This Notice explains the types of personal data that we collect, how the personal data was collected from you, the purpose of collecting the personal data, how we use the personal data provided by you and to whom we may share the personal data with.

A. Personal Data

In the course of your employment or application for employment with us, we would collect, record, store, manage and disclose your personal data which may include but not limited to the following (“Personal Data”):-

Name, identification card number, nationality, age, race, religion, date of birth, place of birth, gender, marital status, passport photograph, correspondence address, telephone numbers, email address, personal financial and social security details including bank account number and bankruptcy, SOCSO, EPF number, income tax details, details of family members, next of kin and dependents, copies and details of identification documents, resume, particulars of educational qualification and academic achievements, employment history (including last drawn salary), referees and result of employment checks (including credit, medical and reference checks), information capture on security systems (including biometric data and CCTV recording), vehicle registration number, physical and mental health or medical conditions, commission or alleged commission of any offence or proceedings for any offence committed or alleged to have been committed including past misconduct, emergency contact details and details of directorship or shareholding and all other related information necessary and incidental to our business.

B. Collection of Personal Data

Personal Data will be collected through several means which include but not limited to the following:-

• information you have provided to us whether in oral, written or biometric prior to or subsequently during your employment with us;
• information obtained independently by us or given to us from other legitimate source (i.e reference check, background checks from the referee you have provided)

In respect of personal data of third parties provided by you, you warrant that you have obtained their consent to allow us to process their personal data. You also warrant that the processing of personal data provided to us will not place us in breach of any applicable data privacy legislation

C. Purposes of Personal Data Collected

We will manage, use and process your Personal Data in the manner and for the purpose as prescribed below:-

• For processing and administration of rewards and benefits including your payroll, increment, bonus, leave, medical benefit / insurance coverage, welfare and other relevant benefits and entitlements;
• For compliance with statutory requests from Inland Revenue Board, Employee Providence Fund, SOCSO and other relevant public authorities/ agencies;
• For monitoring and compliance with our internal rules and policies including our business conduct guidelines;
• For consideration of employee’s development programmes such as promotion, secondment and transfer, performance monitoring, training and career development;
• To contact the next of kin and arrange medical attention pursuant to death, illness or injury of an employee whilst at work;
• To third party service providers such as insurance agencies, employment agencies, company secretary, banks, petrol card applications, internal and external auditors, training centres, remuneration survey companies, HR information systems, etc;
• For occupational health and sickness monitoring purposes;
• For the provision of references/reports required by any governmental and/or non-governmental authorities, agencies or departments such as qualified legal representatives to perform functions or obligations on behalf of GADANG as required under the project awarded to GADANG, laws, rules, regulations, by laws and / or guidelines;
• For verification, security and access within GADANG (e.g biometric, access to office and secured areas);
• To enforce our rights under employment law or any other applicable laws to defend our rights under the law including but not limited to any disciplinary action or actions relating to the termination of employment; and
• For and/or in connection with all other purposes necessary and/or incidental to our business and all purposes necessary for the operation of the day to day business of GADANG.

D. Disclosure to Third Parties

Personal Data provided to us or obtained by us shall be kept confidential by us. However, it may be necessary for us to engage third party to perform certain services to us. We may disclose your Personal Data whether within or outside Malaysia to the following person including but not limited to:-

• third party service providers to our business such as insurance agencies, internal and external auditors, consultant and legal advisors, petrol card applications, banks, employment agencies, training centre, remuneration survey companies, HR information system and any other person who are under a duty of confidentiality to us;
• third party service providers for the purposes of performing reference checks, background screening, bankruptcy searches, criminal records etc;
• government or quasi-government agencies, statutory and regulatory authorities and enforcement agencies under the law, any court and/or officer of the court;
• departments within GADANG including our senior management and employees on a need-toknow basis;
• other person or bodies who provide us with services necessary and/or incidental to our business;

E. Failure to Provide Personal Data

It is your obligation to ensure that the Personal Data provided to us are complete, accurate, not misleading and up to date. Failure to supply to us the required personal data will results in our inability to perform our obligation under any future or existing employment contract with you and it may affect your ability to enjoy the full employment benefits with us.

F. Retention of Personal Data

Any Personal Data provided by you will be retained by us as long as necessary for the fulfilment of the purposes set out in this Notice or as is required to satisfy any operational, legal, regulatory and/or accounting requirements. Your continued employment with us is deemed consent for us to collect, process and manage the personal data in accordance with this Notice.

G. Right to Access and Correct Personal Data

You shall have the right to request for access of your personal data in our records and request to update or correct your personal data that is inaccurate, obsolete, incomplete or misleading subject always to the exceptions and restrictions as permitted by the Act. For any request for personal data amendment or correction, we reserve the absolute right to determine whether the information requires any amendment or correction. If we decide not to amend your personal data, we shall then provide the reason for our refusal to amend or correct the requested information. You shall have the right to inform us by notice in writing of your withdrawal (in full or in part) of your consent subject always to any legal restrictions and contractual conditions. Your withdrawal of consent to process your personal data, depending on the extent of your withdrawal of consent, could result in our inability to continue with your existing relationship with us or your contract of employment with us will be terminated.

H. Contact

For further information or clarification regarding personal data access, correction, deletion or any other information in relation to the Act, you may contact us through the following details:-

Gadang Holdings Berhad
Group Human Capital Department
Email : ghc@gadang.com.my
Contact No. : 03-6279 6318
Address : Wisma Gadang, No 52, Jalan Tago 2, Off Jalan Persiaran Utama, Sri Damansara, 52200 Kuala Lumpur.

I. Amendment

We reserve the right to amend this Notice at any time and will ensure that a notice of such amendments will be made available to you through the GADANG’s webpage or through any other method which we deem appropriate and suitable.