PERSONAL DATA PROTECTION NOTICE AND CHOICE PRINCIPLE NOTIFICATION AND CONSENT UOW Malaysia respects and is committed to the protection of your personal and your privacy. This Privacy Policy describes how we collect and handle your personal information in accordance with the Malaysian Personal Data Protection Act 2010 through Websites operated by us, through our Social Media Pages, through HTML-formatted email messages and as well as offline interactions you may have with us (collectively referred to as “Services”) 1. Personal Information We hereby inform you that we, UOW Malaysia which includes but is not limited to the following: UOW Malaysia KDU University College UOW Malaysia KDU College UOW Malaysia KDU Penang University College UOW Malaysia College being the respective UOW Malaysia related corporations (as the term is defined in the Companies Act 1965), affiliates, and associated companies (whether or not controlled by us) (“Company”, “we”, “our” or “us”) as [data user], as the term is defined in the Personal Data Protection Act 2010, have or will collect, record, hold, store, use, disclose and/or process (collectively referred to as “Process”) one, or all of the following categories and / or types of personal information about you: master data: name, gender, date of birth, citizenship, marital status, nationality, race, ethnic origin, identification card / passport details, qualifications, occupation, employer, former employer(s), photographs or other images, and voice recordings, student identification number, alumni records, university electoral rolls, examination result transcripts, participation in officially recognized activities and sports, weight and height of members of athletic teams, dates of attendance, enrolment status (including active, inactive, full-time, part-time, not enrolled), degrees (pending and received), awards or honours received, the most recent previous; contact details: home address and billing address, home phone number and mobile number, email address, work address, work number, emergency contact details, parents and / or guardian details; compensation information: such as amount, currency, number of payments per year, bank account details, income range, details of applicable scholarship and compensation plans, types of student loans and / or loans applicable to educational purposes; any such information as we deem necessary or appropriate from time to time in connection with your commercial relationship with us. (collectively, “Personal Information”) We may also Process some or all of the following types of sensitive information about you pertaining to your your application / enrolment with us: religious or similar beliefs; political opinions; health condition; and / or the commission of crimes, allegations thereof and / or convictions. (collectively together with (a)-(d) above, “Personal Data”). To the extent that you willfully and voluntarily disclose to us any personal information whether or not coming within the definition of Personal Data above, of any individual, we shall assume, without independent verification, that you have obtained such individual’s consent for the disclosure as well as the Processing of the same in accordance with the terms of this notification. 2. Sources of Information Your Personal Data has and / or will be obtained from the following sources, where applicable, or such other sources which we may see fit from time to time: information provided or submitted by you through, among others, as applicable, Student Application Form, Job Application Form and Information Update Form; from your usage of our website and any other information you post on our website, email or otherwise send to us; as applicable, publicly available or publicly accessible information; and such other written or verbal communications or documents delivered to us prior to and during the course of our contractual or pre-contractual dealings with you. As the accuracy of your Personal Data depends largely on the information you provide to us, kindly inform us as soon as practicable if there are any errors in your Personal Data or if there have been any changes to your Personal Data. 3. Purpose of Processing Personal Data We will Process the Personal Data that you have provided to us for the following purposes, where and if applicable, including but not limited to: Purpose A the delivery of relevant notices, services or products to you; in order for you to apply / enroll and / or register yourself or your child and / or ward in courses offered by us; in order for us to manage and / or process your or your child’s and / or ward’s course application; in order to process scholarship applications pertaining to your or your child’s and / or ward’s enrolment with us; to notify you of changes in our services and offerings, if any; to enable us to supply you with the services and information which you have requested; user and / or student relationship management procedures; those purposes specifically provided for in any particular service offered by us; background checks of users and / or students as we may determine to be necessary or appropriate; our internal record keeping; collection of outstanding payments and / or fees from students and / or their parents or guardians; prevention of crime including but not limited to fraud, money-laundering, bribery; meeting any legal or regulatory requirements relating to our provision of services and to make disclosure under the requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular, code applicable to us or any of our member companies; conducting marketing and student profiling activities in connection with our services and related products; for research, benchmarking, and statistical analysis purposes to develop and evaluate education policies and strategies; in order to coordinate lesson planning and support for individual students; to enable us to interrogate tests and examination results in order to identify the strength and weaknesses of students; to assess special education needs students may have; feedback and enquiry purposes in relation to the services offered by us; and / or Purpose B to enable us and / or our selected authorised third parties to send you information by e-mail, telecommunication means (telephone calls and text messages) or via social media concerning related and unrelated services offered by us and our affiliated business partners which may include but is not limited to enrolment related events, surveys and/or special programs/courses/events, promotional materials, brochures which we consider will or may interest you and /or your child or ward. 4. Storage and Security We store your Personal Data in hard and/or soft copy. Soft copy data is stored on, amongst others, the file server, e-mail server, personal computers, notebooks, tapes and compact disc. There are corporate security policies and procedures in place which among others confines access to your Personal Data to authorised personnel only on a strictly need to know basis to the relevant and / or applicable department such as Academic & Bursary, Business Development, Finance, Examination, Quality Assurance, International Office, Student & Alumni Centre, Procurement, Information System, Library, Teaching & Learning Centre, Accommodation, Facilities & Maintenance, Post Graduate and Research Centre, and Human Resource departments. We may retain the Personal Data and that of other individuals that you provide to us for a reasonable period in accordance with commercial requirements and at all times subject to prevailing legal requirements. 