1. COLLECTION OF PERSONAL DATA
(a) In performing the Services, we may collect your personal data as defined under the Act including but not limited to the following information that you have or will provide:
(i) personal particulars including name, age, race, date of birth;
(ii) contact information including address, phone number and email address;
(iii) education and employment background;
(iv) banking information; and
(v) other personal information relevant to advertising, customer surveys, statistical analysis and/or promotions.
(collectively, hereinafter referred to as “Personal Data”.)
(b) We may collect your Personal Data directly from you including but not limited to the following:-
(i) when you communicate with us, our Related Companies or our Representatives (for instance when you submit an application form to become our student or to sit for any examination or to become a member of AFPM, or when you contact us for any enquiries);
(ii) when you engage us or our Related Companies for the Services and/or register your interest or request for information of the Services (through any available channels)
(iii) when you use or browse our Website;
(iv) when you visit our office or attend our classes, seminars, workshops, tutorials or examinations;
(v) when you participate in any of our surveys or feedback or respond to any marketing materials sent by us, our Related Companies or our Representatives (whether in hard copy, verbally or electronically);
(vi) when you commence a business relationship with us or our Related Companies (for example, as a service provider/business partner);
(vii) when you are in a job application process to become our or our Related Companies’ employee or become employed by us or our Related Companies; and
(viii) when you lodge any complaint with us, our Related Companies or our Representatives.
(c) Other than Personal Data obtained from you directly, we may also obtain your Personal Data from third parties that we deal with or are connected with you (for instance education institutions, your employer or financial institutions) including from such other sources where disclosure of your Personal Data is consented by you and/or where otherwise lawfully permitted.
2. USE AND PURPOSE OF YOUR PERSONAL DATA
(a) With your consent, your Personal Data that you have provided or will provide to us (or our Related Companies or our Representatives) will be collected, obtained, recorded, stored, retained and processed by us, our Related Companies or our Representatives or on our behalf for various purposes including but not limited to the following purposes:-
(i) performing the Services and to communicate with you about your academic membership, enquiries on the Services and any other related or non-related requests;
(ii) for preparing any document or instrument which may be required for the purposes set out in sub-paragraph (i) above and such other ancillary work in connection with sub-paragraph (i) above, including but not limited to preparing the necessary contract or agreement or instrument to which you are a party or a party having interest in the matter(s);
(iii) for the our internal processes, billing, invoicing, registration, renewals, appeals, complaints, research and development, administrative purposes or any other purpose relating to the Services;
(iv) carrying out the obligations and/or transactions that you have requested, agreed or authorised us and/or our Representatives to do;
(v) delivery of notices and/or marketing and advertising materials whether or not related to the Services including providing you information about our past, current and/or future Services, promotional materials, season greeting cards, newsletters, articles, write-ups, updates, policies, events, conferences, workshops, talks, courses and seminars;
(vi) requesting additional information or feedback from you about the Services including conducting surveys, statistical analysis or research in relation to the Services;
(vii) compliance with our obligations under law or any regulations imposed by regulatory or governmental authorities;
(viii) in order to protect the vital interests of another person, in a case where your consent or consent on your behalf has been unreasonably withheld;
(ix) for medical purposes;
(x) for the administration of justice, to obtain legal advice or to establish, exercise or defend legal rights in any legal proceedings; and/or
(xi) such other purposes which may be required by us from time to time
(collectively, the “Purpose”).
(b) As soon as practicable (in any case before we use the personal data other than for the purpose the Personal Data was collected), we shall by written notice inform you:-
(i) that your Personal Data is being processed by us or on our behalf;
(ii) the purposes for which the Personal Data is being or is to be collected and further processed;
(iii) of any information available to us as to the source of that Personal Data;
(iv) of your right to request access to and to request correction of the Personal Data and how to contact us with any inquiries or complaints in respect of the Personal Data;
(v) of the class of third parties to whom we disclose or may disclose the Personal Data;
(vi) of the choices and means that we offer to you for limiting the processing of the Personal Data;
(vii) whether it is obligatory or voluntary for the you to supply the personal data; and
(viii) where it is obligatory for you to supply the personal data, the consequences if you fail to supply the personal data.
(c) Kindly note that you may, by notice in writing withdraw your consent to the processing of your personal data at any time. AFPM and its Related Companies shall, upon receiving such notice cease the processing of your Personal Data.
3. TRANSFER OF PERSONAL DATA OUTSIDE MALAYSIA
(a) We may be required to transfer your Personal Data outside Malaysia if, for instance:-
(i) any of our service providers or strategic partners (“overseas entities”) who are involved in providing part of the Services are located in countries outside Malaysia;
(ii) you use the Website from a country other than Malaysia;
(iii) you intend to apply for Fellowship of RACGP or any other qualification that may be in collaboration or supported by AFPM; or
(iv) requested by any other professional bodies or organisation outside Malaysia.
(b) In such circumstances, you consent to us transferring your Personal Data outside Malaysia. To the extent practicable, reasonable steps will be taken to ensure that any such overseas entities are contractually bound not to use your Personal Data for any reason other than to provide the services or product they are contracted to provide.
