FGV Privacy Notice

Introduction

The Personal Data Protection Act 2010 (“PDPA”) is an act to regulate the processing of personal data in a commercial transaction. In compliance with the regulations of PDPA (including all regulations, guidelines, orders and any statutory amendments made thereunder), FGV Holdings Berhad (“FGV”) and their respective subsidiaries, associated and affiliated companies, as well as related corporations (collectively referred to as “the Group”) hereby issue this Notice to manage the personal data collected from you.

Example of Personal Data

Personal data may be collected by the Group in various forms, including and without limitation to, name, address, race, religion, Malaysian identification card number, contact details, particular of your spouse or family members, company and business information, financial and banking details, system access records, correspondence, declarations, supporting documents and any other information necessary for the establishment, administration, management and continuation of business dealings and engagements with the Group.

Purposes For Collection Of Personal Data

FGV may use and process your personal data for the following purposes, including but not limited to (if applicable): –

(a) ensure internal administrative purposes and record keeping in compliance with the requirement under the relevant laws;
(b) provide services to you;
(c) procurement and sourcing related activities, among others, vendor registration and onboarding, contract administration, operational coordination;
(d) security and fraud prevention purposes;
(e) enable you to provide feedback to the Group;
(f) assess your job applications;
(g) administer your participation in any contest/programme related to the public organized by the Group;
(h) the preparation of guest invitations, registration and/or sign-ups, inclusion in media engagements and/or any relevant or related events organized by the Group;
(i) provide information to regulatory and governmental authorities in compliance with the relevant laws;
(j) managing and fulfilling pre-contractual and/or contractual obligations arising from commercial transactions entered with you;
(k) verify and process payments and related financial transactions as required to be made;
(l) dissemination of promotional and marketing materials to you; and/or
(m) such other purposes directly incidental or related to the foregoing,

collectively referred to as, “the Purposes”.

Collection Of Personal Data

Your personal data may be collected from various online forms, links, applications and platforms made available by the Group to you. The Group may retain, store and continue to process such personal data for as long as necessary to fulfil the purposes stated in this Notice and to comply with the applicable legal, regulatory, operational, and contractual requirements. Your failure to provide mandatory personal data requested by the Group may result in the Group being unable or unwilling to provide the requested services or products, process registration or onboarding, establish, administer or continue business dealings, procurement activities, contractual arrangements or other arrangement with you.

Your Rights to The Personal Data Collected

You may at any time request, (i) for access to your personal data; (ii) for the removal or deletion of your personal data, or (iii) to correct and/or update your personal data that is inaccurate, incomplete or outdated, or (iv) to limit the processing of your personal data by emailing to fgv.enquiries@fgvholdings.com.

Should you require more information regarding the collection and processing of your personal data, you may contact our Data Protection Officer (DPO) via email to DPO.fgvhb@fgvholdings.com. We will respond to your inquiry in accordance with our internal procedures and the requirements of the PDPA.

In view of the above, FGV is committed in ensuring the confidentiality, protection, security and accuracy of all personal data provided by you. It is your obligation to ensure that all personal data submitted are accurate, not misleading, updated and complete in all aspects. For the avoidance of doubt, the Group shall not be responsible for any personal data which are inaccurate, misleading, incomplete and not updated.

Disclosure to third parties and/or transfer of personal data out of Malaysia

The personal data collected may be disclosed, disseminated and/or transferred within the Group (including the holding company, subsidiaries, associated, related and affiliated companies as well as their subsidiaries, associated and affiliated companies, both local and international), whether present or future or to any third party organizations or persons for the purpose of fulfilling FGV’s obligations to you in respect of the Purposes and all other relevant purposes including to provide integrated services, maintaining and storing records. Further, FGV may request your assistance to procure the third party consent whose personal data is made available and submitted to FGV and you shall use your best endeavours in doing so.

Security Of Personal Data

FGV adheres to strict procedures and security features to prevent authorization access wherever possible. FGV is committed to maintaining the security of all personal data collected and processed. In the event the personal data retained is no longer required for the said Purposes, FGV shall destroy and/or delete the personal data from FGV’s records and system in accordance with our internal policies.

Download the PDPA Notice (BM)