NOTICE PURSUANT TO PERSONAL DATA PROTECTION ACT 2010 (“NOTICE”)

1. This notice is issued pursuant to Section 7 of the Personal Data Protection Act 2010 (“the Act”). For the purpose of this Notice, “Personal Data”, “processing” and “data processor” shall have the meaning as defined in the Act.

2. This Notice applies to any person whose Personal Data is processed by Bermaz Auto Berhad, which context so permits shall include its group companies, its subsidiary companies, its associate companies, its dealers, its assignee, and its successor-in-title (hereinafter referred to as “we”, “our” or “us”) and/or by our data processor on our behalf.

3. In this Notice, “you” shall refer to yourself and such other persons represented by you of which you are providing the Personal Data, including the Personal Data of the directors, shareholders, managers and/or officers of a company; the Personal Data of the partners, managers and/or officers of a partnership; the Personal Data of the officer bearers of a society, club or unincorporated body.

A. The Nature of Personal Data

4. The Personal Data processed by us and/or by our data processor may include:

1. name, gender, race, date of birth, nationality, residency status, national registration identity card number, passport number, marital status, postal or correspondence address, contact details including mobile, office and residential telephone number, facsimile number, e-mail address, occupation or profession, employer’s particulars, photograph, property details, shareholding and loan details;
2. any such information relevant or required for maintaining our business in the sales and after-sales of vehicles of different brands and our compliance with the legal and regulatory requirements; and
3. any additional information provided by you or by third parties about you that is not already available in the public domain.

B. Purpose of Collecting and Processing the Personal Data

5. The Personal Data is collected and processed by us and/or by our data processor for the purposes:-

1. to maintain our course of business in the sales and after-sales of vehicle of different brands;
2. to verify your identity and to communicate or correspond with you;
3. to send you materials such as newsletters, articles, promotional materials, as well as other updates;
4. to distribute information or details of events, seminars, conferences and talks which may be of interest to you;
5. for purposes in connection with our operation, administration, record-keeping, billing and collection, audits, reporting and investigations;
6. to enforce our legal rights and claims;
7. for prevention or detection of crime or for the purpose of investigations of criminal activities, e.g. anti-money laundering activities;
8. to make such disclosures as may be required by law or regulations, court order or legal process;
9. for any other lawful purposes that is incidental or ancillary or in furtherance to the above.

C. Sources of Personal Data

6. The Personal Data is collected from various sources including but not limited to:

1. information which you provided to us at your first contact with us and, from time to time, in the course of our business services to you and your communication with us, by whatsoever means and/or in whatever manner;
2. information from public domains, credit reporting agencies, government department or agencies, public registries, social media and publications; and
3. information obtained independently by us from other lawful sources.

D. Disclosure or Transfer of Personal Data

7. Your Personal Data provided to us may be disclosed by us to the following third parties, for purposes as set out above:

1. any persons as directed by or consented to by you;
2. any persons as required in the course of our business but not limited to financial institutions, regulatory bodies, professional advisors etc.;
3. any persons as required for the purposes of us complying with the legal and regulatory requirements;
4. any persons as required for the purposes of us enforcing our legal rights and claims;
5. our data processor who processes the Personal Data on our behalf; and
6. our manufacturers, dealers, consultants, solicitors, auditors, employees, insurance companies and any person who is under a confidentiality obligations towards us.

8. The Personal Data provided to us may be transferred to and/or stored in a place outside Malaysia for the purposes and/or to such third parties as set out above.

E. Consequences of Non-Provision of Personal Data

9. The provision of the Personal Data is voluntary in nature. You may also elect to limit the way the Personal Data provided to us is to be processed by us.

10. In the event the Personal Data provided by you is not sufficient or not satisfactory, or if you limit the way the Personal Data is to be processed, or if you subsequently withdraw your consent to us processing your Personal Data, this may result in us not being able to communicate or correspond with you and/or to provide our business services to you under any potential or existing agreement or arrangement with you.

F. Security and Retention of Personal Data

11. We will take all practical steps, when processing the Personal Data provided to us, to protect the security of the Personal Data.

12. We will retain your Personal Data in compliance with this Notice for the duration of your relationship with us or for such period as we may deem necessary to protect our interests, where otherwise required under any legal, regulatory and/or accountings requirements.

13. We will take all reasonable steps to ensure that all Personal Data is destroyed or permanently deleted if it is no longer required for the purpose for which it was to be processed.

G. Personal Data Provided By You

14. By providing to us the Personal Data, you hereby consent to us processing the Personal Data in accordance with this Notice and the Act.

15. In relation to Personal Data of any third party which are provided by you to us that is not already available in the public domain, you hereby confirm that you have obtained his or her consent that you are providing the Personal Data to us for the purposes as set out in this Notice and that the Personal Data may be disclosed to parties as set out in this Notice.

16. Please note that you are responsible for ensuring that the Personal Data provided to us is accurate, complete, not misleading and kept up-to-date. The Personal Data collected and processed by us is deemed to be accurate until and unless you inform us otherwise in writing.

H. Data Access and Correction, Inquiries and Complaints

17. You may, to the extent as permitted by the Act:-

1. request for access to Personal Data provided by you;
2. request for Personal Data provided by you to be corrected where the Personal Data is inaccurate, incomplete, misleading or not up-to-date.

18. If:

1. you have any enquiries regarding this Notice or complaints in respect of the Personal Data provided by you; or
2. you wish to access to the Personal Data provided by you; or
3. you wish to correct the Personal Data provided by you; or
4. you wish to withdraw your consent to us processing the Personal Data for any of the purposes as set out in this Notice; or
5. you wish to withdraw your consent to us disclosing the Personal Data to any of the parties as set out in this Notice;

19. We reserve our rights to refuse to comply with your request for access and/or request for correction as stated above in circumstances permitted by the Act, in which case we will notify you of the same by notice in writing.

I. Changes to the Notice

20. This Notice may be amended from time to time. By you continuing to engage our services or to communicate with us subsequent to any amendments to this Notice, it would confirm and indicate your acceptance to the amendments to this Notice.