4. SECURITY OF PERSONAL DATA
(a) When processing Personal Data, we will ensure practical steps are taken to protect your Personal Data from any loss, misuse, modification, unauthorized access or disclosure, alteration or destruction.
(b) To the best of our ability, we have put in place suitable practical measures to safeguard and secure the information that we collect from you. We will only disclose Personal Data to our Representatives only on a need to know basis and our Representatives are required to maintain confidentiality of such Personal Data.
5. RETENTION OF PERSONAL DATA
(a) AFPM and/or its Related Companies shall keep records of the Personal Data for as long as the necessary processes for the Purpose is required. However, in line with the retention principle under the Act, we will not keep the Personal Data processed for any Purpose for any period longer than is necessary for the fulfillment of that Purpose.
(b) Where possible, we shall endeavor to take reasonable steps to ensure that all Personal Data is destroyed or deleted if it is no longer required for the Purpose for which it was to be processed.
6. YOUR ACCESS TO INFORMATION AND CORRECTION OF PERSONAL DATA
(b) However, in the event you discover that any of your Personal Data is inaccurate, incomplete, misleading or not updated in whole or in part, you may in accordance with our internal procedures request in writing for access to be given and correction to be made to your Personal Data held by AFPM or its Related Companies (please refer to our contact details in the relevant section below). We will use reasonable efforts to comply with your request to access or correct your Personal Data within twenty-one (21) days of receiving your request and the relevant processing fee.
(c) Kindly note that, in accordance with the Act, we and/or our Related Companies may refuse to comply with your data access request under certain circumstances as prescribed under the Act including the following situations:-
(i) we and/or our Related Companies are not supplied with such information as we or our Related Companies may reasonably require in order to satisfy ourselves as to your identity as the requester or a relevant person; or
(ii) we and/or our Related Companies are not supplied with such information as we and/or our Related Companies may reasonably require to locate the personal data to which the data access request relates;
(iii) the burden or expense of providing access is disproportionate to the risks of your privacy in relation to the Personal Data in question;
(iv) we and/or our Related Companies cannot comply with the data access request without disclosing personal data relating to another individual who can be identified from that information, unless—
(A) that other individual has consented to the disclosure of the information to the requester; or
(B) it is reasonable in all the circumstances to comply with the data access request without the consent of the other individual;
(v) any other data user controls the processing of your Personal Data in such a way as to prohibit the us or our Related Companies from complying, whether in whole or in part, with the data access request;
(vi) providing access would constitute a violation of an order of a court;
(vii) providing access would disclose confidential commercial information; or
(viii) such access to your Personal Data is regulated by another law.
7. RIGHT TO PREVENT PROCESSING FOR PURPOSES OF DIRECT MARKETING
(a) Except where otherwise requested or notified by you, we or our Related Companies may use your Personal Data for the purpose of Direct Marketing and we or our Related Companies may use your Personal Data to send promotional information about third parties which we believe may be of interest to you.
(b) However, you may at any time by written notice to us require us to cease or not to begin processing your Personal Data for purposes of Direct Marketing. Please refer to our contact details in the relevant section below.
(b) While most web browsers automatically accept cookies, please note that you may choose to accept or decline cookies by modifying your browser setting to decline cookies. However, this may prevent you from taking full advantage of the Website.
9. LINKS TO OTHER WEBSITES
(a) For ease of browsing, we may include links in our Website to enable you to visit other third parties’ websites. Once you have clicked on these links, you will leave our Website and we may no longer have control such other websites.
10. OUR CONTACT DETAILS
Designated person: PDPA OFFICER ( Ms Kalaivaanni Narainan)
Phone Number: +603-8993 9176/9177
Fax Number: +603-8993 9187
Address: Academy of Family Physicians of Malaysia, Unit 1-5, Level 1 Enterprise 3B Technology Park Malaysia (TPM), Jalan Innovasi 1 Lebuhraya Puchong-Sungai Besi, Bukit Jalil, 57000 Kuala Lumpur.
“Act” means the Personal Data Protection Act 2010 including regulations, orders, notifications and other subsidiary legislation made under the Personal Data Protection Act 2010;
“Direct Marketing” means the communication by whatever means of any advertising or marketing material which is directed to particular individuals;
“Personal Data” has the meaning ascribed to it in section 1(a) above;
“Purpose” has the meaning ascribed to it in section 2(a) above;
“Related Companies” means AFPM’s related corporations, holding companies, associated companies, subsidiaries companies, affiliates, branches or business partners;
“Representatives” means employees, directors, officers, representatives, associates, affiliates, agents, advisers, auditors, financiers, insurers and service providers of AFPM and its Related Companies;
“Services” means the provision of professional development and continued medical education of the general practitioners including all other related services; and
(a) hhttps://www.afpm.org.my, and/or direct subdomains, subpages, redirected subdomains, subpages, mobile applications, social media websites and any other web display pages directly and indirectly correlated to https://www.afpm.org.my, and
(b) any other website, domain, subdomain, webpage, subpage, social media websites or mobile applications which has been set up, and/or is being maintained or operated, by AFPM or any of its Related Companies which replaces or is intended to replace or substitute any of https://www.afpm.org.my,
which provides, hosts and maintains all the information and contents provided by AFPM and/or its Related Companies.