STFR General Personal Data Protection Notice

 

1. This STFR General Personal Data Protection Notice (“Notice”) sets out the policies of STF Resources Sdn. Bhd. (“STFR”) with regard to the processing of your Personal Data. In the event of any conflict between the English and other language versions, the English version shall prevail.

 

2. “Personal Data” means information about you, from which you are identifiable, including but not limited to your name, contact details, address, identity card information, designation in your company, your image or photograph, and any other information about you which you have provided to STFR pursuant to any engagements, interaction and correspondence between you and the STFR and/or any information about you that has been or may be collected, stored, used and processed by STFR from time to time.

 

STFR also collects and processes sensitive Personal Data including but not limited to information relating to your religious beliefs, health records, criminal records, and biometric data.

 

Sources of Personal Data

 

3. In addition to the Personal Data you provide to STFR directly, STFR may collect your Personal Data from a variety of sources such as:

 

• when you fill up and submit to STFR application, declaration, registration or inquiry forms or other similar forms;
• when you provide any Personal Data or information to STFR via QR Code or through STFR’s websites at http://www.stfresources.com and www.a-c-e.my (“Websites”), or when you access or use the Websites, including where AI-enabled systems and technologies are used to support operational efficiency, personalisation, analytics, and security. Your Personal Data may also be collected from cookies used on the Websites;
• when you visit or enter Bangunan AICB (the “Premises”), your Personal Data may be collected directly or indirectly from access control and monitoring systems such as closed-circuit television (CCTV), QR Code registration, facial recognition software and guest registration logbooks;
• where you are a contractor, vendor, supplier or service provider, from tenders or proposals submitted by you or your company;
• when you attend our events, whether held on or off our premises, including where AI-enabled systems are used for event management, registration, and operational purposes;
• from various entities or divisions under STFR;
• from STFR’s affiliates such as Asian Institute of Chartered Bankers (AICB) and Asian Banking School Sdn Bhd (ABS);
• from third party sources such as agents or third-party referrals or recommendations; or
• information otherwise generated upon your engagement and interaction with STFR.

 

4. Provision of your Personal Data to STFR is mandatory or voluntary as set forth below:-

 

Where you are a tenant:

Provision of your Personal Data is mandatory in order to enter or be granted access to the premises. Failure to do so may result in STFR refusing to grant you entry to the Premises. STFR may also not be able to notify you in an emergency without the provision of such Personal Data.

 

Where you are a guest or visitor to the Premises

Provision of your Personal Data is mandatory in order to enter or visit the Premises. Failure to do so may result in STFR refusing to grant you entry to the Premises.

 

Where you are a user of the Website:

Provision of your Personal Data to STFR via the Website is voluntary. However, failure to do so may mean that STFR would be unable to respond or contact you with regard to your inquiries.    

 

Where you are a contractor, vendor, supplier, or service provider:

Provision of your Personal Data is mandatory in order to engage you to provide services or products, issue payments to you for products or services provided and/or permit you entry to the Premises or to relevant project sites. Provision of your Personal Data for marketing and promotional purposes is voluntary and if you wish to opt out, you may contact: Sales and Marketing at telephone: 03-2602 4100; Email:ace@stfresources.com.

 

Purposes of Use

 

5. STFR may use and process your Personal Data for business and activities of STFR which shall include, without limitation, the following (“the Purposes”):-

 

Where you are a tenant:

• to perform STFR’s obligations in respect of any agreement entered into with you;
• for administrative and management purposes relating to your tenancy with STFR, such as for booking of meeting rooms, to issue you access cards for entry to the building and for season parking.

 

Where you are a guest or visitor to the Premises:

• for the purposes of verifying your identity;
• for security check.

 

Where you are a user of the Website: 

• to respond to any questions, queries or correspondence from you, such as when you submit any inquiries on the Website.

