Sign up for the newsletter
Sign up for the Stellantis Communications Newsletter and stay updated on all the news.
NOTICE PURSUANT TO PERSONAL DATA PROTECTION ACT 2010 (“NOTICE”)
If you are reading this document ("Notice"), it is because you are visiting this website ("Website").
This Notice is issued pursuant to Section 7 of the Personal Data Protection Act 2010 (“the Act”).
1. For the purpose of this Notice:
(a) “Personal Data” refers to Paragraph 4 of this Notice;
(b) “Processing” refers to refers to “collecting, recording, holding or storing the personal data or carrying out any operation or set of operations on the personal data, including:
(i) the organisation, adaptation or alteration of personal data;
(ii) the retrieval, consultation or use of personal data;
(iii) the disclosure of personal data by transmission, transfer, dissemination or otherwise making available; or
(iv) the alignment, combination, correction, erasure or destruction of personal data;”
(c ) “Data User” refers to the ones indicated in table in point 8, depending on the brand you selected. (“Us/We/Our”)
(d) “Data Processor” refers to refers to service providers as may be appointed by the Data User from time to time.
2. This Notice explains, amongst others:
(a) the types of your Personal Data that we collect and the manner on how we collect the same;
(b) the manner on how we use your Personal Data;
(c) the parties to whom we disclose your Personal Data;
(d) the manner on how we secure and retain your Personal Data; and
(e) your rights to have access to and correct your Personal Data,
and provide the terms and conditions in respect of the same. The provision of this notice is voluntary in nature. If you do not agree to or are not satisfied with any of the terms or conditions of this Notice, please discontinue from accessing website immediately. By accessing the website, you shall be deemed to have agreed to the terms and conditions of this Notice and your consent to the collection, use and disclosure of your Personal Information collected by us in the manner as set out in this Notice.
From this Website it may be possible to connect through special links to other third-party websites. For such processing activities, we invite you to consult the respective privacy policies. The Data Controller declines any responsibility for any management of Personal Data by such third-party websites.
3. PURPOSE OF COLLECTING AND PROCESSING THE PERSONAL DATA
The Personal Data is collected and processed by us and/or by our Data Processor for purposes including:
a. Provide our Services and related support
allow navigation of the Website and the provision of services requested by you from time to time to the Data User (for example newsletters, surveys, contact requests, information, downloads of documentation on the Website, "Provision of the service"). This processing is based on the execution of a contractual obligation or pre-contractual measures taken at your request;
b. Statistical purposes
for statistical purposes, without it being possible to trace your identity ("Statistics"). It should be noted that this processing is not performed on Data and that therefore it can be freely carried out by the Data User. This processing is based on the legitimate interest of the Data User.
c. Complying with legal obligations
We may use your Data to comply with legal obligations and orders to which we are subject to, which are the legal basis for the processing of your Data.
Some legislations may require us to share your Data with public authorities. If this sharing is not required by law of your country, we may still send your Data, as explained in more detail in the following purpose "Protecting of our interests and your interests".
d. Protection of our interests and your interests
To the extent permissible under applicable data protection law, we may need to use your Data to detect, react to and prevent fraudulent and illegal behavior or activities which could compromise the security of our Services and our Website and Application. This may occur when you use our Website in ways other than as permitted, or if you engage in inappropriate behavior at Our Events. These purposes also include audits and assessments of our business operations, security audits, financial controls, records and information management program, and otherwise related to the administration of our general business, accounting, record keeping and legal functions.
These purposes are based on our legitimate interest in safeguarding our interests and protecting our users, including you.
4. NATURE & SOURCES OF PERSONAL DATA
We collect Data from our Website. The Data collected and the related processing purposes depend on the management of the settings of the Browser and the Device in use.
a) Data provided by the user
When you use this Website, you may provide us with Personal Data. This is the case, for example, when you send communications to the addresses indicated on the Website, when you use any contact forms, when you participate in one of Our Events or when you subscribe to one of our services (e.g. newsletter) or participate in one of our surveys.
If you provide us with third party data, you will be held responsible for having shared such information. You must be legally authorized to share it (i.e. authorized by a third party to share their information, or for any other legitimate reason). You shall indemnify us against any liability in the event of any complaints, claims or demands for damages that which may arise from the processing of third-party Personal Data in violation of applicable data protection law.
b) Data collected by the Browser and the Device
When you use our Website we collect information on the Browser and Device you are using. This information includes your IP Address, the date, time and the requested URL, the Unique Identifiers and other information such as the type of your Browser or Device. Information related to your Browser or Device may include your operating system, language, network settings, telephone operator or internet provider, installed third-party applications and plug-in lists.
Some of this information is collected using Cookies and Other Tracking Technologies that are on your Browser or Device. More information about Cookies can be found in our Cookie Policy.
5. DISCLOSURE OR TRANSFER OF PERSONAL DATA
Your Personal Data provided to us shall be kept confidential. However, in order to provide you with effective and continuous Services, your Personal Data may be disclosed to the following recipients and/or categories of recipients ("Recipients"):
- Persons authorized by us to perform any of data-related activities described in this document: our employees and collaborators who have undertaken an obligation of confidentiality and abide by specific rules concerning the processing of your Data;
- Our Data Processors: external subjects to whom we delegate some processing activities. For example, security system providers, accounting and other consultants, data hosting providers, banks, insurance, etc. We have signed agreements with each of our Data Processors to ensure that your Data is processed with appropriate safeguards and only according to our instructions;
- System administrators: our employees or those of Data Processors to whom we have delegated the management of our IT systems and are therefore able to access, modify, suspend or limit the processing of your Data. These subjects have been selected, adequately trained and their activities are tracked by systems that they cannot modify, as required by the provisions of our competent Control Authority;
- Law enforcement or any other authority whose provisions are binding on us: this is the case when we have to comply with a judicial order or the law or defend ourselves in legal proceedings.
