Personal Data Protection Notice Perbadanan Nasional Berhad (PERNAS)
Pernas is committed to ensure the processing of personal data by Pernas is in accordance with the Personal Data Protection Act 2010 (“PDPA”). This Notice is issued pursuant to PDPA’s requirement to all persons who enter into any dealing or transaction with Pernas.
For the purpose of this Notice, Personal Data includes data collected and to be collected before and after the issuance of this Notice.
Type of personal data we collect
The personal data which is controlled, processed and/or used by Pernas including but not limited to:-
- name, race, religion, date of birth, thumb print, age, gender, address (letter and email), telephone number, occupation, contact details, identity card number, passport number, marital status, net worth, employment details, academic qualification, salary information and bank account details, details of spouses, dependents and immediate family members. You hereby warrant that you are authorized to provide their personal data to us and you have obtained consent for their personal data to be processed and used in the manner set out in this Privacy Notice;
- images (photographs and video recordings); and
- other information relevant to the purpose of collection including your sensitive personal data such as physical or mental health or medical condition, religious beliefs or other beliefs of a similar nature, medical records and conduct or alleged conduct of any offense or criminal record (if any); (collectively referred to as “Personal Data”).
How personal data is collected by Pernas
Pernas may collect Personal Data directly from you where it is necessary, reasonable or practical to do so. Pernas may also obtain your Personal Data in various other ways, such as:
- through submitted application forms at the start of or during business transaction and from correspondences with you.
- when you sign up for or use one of any services/products that we provide or when you register an account at Pernas websites;
- the contents of all supporting documents submitted to Pernas;
- when you enter into any commercial transactions with Pernas;
- through customer surveys or when you sign up for any of our competitions, training or promotions;
- if you contact us or we contact you by phone call, we may monitor or record the phone calls for quality assurance and security purposes; and
- from publicly available sources, public domain or online platforms.
Failure to supply your personal data
The supply of your Personal Data to Pernas is necessary in connection to the provision of the business opportunity we offer. Failure to supply such data may result in Pernas being unable to process your application or affect our ability to perform our obligations under any potential or existing contract and/or your ability to enjoy the full range of benefits from us and/or failure to comply with regulatory requirements.
Purposes of collecting and processing your personal data
Pernas may need to process your Personal Data for, among other purposes, the following but not limited to:
- to provide services and products as requested by you;
- to notify you of any suitable and relevant services and;
- to monitor and manage the existing accounts and facilities you have entered with Pernas;
- performing obligations under or in connection with your contract/transaction with Pernas;
- maintaining accurate and up-to-date records of Personal Data you have provided to Pernas;
- for internal record keeping, internal investigations, audits, risk management or security;
- monitoring compliance with our internal rules and policies and adherence to our Internal Guidelines and monitoring activities within the scope of acceptable usage of Pernas;
- to connect with the operation, administration, development or enhancement of Pernas’s business including to support and/or or assist in any of Pernas and its associates’ business;
- where Pernas considers, required by law, that such use or disclosure is necessary to respond to any claims or legal process, or where Pernas suspects that fraud or unlawful activity has been, is being or may be engaged in;
- where a third party requires the Personal Data in order to perform functions or services as required by Pernas;
- where a third party requires in order for such third party to perform functions or obligations as required under the laws, rules, regulations, by laws and/ or guidelines or as required by any governmental and/or non-governmental authorities, agencies or departments (for example, to external auditors who are auditing Pernas’s internal processes). The provision of references/reports to financial institutions and qualified legal representatives;
- performing statistical analysis for various objectives;
- to enforce our rights under the applicable laws and to defend our rights including but not limited to any actions relating to the termination of contract and/or legal proceedings; and
- any other purposes not specifically mentioned herein but that is required to be carried out in connection with the day-to-day business of Pernas.
Disclosure of personal data to third parties
We may disclose your Personal Data to our employees, our affiliates, our strategic partners, our service providers/vendors, our appointed agents, our consultants, our legal advisors, our external auditors and any person who is under a duty of confidentiality to Pernas.
If necessary and expedient, we may also disclose your Personal Data to any other third parties including but not limited to professional bodies, banks, financial institutions, any governmental and/or non-governmental authorities, agencies, bodies or departments. We shall disclose your Personal Data to whom we are compelled or required to under the law.
Your Personal Data may be transferred for any of the purposes mentioned under Clause 4 to any of the above-mentioned parties who are located within or outside Malaysia.
Where Pernas appoints a third party service provider to process Personal Data on behalf of Pernas, Pernas will instruct such third party service provider to only process such Personal Data for the specific purposes as required by Pernas. If we disclose any of your Personal Data to any person, we will require such person to appropriately safeguard the Personal Data provided to them.
Retention of personal data
The Personal Data will be retained by Pernas as long as it is necessary and expedient for the fulfilment of any purpose as stated above pursuant to our internal practices, regulatory requirements, legal requirements and accounting requirements.
Third party data
Where you shall be required and have provided the Personal Data relating to others including that of spouse, related parties, contact person and referees for this purposes, you shall undertake and be deemed to have obtained their consent or that you are entitled to provide their information to Pernas.
Integrity & security
Pernas are committed in ensuring that your Personal Data is stored securely in our databases and in our offices. All reasonable efforts and practical steps are made to ensure that any Personal Data held by Pernas is protected against any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. To ensure that your Personal Data in our retention is accurate and up-to-date, you are advised to notify us promptly in the event of any inaccuracy or any changes to your Personal Data.
Access & correction
You are responsible for ensuring that the Personal Data you provide us is accurate, complete and not misleading and that such personal data is kept up to date. If you wish to request access to or to rectify your Personal Data, you may send your request in writing to the following:
| Perbadanan Nasional Berhad | |
|---|---|
| Address: | Level 16, Menara Pernas, Tower 7, Avenue 7, Bangsar South City, No.8, Jalan Kerinchi, 59200 Kuala Lumpur |
| Telephone: | +603 – 2082 7788 |
| Email: | webmaster@pernas.my |
| Website: | www.pernas.my |
Your request is subject to the limits specified under the law, applicable conditions and reasonable period of time. Pursuant to the PDPA, we may refuse to comply with your request for access or correction to your Personal Data, and if we refuse to comply with such request, we will inform you of our refusal and the reason for our refusal.
Acknowledgement and consent
Please note that from time to time, we may request for new Personal Data from you. By providing us with your Personal Data or continuing to communicate with Pernas, we shall regard that you have consented to the processing of such Personal Data. You are deemed to have consented and agree to the terms above with respect to our processing of your Personal Data as described in this Notice and that you declare/acknowledge that you have read, understood and accepted this Notice and the statements and terms herein. Pernas shall have the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on Pernas website. By continuing to communicate with Pernas, following the modifications, updates or amendments to this Notice, it shall signify your acceptance of such modifications, updates or amendments.