We are dedicated to protecting the privacy of those who visit our Website. This Privacy Policy explains how we collect your Personal Data on our Website, how we protect such data, and the rights you have concerning the use of such data. Please read this Privacy Policy carefully.
Who we Are?
This Privacy Policy applies to our website https://crestsolution.com/ (“Website”). The controller of your Personal Data collected via our Website is Crest Infosolutions Sdn. Bhd., The Vertical Business Suite, 8 Jalan Kerinchi, Bangsar south, Kuala Lumpur 59200, Malaysia. (“Crest”, “our”, “us” or “we”).
What Personal Data we collected and how is it Used?
Which Personal Data we Collect
Personal Data is information that identifies you, or can be used to identify or contact you (“Personal Data”). Such Personal Data may include your name, address, email address, telephone number, and billing information.
We collect Personal Data from you when you use our Website, as further described in this Privacy Policy. In all of these cases, we will only process Personal Data that you provide directly to us, or which we automatically collect from you as specified in this Privacy Policy. Unless defined in this Privacy Policy, or unless you give us permission to do so, we will not use or share your Personal Data other than as specified in this Privacy Policy.
How we collect and Use Your Personal Data
In the following section, you will find information on how we collect your Personal Data, for what purpose we process your data, and on what legal basis we do so. To the extent the legal basis of our processing of your data are our legitimate interests, you can contact us at the contact details below if you require more details on our legitimate interests. If we use your consent as the legal basis of our processing of your Personal Data, you have the right to revoke your consent at any time, with future effect as described in the following or by contacting us at the contact details below. This will not affect the processing of your Personal Data being undertaken, until the revocation. The same applies if we refer to your consent or our legitimate interests in other parts of this Privacy Policy.
- If You Use our Website
We collect Information, some of which contains Personal Data that you provide directly to us through responses to special services such as surveys, questionnaires, career section and the like. We use this data to personalize our services, and optimize your customer experience when using our Website.
Moreover, we automatically collect information, including Personal Data when you browse our Website, such as your browser type, operating system, error logs, and other similar information. Such aggregated information does not allow us to identify you, and is used by us to analyze trends, administer the Website, monitor our Website’s use, and gather general information about the use of our Website.
The legal basis for such processing of your Personal Data are our legitimate interests in customizing the content of our Website in line with user preferences and further improving our services
Please note that you are not legally required to provide us with your Personal Data. However, without your Personal Data, we will not be able to provide you with the full range of our services.
- If You Contact our Customer Service
If you contact our customer service, we will communicate with you in response to your inquiries, to provide the services you request, and to manage your subscription. We will communicate with you by email or telephone, in accordance with your preferences.
Such processing of your Personal Data is necessary for the performance of our services; the legal basis for such processing of your Personal Data is therefore performance of contractual obligations. Please note that you are contractually required to provide us with such Personal Data, and that without such Personal Data, we will not be able to send you customer service related communications.
- If You Subscribe to Newsletters
We offer a free newsletter. With our newsletter, we inform you about new contributions which appear on our website.
To subscribe to the newsletter, you can enter your e-mail address in the respective field on the website. You will then receive a link to confirm your registration. Only if you provide your consent by clicking on this link, will you be added to our mailing list and receive our newsletter.
You can unsubscribe from the newsletter at any time. Each newsletter contains information on how you can cancel the newsletter with effect for the future. The legal basis for such processing of your data is your consent. Please note that you are not legally required to provide us with your Personal Data. However, without your Personal Data, we will not be able to send you our newsletters and other information as described above.
Cookies
We use cookies and similar technologies like pixels, tags, web beacons, and other identifiers, to help us personalize our services for you, remember your preferences, understand how users are using our Website, and help customize our marketing communication.
A cookie is a small data file containing a string of characters, which is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. The length of time a cookie will stay on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Our Website uses both types of cookies. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your computer or mobile device until they expire or are deleted.
We use certain necessary cookies which are required to make our website work. The basis for using necessary cookies is legitimate interests (Art. 6(1) point (f) as per GDPR). Other cookies such as performance cookies, analytics cookies etc. are used on the basis of your consent (Art. 6(1) point (a) as per GDPR).
Third-Party Features
Our Website contains links to or features from other websites. This Privacy Policy covers the privacy practices of Crest only, and does not cover the privacy practices of third-party websites or features. We are not responsible for the privacy policies and/or practices of third-parties. When linking to another website, or using a third-party service, you should read the privacy policy on that site or service.
To the extent, certain third-party website features are available on our Website, the following terms apply:
LinkedIn – https://www.linkedin.com/legal/privacy-policy
Twiter – https://gdpr.twitter.com/en.html & https://twitter.com/en/privacy & https://help.twitter.com/en/rules-and-policies/twitter-cookies
Facebook – https://www.facebook.com/business/gdpr
Google/YouTube – https://policies.google.com/privacy
How we Share and Disclose Personal Data
We will not share, sell, transfer or otherwise disseminate your Personal Data to third-parties, unless required by law, unless required for the purpose of your contract, unless we are allowed to do so on the basis of a data processing agreement according to GDPR, or unless you have given us express consent to do so.