6. WHERE YOUR DATA IS LOCATED
We are a global company and our services are available in multiple jurisdictions around the world. This means that your Data may be stored, accessed, used, processed and disclosed outside your jurisdiction, including within the European Union, the United States of America or any other country where our Data Processors and sub-processors are located, or where their servers or cloud computing infrastructure may be hosted. We take steps to ensure that the processing of your Data by our Recipients is compliant with applicable data protection laws. Where required by data protection law, transfers of your Data to Recipients outside your country will be subject to appropriate safeguards. For more information about the safeguards implemented by us to protect Data transferred to third countries outside your country, you can write to the Data Privacy Officer (DPO) contacts indicated in the table at point 8 of this Privacy Policy.
By providing us your Personal Data, you consent to the transfer and/or storage of your personal data to countries outside of Malaysia for the purposes and/or to any third parties as set out above. However, we will ensure that the country or region where we transfer your Information has personal information protection legislation equivalent to or stringent than Malaysia In addition, in case your Personal Information is accessed from a third country that does not have the same personal data protection legislation as Malaysia, but even if access occurs from such a country, we will oblige the company that accesses the access to appropriate security management by consignment contract, etc., and will take measures such as management and supervision.
7. CONSEQUENCES OF NON-PROVISION OF PERSONAL DATA
In the event the Personal Data provided by you is not sufficient or not satisfactory, or if you limit the way the Personal Data is to be processed, or if you subsequently withdraw your consent to us processing your Personal Data, this may result in us not being able to communicate or correspond with you and/or to provide our Services to you under any potential or existing agreement or arrangement with you.
8. HOW TO CONTROL YOUR DATA AND MANAGE YOUR CHOICES
At any time, you can ask to:
- Access your Data (right of access): depending on your use of our Services, we will provide the Data we have about you;
- Exercise your right to portability of your Personal Data (right to data portability): according to your use of our Services, we will provide you with an interoperable file containing the Data we have about you;
- Correct your Data (right to rectification): for example, you can ask us to modify your e-mail address or telephone number if they are incorrect;
- Limit the processing of your Data (right to restriction of processing): for example, when you think that the processing of your Data is unlawful or that processing based on our legitimate interest is not appropriate;
- Delete your Data (right to erasure): for example, when you do not want to use our Services and may not want us to retain your Data any longer;
- Object to processing activities (right to object);
- Withdraw your consent (right to withdrawal).
Please note that you are responsible for ensuring that the Personal Data provided to us is accurate, complete, not misleading and kept up-to-date. The Personal Data collected and processed by us is deemed to be accurate until and unless you inform us otherwise in writing.
We reserve our rights to refuse to comply with your request for access and/or request for correction as stated above in circumstances permitted by the Act, in which case we will notify you of the same by notice in writing.
At any time, you can also:
- contact our Data Protection Officer (DPO), here:
Country |
Company/Data Controller |
DPO Contact Details |
Malaysia |
Stellantis Gurun (Malaysia) Sdn Bhd |
9. SECURITY AND RETENTION OF PERSONAL DATA
We take appropriate physical, technological and organisational precautions to prevent the loss, misuse or alteration of the data under our control. For example:
- We ensure that your data is only accessed and used, transferred or disclosed by recipients who need to have access to that data;
- In addition, we limit the amount of data that is accessible to, transmitted or disclosed to recipients to what is necessary to fulfill the purposes or specific tasks of the recipient;
- The computers and servers where your data is stored are kept in a secure environment, are password protected, and have industry-standard firewalls and antivirus software;
- The paper copies of documents containing your data (if any) are also kept in a secure environment;
- We destroy paper copies of documents containing your data that are no longer needed;
- When destroying data that has been recorded and stored in the form of electronic files and is no longer needed, we ensure that a technical method (e.g. low-level format) ensures that these files cannot be reproduced;
- Laptops, USB sticks, mobile phones and other wireless electronic devices used by our employees who have access to your data are protected. We ask our employees not to store your information on such devices unless it is necessary for the proper performance of a specific task as described in this Privacy Policy; We train our employees on compliance with this Privacy Policy and conduct monitoring activities to ensure ongoing compliance with the Policy and to determine the effectiveness of our privacy management.
- Each data processor we engage is contractually obligated to maintain and protect your data with measures that are substantially equivalent to those set out in this Privacy Policy or those required by applicable data protection law.
If required by applicable law, you and the relevant data protection authority will be notified of a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, data transmitted, stored or otherwise processed (unless the data isare incomprehensible to everyone or it is unlikely that the violation poses a risk to your rights and freedoms and those of others).
While we strive to protect your Personal Data, we cannot ensure or warrant the security of any information you transmit to us or from the website, and therefore you are to use the website at your own risk. Once we receive your transmission of information, we will use our best efforts to ensure its security on our system, but cannot accept responsibility for any unauthorised access or loss of such information.
10. CHANGES TO THE NOTICE
We may amend any of the terms and conditions mentioned in this Notice from time to time, and we will publish the latest and amended Notice on the date such amendments is to take place. You are advised to check from time to time should there be any amendment made by us towards this Notice. Access to the website on and after the date of the latest and amended Notice being published by us signifies your agreement towards such amendments.