PERSONAL DATA PROTECTION NOTICE

A. Introduction

ISOTeam Ltd (“the Company”) values and is committed to the protection of Personal Data. This Personal Data Protection Notice (“Notice”) explains the collection, processing and disclosure of your Personal Data pursuant to the Personal Data Protection Act 202 (No. 26 of 2012) (the “Act”).

By providing Personal Data to us or otherwise acknowledging receipt of this Notice, you have read and consent or you are deemed to have read and consent to us using, collecting and processing your Personal Data in the manner described in this Notice.

Kindly note that the Company reserves the right to change, amend and / or vary this Notice at any time. You are advised to check this Notice from and / or the Company’s announcements from time to time for amendments or updates.

B. Collection of Personal Data

The Company collects your personal data upon and throughout the course of your employment with us including:

1. 1. Your personal details which may include but is not limited to name, gender, date of birth, home address, phone number, employee ID number, NRIC number, nationality, immigrant status, visa and passport information, and / or education background;
   2. Any sensitive personal data which may include but is not limited to medical records and religious belief;
   3. The details in regard to employment which may include but not limited to title, dates of employment, hours worked, key employment contract terms, salary, benefits, bank account details, and income tax details;
   4. Details of any person(s) identifiable from your personal data which may include but not limited to information about your dependents; and / or
   5. Other information (collectively referred to as “Personal Data”).

C. Purposes

The personal data collected by us may be used for, inter alia, the following purposes:

1. 1. Internal record keeping, including but not limited to administration and processing throughout and / or for your employment, including reference check, benefit and training;
   2. Payroll and benefit administration and processing, including performance appraisal, CPF and other deduction;
   3. Communicating with you;
   4. Information and security purposes, including but not limited to managing and administrating e-mail, handling and investigating any security related issue, vulnerability, and / or incidents;
   5. Taxation and / or auditing purposes;
   6. For the exercise of any functions conferred on any person by law and / or towards the administration of justice; and / or
   7. For any purpose incidental, ancillary or in furtherance to the above mentioned purposes (collectively referred to as “Purposes”).

D. Disclosure to Third Parties

If and when necessary, your Personal Data may be disclosed to the following third parties:

1. 1. Authorized agents, contractors and third party service providers who provide services to the Company and the ISOTeam Companies (hereinafter defined) for any of the Purposes;
   2. External professional advisors and auditors;
   3. Governmental departments and authorities; and / or
   4. Any affiliated / subsidiaries of ISOTeam Ltd. (“ISOTeam Group Company”).

E. Security of Personal Data

The Company may transfer your Personal Data to any of the ISOTeam Group Company and / or third parties set forth in Paragraph 3 above, in Singapore, Malaysia or the countries where any of ISOTeam Group Company is located. In the event that your Personal Data is transferred to a location outside of the country, including those indicated above, the Company ensures that confidentiality safeguards have been put in place to ensure your rights to Personal Data protection remains unaffected.

F. Access, Correction, and Withdrawal

The Personal Data must be accurate, complete, not misleading and kept up-to-date. Should you be made aware of any inaccurate, incomplete or misleading Personal Data or where the Personal Data provided to us earlier have become incorrect or out of date, kindly notify us at the contact provided for in paragraph 9.

You have the right to request access and correct your Personal Data and to withdraw your consent given to us hereunder. Such request however, may be subjected to the requirements in the Act and the Company’s request procedure.

G. Retention Standard

Any Personal Data shall not be kept longer than is necessary for the fulfillment of the Purposes above mentioned in Paragraph 2. We shall undertake to ensure that all Personal Data is destroyed or permanently deleted if it is no longer required for the Purposes for which it was to be processed.

H. Do Not Call (DNC) Registry

Any Registered Singapore hand phone numbers(s) with the Do Not Call Registry and wish to withhold or withdraw consent to ISOTEAM in respect of receiving phone calls and / or SMS, shall notify the Data Protection Officer of ISOTeam at email address pdpa@iso-team.com within a week. Further agree to indemnify ISOTEAM against any financial penalties imposed by the Personal Data Protection Commission or any court of law in Singapore as a direct or indirect result of failure to inform ISOTEAM of registration with the Do Not Call Registry.

I. Inquiries

For all further queries or request(s), kindly email to pdpa@iso-team.com.

Data Protection Officer
8 Changi North Street 1

Source: PDPA Notice (Feb’18)