1. INTRODUCTION1.1 This Personal Data Protection Policy applies to AB Mauri Malaysia Sdn Bhd (“We”) a subsidiary of Associated British Foods plc. This policy details how we collect and handle the personal data of individuals and comply with the provisions of the Personal Data Protection Act 2010 (“PDPA”) of Malaysia. In this policy, “Personal Data” shall have the same meaning as described in the PDPA.
1.2 This Policy applies to personal information about individuals (customers, vendors, distributors, suppliers, service providers, joint venture/business partners, job applicants, employees) held by us. We will only process your Personal Data in accordance with the Personal Data Protection Act 2010, the applicable regulations, guidelines, orders made under the Personal Data Protection Act 2010 and any statutory amendments or re-enactments made of the Personal Data Protection Act 2010 from time to time (collectively referred to as the “PDPA”) as well as this Policy.
1.3 The PDPA requires us to inform you of your rights in respect of your Personal Data that is being processed or that is to be collected and further processed by us and the purposes for the data processing. The PDPA also requires us to obtain your consent to the processing of your Personal Data.
1.4 By providing your Personal Data to us and/or continuing access to our www.abmauri.com.my website (“Website”), you declare that you have read and understood this Policy and agree/consent to us processing your Personal Data in accordance with the manner as set out in this Policy.
1.5 We reserve the right to modify, update and/or amend this Policy from time to time with reasonable prior notice to you. Any amendments to this Policy will be made via announcements on the Website or other appropriate means. Please check the Website from time to time to see if there are amendments to this Policy. Any amendments to this Policy will be effective upon the announcement on the Website. By continuing to use the services and/or access to the Website you will be deemed as having agreed to, consented and accepted the said amendments.
1.6 If you do not agree to this Policy or any amendments to this Policy, we may not be able to render all services to you and you may be required to terminate your relevant agreement with us and/or stop accessing or using the Website.
2. COLLECTION OF PERSONAL DATA
2.1 The term “Personal Data” means any information in our possession or control that relates directly or indirectly to an individual to the extent that the individual can be identified or are identifiable from that and other information in our possession, such as name, address, telephone number, Identification/Passport number, date of birth, photograph, email address, household information, etc. as well as Sensitive Personal Data as defined under the PDPA, which includes but is not limited to, information pertaining to the physical or mental health or condition of a data subject and religious beliefs.
2.2 The types of Personal Data collected depend on the purpose of collection. We may “process” your Personal Data by way of collecting, recording, holding, storing, using and/or disclosing it.
2.3 Your Personal Data may be collected from you during your course of dealings with us in any way or manner including pursuant to any transactions and/or communications made from/with us. We may also collect your Personal Data from a variety of sources, including without limitation, at any events, seminars, road shows, customer satisfaction surveys organised and/or sponsored by us, as well as from publicly available sources.
3. CONSEQUENCES OF NOT CONSENTING TO THIS POLICY
3.1 The collection of your Personal Data by us may be mandatory or voluntary in nature depending on the Purposes for which your Personal Data is collected. Where it is obligatory for you to provide us with your Personal Data, and you fail or choose not to provide us with such data, or do not consent to the above or this Policy, we will not be able to provide products and/or services or otherwise deal with you.
4. PURPOSES AND DISCLOSURE OF YOUR PERSONAL DATA
4.1 The Personal Data as provided/furnished by you to us or collected by us from you or through such other sources as may be necessary for the fulfilment of the purposes at the time it was sought or collected, may be processed for the following purposes (collectively referred to as the “Purposes”);
4.1.1 to communicate with you;
4.1.2 to maintain and improve customer relations between us and you;
4.1.3 to assess, process and provide products and/or services to you;
4.1.4 to administer and process any payments related to products, services and/or facilities requested by you;
4.1.5 to establish your identity and background and to carry out verification and background checks with third party credit reporting agencies; and/or;
4.1.6 to maintain and update internal record keeping for internal administrative purposes;
4.1.7 to process any payments related to your commercial transactions with us;
4.1.8 to process and analyse your Personal Data either individually or collectively with other individuals;
4.1.9 to process, analyse and conduct market research, internal marketing analysis, customer profiling activities, analysis of customer patterns and choices, planning, statistical and trend analysis in relation to our products and/or services;
4.1.10 for audit, risk management and security purposes;
4.1.11 for enabling us to perform our obligations and enforce our rights under any agreements or documents that we are a party to;
4.1.12 for meeting any applicable legal or regulatory requirements and making disclosure under the requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular or code applicable to us; and/or
4.1.13 to enforce or defend our rights and your rights under, and to comply with, our obligations under the applicable laws, legislation and regulations.
