This written notice serves to inform you that your personal data is being processed by or on behalf of GSC. For the purposes of this written notice, the terms “personal data” and “processing” shall have the meaning assigned to them in the Personal Data Protection Act 2010 (hereinafter referred to as the “PDPA”).
4. Description of your personal data
Your personal data processed by GSC includes:-
a) your personal details such as name, gender, identification support documents (including NRIC or passport number), date of birth, race, nationality, country, marital status, occupation) and contact details (such as current residential or business address, e-mail address, and phone numbers);
b) your feedback information gathered from multiple sources such as e-mail, phone and write-in;
c) your visits to GSC’s Websites/ GSC Mobile Application – name of internet service provider, the website from which you visit GSC Website/ GSC Mobile Application, the pages and content which you view, the date and duration of your visit, cookies to track usage patterns, etc from the analytics tools such as Google Analytics and others;
d) your personal interests and preferences to help GSC design the offering of its products;
e) recording of your image via CCTV cameras when you visit GSC cinemas;
f) your curriculum vitae or resume when you register your interest in having a career in GSC and/or its relevant subsidiary/subsidiaries.
g) information given voluntarily by you during any on-ground promotions or digital activities, tie-ups, contests, etc.
5. Purposes for the processing of your personal data
a) To verify your identity;
b) To communicate with you and deliver information that is requested by you to you and/or, in some cases, is targeted to your interests, such as targeted banner advertisements, administrative notices, product offerings, and communications relevant to your use of GSC’s Website, GSC Mobile Application and or GSC services;
c) To process any communication you send to GSC (for example, answering any queries, dealing with any complaints and/or feedbacks);
d) To notify and/or invite you to events or activities organized by GSC, its partners or sponsors;
e) To notify you about benefits, changes to the features, promotions, alerts, newsletter, updates, promotional materials and, special privileges;
f) To send you festive greetings and movie-related content;
g) To run GSC’s customer loyalty programmes where applicable;
h) To establish and better manage any business relationship GSC may have with you;
i) To help GSC monitor and improve its services to you, GSC’s customer service teams, GSC’s Website and GSC Mobile Application and other GSC related assets and services, and to facilitate and conduct GSC’s staff training and GSC’s quality control and audits,;
j) To conduct marketing activities (for example, market research and surveys);
k) To maintain records required for auditing, security, claims and/or other legal purposes;
l) To investigate and resolve any ticketing issues or otherqueries or complaints that you may submit to or raise with GSC;
m) To investigate, respond to, and/ or defend claims made against, or involving GSC;
n) For compliance with and/or any purposes required by any relevant law, directives, guidelines, orders, rules, regulations and requirements of any governmental or statutory authority or administrative or regulatory or supervisory body (including disclosure thereunder);
o) To process and facilitate any payment and transactions with GSC including the purchase of movie tickets and other products or services from GSC; and
p) Any other purposes relating or incidental to any of the above.
6. Source of your personal data
Your personal data is collected directly from you when you:-
a) interact and communicate with GSC at any of its events or activities;
b) communicate with GSCwhether through email, phone, GSC’s Website or GSC Mobile Application, social media such as Facebook, Twitter and Instagram as well as other forms of communication;
c) register or subscribe for a specific service or publications of GSC (for example, newsletter or GSC membership registration);
d) participate in any of GSC’s surveys, polls or other similar vehicles used to improve the content of GSC’s Website/GSC Mobile Application or used for GSC’s marketing purposes;
e) enter or participate in any competitions, contests or loyalty programmes organized by GSC;
f) register your interest and/or request for information through GSC’s Website or GSC Mobile Application, online portals or other available channels;
g) respond to any marketing materials that GSC sends out;
h) visit or browse GSC’s website and any other GSC owned platforms;
j) lodge a complaint with GSC; and
k) provide feedback to GSC (for example via GSC’s website or in hard copy).
Other than the personal data obtained from you directly as stated above, GSC may also obtain your personal data from third parties which GSC deals with or are connected with you, and from such other sources where you have given your consent for the disclosure of your personal data and/or where otherwise lawfully permitted.
