PDPA Policy

PERSONAL DATA PROTECTION NOTICE

This Personal Data Protection Notice (“Notice”) describes how Citytro Sdn Bhd (hereinafter referred to as Eastin Hotel Penang) uses your Personal Data. For purposes of this Notice, “EPG” means Eastin Hotel Penang.

In the event of any conflict between the English and other language versions, the English version shall prevail. EPG shall have the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on the website of Eastin Hotel at https://eastin.com/ (“Website”). By continuing to communicate with EPG or by continuing to use EPG’s services following the modifications, updates or amendments to this Notice shall signify your acceptance of such modifications, updates or amendments.

COLLECTION OF PERSONAL DATA

1. “Personal Data” means information about you, from which you are identifiable, including but not limited to your name, identification card number, passport number, vehicle number, address, telephone number, email address, date of birth, credit cards or payment details, race, nationality, any information about you which you have provided to EPG related to your reservation, stay or visit (such as your date of arrival and departure, room preferences and purpose of stay), information relating to your purchase and receipt of products or services, reviews, suggestions and opinions about EPG’s property, \customer surveys and/or any information about you that has been or may be collected, stored, used and processed by EPG from time to time.
2. In addition to the Personal Data you provide to EPG directly, EPG may also collect your Personal Data from a variety of sources, including without limitation when you visit or stay at EPG, when you make a reservation to stay at EPG over the telephone, via the Website or otherwise, when you interact and communicate with EPG at events or otherwise or when using the Website.
3. EPG may also use closed circuit television (CCTV) and other security measures at its properties that may capture or record your image and information related to your location while you are in EPG via keycards and other technologies. EPG may also use other technologies that record sound or video to protect its guests, staff and property.
4. The provision of your Personal Data is mandatory when you make a reservation to stay at EPG and when you check into EPG. If you do not provide EPG your Personal Data, EPG will not be able to process your registration or reservation, and will therefore result in you being unable to make a booking or stay at the EPG.
5. The provision of your Personal Data voluntarily when you submit your reviews, suggestions or opinions or complete a customer survey related to EPG.
   
   

PURPOSES OF PROCESSING

6. EPG may use and process your Personal Data for the purposes relating to the business and activities of EPG which shall include, without limitation:-

– to process your registration or reservation to stay at EPG;
– to communicate with you regarding your reservation or stay at EPG;
– to provide you the goods and services you have requested;
– for purposes of billing and payments relating to your stay at EPG and for any goods and services you have purchased or requested;
– to respond to questions, comments and feedback from you;
– to provide you with a better and more personalised level of service;
– to provide for your safety and security as well as the safety and security of staff, guests and other visitors;
– for EPG’s internal administrative purposes including auditing, accounting, data analysis and to improve our services;
– To comply with applicable regulatory requirements and legal obligations, EPG will use and process your Personal Data as outlined in this Notice and you hereby agree and consent to such use and processing.

MARKETING AND PROMOTIONAL PURPOSES

7. EPG may also use and process your Personal Data for other purposes such as to send you updates and news on the latest EPG’s services, promotions and events which may be of interest to you, by way of post, short message service (SMS), email and/or social networking sites.

8. If you do not consent to EPG processing your Personal Data for the purposes listed in Section 7, please notify EPG using the contact details stated in Section 11 below.

DISCLOURES TO THIRD PARTIES

9. Your Personal Data may be transferred, accessed or disclosed to third parties for the purposes of processing your reservation or for your stay at EPG. Further, EPG may engage other companies, service providers or individuals to perform functions on EPG’s behalf, and consequently may provide access or disclose to your Personal Data to such service providers or third parties. Such third parties include (without limitation):-

   – information technology service providers;
   – professional advisors and external auditors;
   – other entities under Citytro Sdn Bhd
   – law enforcement, regulatory and governmental authorities in order to comply with statutory and government requirements.

10. Your Personal Data may also be shared in connection with a corporate transaction, such as a sale of a subsidiary or a division, merger, consolidation, or asset sale, or in the unlikely event of winding-up.
    
    

ACCESS & CORRECTION REQUESTS AND INQUIRIES

11. Subject to any exceptions under applicable laws, you may request for access to and/or request correction of your Personal Data, request to limit the processing of your Personal Data in relation to Section 7 above and/or make any inquiries regarding your Personal Data by contacting:-

Data Protection Officer (DPO) Eastin Hotel Penang

1 Solok Bayan Indah Queensbay 11900, Bayan Lepas Penang. Malaysia
Email: info.pg@eastin.com
Tel: 604 612 1111

12. In respect of your right to access and/or correct your Personal Data, EPG has the right to refuse your requests to access and/or make any correction to your Personal Data for the reasons permitted under the law, such as where the expense of providing access to you is disproportionate to the risks to you or another person’s privacy.
    
    

LINKS TO THIRD – PARTY WEBSITES

13. The Website may contain links to third parties’ websites. Please note that we are not responsible for the collection, use, maintenance, sharing, or disclosure of data and information by such third parties. If you provide information directly to such sites, the privacy policy and terms of service on those sites are applicable and EPG is not responsible for the information processing practices or privacy policies of such sites.

PERSONAL INFORMATION FROM MINORS

14. EPG does not knowingly collect Personal Data from individuals under 18 years of age. As a parent or legal guardian, please do not allow the minor under your care to submit Personal Data to EPG. In the event that such Personal Data is given to us, you hereby consent to the processing of the minor’s Personal Data and personally accept and agree to be bound by this Notice and take responsibility for his or her actions.