Mitrajaya Holdings Berhad and its related companies ("Mitrajaya Group", "we" or "us") , respect and are committed to protecting your Personal Data and privacy in accordance with the Personal Data Protection Act 2010, as amended from time to time ("PDPA"). This Personal Data Protection Notice ("Notice") explains how we collect, use, disclose and otherwise process Personal Data in connection with our business activities, products, services, websites, transactions and recruitment activities.
For the avoidance of doubt, the relevant Mitrajaya Group entity which determines the purposes and means of processing your Personal Data in connection with a particular product, service, transaction, employment or recruitment matter shall be the Data Controller in respect of such processing.
We may amend this Notice from time to time to reflect changes in applicable laws, regulatory requirements, our business operations or Personal Data processing practices. The latest version of this Notice will be made available on our website.
COLLECTION OF PERSONAL DATA
The Personal Data collected by us may include, but is not limited to, the following:
(a) Personal Data
Information such as your name, date of birth, identification supporting documents (including NRIC or passport number), gender, nationality, current private and/or business address, telephone and/or mobile phone number(s), email address(es), occupation details, financial and transaction-related details, CCTV recordings, and any other information reasonably required in connection with your dealings with Mitrajaya Group and our respective business activities.
For recruitment purposes, this may also include your curriculum vitae or resume, qualifications, employment history, references and other information relevant to your application.
We may collect your Personal Data directly from you or your authorised representatives and, where applicable, from other lawful sources, including companies within Mitrajaya Group, business partners, recruitment agencies, referees, publicly available sources, government or regulatory authorities, financial institutions, professional advisers and service providers. When you use our websites, we may also automatically collect certain technical information, including through cookies and IP addresses.
(b) Sensitive Personal Data
Sensitive Personal Data may include information relating to your physical or mental health or condition, political opinions, religious or similar beliefs, the commission or alleged commission of any offence, and biometric data such as fingerprints or facial recognition data.
Where we process Sensitive Personal Data, we will do so in accordance with the requirements of the PDPA and applicable law.
PURPOSES OF COLLECTING AND PROCESSING PERSONAL DATAYour Personal Data may be collected and processed for purposes including, where applicable:
- facilitating property transactions and providing related products and services;
- managing customer relationships, enquiries, requests, complaints, payments and transactions;
- managing our business operations, contractual relationships, communications and internal records;
- recruitment, employment and human resource administration;
- administering, maintaining, securing and improving our websites, systems and services;
- preventing or detecting fraud, security incidents, unlawful activities or misuse of our systems and services;
- complying with applicable legal, regulatory and governmental requirements and responding to lawful requests from relevant authorities;
- establishing, exercising or defending our legal rights and claims; and
- any other purposes directly related to the foregoing agencies or other competent authorities.
Subject to your consent or where otherwise permitted by applicable law, we may also process your Personal Data to provide you with information regarding our products, services, promotions, events, launches and developments. You may opt out of receiving marketing communications at any time by contacting us using the contact details stated in this Notice.
PROVISION OF PERSONAL DATAWhere the provision of Personal Data is required for the relevant purpose, failure to provide such Personal Data may affect or prevent us from providing the relevant product or service, processing a transaction or application, or otherwise dealing with your request.
DISCLOSURE OF YOUR PERSONAL DATAWe may disclose your Personal Data, where necessary for the purposes described in this Notice or where required or permitted by applicable law, to companies within Mitrajaya Group, our business partners, agents, contractors, consultants, professional advisers and service providers, financial institutions, government departments and agencies, statutory or regulatory authorities, law enforcement agencies and other competent authorities. We may also disclose your Personal Data to any other person or organisation where such disclosure is reasonably necessary for the purposes described in this Notice or is required or permitted by applicable law.
DATA INTEGRITY, SECURITY AND RETENTIONWe will take reasonable and practicable steps to protect your Personal Data in accordance with the PDPA and applicable law and to ensure that your Personal Data is accurate, complete, not misleading and kept up to date, having regard to the purposes for which it is processed.
We will retain your Personal Data only for as long as necessary for the relevant purposes or as required or permitted by applicable law. Personal Data which is no longer required will be securely disposed of, deleted or anonymised, as appropriate.
CROSS-BORDER TRANSFER OF PERSONAL DATAWhere it is necessary to transfer your Personal Data outside Malaysia, we will take reasonable steps to ensure that such transfer is carried out in accordance with the PDPA and applicable requirements relating to the cross-border transfer of Personal Data.
RIGHTS OF DATA SUBJECTSSubject to the PDPA and any applicable exemptions or limitations, you may:
- request access to or correction of your Personal Data;
- withdraw your consent where the processing of your Personal Data is based on consent;
- require us to cease or not begin processing your Personal Data for direct marketing purposes; and
- exercise any other rights available to you under the PDPA, including any applicable right to data portability.
You may exercise your rights or update your Personal Data by contacting us using the contact details stated below.
PERSONAL DATA BREACHIn the event of a Personal Data breach, we will take appropriate action and make any notification to the Personal Data Protection Commissioner and affected data subjects as required under the PDPA.
DATA PROTECTION OFFICERFor enquiries concerning this Notice, the processing of your Personal Data, or the exercise of your rights under the PDPA, you may contact our Data Protection Officer at:
Data Protection OfficerMitrajaya Holdings Berhad
No. 9, Block D, Pusat Perdagangan Puchong Prima
Persiaran Prima Utama, Taman Puchong Prima
47150 Puchong, Selangor
Email: dpo@mitrajaya.com.my