(Pursuant to sections 7 and 6, respectively, of the Personal Data Protection Act 2010)
For more information, you may contact:
IRIS Corporation Bhd 199401016552 (302232-X)
IRIS Smart Technology Complex
Technology Park Malaysia, Bukit Jalil
57000 Kuala Lumpur, Malaysia.
Telephone: +603 89960788
PERSONAL DATA PROTECTION NOTICE
IRIS Corporation Berhad respects and is committed to the protection of your personal information and your privacy.
The Personal Data Protection Act 2010 (‘PDPA’) is an Act that regulates the processing of personal data in regards to commercial transactions. It was gazetted in June 2010. On Personal Data Protection Act (PDPA) in Malaysia November 15, 2013, the Personal Data Protection Act 2010 (PDPA) came into force in Malaysia with the objective of protecting the personal data of individuals with respect to commercial transactions. This Act applies to any person who collects and processes personal data in regards to commercial transactions.
This Personal Data Protection Notice (“Notice”) describes how IRIS Corporation Berhad (Company No. 302232-X) and its respective subsidiaries and associate companies (“IRIS“) use your Personal Data.
For the purposes of this Notice:
IRIS Corporation Berhad and its group of companies is referred to as “we”, “us”, “our” or “ours”. Any person using and accessing this Site, the Content or the Services is referred to as the “User”, “you” or “yours”.
Acknowledgement and Consent
By communicating with us, using our services, purchasing products or services from us or by virtue of your engagement with us, you acknowledge that you have read and understood this Notice and agree and consent to the use, processing and transfer of your Personal Data by us as described in this Notice.
We shall have the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on the Websites. By continuing to communicate with us, by continuing to use our services, purchasing products from us or by your continued engagement with us following the modifications, updates or amendments to this Notice, such actions shall signify your acceptance of such modifications, updates or amendments.
In the event of any conflict between the English and other language versions, the English version shall prevail.
Collection of Personal Data
“Personal Data” means information about you, from which you are identifiable, including but not limited to your name, identification card number, birth certificate number, passport number, nationality, address, telephone number, fax number, bank details, credit card details, race, gender, date of birth, marital status, resident status, education background, financial background, personal interests, email address, your occupation, your designation in your company, your company details, the industry in which you work in, any information about you which you have provided to us in registration forms, application forms or any other similar forms and/or any information about you that has been or may be collected, stored, used and processed by us from time to time and includes sensitive personal data such as data relating to health, religious or other similar beliefs.
In order to provide our products and services to you, it is necessary for us to process your Personal Data for the Purposes and Additional Purposes outlined below.
Sources from which your Personal Data may be obtained
In addition to the Personal Data you provide to us directly, we may collect your Personal Data from a variety of sources such as:
- Fill up and completing application or registration forms or any other similar forms via online or otherwise;
- When you register at the Site(s) as a user;
- From publicly available sources such as directories,
- From social media platforms’ pages, if you subscribe, follow, like or are a fan of such pages;
- From credit reporting agencies;
- When you interact and communicate with us at any events, activities or through social media platforms;
- When you enter contests organised by us ,
- From various entities or divisions under IRIS;
- By using IRIS digital, web and social media sites, which includes all digital media operated by IRIS or its service providers and websites of brands that are owned by IRIS (“Websites“).
- Your personal data may also be collected from cookies used on the Websites;
- From our server logs when you log into the Websites, such as details of internet protocol address; or
- From telephone log information when you call us, such as your telephone number.
Purposes of Processing
We may use and process your Personal Data for IRIS business, and administrative purposes of which shall include, without limitation the following (“the Purpose”):
Where you are our customer or our clients:
- to process your registration, subscription, purchases of our products and services;
- to perform our obligations in respect of any contract entered into with you;
- to provide you with any services or products you have requested;
- to process your purchase or request for advertising space;
- where you have requested materials from the resource centre or library, to process your request, to deliver the materials to you, to provide you a license for the content you wish to use;
- to process your participation in any events and activities including focus groups, research studies, contests, promotions, polls, surveys, any productions or events organised by IRIS;
- process, manage or verify your order, purchase or booking of our services and products;
- to validate your purchases and process payments relating to any products or services you have requested;
- to understand and analyse our sales as well as your needs and preferences;
- to develop, enhance and provide products and services to meet your needs; and
- to process changes to our services and products.
Where you are an agent, vendor, supplier or service provider:
- for the purposes of engaging you to provide services or products;
- to facilitate or enable any checks as may be required by us in order to engage you;
- to process payments for charges and taxes of the products or services that you have provided to IRIS; and
- to contact you or your company.