 

Where you are a contractor, vendor, supplier or service provider:

• to consider and evaluate any tenders or proposals submitted by you or your company to STFR;
• to communicate with you or your company in respect of the tender or proposal;
• for the purposes of engaging you to provide services or products or awarding you with the project;
• to facilitate or enable any checks as may be required by STFR in order to engage you;
• to process payments relating to any products or services you have provided;
• to send you marketing and promotional material

 

General (applicable to all):

• if you attend events/functions/training sessions organised by STFR, to take your photograph or picture at for non-profit making reasons including publication in STFR’s newsletter, annual report, website, and social media platforms/social networking sites;
• to respond to any questions, queries, comments, and/or correspondence from you;
• to communicate with you or contact you or your company (as applicable) for any of the purposes listed in this Notice;
• for internal administrative and management purposes;
• for purposes of detection, prevention, and prosecution of crime;
• for the purposes of internal or external investigations;
• for legal and regulatory approvals and compliance, whether within or outside of Malaysia; and
• for such other purposes as may be required or permitted by law.

 

and you agree and consent to STFR using and processing your Personal Data for the Purposes and in the manner as identified in this Notice.

 

Disclosure to Third Parties, and Transfer of Personal Data out of Malaysia

 

6. Your Personal Data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia for any of the Purposes, including where STFR’s information technology (IT) facilities or data storage servers are located outside of Malaysia. You understand and consent to the transfer of your Personal Data out of Malaysia as described herein.

 

Further, STFR may engage other companies, service providers or individuals to perform functions on its behalf and consequently may provide access or disclose your Personal Data to such service providers or third parties (who may be located outside Malaysia and/or process your Personal Data outside Malaysia). The third parties referred to in this Section include (without limitation): –

 

• third parties to whom STFR outsources certain of its internal functions, including payroll processing and administration, information technology services, security services, and building management (where applicable);
• STFR’s professional advisors including legal advisors, auditors, financial advisors and consultants;
• agents acting on behalf of STFR;
• to STFR’s affiliates or shared services customers such as Asian Institute of Chartered Bankers (AICB) and Asian Banking School Sdn Bhd (ABS) where you are a contractor, vendor, supplier or service provider for any such affiliates;
• other related entities and affiliates of STFR (such as AICB and ABS); and
• governmental authorities to comply with statutory, regulatory and governmental requirements.

 

Your Personal Data may also be shared in connection with a corporate transaction, such as a sale of subsidiary, division, merger, consolidation, asset sale, or in the unlikely event of winding-up.

 

Duration of Processing of Personal Data

 

7. We process your Personal Data only for as long as necessary to fulfil the Purposes stated above, and thereafter for as long as we are required to do so under the relevant statutory limitation periods, applicable laws and regulations, as well as our internal policies. Where the Personal Data is no longer required for the Purposes or relevant legal requirements, we will delete the personal data.

 

Security of your Personal Data

 

8. We are committed to maintaining the security of your Personal Data in accordance with the Personal Data Protection Act 2010 (including any amendments thereto and any guidelines issued thereunder), as well as our internal policies and procedures.

 

Access and Correction, Inquiries and Complaints

 

9. Subject to any exceptions under applicable laws, you may request access or correction to your Personal Data held by STFR, submit your queries or complaints about the processing of your Personal Data, limit the processing of your Personal Data by submitting a written request to the following: –

 

Data Protection Officer
Email	:	privacy@stfresources.com
Address	:	Level 2, Bangunan AICB, No. 10, Jalan Dato’ Onn, 50480 Kuala Lumpur

 

However, please note that where you choose to limit the processing of your Personal Data, this may affect STFR’s ability to perform certain obligations it may owe to you. 

 

10. When submitting your request, please ensure that you provide all necessary information that will enable STFR to properly identify you. Such information shall include your full name, contact details, address and any other relevant information and details. We may refuse your request for access and/or correction if insufficient information is provided. A request for access to your Personal Data may be subject to a payment of a fee, in accordance with the applicable laws and regulations.

 

11. STFR reserves the right to refuse your requests for access and/or make any correction to your Personal Data for the reasons permitted under law, such as where expense of providing access to you is disproportionate to the risks to your privacy.

 

Acknowledgement and Consent

 

STFR shall have the right to modify, update or amend the terms of this Notice at any time. Any changes to the Notice will be effective immediately upon notification to you.  By doing any of the following:-

 

• continuing to communicate with STFR;
• your ongoing relationship or engagement by STFR;
• visiting/entering the Premises; and/or
• by using the Website.

 

you acknowledge that you have read this Notice and expressly agree and consent to the use, processing, and transfer of your Personal Data by STFR as described in this Notice.