Attic Holdings Sdn. Bhd. and/or any of its subsidiaries, affiliates and jointly controlled entities (“AH”) respects and is committed to the protection of your personal data and information (“Personal Data”) and your privacy. This Personal Data Protection Notice explains how we collect and handle your personal information in accordance with the Malaysian Personal Data Protection Act 2010 (“the Act”) which was gazetted and came into effect on the 15th of November 2013. Please note that AH may amend this Personal Data Protection Notice at any time without prior notice and will notify you of any such amendment via our website or by email.
You hereby consent to the processing of your Personal Data by AH and all persons necessary for us to serve you by communicating with AH or by using our website at https://citta.com.my (“the Website”).
1. Nature and Source of Personal Data
1.1 Nature of Personal Data
Personal Data means any information which relates to you and which was collected or provided to AH for the purposes stated in Section 3 below. Your Personal Data may include but not limited to your name, NRIC number, contact details, financial and banking account details, CCTV/security recordings and location tracking/GPS information.
1.2 Source of Personal Data
(a) Customers or potential customers:
AH collects your Personal Data directly from you and/or indirectly from your legal representatives, agents, employers when you, your legal representatives, agents and/or employers send us completed enquiry, application and/or registration forms via various means, including electronically and physical hard copies at new launches, roadshows, showcases, exhibitions or any other promotional events.
(b) Vendors, Suppliers, Tenants or Service Providers:
AH collects your Personal Data directly from you and/ or indirectly from your employer when tendering for projects and/ or contracts, when you send us completed enquiry, application and/or registration forms via various means, including electronically and physical hardcopies at new launches, roadshows, showcases, exhibitions or any other promotional events.
(c) The Website
By accessing the Website, cookies will be collected as well. However, should you wish for your Personal Data to not be collected via cookies you may deactivate cookies via your internet browser’s settings page.
2. Failure to Provide Personal Data
2.1 The provision of your Personal Data is voluntary however all Personal Data requested by us from you is obligatory and failure to provide such Personal Data will:-
(a) result in us being unable to provide you with the notices, services and/or products requested; and
(b) result in us being unable to update you on our latest product, promotions and/or launches.
3. Purpose for the Collection of Personal Data
3.1 The Personal Data collected from you by AH will be used by us for the following purposes but not limited to:-
(a) to process your requested services;
(b) to facilitate your participation in any contests or events;
(c) to administer and communicate with you in relation to our services and/or events;
(d) for insurance purposes;
(e) for internal investigations, audit or security purposes;
(f) to comply with legal and regulatory obligations in the conduct of our business;
(g) to contact you regarding products, services, upcoming events, promotions, advertising, marketing and commercial materials which may be of interest to you;
(h) prevention of crime;
(i) preparation and execution of all necessary documents and agreements and/or contracts for our projects, products and/or services with you;
(j) our internal records management, customer relation events and activities, and customer loyalty reward program;
(k) vacant possession, keys handover, property/estate management, customer care and/or defect rectification works; and
(l) any subsequent commercial transactions in relation to any projects, products and/or services.
Where you have indicated your consent to receiving marketing or promotional updates from AH, you may opt-out from receiving such marketing or promotional material at any time.
4. Disclosure of Personal Data
4.1 Personal Data provided to us will generally be kept confidential but you hereby consent to us disclosing your Personal Data to other companies, service providers or individuals to perform functions on our behalf, and consequently may provide access or disclose your Personal Data to the third parties such as those listed below (the list is NOT exhaustive):-
(a) data entry service providers;
(b) storage facility providers;
(c) banks and financial institutions;
(d) insurance companies;
(e) professional advisors and external auditors;
(f) information technology (IT) service providers; and
(g) our appointed service providers in relation of our loyalty programmes, for the purpose of delivery gift redemption and services.
Third parties are legally tasked with processing your Personal Data in line with principles specified by AH. Third parties are also held legally responsible for securing your Personal Data at an appropriate level of security in relation to applicable data protection laws and widely accepted industry standards.
5. Choices to Limit Processing of Personal Data
5.1 The Personal Data provided to us undergoes processing as and when required or upon scheduled maintenance. The definition of processing defines it as “any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;”
5.2 You have the right to limit in part or wholly any of the processes by which your data is subjected to in terms of the operations allowed to be performed upon it, the period of time allowed or alternatively the date line of the consent given.
5.3 The responsibility for compliance rests on the shoulders of AH who determines the purposes and means of the processing of Personal Data.
5.4 You may at any time withdraw or amend, in full or in part, your processing consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period in person at our corporate offices located at the address given in Section 6 below.
6. Right to Access and Correct Personal Data
6.1 You have the right to access and correct your personal information held by us (subject always to certain exemptions). We will make every endeavour to ensure your personal information is accurate and up to date therefore we ask that if there are changes to your information you should notify us directly at the contact details below:-
Attic Holdings Sdn Bhd
No. 1 Jalan PJU 1A/48
PJU 1A, Ara Damansara
47301 Petaling Jaya
Selangor Darul Ehsan
Malaysia
Tel : +603 7662 5000
Fax : +603 7662 5008
Email : info@citta.com.my
Please direct all inquiries and/or complaints to the contact details given above as well.