5. Disclosure Personal Data provided to us will, generally, be kept confidential but you hereby consent and authorise us to provide and / or disclose your Personal Data to the following categories of parties: any person to whom we are compelled or required to do so under law or in response to a legitimate instruction from a competent or government agency; pursuant to an order of a court of competent jurisdiction; to any scholarship and / or student loan providers, organisations and /or institutions, in relation to the enrollment of students pertaining to the courses offered by us; any related affiliate companies or any one authorised by The University of Wollongong Australia Global Network including- those established in the future; where applicable, third parties who provide related services or products in connection with our business such as insurance agencies/insurers, university partners, PTPTN, MOHE, SOCSO, EPF, IRB, JPA, MQA outsourced external enrichment and co-curricular program providers, travel agencies / operators, external examination boards, and external school- contracted operators; government agencies, statutory authorities, enforcement bodies and industry regulators; our auditors, consultants, accountants, lawyers or other financial or professional advisers; student testimonial and academic results to facilitate the transfer of students to other educational institutions or for scholarship applications; our sub-contractors or third party service or product providers as may determine to be necessary or appropriate. Please rest assured that consistent with the law, we will only disclose the minimum amount of information which we deem necessary for the purpose and that we will take all appropriate safeguards to ensure the integrity and security of the personal data. 6. Safeguards We shall keep and process your data in a secure manner. We will take all reasonable steps to ensure that such information is kept confidential. We will not sell, rent or trade your Personal Data. We shall at all times implement the legally mandated and / or appropriate administrative and security safeguards and procedures in accordance with the applicable laws and regulations in order to prevent the unauthorised or unlawful processing of your Personal Data and the accidental loss or destruction of, or damage to, your Personal Data. 7. Data Transfer & Sharing In addition, you will appreciate that the nature of our products and services are such that it may be necessary, where we consider it appropriate, for the purposes of data storage or processing or providing any service or product on our behalf to you, to transfer your Personal Data to our affiliates and / or associated companies and/or third party service or product providers within or outside the country in which we are established, under conditions of confidentiality and similar levels of safeguards. 8. Impact resulting from failure to supply Personal Data 8.1. It is obligatory for you to provide all of the categories of Personal Data which we request from you for Purpose A. Failure to supply Personal Data in relation to Purpose A will: result in us being unable to provide you (i.e. students I prospective students) with the information, notices, and / or services requested; and/or affect the ability of the parties to enter into the necessary agreements in relation to the provision of our services. 8.2. It is optional for you to provide all of the categories of Personal Data which we request from you for Purpose B. Failure to agree for us to process Personal Data in relation to Purpose B will: result in us and / or our selected authorised third parties becoming unable to send you information by e-mail, telecommunication means (telephone calls and text messages) or via social media concerning related and unrelated services offered by us and our affiliated business partners which may include but is not limited to enrolment related events, surveys and / or special programs / courses / events, promotional materials, brochures, which we consider will or may interest you and /or your child or ward. 9. Your Rights of Access and Correction 9.1. You have the right to, subject to payment of the prescribed fees where applicable, request access to and/or correct your Personal Data and / or limit the processing thereof. In this respect, you may: check whether we hold or use your Personal Data and request access to such data; request that we correct any of your Personal Data that is inaccurate, incomplete or out-of- date; request that your Personal Data is retained by us only as long as necessary for the fulfillment of the purposes for which it was collected; request that we specify or explain our policies and procedures in relation to Personal Data and the categories of Personal Data processed by us; withdraw, in full or in part, your consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period. 9.2. The department to whom written requests for access to Personal Data or correction and / or deletion of Personal Data or for information regarding policies and procedures and types of Personal Data is: SELANGOR Department Admission & Bursary Contact (+60) 3 5565 0538 Fax (+60) 3 5565 0775 Email [email protected]; [email protected] Address Jalan Kontraktor U1/14, Seksyen U1, 40150 Shah Alam, Selangor, Malaysia PENANG Department Admission & Record Contact (+60) 4 238 6368 Fax (+60) 4 228 0362 Email [email protected] Address 32, Jalan Anson, 10400 George Town, Pulau Pinang, Malaysia UOW MALAYSIA KDU UNIVERSITY COLLEGE SDN BHD 198101010870 (76997-T) GLENMARIE CAMPUS Jalan Kontraktor U1/14, Seksyen U1, 40150 Shah Alam, Selangor, Malaysia. Phone: (+60) 3 5565 0538 Fax: (+60) 3 5565 0775 Website: https://www.uow.edu.my/ UOW MALAYSIA KDU COLLEGE SDN. BHD. 200901036828 (879955-T) GLENMARIE CAMPUS Level 5, Jalan Kontraktor U1/14, Seksyen U1, 40150 Shah Alam, Selangor, Malaysia. Phone: (+60) 3 5565 0538 Fax: (+60) 3 5565 0775 Website: https://www.uow.edu.my/ UOW MALAYSIA KDU PENANG UNIVERSITY COLLEGE SDN. BHD. 200901036235 (879357-X) GEORGE TOWN CAMPUS 32, Jalan Anson, 10400 George Town, Pulau Pinang, Malaysia. Phone: (+60) 4 238 6368 Fax: (+60) 4 228 0054 Website: https://www.uow.edu.my/ UOW MALAYSIA KDU PENANG UNIVERSITY COLLEGE SDN. BHD. 200901036235 (879357-X) BATU KAWAN CAMPUS Lebuhraya Bandar Cassia, 14100 Batu Kawan, Pulau Pinang, Malaysia. Phone: (+60) 4 563 6000 Website: https://www.uow.edu.my/