Carwin Solutions is committed to protecting the privacy of its customers and users of its product and service according to the The Malaysian Personal Data Protection Act 2010 ("the Personal Data Act") (read more here) and other applicable laws.
We collect information about users for the purpose specified in Section 3 of this privacy statement. The purpose for data collection defines what information is collected from the user in each situation.
Personal data is mainly collected at the point of subscription or registration, or later during the customer relationship. We may also use online technologies to collect observed data about how people use our digital products and services.
We only handle personal data for predefined purposes, mainly to the following:
We handle the personally identifiable information that the user has given to us (such as profile and contact details) separately from observed data about online service use and derived data, typically in separate databases. Observed or derived data about service usage is always stored using identifiers that are typically randomly generated and users cannot be personally identified from the identifiers.
If the user has created a Carwin Solutions Account we may for the purposes mentioned in section 3. enrich the account data with the observed data collected about online use of our services. Combining data for the purposes of marketing and targeting of digital advertising requires user’s consent. For example if user brings product purchase and / or subscriptions to be managed on the account we can target advertisements based on the subscription history.
We store user information only for as long as is necessary in order to fulfil the purposes set out in Section 3 above, in accordance with the applicable legislation.
A person’s digital account is typically valid for eighteen (18) months. If the user has not logged in to his or her digital account during that time period, the user is requested to renew his or her user rights. If the user does not renew his or her user rights, or the user’s customer relationship or other reason for handling personal data are no longer valid, the user’s personal data will be deleted, transferred to a permanent marketing register, or anonymized into such a format that it is no longer possible to identify the person.
The user’s nickname and content provided by the user may remain visible in some services, such as discussion forums and public commenting platforms, even after the termination of the user’s actual customer relationship with Carwin Solutions. In addition, we may be obligated to store some of the user’s personal data in order to comply with accounting laws or other imperative legal provisions, even after the termination of the customer relationship.
Companies within the Carwin Solutions Group can handle personal data according to the applicable Personal Data Act. We may also outsource the handling of personal data to a third party supplier or vendor, in which case we ensure through contractual measures that the personal data is handled appropriately and in compliance with the Personal Data Act.
We typically store our data in Malaysia. If any data is transferred outside Malaysia, we will ensure that the country to which the data is transferred is approved as having a sufficient level of privacy protection by The Securities Commission Malaysia, or by using standard contractual model clauses approved by The Securities Commission Malaysia. Third party suppliers processing data on our behalf must handle personal data in compliance with this privacy statement.
We only transfer information to third parties for their independent use in cases presented in Section 7.
We will not sell, lease out or disclose personal data of an identified user to third parties for their independent purposes, except for the situations shown below.
We use technical and organisational measures to protect personal data against unauthorised access, transfer, deletion or other handling that may compromise information security. Such methods include the use of firewalls, encryption technologies and safe server rooms, proper access control systems, the controlled provision of user rights and supervision of their use, , providing instructions for data processors, and the thorough selection of competent subcontractors who comply with industry standards for information security management.
Third parties refer to parties other than Carwin Solutions, such as advertisers, advertising networks or providers of online measurement and analytics services, who may collect data from Carwin Solutions’s sites. These third parties may place their cookies on the user’s browser when the user visits our services, for example, in order to offer targeted digital advertisements to the user, or to compile statistics about the number of visitors on different sites. In this case, the user’s browser will call the third party’s servers for the delivery of the advertisements, and the third party can view, edit or set its cookies as if the user was on its website. Carwin Solutions has contractual measures in place to ensure that such third parties follow the applicable legislation and relevant self-regulatory guidelines.
Our services may also contain links to non-Carwin Solutions websites other than those listed above. However we are not responsible for the privacy policies nor for the content of such third party websites. We recommend that users read the privacy statements of each website.
Users may download Carwin Solutions applications through the online stores of mobile device providers such as the Apple App Store, Nokia Store, Google Play or Microsoft Store. The privacy policies of these providers apply in addition to Carwin Solutions’s privacy statement. Users should familiarise themselves with the terms and privacy policies provided by device platforms. Apple terms are available here, Google terms here and Microsoft terms here.
Information about the location of the user’s device can be used to offer location-based services, such as local weather reports, and to present targeted digital advertisements, provided that the user has given his or her express consent to the utilisation of location information, or expect if the location information is processed anonymously, without attribution to any identifiers.
Location information is determined using available positioning technologies, such as GPS and WLAN connection points and mobile network base stations. The user may revoke his or her consent for location data use at any time.
We are committed to providing our users choices and control over data processing. In this section we list different ways of influencing data collection and processing.
Users have the right to prevent their information from being used for direct sales or marketing purposes, and for electronic direct marketing purposes. Users can opt-out by contacting our customer service, or in the event of e-mail marketing, directly from the e-mail.
Users have the right of check what kind of personal data has been collected. Upon the user’s request, we will modify, remove or supplement any incorrect, unnecessary, incomplete or outdated personal data. Users may update and/or check their personal data by contacting our customer service.
Users can clear their cookie history from their browser settings. By regularly deleting cookies from the browser, users can change the identifier on the basis of which a specific online user profile is generated. Clearing cookies will not complete prevent information from being collected; however it does resets the user’s online profile based on new cookies.
Through the below described choices the user can prevent targeting of advertising based on their online behavior. After opting out, the user will see as many advertisements as before but they will not be selected according to the user’s areas of interest.
Consent for the use of location information
Users are asked to provide their consent for the use of location data on applications and services. Location consent can be revoked using the device or application settings.
The primary point of contact is the service-specific customer care service desk. Contact details to the customer care service are available on the website of each corresponding service. Links to our online products and services are available here.
Users may also send any questions related to this privacy statement and any concerns regarding the use of online technologies for targeting of advertisements to:
No. A-3A-02, Neo Damansara, Jalan PJU 8/1
Bandar Damansara Perdana
47820 Petaling Jaya