We share some of your Personal Data with other Crest companies, to the extent necessary for such companies to provide services on our behalf. In particular, we are using other Crest companies to send marketing communication to you if you have given us your consent to do so.
Some of the companies we share your Personal Data with, as described above, are located outside of the European Economic Area.
In order to grant sufficient protection of your Personal Data in this context, we use standard data protection clauses adopted by the European Commission, with such companies, or certifications of such companies under the EU-U.S. Privacy Shield according to GDPR. You can request further details by contacting us at the contact details mentioned below.
Any sharing of your Personal Data with other Crest entities or service providers, will be made in accordance with applicable data protection laws, and will be limited to the extent necessary. We have carefully selected these companies, and continuously monitor their compliance with our instructions. These companies are contractually prohibited from using your Personal Data for any other purposes than those described in this Privacy Policy. The legal basis for our sharing of your Personal Data with such companies is our legitimate interests in commissioning those companies with the services described above.
We may also be required to disclose your Personal Data to government or law enforcement officials in response to a lawful request by a public authority, or if we have to do so to comply with a legal obligation, including to meet national security or law enforcement requirements. We can also disclose your information in order to pursue our legitimate interest in applying or enforcing our terms and conditions or in responding to any claims, in protecting our rights or the rights of a third-party, in protecting the safety of any person or in preventing any illegal activity (including for the purposes of fraud protection and credit risk reduction).
If required under applicable data protection laws, we will collect your prior consent before sharing your Personal Data with other companies.
Is my Personal Data used for any Other Purposes?
Except as otherwise described in this Privacy Policy, we will only use Personal Data for the purposes described above, or as otherwise disclosed at the time we request such data from you. Should your Personal Data be processed for other purposes than those outlined in this Privacy Policy, or other purposes than the ones your Personal Data has originally been collected for, we will provide you with information on that other purpose, and any other relevant information as referred to in this Privacy Policy.
What Rights do I Have?
You have the following rights with respect to your personal information. You may exercise any of these rights by sending your request to info@crestsolution.com
Right to Access
You have the right to request from us information on the personal information about you we process at any time. Please send your request to the postal or email address stated above.
- Right to Rectification of Incorrect Data
If data about you is inaccurate, you have the right to obtain from us rectification of such data without undue delay. Please send your request to the contact details stated below.
- Right to Erasure
You have the right to request from us the erasure of your personal information. In particular, you may ask us to erase personal information, if (i) it is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (ii) the personal information has been unlawfully processed; (iii) you object to the processing pursuant, and there are no overriding legitimate grounds for the processing; (iv) the personal information has to be erased for compliance, with a legal obligation in Union or Member State law to which we are subject; or (v) you withdraw your consent on which the processing is based, and there is no other legal ground for processing. Please send your request to the contact details stated below.
- Right to Restriction of Processing
You have the right to obtain from us restriction of processing, where one of the following applies:
(i) The accuracy of the personal information is contested by you, processing will be restricted for a period, enabling us to verify the accuracy of the personal information;
(ii) the processing is unlawful, and you oppose the erasure of the personal information and request the restriction of its use instead;
(iii) we no longer need the personal information for the purposes of the processing, but are required by you to keep it for the establishment, exercise or defence of legal claims; or
(iv) you have objected to processing, and the verification whether our legitimate interests override yours is pending. Please send your request to the contact details stated below.
- Right to Data Portability
You have the right to receive the personal information concerning you, which you have provided to us in a structured, commonly used and machine-readable format. Please send your request to the contact info@crestsolution.com
- Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal information concerning you. We will no longer process your personal information, unless we demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
- Right to Withdraw Consent
You have the right to withdraw your consent for the processing of personal data where explicit consent has been sought. In the limited circumstances where you may have provided your consent to the collection, processing, and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
- Right to Automated Individual Decision-Making
We do not use your Personal Data to make decisions with legal or similar effects for you, based on the automated processing of your Personal Data only. In case we perform automated individual decision-making in the future, we will inform you of the same and your rights regarding opting-out of such processing.
Data Retention
We store your Personal Data and other information for as long as necessary, to enable you to use our Website, provide our services to you, comply with applicable laws (including those regarding document retention), resolve disputes with any parties, and otherwise as necessary, to allow us to conduct our business. If you have a question about a specific retention period for certain types of Personal Data we process about you, please contact us at the contact details mentioned below.
Who do I Contact if I have any Privacy Questions?
If you have any questions about our Privacy Policy, or feel that we are not abiding by the terms of our posted Privacy Policy or the applicable data protection laws, please contact our data protection officer on the following Email ID: Email –info@crestsolution.com
Changes to this Privacy Policy
This policy is effective as of 30th Aug 2021. We may amend this Privacy Policy from time to time. We will post any changes to this Privacy Policy here. Please refer this Privacy Policy on a regular basis.