- to respond to questions, comments and feedback from you;
- to communicate with you for any of the purposes listed in this Notice;
- to maintain, improving or enhance the delivery of our customer service;
- for internal administrative purposes, such as auditing, data analysis, database records;
- for purposes of investigation, detection, prevention and prosecution of security breaches, crime or fraud;
- for us to comply with its obligations under law; and
- to maintain appropriate records for internal administrative purposes.
By using the Websites, our products and services, you agree and consent that we use, process and store your Personal Data for the Purposes and in the manner as identified in this Notice.
Marketing and promotional purposes
We may also use and process your Personal Data for other purposes such as (“Additional Purposes”):
- To send you alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings from us, our partners, sponsors or advertisers;
- To notify and invite you to events or activities organised by us, our partners, sponsors or advertisers;
- To process your registration to participate in or attend an event or activity and to communicate with you regarding your attendance at the event or activity;
- To share your Personal Data amongst our holding company, affiliates, subsidiaries, associate companies and jointly controlled entities for the Purpose and to market their products, services, events or promotions; and
- To share your name and contact number with our partners, advertisers, event companies or sponsors who may communicate with you, for the purpose of marketing and promotions;
by way of postage, personal delivery, courier service, e-mail, call or message either through electronic devices or mobile applications, or any other platforms on the internet.
Transfer of Personal Data
Your Personal Data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia, to companies within the IRIS group of companies (including the holding company, subsidiaries, associated, related and affiliated companies as well as their subsidiaries, associated and affiliated companies, both local and international),You understand and consent to the transfer of your Personal Data as described herein for the purpose of fulfilling our obligations to you.
Disclosure to Third Parties
Your personal data may be transferred, accessed or disclosed to third parties for the Purposes and Additional Purposes. Further, we may engage other companies, service providers or individuals to perform functions on its behalf, and consequently may provide access or disclose to your Personal Data to such service providers or third parties. The third parties referred to in this Section include (without limitation):
- Trade agents such as resellers and product/service agents;
- Our partners and vendors, which include parties with whom we collaborate with for certain events, programmes and activities;
- Event management companies and event sponsors;
- Marketing research companies;
- Service providers, including, information technology (IT) service providers for infrastructure, software and development work;
- Professional advisors and external auditors, including legal advisors, financial advisors and consultants;
- Other entities within IRIS; and
- Governmental authorities to comply with statutory, regulatory and governmental requirements.
Your Personal Data may also be shared in connection with a corporate transaction, such as a sale of a subsidiary or a division, merger, consolidation, or asset sale, or in the unlikely event of winding-up.
Withdraw or revoke consent
Please notify us in writing if you wish to withdraw or revoke your consent from our use and process your Personal Data for the Purposes and the Additional Purpose as stipulated herein.
If you wish to unsubscribe to the processing of your Personal Data for Additional Purposes by us, please click on the link “Unsubscribe” which is embedded in the relevant email in order not to receive any email in the future.
Access & Correction Requests and Inquiries, Limiting the Processing of Personal Data
You may submit your complaints, request for access to and/or request correction of your Personal Data, request to limit the processing of your Personal Data for the Additional Purposes and/or make any inquiries regarding your Personal Data by contacting:
- Designation : General Manager, Marketing and Corporate Communications
- Address : IRIS Smart Technology Complex, Technology Park Malaysia, 57000 Kuala Lumpur
- Email : email@example.com
- Telephone Number : 603 8996 0788
- Fax Number : 603 8996 0441
- Operating Hours : 8:30am – 5:30pm from Mondays – Fridays (excluding Public Holidays)
We may impose a fee for processing the aforesaid requests.
In respect of your right to access and/or correct your Personal Data, we have the right to refuse the your requests to access and/or make any correction to your Personal Data for the reasons permitted under law, such as where the expense of providing access to you is disproportionate to the risks to your or another person’s privacy.
If you do not wish for your Personal Data to be collected via cookies on the Websites, you may deactivate cookies by adjusting your internet browser settings to disable, block or deactivate cookies, by deleting your browsing history and clearing the cache from your internet browser.
Personal Information from Minors and Other Individuals
As a parent or legal guardian, please do not allow the minor (individuals under 18 years of age) under your care to submit Personal Data to us. In the event that such Personal Data is provided to us, you hereby consent to the processing of the minor’s Personal Data and personally accept and agree to be bound by this Notice and take responsibility for his or her actions.
Consent from third parties
In some circumstances you may have provided personal data relating to other individuals (such as your spouse, family members or friends) and in such circumstances you represent and warrant that you are authorised to provide their personal data to us and you have obtained their consent for their personal data to be processed and used in the manner as set forth in this Notice.
Links to Third-Party Websites