Personal Data Protection Policy
Berjaya respects the privacy of individuals and recognises the importance of the personal data you have entrusted to us.
We are committed to adhering to the provisions and principles of the Personal Data Protection Act 2012. It is our responsibility to properly manage, protect, process and disclose your personal data.
This Personal Data Protection Policy governs the collection, use and disclosure of personal data submitted to Berjaya, and describes how Berjaya collect and handle personal data and comply with the requirement of Personal Data Protection Act in Singapore (“PDPA”).
1. COLLECTION OF PERSONAL DATA
1.1. We collect personal data from clients, business contacts, partners, personnel, contractors and other individuals. Such personal data may be provided to us in forms filled out by individuals, face to face meetings, email messages, telephone conversations, trade show, through our websites or provided by third parties. If any individuals contact us, we may keep a record of that contact.
1.2. We collect these personal data when it is necessary for business purposes or to meet the purposes for which the information was submitted.
1.3. You may have provided the Personal Data to us personally or authorised other individuals to provide the Personal Data to us and consent (on your behalf) to our collection of your Personal Data from these individuals. These individuals could be your superiors, employees, subordinates, colleagues and your family members.
1.4. If you are acting as an intermediary or otherwise acting on behalf of third party or supplying data to us as a third party, you undertake that you are an authorised representative or agent of such third party individual and that you have obtained all necessary consents from such third party individual to the collection, processing, use and disclosure by Berjaya of their personal data for the purposes described in the section “Purposes for which we collect and use Personal Data”, or other purposes for which consent has been sought and obtained.
2. USE AND DISCLOSURE OF PERSONAL DATA
2.1. Berjaya generally collect and use personal data for the following purposes:
a. Evaluating suitability for admission, enrolling, providing information courses schedule and other training related-details via various means, including postal mail, electronic mail, SMS or MMS, fax and/or voice calls
b. Administering and/or managing relationships with Berjaya (including responding to enquiries, the mailing of correspondence, statements or notices which could involve the disclosure of certain personal data to bring about delivery of the same)
c. Carrying out due diligence or other screening activities (including background checks) in accordance with legal or regulatory obligations or risk management procedures that may be required by law or put in place by Berjaya, including the obtaining of references and/or other information from prior educational institutions and employers
d. Responding to requests for information from government or public agencies, ministries, statutory boards or other similar authorities or non-government agencies authorised to carry out specific Government services or duties
e. Carrying out market-related, evaluative or similar research and analysis for Berjaya’s operational strategy and policy planning purposes, including providing data to external parties for Berjaya programme evaluation and to participants’ former academic institutions and to partner institutions for jointly-administered programmes
f. Processing and administering applications for exchange programmes, internships and other activities which may include the disclosure of information
g. Processing, administering and conferring awards of prizes, medals, scholarships, classes of honours and other marks of distinction and publication or releasing of information on the same
h. Processing applications for and administering career related activities, events, programmes, internships, employment opportunities and share information with companies (whether local or overseas) for purposes of recruitment, internship, industrial attachment, job placement and research support
i. Taking photographs and/or videos (whether by Berjaya staff or third party photographers and/or videographers) during events or seminars organised by Berjaya or its affiliates for publicity purposes
j. Providing marketing, advertising and promotional information via postal mail, electronic mail, SMS or MMS, fax and/or voice calls if consented to is indicated in the registration form and/or other methods of consent notification
k. Any other purposes not related to those listed above or in the registration form to which you consented, which Berjaya may inform you of in writing from time to time, but for which Berjaya will seek your separate consent.
2.2. You may choose to unsubscribe from Berjaya mailing lists, registrations or elect not to receive further marketing information from us through unsubscribe function in that email to notify us or by contacting our Data Protection Officer via email to dataprotection@berjayacademy.com. Such requests will be processed within 30 days.
2.3. Berjaya does not disclose personal data to third parties except when required by law, when we have the individual’s consent or deemed consent or in cases where we have engaged third parties such as data intermediaries or subcontractors specifically to assist with our activities. Any such third parties whom we engage will be bound contractually to keep all information confidential.
3. ACCESS TO AND CORRECTION OF PERSONAL DATA
3.1. Berjaya will provide the individual with access to and/or correction of their personal data or other appropriate information on their personal data in accordance with the requirements of PDPA. You may submit your request via email to our Data Protection Officer: dataprotection@berjayacademy.com.
3.2. Berjaya will respond to your access request as soon as reasonably possible. Should Berjaya not be able to respond to your access request within thirty (30) days after receiving your access request, Berjaya will inform you via email within thirty (30) days of the time by which Berjaya will be able to respond to your request.
3.3. Berjaya may charge for a request for access in accordance with the requirements of the PDPA.
4. WITHDRAWAL OF CONSENT
4.1. Upon reasonable notice being given by an individual of his withdrawal of any consent given or deemed to have been given in respect of our collection, use or disclosure of his personal data, we will inform the individual of the likely consequences of withdrawing his consent.
4.2. Berjaya will cease to retain your personal data, or remove the means by which the data can be associated with you, unless it is required or authorised under applicable laws.
5. PROTECTION OF PERSONAL DATA
5.1. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, Berjaya have introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption to secure all storage and transmission of personal data by us, and disclosing personal data both internally and to our authorised third party service providers and agents only on a need-to-know basis.
5.2. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, Berjaya strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
6. ACCURACY OF PERSONAL DATA
6.1. Berjaya generally rely on personal data provided by you (or your authorised representative). We will make a reasonable effort to ensure that personal data collected by us or on our behalf is accurate and complete.
7. RETENTION OF PERSONAL DATA
7.1. Berjaya may retain your personal data for as long as it is necessary to fulfil the purposes for which they were collected, or as required or permitted by applicable laws.
7.2. Berjaya will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purposes for which the personal data were collected, and are no longer necessary for legal or business purposes
8. TRANSFERS OF PERSONAL DATA OUTSIDE OF SINGAPORE
8.1. Berjaya generally do not transfer your personal data to countries outside of Singapore. However, if Berjaya do so, Berjaya will obtain your consent for the transfer to be made in accordance with the requirements of the PDPA.
9. DATA PROTECTION OFFICER
9.1. You may contact Berjaya Data Protection Officer if you have any enquiries or feedback on our personal data protection via email to dataprotection@berjayacademy.com
10. EFFECT OF POLICY AND CHANGES TO POLICY
10.1. This Policy applies in conjunction with any other policies, notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data.
10.2. Berjaya may revise this Policy from time to time without any prior notice. The effective date will be stated at the end of this policy.
EFFECTIVE: 1 April 2020