Perbadanan Kemajuan Negeri Perak ("PKNPk") takes your right to privacy seriously and commits to protecting your personally identifiable information ("personal data") in line with the Personal Data Protection Act 2010 and other applicable laws. This Privacy Statement sets out PKNPk's approach in handling personal data.

This Privacy Statement applies to personal data collected by PKNPk but does not apply to personal data collected by other entities including those owned or controlled by or affiliated to PKNPk, individuals that are not employees or agents of PKNPk, or websites that are not under PKNPk's control.

PKNPk may amend this Privacy Statement from time to time. As such, you are expected to read this Privacy Statement each time you wish to provide your personal data to PKNPk. Substantial amendments to this policy will be announced on this website.

Where we collect personal data directly from you, we may provide additional personal data protection notices that sets out in more detail how your personal data will be used.

PKNPk may need to process your personal data to perform our functions and exercise powers under the law as well as for other related purposes including but not limited to -

• procurement or provision of goods or services, specifically –
  • to assess suitability of service provider and their personnel; and
  • to enforce the rights and obligations in the contract including making payments and maintaining the list of personnel who carry out the rights and obligations of the service provider;
• recruitment, appointments and employment;
• ensuring security of our premises and systems;
• ensuring the safety and well-being of our employees and visitors; and
• engagement with the public and stakeholders;
• including members of public on PKNPk's mailing list upon request;
• audit or legal purposes.

The legal basis we rely on for processing of your personal data may be:

• your consent;
• performance of contract or in order to enter into a contract with you or your employer;
• protection of your vital interests as well as the vital interests of other individuals;
• performance of PKNPk's duties; or
• PKNPk's legitimate interests.

The types of personal data which PKNPk may need to process include but are not limited to –

• the name, address, contact details, identification number and passport number;
• occupation, designation and employer;
• details of professional experience and educational qualification;
• sensitive or special categories of personal data such as religion, racial or ethnic origin, biometric data, data concerning health and commission or alleged commission of criminal offences;
• information relating to disciplinary proceedings; and
• details of shareholdings, business interests and positions.

PKNPk will only collect and process personal data to the extent that such personal data is necessary for the relevant purpose.

PKNPk may collect personal data directly from you where it is necessary, reasonable or practical to do so. When we collect your personal data, we will inform you how we may use or disclose your personal data unless it is apparent at the point of collection.

For visitors to PKNPk's premises, PKNPk may collect personal data prior to entry for identity verification and security purposes. PKNPk also operates CCTVs at exterior perimeters and within our premises which may collect photo videos or voice recordings of individuals for safety of the visitors and PKNPk's employees, crime prevention and crime detection.

PKNPk ensures the security of your personal data by taking appropriate security measures to preserve confidentiality of your personal data.

Efforts will be made to prevent your data being made available to third parties. However, we may share personal data with third parties if -

• it is provided for in this Privacy Statement;
• your consent is obtained;
• it is pursuant to legal action or law enforcement; or
• it is to perform any of PKNPk's functions and obligations.

PKNPk may disclose your personal data to third parties including but not limited to:

• financial institutions;
• other parties authorised by you;
• regulatory and governmental agencies as permitted or required by law, authorised by any order of court or to meet obligations to regulatory authorities;
• third party service providers;
• past or future employers of PKNPk's employees or prospective employees, within and outside of Malaysia.

Where PKNPk appoints a third party service provider to process personal data on behalf of PKNPk, PKNPk will instruct such third party service provider to only process such personal data for the specific purposes as required by PKNPk.

If we disclose any of your personal data to any person, we will require such person to appropriately safeguard the personal data provided to them.

You may have certain rights under applicable data protection laws. For example:

• Right to Correct

  You may have the right to request PKNPk to correct or complete any personal data you believe is inaccurate, out of date or incomplete.

• Withdrawal of Consent / Cessation of Processing

  In circumstances where PKNPk relies on your consent to process your personal data, you may have the right to withdraw your consent for or request for us to cease any of our processing of your personal data, or request for the erasure of your personal data from PKNPk's systems and records. However, such withdrawal or request may result in PKNPk being unable to assess any information / application submitted by you or continue to engage you on certain matters.

If you do not wish to receive any marketing information or promotions on PKNPk's future events, you may request us to exclude you from our marketing communications. This would not affect the dealings, arrangement or contract we have with you.