unauthorized access or disclosure.

By providing us with Personal Data or using our services or our website, you consent to the transfer, storage and processing of Personal Data to where our servers, central database and system facilities are located and/or operated, which may be outside your country of domicile or the location where you access our website to provide Personal Data.

Our website may contain links to websites operated by third parties. Third party websites and /or links to such third party websites that are accessible from our website (if any) are not under the care and control of the Company and do not operate under this PDP Notice and we do not accept any responsibility or liability arising from those websites. Likewise, if you subscribe to an application, content or a product from those third party websites and you subsequently provide your Personal Data directly to that third party, that Personal Data will be subject to that third party’s privacy/personal data protection policy (if they have such a policy) and not to this PDP Notice.

Your Rights to Access and/or Correct Personal Data

You have the right to access, correct, or update your personal data held by us (subject always to certain exemptions). If you would like to excess or correct your Personal Data, request us to limit the processing and use of your Personal Date or make any inquiries or complaints, please contact us at the details provided below:

Contact Person: [Edward Lum]
Email: info@168parkmall.com

You may also withdraw (in full or part) of your consent given previously to us to our processing of your data by providing written notice to us (subject always to certain exemptions). However, your withdrawal of consent may affect our ability to fulfil certain obligations and services, which may mean that we will not be able to continue with your existing relationship with us or the contract that you have with us will have to be terminated.

Notwithstanding the foregoing, please note that we have the right to refuse your request to access and/or make any correction to your Personal Data in certain situations, which include but are not limited to, situations when we are unable to confirm your identity or where the information requested for is of a confidential commercial nature or in the event that the expense of providing such access is disproportionate to the risks to your privacy or where the processing of your Personal Data is being controlled by any third parties which prohibits the Company from complying (whether in whole or in part) with your request, or where such access is regulated by another law.

In accordance with the terms of the PDPA, we may charge a reasonable fee for the processing of any data access request. The chargeable fee will take into the account the time needed for verifying, locating, retrieving, reviewing and copying the information requested as well as any other associated costs and expenses that may arise from conducting such retrieval. You will be notified of the anticipated fee chargeable, prior to the retrieval of your Personal Data.

In the event we refuse to adhere to your request for access and/or correction to your Personal Data such as when the information requested for is of a confidential commercial nature, we will inform you of our reason for the refusal.

 

Conflict

In the event of any conflict between the English version of this PDP Notice and any other language versions of this PDP Notice, the terms in this English version shall prevail.