STFR General Personal Data Protection Notice

1. This STFR General Personal Data Protection Notice (“Notice”) sets out the policies of STF Resources Sdn. Bhd. (“STFR”) with regard to the processing of your Personal Data. In the event of any conflict between the English and other language versions, the English version shall prevail.

2. “Personal Data” means information about you, from which you are identifiable, including but not limited to your name, contact details, address, identity card information, designation in your company, your image or photograph, biometric data, and any other information about you which you have provided to STFR pursuant to any engagements, interaction and correspondence between you and the STFR and/or any information about you that has been or may be collected, stored, used and processed by STFR from time to time (as indicated below).

Sources of Personal Data

3. In addition to the Personal Data you provide to STFR directly, STFR may collect your Personal Data from a variety of sources such as:-

• when you fill up and submit to STFR application, declaration, registration or inquiry forms or other similar forms;
• when you provide any Personal Data or information to STFR via QR Code;via STFR’s websites at http://www.stfresources.com and www.a-c-e.my (“Website”). Your Personal Data may also be collected from cookies used on the Websites;
• when you visit or enter Bangunan AICB (the “Premises”), your Personal Data may be collected directly or indirectly from access control and monitoring systems such as closed-circuit television (CCTV), QR Code registration, facial recognition software and guest registration logbooks;
• where you are a contractor, vendor, supplier or service provider, from tenders or proposals submitted by you or your company;
• from various entities or divisions under STFR;
• from STFR’s affiliates such as Asian Institute of Chartered Bankers (AICB) and Asian Banking School Sdn Bhd (ABS);
• from third party sources such as agents or third-party referrals or recommendations; or
• information otherwise generated upon your engagement and interaction with STFR.

4. Provision of your Personal Data to STFR is mandatory or voluntary as set forth below:-

Where you are a tenant:-

Provision of your Personal Data is mandatory in order to enter or be granted access to the premises. Failure to do so may result in STFR refusing to grant you entry to the Premises. STFR may also not be able to notify you in an emergency without the provision of such Personal Data.

Where you are a guest or visitor to the Premises

Provision of your Personal Data is mandatory in order to enter or visit the Premises. Failure to do so may result in STFR refusing to grant you entry to the Premises.

Where you are a user of the Website:

Provision of your Personal Data to STFR via the Website is voluntary. However, failure to do so may mean that STFR would be unable to respond or contact you with regard to your inquiries.

Where you are a contractor, vendor, supplier or service provider:

Provision of your Personal Data is mandatory in order to engage you to provide services or products, issue payments to you for products or services provided and/or permit you entry to the Premises or to relevant project sites. Provision of your Personal Data for marketing and promotional purposes is voluntary and if you wish to opt out, you may contact: Sales and Marketing at telephone: 03-2602 4100; Email:ace@stfresources.com.

Purposes of Use

5. STFR may use and process your Personal Data for business and activities of STFR which shall include, without limitation the following (“the Purposes”):-

Where you are a tenant:

• to perform STFR’s obligations in respect of any agreement entered into with you;
• for administrative and management purposes relating to your tenancy with STFR, such as for booking of meeting rooms, to issue you access cards for entry to the building and for season parking.

Where you are a guest or visitor to the Premises:

• for the purposes of verifying your identity;
• for security check.

Where you are a user of the Website:

• to respond to any questions, queries or correspondence from you, such as when you submit any inquiries on the Website.

Where you are a contractor, vendor, supplier or service provider:

• to consider and evaluate any tenders or proposals submitted by you or your company to STFR;
• to communicate with you or your company in respect of the tender or proposal;
• for the purposes of engaging you to provide services or products or awarding you with the project;
• to facilitate or enable any checks as may be required by STFR in order to engage you;
• to process payments relating to any products or services you have provided;
• to send you marketing and promotional material

General (applicable to all):

• to respond to any questions, queries, comments, and/or correspondence from you;
• to communicate with you or contact you or your company (as applicable) for any of the purposes listed in this Notice;
• for internal administrative and management purposes;
• for purposes of detection, prevention and prosecution of crime;
• for the purposes of internal or external investigations;
• for legal and regulatory approvals and compliance, whether within or outside of Malaysia; and
• for such other purposes as may be required or permitted by law.

and you agree and consent to STFR using and processing your Personal Data for the Purposes and in the manner as identified in this Notice.

Disclosure to Third Parties, and Transfer of Personal Data out of Malaysia

6. Your Personal Data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia for any of the Purposes, including where STFR’s information technology (IT) facilities or data storage servers are located outside of Malaysia.

Further, STFR may engage other companies, service providers or individuals to perform functions on its behalf and consequently may provide access or disclose to your Personal Data to such service providers or third parties (who may be located outside Malaysia and/or process your Personal Data outside Malaysia). The third parties referred to in this Section include (without limitation): –

• third parties to whom STFR outsources certain of its internal functions, such as its information technology vendors, security service providers and building management (where applicable);
• STFR’s professional advisors including legal advisors, auditors, financial advisors and consultants;
• to STFR’s affiliates or shared services customers such as Asian Institute of Chartered Bankers (AICB) and Asian Banking School Sdn Bhd (ABS)  where you are a contractor, vendor, supplier or service provider for any such affiliates;
• other related entities and affiliates of STFR; and
• governmental authorities to comply with statutory, regulatory and governmental requirements.

Your Personal Data may also be shared in connection with a corporate transaction, such as a sale of a subsidiary or a division, merger, consolidation, or asset sale, or in the unlikely event of winding-up.

Duration of Processing of Personal Data

7. We process your Personal Data only for as long as necessary to fulfil the Purposes stated above, and thereafter for as long as we are required to do so under the relevant statutory limitation periods, applicable laws and regulations, as well as our internal policies. Where the Personal Data is no longer required for the Purposes or relevant legal requirements, we will delete the personal data.

Security of your Personal Data

8. We are committed to maintaining the security of your Personal Data in accordance with the data security requirements under the Personal Data Protection Act 2010 (PDPA), as well as our internal policies.

Access and Correction

9. You may, by giving written notice, request to access and/or correct your Personal Data by contacting STFR at the contact information set forth below. STFR has the right to refuse an access or correction request for the reasons provided under law. STFR also reserves the right to impose a fee for access of your Personal Data in the amounts as permitted under law.

Contact Information

10. In the event, you wish to limit the processing of your Personal Data for the Purposes, to access or correct your data pursuant to Section 9, or if you have any inquiries or complaints in respect of the processing of your Personal Data, please contact:

Ms. Lim Hwei Li

Designation: Data Protection Officer

Telephone : +6 03 2701 9227

Email : privacy@stfresources.com

Address : Level 2, Bangunan AICB, No. 10, Jalan Dato’ Onn, 50480 Kuala Lumpur

However please note that where you choose to limit the processing of your Personal Data, this may affect STFR’s ability to perform certain obligations it may owe to you.

11. STFR shall have the right to modify, update or amend the terms of this Notice at any time. Any changes to the Notice will be effective immediately upon notification to you.

Acknowledgement and Consent

By doing any of the following:-

• continuing to communicate with STFR;
• your ongoing relationship or engagement by STFR;
• visiting/entering the Premises; and/or
• by using the Website.

you acknowledge that you have read this Notice and expressly agree and consent to the use, processing and transfer of your Personal Data by STFR as described in this Notice.