This privacy statement describes, among other things, how EDAG Production Solutions India Private Limited processes your personal data and your rights as a data subject in accordance with the general data protection regulation (GDPR) and the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 (as applicable to India).
Please do not hesitate to contact us if you have any questions regarding our personal data processing. Our contact information as well as the information of the grievance officer is set out in Section I and II below respectively.
I. The Data Controller’s Name and Contact Information
Edag Holding Sdn Bhd
Unit 2.2 Level 2 Block
Dataran PHB, Saujana Resort
40150 Shah Alam
Tel.: +603-7846 5595
Laman Web: my.edag.com
II. The Grievance Officer or the Data Protection Officer’s Name and Contact Information
Edag Holding Sdn Bhd
Unit 2.2 Level 2 Block
Dataran PHB, Saujana Resort
40150 Shah Alam
Tel.: +603-7846 5595
Laman Web: my.edag.com
III. General Data Processing Information
IV. Provision of the Website and Creation of Log Files
When accessing our website, the user is informed that functional cookies are used, as are cookies for analysis and marketing purposes, and a Cookie Consent Manager is used to obtain his or her consent to the processing of the personal data used in this respect. Information regarding this data privacy statement is also issued in this context.
Detailed information on how the individual cookies work, information on how long they function and details of whether third parties have access to these cookies can also be found in the Cookie Consent Manager. You can access the Cookie Consent Manager any time by clicking the corresponding button in the footer of our website.
Depending on their intended use and function, we divide cookies into the following categories:
a) Technically necessary cookies
Technically necessary cookies guarantee functions without which our website cannot be be put to its intended use. These cookies are used exclusively by us, i.e. they are first party cookies. This means that all information stored in the cookies is returned to our website. Technically necessary cookies are used, for example, to ensure that users who have logged in always remain logged in when accessing various sub-pages of our website, and so do not have to re-enter login data every time they access a new page.
It is possible and permissible to use technically necessary cookies on our website without first obtaining consent. For this reason, individual technically necessary cookies cannot be activated or deactivated. These purposes are also in our legitimate interests in the processing of personal data under Art. 6 para. 1 p. 1 point f of the GDPR. Our interest in ensuring the unobstructed provision of our website and the services it offers prevails.
b) Functional cookies
Functional cookies enable our website to store information that has already been input (such as registered name, language selection or a user's location) and, on the basis of this information, offer improved and more personalised functions. The way in which these cookies collect and store data ensures that user behaviour on other websites cannot be tracked.
c) Performance cookies
In order to improve the website's attractiveness, content and functionality, performance cookies collect aggregated information about how it is used. These cookies help us to determine whether, how often and how long which website subpages are visited and what content is of particular interest to users.
These cookies do not store any information that would allow the user to be identified. The information collected is aggregated, and does not allow us to directly identify the individual. The only purpose it serves is to compile statistics in order to better tailor the content of our website to the needs of our users, to improve user experience, and to optimise our range of services.
d) Marketing cookies
Marketing cookies come from external advertising companies (third party cookies) and are used to collect information about the websites visited by the user, to create targeted advertising for the user, and to display advertisements based on the user's interests. They are also used to limit the frequency with which an advertisement appears, and to measure the effectiveness of advertising campaigns. This information may be shared with third parties, advertisers for instance.
VI. Job applications via Email
As part of our recruitment process, we collect and process personal data relating to job applicants. We are committed to being transparent about how we collect and use this data and to meeting our data protection obligations.
VII. E-Mail Contact
The e-mail address is provided to enable contact to be established with us. In this case, the personal data of the user transmitted with the e-mail is stored.
In this respect, there is no disclosure of data to third parties. Such data is used solely to process the communication.
If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time or withdraw the consent provided to process such personal data / information. Such withdrawal of the consent shall be sent to us in writing. If this is the case, then the communication cannot be continued.
In this case, all personal data collected as a result of contact being made will then be erased.
VIII. Online Presence in Social Media
We maintain online presence within social networks in order to communicate with any customers, interested parties and users active there, and to inform them about our services. In this context, only simple links are used, or only social media plug-ins that do not establish any connection to the network in question when the page is loaded. This is the difference between the social media plug-ins used here and the widespread Like buttons, which transmit data to the social networks as soon as the page is loaded, without the button having to be clicked. Additional information on the processing of data can be found in the following social media data privacy statement.
IX. Web Tracking
This website uses Google Analytics, a web analytics service of Google Inc. ("Google"). Use includes the Universal Analytics operating mode. This makes it possible for data, sessions and interaction across multiple devices to be assigned to a pseudonymised user-ID, permitting the cross-device analysis of the activities of a user.
The purpose behind the use of the web analytics service is to analyse and make regular improvements to the use of our website. The statistics obtained enable us to improve our services and make them more interesting to you, our users. For any exceptional cases in which personal data is transferred to the USA, standard contractual clauses have been agreed with Google under the terms of the contractual arrangements.
These purposes are also in our legitimate interests in data processing under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation as the legal basis.
Any data that is sent by Google and linked with cookies, user authentication (e.g. user ID) or advertising IDs is automatically deleted after 14 months. According to Google, data which has come to the end of its storage period is automatically deleted once a month. We draw your attention to the fact that we have no influence over how long data is stored by Google.
