Privacy Policy

Personal Data Protection Act 2010 CONSENT (hereinafter referred as to “PDPA Consent”)

STOLLE MALAYSIA SDN BHD

– Personal Data Privacy Notice –

This Personal Data Privacy Notice (“Notice”) is issued pursuant to Personal Data Protection Act 2010 (“Act”). It explains the type of data Stolle (M) Sdn Bhd may collect, use, disclose or otherwise process personal data of person in accordance with the applicable personal data law and regulations. This Privacy Notice applies to personal data in our possession or under our control, including personal data in the possession of organizations in which we have engaged to collect, use, disclose or otherwise process personal data for our purposes.

1. Collection of Personal Data
   We generally do not collect your personal data unless (a) it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us (your “authorised representative”) after (i) you (or your authorised representative) have provided consent to the collection and usage of your personal data for those purposes, or (b) collection and use of your personal data without consent is permitted or required by the PDPA or other laws. We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).
   
   Depending on the nature of your interaction with us, we may collect your personal data which range from:
   1. Contact information (e.g., name, Identity Card Number, email address, shipping address, phone number)
   2. Demographic information such as age, nationality, date of birth
   3. Payment information (e.g., bank account, debit or credit card numbers, payment service providers, payment service history)
   4. Information about your usage and interaction with our website.
   5. Consumer-generated content
   6. Photographs or Videos
2. Personal Data of Children
   We do not knowingly solicit or collect personal data from children below the age of 18. However, we may collect personal data about children below the age of 18 years of age from the parent or guardian directly, and with that person’s explicit consent. In these situations, you confirm that they have appointed you to act for them and to consent on their behalf to processing their personal data in accordance with this privacy notice.
3. Sources of Personal Data
   We generally collect personal data from individuals, including but not limited to our customers, business partners, employees, and other individuals such as job applicants. We would only collect personal data that has been provided to us voluntarily by you or via your authorized representatives.
   
   These personal data may be furnished to us from the following sources:
   1. Calls
   2. Websites: Consumer-directed websites operated by or for us, including sites that we operate under our own domains/URLs and mini-sites that we runs on third-party social networks such as Facebook or Instagram (“Websites”)
   3. Email, text, and other electronic messages: Interactions with electronic communications between you and us.
   4. Customer Service
   5. Offline Registration Forms. Printed or digital registration and similar forms that we collect via, for example, postal mail, in-store demos, point of sale, campaigns, contests, and events.
   6. Advertising Interactions. Interactions with our advertisements (e.g., if you interact with one of our third-party party websites, we may receive information about that interaction).
   7. Data from other sources: Third-party social networks (e.g., such as Facebook, and Google), market research, promotional partners, and public sources.
   8. On-Ground Events: Any on-ground events, campaigns, or promotions organized by us.
   9. Consumer-generated content: Any content that you create and then share with us on third-party social networks or by uploading it to one of our websites and apps, including the use of third-party social networks apps such as Facebook, Instagram, TikTok or YouTube. Examples include photos, videos, personal stories, or other similar media or content. When permitted, we collect and publish consumer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third-party social networking.
4. Purpose of Collection
   The collection and processing of personal data include but are not limited to the following purposes:
   1. in connection with any particular service or product offered by us or our business associates.
   2. verifying your identity;
   3. to administer and carry out our customer and prospective customer relationship management procedures;
   4. to facilitate your participation in, and our administration of, any events including contests, promotions or campaigns;
   5. to process and/or follow-up payments made by you or on your behalf for the purchases and/or rental of our products and/or services;
   6. maintaining our records of our customers and prospective customers and our internal record keeping;
   7. conducting marketing, client profiling and business development activities as well as market research and statistical analysis and customer surveys regarding our projects, products and/or services;
   8. processing your application under any of our programmes;
   9. to share any of your Personal Data with our joint venture/business partners to jointly develop products and/or services or launch marketing campaigns;
   10. for internship/employment application and recruitment;
   11. for follow-up action regarding any complaint, feedback, query or request received;
   12. complying with any legal or regulatory requirements and to make the necessary disclosures under the requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular and/or code which are applicable to us and for the prevention of crime;
   13. for detecting, investigating, preventing and reporting fraudulent, prohibited or illegal activities;
   14. for any other purposes for which you have provided the personal data;
   15. for any other incidental business purposes; and
   16. for other purposes required to operate, maintain and better manage our business and your relationship with us, which we notify you of at the time of obtaining your consent; and you agree and consent to us using and processing your Personal Data for the Purposes in the manner as identified in this Policy. If you do not consent to us processing your Personal Data for one or more of the Purposes, please notify us at the contact details as specified in Clause 16 below.
       
       The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).
5. Processing of Personal Data
   Unless for business-related needs including but not limited to data backup, we generally do not transfer your personal data to other jurisdictions. However, if we do so, we will obtain your consent for the transfer to be made and we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the applicable personal data protection laws and regulations.
   