4.2 We will not sell, transfer or disclose any of your Personal Data to any third party without your consent. However, we may disclose your Personal Data to the following third parties, for one or more of the above Purposes:
4.2.1 any person under a duty of confidentiality to which has undertaken to keep your Personal Data confidential which we have engaged to discharge our obligations to you;
4.2.2 any party in relation to legal proceedings or prospective legal proceedings;
4.2.3 our auditors, consultants, lawyers, accountants or other financial or professional advisers appointed in connection with our business on a strictly confidential basis, appointed by us to provide services to us;
4.2.4 data centres and/or servers located within or outside Malaysia for data storage purposes or otherwise;
4.2.5 government agencies, law enforcement agencies, courts, tribunals, regulatory bodies, industry regulators, ministries, and/or statutory agencies or bodies, offices or municipality in any jurisdiction, if required or authorised to do so, to satisfy any applicable law, regulation, order or judgment of a court or tribunal or queries from the relevant authorities;
4.2.6 to third-party credit reporting or employment agencies as part of the recruitment and selection process and/or otherwise in connection with your application for employment with us.
4.3 You hereby acknowledge that such disclosure and transfer may occur and permit us to disclose and transfer your Personal Data to such third party and its advisors/representatives and/or any other person reasonably requiring the same in order for us to operate and maintain our business or carry out the activities set out in the Purposes.
5. YOUR RIGHTS
5.1 Subject to the exceptions provided under the PDPA, you have the right to request for access to, request for a copy of, a request to update or correct, your Personal Data held by us. We may charge a small fee (such amount as permitted by the PDPA) to cover the administration costs involved in processing your request to access your Personal Data.
5.2 In respect of your right to access and/or correct your Personal Data, we have the right to refuse your request to access and/or correct your Personal Data for the reasons permitted under the law, such as where the expense of providing access to you is disproportionate to the risks to your privacy, or where the rights of others may also be violated, amongst other reasons.
5.3 You have the right at any time to request us to limit the processing and use of your Personal Data (for example, requesting us to stop sending you any marketing and promotional materials or contacting you for marketing purposes).
5.4 In addition, you also have the right, by notice in writing, to inform us on your withdrawal (in full or in part) of your consent given previously to us subject to any applicable legal restrictions, contractual conditions and a reasonable duration of time for the withdrawal of consent to be affected. However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. In this regard, depending on the extent of your withdrawal of consent for us to process your Personal Data, it may mean that we will not be able to continue with your existing relationship with us and/or the contract that you have with us will have to be terminated.
6. RETENTION OF YOUR PERSONAL DATA
6.1 Any of your Personal Data provided to us is retained for as long as the purposes for which the Personal Data was collected continues; your Personal Data is then destroyed from our records and system in accordance with our retention policy in the event your Personal Data is no longer required for the said purposes unless its further retention is required to satisfy a longer retention period to meet our operational, legal, regulatory, tax or accounting requirements.
7. SECURITY OF YOUR PERSONAL DATA
7.1 We are committed to ensuring that your Personal Data is stored securely. In order to prevent unauthorised access, disclosure or other similar risks, we endeavour, where practicable, to implement appropriate technical, physical, electronic and procedural security measures in accordance with the applicable laws and regulations and industry standard to safeguard against and prevent the unauthorised or unlawful processing of your Personal Data, and the destruction of, or accidental loss, damage to, alteration of, unauthorised disclosure of or access to your Personal Data.
7.2 We will make reasonable updates to its security measures from time to time and ensure the authorised third parties only use your Personal Data for the Purposes set out in this Policy.
7.3 Please be aware that communications over the Internet, such as emails are not secure unless they have been encrypted. Your communications may be routed through a number of countries before being delivered – this is the nature of the World Wide Web/Internet.
7.4 We cannot and do not accept responsibility for any unauthorised access or interception or loss of Personal Data that is beyond our reasonable control.
8. TRANSFER OF PERSONAL DATA OUTSIDE OF MALAYSIA
Our information technology storage facilities and servers may be located in other jurisdictions outside of Malaysia. This may include, but not limited to, instances where your Personal Data may be stored on servers located outside Malaysia. In addition, your Personal Data may be disclosed or transferred to entities located outside Malaysia or where you access the Website from countries outside Malaysia. Please note that these foreign entities may be established in countries that might not offer a level of data protection that is equivalent to that offered in Malaysia under the laws of Malaysia. You hereby expressly consent to us transferring your Personal Data outside of Malaysia for such purposes. We shall endeavour to ensure that reasonable steps are taken to procure that all such third parties outside of Malaysia shall not use your Personal Data other than for that part of the Purposes and to adequately protect the confidentiality and privacy of your Personal Data.
9. CONTACT DETAILS
If you have any questions about this Policy, or have any further queries, or would like to make a complaint or data access or correction request in respect of your Personal Data, you may contact us at the contact details below:
Position / email
Ahmad Taufiq Ismail
AB Mauri Malayia Sdn Bhd (Co No. 0011150-X)
Lot 4185, Jalan KB 1/9,
Kg. Baru Balakong,
Selangor Darul Ehsan,
Malaysia Tel :