You can prevent cookies from being stored by adjusting your browser software accordingly; we would, however, like to draw your attention to the fact that if you do so, this might possibly result in your not being able to use all the functions offered on this website to the full. Further, you can prevent the acquisition of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available on the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Opt-out cookies prevent the future acquisition of your data when visiting this website. To prevent acquisition across multiple devices by Universal Analytics, you will have to activate the opt-out for all systems in use. Click here to set the opt-out cookie: tools.google.com/dlpage/gaoptout
This website uses Google Analytics with the "_anonymizeIp()" function. This ensures that IP addresses are processed in truncated form, making it impossible to trace them to a specific user. Should the data about you that has been collected produce a direct personal link, this is immediately blocked, so the personal data is instantly deleted.
Information on the third-party provider
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
The conditions of use can be found on: https://marketingplatform.google.com/about/analytics/terms/us/.
A data privacy summary can be found at: https://policies.google.com/?hl=en-US , and a data privacy statement at: https://policies.google.com/privacy?hl=en-US .
To this purpose, we have also entered into a data processing contract with Google.
Use of Google Tag Manager
We use Google Tag Manager. Google Tag Manager is a solution that enables marketers to manage website tags via one interface. The Tool Tag Manager itself, which implements the tags, is a cookie-free domain and does not collect any personal data. The tool triggers other tags that under certain circumstances may themselves collect data. Google Tag Manager does not access this data. If deactivation has been effected at domain or cookie level, it will remain in force for all tracking tags implemented with Google Tag Manager. More information can be found here: http://www.google.de/tagmanager/use-policy.html
Click here for exclusion from data collection by the Google Tag Manager.
X. Integration of Google Maps
We use the Google Maps service on this website. This enables us to display interactive maps directly on the website, making it easy and convenient for you to use the map function.
Should you visit the website, Google receives the information that you have activated the corresponding subpage of our website. In addition, the following data is transmitted:(1) IP address of the accessing computer
This happens regardless of whether or not Google has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account. If you do not wish the data to be assigned to your profile with Google, you must log out before clicking on the link.
Further, depending on what settings the user has made, it is even possible for Google to collect location data. However, your consent to such data being used is always necessary, and you can refuse to let Google have this in your response to the query.
Further information concerning the purpose and scope of data acquisition and its processing by the plugin provider can be found in the provider's data privacy statements, where you will also find additional information on your rights in this respect and setting options to protect your private sphere: https://policies.google.com/privacy?hl=en&gl=en. Google also processes your personal data in the USA, and for this reason, the conclusion of standard contractual clauses has been agreed with Google.
XI. Use of Google Web Fonts
XII. INTEGRATION OF YOUTUBE VIDEOS (VIA PLUGIN)
XIII. Electronic Cards (eCard)
XIV. Rights of Data Subject
If personal data concerning you is processed, you are the data subject as defined in the GDPR, and the analogous provisions pursuant to applicable data protection legislation and have the following rights against the data controller:
You can ask the controller to provide you with confirmation as to whether or not personal data concerning you is processed by us.
If such processing is being undertaken, you can ask the controller to provide you with information concerning the following:(1) The purposes for which the personal data is processed;
If the processing of the personal data concerning you has been restricted, then, storage aside, this data may only be processed with your consent (insofar as legally required), or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest on the basis of Union or Member State law or the applicable law of your jurisdiction (as the case may be).
If processing has been restricted under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted however such restriction shall be lifted only after remedying the reason for the restriction (as applicable).
a) Obligation to delete
You can ask the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You revoke or withdraw your consent, which served as the basis for processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 point a of the GDPR or the analogous provisions in accordance with the applicable data protection legislation, and there is no other legal basis for the processing.
(3) You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
(4) The personal data concerning you has been unlawfully processed.
(5) Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law or as per the applicable law to which the data controller is subject.
(6) The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
b) Information to third parties
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR, then, taking into account the technologies available and implementation costs, he - the controller - applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as a data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.
The data subject does not have the right to have his or her data deleted if processing is necessary
(1) to exercise the rights to freedom of expression and freedom of information;
(2) to comply with a legal obligation calling for processing on the basis of Union or Member State law or as per the applicable law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 points h and i and Art. 9 para. 3 of the GDPR read with the analogous provisions in accordance with the applicable data protection legislation;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 of the GDPR, and the analogous provisions pursuant to applicable data protection legislation insofar as the right set out in section a) is likely to render impossible or seriously impair the achievement of the purposes of this processing, or
(5) to establish, exercise or defend legal claims.
If you have exercised your right to have the controller correct, delete or restrict the processing of your data, then the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of such correction or deletion of the data or restriction of the processing, unless it proves impossible to do so or would involve unreasonable expense and effort.
You are entitled to have the controller inform you of these recipients.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 point e or f of the GDPR and the analogous provisions pursuant to applicable data protection legislation; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.
Should you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG and the analogous provisions pursuant to applicable data protection legislation – you are entitled to exercise your right to object by automated means using technical specifications.
Right to restrict disclosure of data / information
You have the right to restrict disclosure of information to a third party if your prior consent for such disclosure to a third party is not taken unless such disclosure has been agreed to in the contract between us, or where the disclosure is necessary for compliance of a legal obligation.
Right to restrict transfer of data / information
You have the right to restrict the transfer of information by us to any other body corporate or a person in India, or located in any other country, that does not ensure the same level of data protection that is adhered to by us as provided for under the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011. The transfer may be allowed only if it is necessary for the performance of the lawful contract between us, or any person acting on our behalf and you, or where you have consented to such data transfer.
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects that concern you or significantly affects in a similar way.
This does not apply if the decision(1) is necessary for entering into or the performance of a lawful contract between you and the data controller,
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR and the analogous provisions pursuant to applicable data protection legislation.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
Version: May 2020