   In relation to sensitive personal data, we will only process such data where:
   1. Explicit consent to the processing of your sensitive personal data for specific purposes is given; or
   2. Such processing is legally required by, or necessary for us or for you to exercise rights under, employment and under other applicable law.
6. Disclosure of Personal Data
   Generally, we will keep the personal data provided to us as confidential. Nevertheless, you consent to the following disclosures of the personal data by us to these classes of third parties.
   1. Our business partners include affiliates, distributors, agents, and merchants that provide, supply, distribute or deal in general with our services or products in connection with our business;
   2. Our business associates or third-party service or product providers as we deem necessary or appropriate, including outsourced property management or marketing companies or entities.
   3. Credit reporting agencies. To the extent permitted by applicable law, credit reporting agencies and debt collectors are external companies that we use to help us to verify your creditworthiness (in particular for orders with invoice) or to collect outstanding invoices.
   4. Third-party companies using Personal Data for their own marketing purposes. Except in situations where you have given your consent, we do not license or sell your personal data to third-party companies for their own marketing purposes. Their identity will be disclosed at the time your consent is sought.
7. Extent of disclosure of personal data
   Your personal data may be disclosed by us for any purpose other than the purpose listed above, only under the following circumstances:
   1. the data subject has given his consent to the disclosure.;
   2. the disclosure —is necessary for the purpose of preventing or detecting a crime, or for the purpose of investigations; or was required or authorized by or under any law or by the order of a court;
   3. the data user acted in the reasonable belief that he had in law the right to disclose the personal data to the other person.
   4. the data user acted in the reasonable belief that he would have had the consent of the data subject if the data subject had known of the disclosing of the personal data and the
   5. circumstances of such disclosure; or
      the disclosure was justified as being in the public interest in circumstances as determined by the Minister.
8. Marketing
   The information you provide to us, as well as information we collected about you indirectly, may be used by us for marketing purposes. We may extract, disclose and release the information in the possession of us relating to you as mentioned in this Privacy Notice.
   
   Additionally, the individual entities within us may contact you about products, services and offers, which we believe may be of interest to you. Further, please also be informed that we will only disclose your personal data (which will not include information relating to your affairs or accounts) to third parties such as our business partners for marketing and promotional purposes where your express prior consent has been obtained and subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to us.
   
   You may inform us at any time if you do not wish to receive direct marketing communications from us by notifying us in the manner prescribed in clause 16 below or by the opt-out function on the email sent to you. Your latest written instruction to us will prevail.
9. Security measures
   We are committed to taking steps to protect the Personal Data you provide to us, including administrative, technical, and physical measures to safeguard your Personal Data against loss, theft, and misuse, as well as against unauthorized access, disclosure, usage, alteration, and destruction.
   
   You should be aware, however, that no method of transmission over the internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your personal data and are constantly reviewing and enhancing our information security measures.
10. Use of cookies
    We use cookies on our website to store information for your convenience, so you do not have to re-enter your data upon each visit. Cookies and other technology are also used to monitor the usage of the various features and services of our website, which over time give us information to improve our website and to advertise and market our products more effectively. When you visit our website, as with most all websites, we automatically log the domain name of where you came from, the Internet Protocol (IP) address your computer is currently using, the type of web browsers that you use, Internet service provider (ISP), referring and exit pages, operating system, date/time stamp, and clickstream data.
    
    This information allows us to operate the website by serving the pages you visit, and we may use the information for statistical purposes and to track usage patterns. In addition, we use the data we collect to make various determinations in our systems. We may also use this information to personally identify you, the user, and/or the user’s organization, for reporting purposes and/or to serve relevant information to you during future browsing sessions.
    
    We treat information collected by cookies and other technologies as Non-Personal Data. However, to the extent that IP addresses or similar identifiers are considered Personal Data by local law, we also treat these identifiers as Personal Data. Similarly, to the extent that Non-Personal Data is combined with Personal Data, we treat the combined information as Personal Data for the purposes of this Privacy Policy.
11. Links to Other Sites
    Links to other sites are provided for your convenience and information. These sites may have their own privacy statement in place, which we recommend you review if you visit any linked websites. We are not responsible for the content of the linked sites or any use of the site. Our Privacy Policy applies solely to the information collected by us.
12. Your Rights
    1. Right to request access to personal data
       You are entitled to request access to your personal data that is processed by us with reasonable notice. This can be done by you making a written application to us requesting such information. Upon request and within a reasonable timeframe of receiving your request in writing, we will provide you with the requested information. We reserve the right to charge a fee (representing our costs in administering your request) for supplying such information. We will inform you of the fee before processing your request.
    2. Right to request correction of personal data
       You are entitled to request the correction of your personal data, which is inaccurate, incomplete or out-of-date, collected and held by us with reasonable notice. We will also, where you have requested that we correct an error or omission in the personal data about you that is under our possession or control, correct such data as soon as practicable and send the correct personal data to every organisation to which the personal data was sent within a year before your request was made.
    3. Right to limit/withdraw consent of the processing of your personal data
       Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you, and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner prescribed in Clause 16 below.
    4. Right to prevent processing for direct marketing purposes.
       You are entitled to limit our processing of your personal data by expressly withdrawing in full, your consent given previously, in each case, including for direct marketing purposes subject to any applicable legal restrictions, contractual conditions, and within a reasonable time period.
13. Contact Us
    If you have any questions or concerns about our privacy practices, we welcome you to contact us by 
    Email Address : [email protected]
    Telephone : 03 2856 3678
    Address : 5th Floor, V06-05-01/02, Signature 2 (V06). Lingkaran SV, Sunway Velocity, 55100 Kuala Lumpur, Malaysia

Last updated on: 11 September 2023