As part of Biogenes' provision of services through the mobile or web-based applications owned and offered for download by Biogenes, including APTFAB, APTSENS, APTCAD, and any other mobile applications that we may develop and offer in the future (collectively, the “Apps” and individually, an “App”), we will need to gather and use certain information of individuals. These can include users, suppliers, business contacts, employees and other people we have a relationship with or may need to contact. Biogenes takes its responsibility under all relevant laws including the Personal Data Protection Act 2010 ("PDPA”) seriously. Biogenes also recognises the importance of the personal data that you have entrusted us with. It is also our responsibility to properly manage, protect and process all data.
Please carefully review this data management policy (“Data Management Policy”) to understand our policies and practices regarding the collection, use and treatment of your information. By using, accessing, or registering with an App, the use of our websites, mobile application, and services (collectively, the “Service(s)”), you consent to our collection, use, processing, and disclosure of information in accordance with this Data Management Policy. You also acknowledge and agree that we are not responsible for how third-parties, vendors, and service providers collect or use your information.
Objectives
In providing proper and secure management of personal data, Biogenes aims to ensure that:
Roles and responsibility
Generally, all members of Biogenes are responsible for ensuring that access and utilisation of data is done in a manner that minimises risk to all parties involved. Biogenes understands that data management is a shared responsibility and they must abide by data management procedures and practices. Such general responsibilities include:
Notice and Choice
The Data Owner must inform users by written notice (“PDP Notice”) in both Malay and English, of among other things, the purpose of processing his/her personal data and the third parties to whom their personal data may be disclosed.
The PDP notice shall be given as soon as practicable by the Data Owner
Disclosure
All members of Biogenes must not disclose any personal data without the consent of the users save for exceptions and the third parties as set out in the Privacy Policy (a list of third parties shall be compiled by the Data Owner).
Security
As part of the Data Owner’s responsibility in managing data, the Data Owner must:
Retention and Data Integrity
In addition to the above, the Data Owner should:
Access
Users may request for the access and correction of their personal data (“Request”) by paying certain fees to Biogenes as set out below, and the Data Owner must ensure that the user has access to and is able to correct the personal data. Furthermore, the Data Owner must comply with the Request within 21 days, failing which, the Data Owner is required to comply within the next 14 days.
The following requests and their respective fees are set out below:
If there is any reason to suspect that laws or this policy have been violated, or that continued access to data poses a threat of said data, data infrastructure, Biogenes’ members, or reputation of members of the public, rest assured that Biogenes will withdraw or restrict access to all data and data infrastructure to mitigate any further compromise or damage.
Following due process, Biogenes may take action against anyone whose activities are in violation of the law or these policies. These actions taken may include, but are not limited to:
The head of IT holds the responsibility for the implementation of this policy and shall take necessary actions in the event of violation of this policy.
We reserve the right to make changes to this Data Management Policy at any time and all changes will be posted here. If we believe that the changes are material, we will notify you of the changes by posting a notice on our Services or by email. You are responsible for reviewing the changes which we make to this Data Management Policy. Your continued use of our Services constitutes your acceptance of the updated Data Management Policy.
If you have any questions, complaints, concerns or comments on our Data Management Policy, we welcome you to contact us at +6012 2939548 (Mr. Adrian Joseph, Chief Operating Officer of Biogenes) or by sending an email to adrian@biogenestech.com. Your indication at the subject header would assist us in attending to your email speedily by passing it on to the relevant staff in our organisation. For example, you could insert the subject header as "Accessing Personal Data".
In the event of any conflict between this English language Data Management Policy and its corresponding Bahasa Malaysia Data Management Policy, the terms in this English language Data Management Policy will prevail.