PERSONAL DATA PROTECTION POLICY
We, MTrustee Berhad and Hektar Asset Management Sdn Bhd, as the Trustee and Manager of Hektar REIT respectively, recognise the importance of privacy and the sensitivity of personal data. As required under the Personal Data Protection Act 2010, the purpose of this Personal Data Protection Notice (“Notice”) is to inform you about how we collect and process your personal information. “Personal Information” means Personal Data and/or Sensitive Personal data (as defined below).
This Notice supplements but does not supersede or replace any other consents you may have provided to us or any other arrangements or arrangements that you may have with us, in respect of your Personal Information.
This Notice may be amended or updated from time to time. We would advise you to check this Notice on our website at www.classichotel.com.my from time to time for amendments or updates. By continuing to accept our services, to use our website or to communicate with us subsequent to any amendments or updates to this Notice, it would confirm and indicate your acceptance of the amendments or updates to this Notice.
What is Personal Data?
Personal Data refers to any data that relates directly or indirectly about an individual who can be identified or identifiable (a) from that data; or (b) from that data and other information to which we have in our possession or control.
What is Sensitive Personal Data?
Sensitive Personal Data refers to any personal data consisting of information as to the physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature or any personal data prescribed under law as sensitive personal data.
We do not generally collect sensitive information unless it is volunteered by you or unless we are required to do so pursuant to applicable laws or regulation. We may use health data provided by you to meet your particular needs (for example, allergies, provision of disability access)
How we collect Personal Information
Personal Information about you will be collected via the following ways:-
What Personal Information Do We Collect?
The type of Personal Information collected and processed by us includes but is not limited to the following:
Source of Personal Information
Personal Information collected will mainly be from you. However, some Personal Information may also be collected by us from our business partners such as tour operators, travel agencies, reservation system or other available sources including but not limited to websites, social media, publications, events, seminars and/or conferences.
How We Use Your Personal Information
Your Personal Information is collected and processed by us for all and any purpose relating to Hektar REIT including but not limited to the following:
Disclosure to Third Parties
Under certain circumstances, we may be required to disclose your Personal Information to third parties. Third parties to whom your Personal Information may be disclosed by us are as follows:
Further, we may also be required to transfer your Personal Information outside of Malaysia for the purposes and to such third parties stated in this Notice. The transfer of your Personal Information outside Malaysia would also be required if you are travelling, residing or based outside Malaysia.
When you interact with us through our website, we may employ cookies in order for us to recognize a return guest as a unique user. Cookies by themselves do not tell us your Personal Information unless you choose to provide the same. Cookies are small texts stored in your computer or other electronic devise which allow us to remember you. Cookies are not programs and as such it cannot access, read, amend, or modify data. Should you wish to disable the cookies associated with this technology, you may do so by changing the setting on your browser. However, you may be unable to use certain services or enter certain part(s) of our website.
Obligation to Provide Personal Data
We acknowledge that you have the right in deciding the Personal Information you wish to provide to us. The provision of the Personal Information is voluntary in nature. However, please note that if you do not provide the Personal Information or limit the way such Personal Information is to be processed, it may result in us not being able to:
You may enjoy certain rights under the Personal Data Protection Act 2010 in relation to our collection, use, disclosure and/or processing your Personal Information. Such rights include;-
Access: you may ask us if we hold your Personal Information and, if we are, you can request access to your Personal Information. This enables you to receive a copy of and information on the Personal Data and/or Sensitive Personal Data we hold about you.
Correction: you may request that any incomplete or updates the Personal Information we hold about you are corrected.
Erasure: you may ask us to delete or remove the Personal Information from our database in certain circumstances.
Withdrawal: you may withdraw consent for our use of your Personal Information, or ask us to suspend the processing of certain of your Personal Information about you, for example if you want us to establish its accuracy.
Data Access and Data Correction
PDPA Compliance Officer D1-U3-10, Block D1, Solaris Dutamas, No. 1, Jalan Dutamas 1, 50480 Kuala Lumpur
Tel: +6 03 6205 5570 Fax: +6 03 6205 5571
An administrative charge may be imposed for any request under paragraph (a), (b), (c) and (d) above.
Further, we reserve the right to refuse your requests for any reasons permitted under law.
Security and Retention
While precautions will be taken to ensure that the Personal Information you provide is protected against unauthorised or unintended access, we cannot be held responsible for unauthorised access to your Personal Information which are beyond our control.
We do not guarantee that our systems or applications are invulnerable to security breaches, nor do we make any warranty, guarantee, or representation that your use of our systems or applications is safe and protected from viruses, worms, Trojan horses, and other vulnerabilities. We also do not guarantee the security of data that you choose to send us electronically. Sending such data is entirely at your own risk.
We keep Personal Information only for so long as we need the Personal Information to fulfill the purposes we collected it for, and to satisfy our business and/or legal purposes, including audit, accounting or reporting requirement.
How long we keep your Personal Information depends on the nature of the data, for example: we will keep personal data for at least the duration of the limitation period for bringing claims if the Personal Information may be required to commence or defend legal proceedings. Some information may be retained for longer, for example where we are required to do so by law for example audit purpose.
The accuracy and completeness of your Personal Information depends on the information you provide. We assume that the information you have provided is accurate, up to date and complete unless you inform us otherwise.
Where you provide any third party information to us including but not limited to friends or family information, it is our assumption that such information is accurate, up to date and complete and that you have obtained the necessary consent to disclose the same.
In the event that there is any conflict between the English and national language version of this Notice, the English language version shall prevail.