1. NOTICE

1.1 This Personal Data Protection Notice (“Notice”) is issued pursuant to the Personal Data Protection Act 2010 (“Act”) and for the purpose of this Notice, “Personal Data” shall have the meaning as ascribed to it under the Act.

1.2 This Notice serves to inform you on how your Personal Data collected by Permai Hotel. (“we” or “us” or “our”) will be recorded, processed, stored, used, transferred and/or disposed and to be utilised and dealt in accordance with the Act;

1.3 This Notice serves to inform you that, whether you are our customers, vendors, suppliers, distributors or service providers (“you” or “your”) that your Personal Data being processed by us or on our behalf and you hereby give your consent to the processing of your Personal Data.

2. COLLECTION OF PERSONAL DATA

Your Personal Data may be collected through several method, including but not limited to:-

a) Information or feedbacks that you have provided to us by whatsoever means and/or in whatsoever manner; and/or
b) Information obtained independently by us or given to us from other lawful sources including where necessary, from reliable third parties and from the public domain or online platforms; and/or
c) Information collected from various on-line forms available during your visits to our website, business cards, guest books and/or any events organised or sponsored by us, our subsidiaries and/or any of our affiliates including but not limited to training programmes, conferences, seminars, workshops or talks.

3. NATURE OF PERSONAL DATA

We may collect a variety of your Personal Data including but not limited, whenever necessary and relevant (collectively as “Personal Data”): –

a) name, age, date of birth, identification card number, passport number or such other personal identification number, nationality;
b) political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission by you of any offence;
c) marital status, family and/or next of kin information;
d) occupation, company name, designation, remuneration information, EPF number, SOCSO number, Income Tax Number, bank details, education, working experiences, training attended;
e) medical record (physical or mental), diagnosis, personal health information, and criminal history/record;
f) e-mail address, home and office address, contact number, photograph, CCTV images, other Personal Data you submitted to us from time to time and all other Personal Data we again collect from you on any subsequent occasion;
g) any other Personal Data required for the purpose set out in this Notice and as may be determined by order published in the Gazette.

4. PURPOSE OF PERSONAL DATA COLLECTION

We may process your Personal Data for the purpose as listed but not limited, whenever necessary and relevant:-

a) verification of identity, background and financial check, as may be necessary and appropriate;
b) monitoring compliance requirements by the regulatory bodies and our internal rules and policies;
c) contacting and communicating with you;
d) responding to your inquiries or complaints and resolving disputes;
e) providing our products and/or services to you;
f) preparing legal documents or contract to effect and validate the commercial transaction between you and us;
g) performing our contractual obligations with you and for the continuation of such obligations;
h) administer and give effect to your commercial transaction with us including but not limited to issuance of invoice and letters;
i) inviting you to participate in our events, programmes and activities;
j) conducting market evaluation, surveys/research, reporting, audit, compliance, risk management, and data analytics to improve our services and businesses;
k) providing you with information and/or updates on our businesses, products and/or services, e-newsletters and of our related corporations and business partners;
l) conducting investigation and crime prevention purposes;
m) processing employment applications including pre-employment checks;
n) determining and reviewing salaries, incentives, bonuses and other benefits;
o) determining promotion, career development, training, secondment or transfer, performance, health and safety administration, and security and access control;
p) to defend and enforce our rights under any relevant and applicable laws and regulations;
q) complying with legal, regulatory and disclosure requirements of any governmental and/or quasi-governmental departments or agencies, regulatory and statutory bodies, court order/direction, by-law, guideline, circular or code;
r) monitoring compliance requirements of any financial institutions or banks that are related to the commercial transactions between you and us;
s) for any other purposes that are required or permitted by any law, regulations, and/or guidelines as may be prescribed from time to time including such other purposes directly related to the foregoing.

5. FAILURE TO PROVIDE PERSONAL DATA

Failure to provide us such Personal Data will result as follows (but not limited to):-

a) unable to proceed with any verifications and checking;
b) unable to perform obligations under any potential and/or existing businesses and/or contract;
c) unable to maintain and develop our relationship with you;
d) unable to perform obligations under employment agreement;
e) unable to process employment application and any other applications submitted to us;
f) unable to carry out any other purposes as listed in this Notice and under the Act.

6. SAFEGUARD AND DISCLOSURE TO THIRD PARTY

6.1 We value the privacy and protection of your Personal Data seriously hence we endeavour to implement appropriate administrative, security safeguard and procedure in accordance with the applicable laws and regulations to prevent any unauthorized or unlawful processing of your Personal Data and any accidental loss and destruction of or damage to your Personal Data.

6.2 However, kindly take note that, certain Personal Data may be required to be disclosed to third parties (after all necessary steps taken), including but not limited to:-

a) our subsidiaries, related companies, affiliates, business partners, service providers (including without limitation our vendors, suppliers, agents and contractors);
b) our financial institutions, insurance companies, banks (including payment channels);
c) our professional advisors, consultants/agents and advocate & solicitors;
d) Royal Malaysian Police, governmental departments and/or agencies, regulatory and/or statutory bodies, as may be required;
e) your immediate family members and/or emergency contact person as may be notified to us from time to time;
f) any party explicitly authorized by you for the purposes stated in this Notice or under the Act;
g) any party nominated or appointed by us either solely or jointly with other service providers, data centres and/or servers, storage facility and records management service providers located within or outside Malaysia;
h) any party of bodies as permitted as the Act and regulations may be prescribed from time to time.

6.3 If you give us personal information about another person (or persons), we will take that to mean they have appointed and authorised you to act on their behalf.

7. RETENTION

Any Personal Data supplied by you will be retained by us as long as it is necessary and for the expedient and fulfilment of any purpose as stated above pursuant to our internal policies, regulatory requirements, legal and accounting requirements and as permitted by law.

8. RIGHT OF ACCESS AND WITHDRAWAL OF CONSENT

8.1 You are responsible to ensure the Personal Data provided to us is accurate, correct and up to date;

8.2 You have the right to request of limiting the processing of your Personal Data or to cease or not begin processing your Personal Data for purposes of direct marketing;

8.3 You have the right to withdraw your consent previously given to us (in full or in part) subject to any applicable legal restrictions, contractual conditions and a reasonable duration of time for the withdrawal of consent to be effected by providing us a notice in writing;

8.4 Subject to any exceptions under applicable laws, you may at any time hereafter request for access to, or for correction of your Personal Data, or seek further information from us.

All inquiries and request shall be addressed to the following person in charge:-

9. CHANGES ON NOTICE

We shall have the right to modify, update or amend the terms of this Notice at any time by issuing and placing the updated Notice on our website. By continuing to communicate with us or by continuing to use our services following the modifications, updates or amendments to this Notice, it shall signify your understanding and acceptance of such modifications, updates or amendments.

10. CONFLICT

In the event of any inconsistency between English version and Malay version of this Notice, the English version shall prevail.