This policy sets out the guidelines and procedures for Forward Energy Sdn Bhd (“FESB”), and its subsidiaries regarding the collection, processing, storage, and protection of personal data. FESB is committed to ensuring that personal data is collected and processed in accordance with the Personal Data Protection Act 2010 (PDPA) and other applicable laws and regulations.

Scope

This policy applies to all employees, contractors, and third-party service providers who handle personal data on behalf of FESB.

Definitions

• Personal data: any information relating to an identified or identifiable individual
• Processing: any operation or set of operations performed on personal data
• Data subject: an identified or identifiable individual to whom personal data relates

Principles of personal data protection

• Personal data will be collected and processed in a lawful,
  fair, and transparent manner in accordance with the PDPA and other applicable
  laws and regulations.
• Personal data will be collected and processed for specified,
  explicit, and legitimate purposes, and will not be processed in a manner that
  is incompatible with those purposes.
• Personal data will be adequate, relevant, and limited to
  what is necessary in relation to the purposes for which it is processed.
• Personal data will be accurate and, where necessary, kept up
  to date.
• Personal data will be kept in a form which permits
  identification of data subjects for no longer than is necessary for the
  purposes for which the personal data is processed.
• Personal data will be processed in a manner that ensures
  appropriate security, including protection against unauthorized or unlawful
  processing and against accidental loss, destruction or damage.

Collection and use of personal data

• Personal data will only be collected for specific and legitimate purposes, and will not be further processed in a manner that is incompatible with those purposes.
• FESB will provide data subjects with information regarding the purpose of the data collection and obtain their consent, where necessary, in accordance with the PDPA.
• FESB will ensure that personal data collected is accurate and complete in accordance with the PDPA.

Disclosure of personal data

• FESB will not disclose personal data to third parties unless it is necessary for the performance of a contract, required by law, or with the explicit consent of the data subject in accordance with the PDPA.
• FESB will take appropriate measures to ensure that any third-party service providers processing personal data on behalf of FESB comply with this policy and the applicable laws and regulations.

Security of personal data

• FESB will take appropriate technical and organizational measures to ensure the security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage in accordance with the PDPA.
• FESB will conduct regular risk assessments and take appropriate measures to mitigate any identified risks to personal data in accordance with the PDPA.

Data subject rights

• Data subjects have the right to access, rectify, or delete their personal data, as well as the right to object to or restrict the processing of their personal data in accordance with the PDPA.
• FESB will respond to data subject requests in a timely manner, and provide them with the necessary information regarding their rights in accordance with the PDPA.

Breach notification

• In the event of a personal data breach, FESB will take appropriate measures to mitigate the effects of the breach, and notify the relevant authorities and affected data subjects in accordance with the PDPA.

Compliance

• FESB will regularly review and update this policy to ensure compliance with the PDPA and other applicable laws

Your Consent

• By submitting your personal data, you consent to the use of that personal data as set out in this Policy.
• Data subjects have the right to withdraw their consent at any time by contacting FESB in writing, and FESB will cease processing their personal data upon receipt of the withdrawal request, subject to any legal or contractual obligations.

By implementing this Personal Data Protection Policy, FESB is committed to protecting the privacy and confidentiality of personal data, and ensuring that personal data is processed in a responsible and transparent manner.

If you have any questions or comments about FESB’s implementation of our Personal Data Protection Policy, feel free to contact us at info@forwardenergy.com.my or 03-2095 4567