This Privacy Policy (hereinafter referred to as the “Policy”) was elaborated by Lembah Sari Sdn Bhd, having its registered office at Level 8, Menara Mudajaya, No. 12a, Jalan PJU 7/3, Mutiara Damansara, 47810 Petaling Jaya, Selangor Darul Ehsan (“PROVIDER” or “we”), to provide a detailed description of our approaches to processing of personal data that we collect and process when you use our mobile application (“Setem Cukai App”).
While processing your personal data in connection with the App use, being a personal data controller PROVIDER acts in accordance with the laws and regulations of Malaysia.
Please note that in some cases PROVIDER may perform processing of your personal data with the usage of the App under assignment of the third party. Such third party shall ensure legal grounds for transfer and further processing of your personal data by PROVIDER.
This Policy is governed by the Malaysia Personal Data Protection Act 2010 (Act 709). All terms used in this Policy shall have meaning defined in the Malaysia PDPA.
When providing personal data, you agree to their processing in accordance with the provisions determined by this Policy.
What categories of personal data do we process and for what purposes? The purpose of this App (“Purpose”) is to enable you the verification of stamps delivered by the operators for Alcohol and Tobacco based products (“Products”) that originate from the operators (the “Stamp”). This app is limited to that Purpose. This App is not deemed to provide any information on the use or distribution of the Products nor on the consequences of such act. This App is not deemed to provide any additional information on PROVIDER’s or its clients’ products. We will process only those information about you which is compatible with this purpose, including: email address and geolocation. Geolocation is captured when a work order is initiated.
When using the App, you do not have to provide us with any information about yourself, and we will not process your personal data, with the exception of information collected automatically (as described in the Section 4 of this Policy).
You can also contact us directly using the appropriate functionality of the App. By contacting us, you confirm that you agree to the processing of your personal data in accordance with the conditions defined in this Privacy Policy. To process your request, we can only collect and process personal data that is strictly necessary to prepare an appropriate response.
Legal grounds for processing your personal data: PROVIDER processes personal data only if the relevant legal grounds for such processing exist. In addition to legal grounds described in Section 1 of this Policy above, PROVIDER processes your personal data in the following cases:
How do we process your personal data? We perform the processing of your personal data both with and without the use of automated means (mixed processing). When processing your personal data, we perform the following actions (operations) on such personal data: collection, recording, systematization, accumulation, storage, specifications (updating, modification), retrieval, use, transfer (provision, access), including depersonalization, blockage, deletion or destruction of personal data.
Information about you that is collected automatically. Use of cookies: To improve the App functioning and to make it easier to use, PROVIDER may use special cookies technology, as well as other similar tools.
Cookies are small files that the App stores on your device and use them to record certain actions on the App by way of storing data that may be updated and restored. Those files are stored on your device and contain data, harmless to your equipment. They are used to record your preferences, such as the selected language and access details, as well as to personalize the App for you.
Since cookies may include your personal data, we will request your separate consent to processing of cookies, as well as the use of other similar tools. If you fail to give such consent, we will process only technical cookies that are necessary for the proper functioning of our App. You may withdraw your consent to processing cookies and delete cookies stored on your device.
How long do we process your personal data? We process your personal data no longer than it is necessary to achieve the purposes of processing established by the Policy.
Once the purposes of personal data processing have been achieved, PROVIDER will destruct personal data (and cause such destruction by third parties involved in processing) within 30 days. We will also cease processing of your personal data (and cause destruction of such data by third parties involved in processing), if you withdraw your consent to data processing (where such consent is the only legal ground for processing of your personal data).
Please bear in mind that in certain cases we may continue processing your data after you have withdrawn your consent, where such processing is necessary to perform our duties arising from applicable laws or where such processing is required to exercise rights and legitimate interest of PROVIDER and/or any third parties.
If you want to withdraw your consent to processing personal data, please contact us as described in Section 11 of this Policy.
Are any third parties involved in processing your personal data? For achievement of purposes defined in this Policy PROVIDER may share your personal data with third parties.
By engaging such third parties where required by laws and by instructing them to perform personal data processing on our behalf, being a personal data controller PROVIDER ensures that third parties maintain confidentiality of your data and take the relevant organizational, legal and technical measures to protect such data. Third parties that we involve process your personal data solely for the purposes defined in this Policy and perform the operations on your personal data that we assign to them. Under no circumstances such third parties shall perform the processing of your personal data for the purposes that are contradictory to the purposes specified in this Policy.
When prescribed by laws, PROVIDER may also transfer your personal data for fulfilment of its legal obligations.
Third-party web-resources: The App may contain hyperlinks to any third-party web-resources, while any third-party websites and/or mobile applications may contain hyperlinks to our App.
PROVIDER is not responsible for processing of your personal data on such third-party websites and/or mobile applications, as well as for any policies and practices applied by their owners, administrators or other persons in respect of processing personal data of users.
In light of this, we strongly recommend you to review the terms of use and privacy policy of each such third-party website and/or mobile application that you visit.
What measures are implemented by PROVIDER to protect your personal data? PROVIDER tries to maintain the confidentiality and security of your personal data and to prevent their unauthorized disclosure. To do so, PROVIDER implements and will implement adequate technical, legal and organizational security measures to protect personal data from illegal or accidental access, destruction, modification, blockage, copying, transfer, dissemination, as well as any other unlawful actions in respect of personal data, in particular, measures covered by the local legislation of Ivory Coast.
Your rights in connection with personal data processing: You have the following rights in respect of personal data processing performed by PROVIDER:
To withdraw your consent to personal data processing, you are required to send the relevant request to: admin@hqlembahsari.onmicrosoft.com. Once your consent has been withdrawn, we will cease processing your data, destruct personal data and ensure destruction of such data by third parties involved in processing (except where further processing is required by applicable laws or may be performed on any other legal ground).
Amendments to the Privacy Policy: PROVIDER reserves the right to make amendments and updates to this Privacy Policy.
If we decide to introduce any amendments or updates to this Privacy Policy, we will publish such amendments or updates here so that you are always aware of our personal data processing practices. In case of any changes to our Privacy Policy, you will be notified thereof by e-mail.
If, pursuant to effective laws, any changes to this Privacy Policy require your consent to further processing of personal data in accordance with any amended provisions of this Privacy Policy, we will request such consent and enable you to refuse from accepting such amendments and further processing of your personal data by way of sending a relevant notice.
Whom may I contact on issues of personal data processing and the exercise of my rights? For exercising your rights and on any issues related to personal data processing, you may send us a request:
Please note that we will not examine anonymous requests. Upon obtaining any such request from you, we may also require that you verify your identity prior to sending a response to you.