7. Your rights
You have the following rights in relation to your Personal Data:-
a) to make a data request in writing to GSC for information of your personal data that is being processed by or on behalf of GSC (Section 30(2) of PDPA);
b) to correct any of your personal data which is inaccurate, incomplete, misleading or not up-to-date (Section 34(1) of PDPA) GSC’s website by completing the Personal Data Update Form and emailing it to GSC at firstname.lastname@example.org ;
c) to limit the processing of your personal data including the personal data relating to other persons who may be identified from your personal data (Section 7(1)(f) of PDPA); and
d) to request for your personal data to be removed from GSC’s database;
If you have any request in relation to the abovementioned rights or any inquiries or complaints in respect of your personal data, please contact:
Yep Pui Yee,
Manager, Theatrical Marketing
Email Address: email@example.com
GSC may refuse to comply with your data access request under the circumstances specified in the PDPA and if GSC does so, GSC will inform you of its refusal and the reason(s) for its refusal.
8. Class of third parties to GSC may disclose your personal data
This is the class of persons to whom GSC may disclose your personal data:-
a) Third party service provider(s) for the provision ofadministrative, communications, payment, event management, security, information technology (IT), data processing or other services to GSC.
b) Any third party or company that GSC engages or appoints to conduct statistical analysis;
c) GSC’s business partners in relation to any products offered by GSC or the said business partner, including Hong Leong Bank in relation to the GSC-Hong Leong Bank Credit Card
d) Lawyers for the enforcement of GSC’s legal rights; and
e) Such other authorities, bodies or parties when required by law.
Your Personal Data is collected and processed to provide you with GSC services and to facilitate the Purposes pursuant to your request. Such recipients of your Personal Data are contractually prohibited from using Personal Data for any purpose other than for the purpose GSC specifies.
9. Your obligations
(a) Unless otherwise specified, it is obligatory for you to supply GSC with your personal data and your failure to do so will result in GSC being unable to process your personal data for any of the Purposes.
(b) You will take reasonable steps to ensure that your personal data is accurate, complete, not misleading and kept up-to-date (Section 11 of PDPA).
10. Security of your personal data
GSC, when processing your personal data, takes practical steps to protect your personal data from any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction including but not limited to the use of procedural and technical safeguards such as encryption, “firewalls” and secure socket layers. If you are aware of any security breach, please let us know as soon as possible.
However, “perfect security” does not exist on the internet, so GSC does not give an absolute assurance that your personal data that you provide to GSC will be secure at all times, and GSC will not be responsible for any event arising from unauthorised access to or theft of your personal data. GSC will not be held responsible for events arising from third parties gaining unauthorised access to or third parties’ theft of your personal data.
11. Retention of your personal data
13. Users under the age of 18
The GSC website and its related services are not directed at persons under 18 years of age. If you are under 18 years of age, you are required to obtain your parent/guardian’s permission before you provide your personal data to GSCM and/or its related companies.
14. Inconsistency or conflict
In the event of any inconsistency or conflict between the English language version and the Bahasa Malaysia version, the English language version shall prevail.
15. Others rights
16. Links to other websites
18. Usage tracking and Log Files
GSC’s web server automatically collects information on your domain type, browser used and your IP address for statistical purposes only, which will be used to improve the content of the GSC Website or GSC Mobile Application and not sold to other organizations for any purpose.
As with most other websites, GSC collects and uses the data contained in log files. The information in the log files include your IP (internet protocol) address, your ISP (internet service provider), the browser you used to visit the GSC’s Website, your screen resolutions and number of colors, the time you visited the Website and which pages you have visited throughout the GSC’s Website.
19. Processing of Personal Data
Your Personal Data may be transferred to another country as part of the processing of Personal Data. The jurisdictions in which the Personal Data or information is processed may or may not have laws to regulate the privacy of personal data, however, whenever your Personal Data is transferred by GSC and/or GSC third party service providers, GSC will use its best endeavor to ensure that your Personal Data is processed in accordance with the terms and conditions of this Policy.
Date of last update: 24 May 2017