Personal Data Protection Policy

1. Introduction

Tenaga Migas Sdn Bhd is committed to protect the personal data of its employees, customers, vendors and other individuals with whom it interacts. This Personal Data Protection Policy outlines our commitment to ensuring the confidentiality, integrity, and security of personal data in accordance with applicable data protection laws and regulations.

2. Scope

This policy applies to all personal data collected, processed, stored, or transmitted by Tenaga Migas Sdn Bhd, whether electronic or physical firm.

3. Principles

Lawfulness, Fairness and Transparecy; We will process personal data lawfully, fairly and transparently, ensuring individuals are aware of how their data is being processed.

Purpose Limitation: Personal data will only be collected for specified, explicit, and legitimate purpose, and will not be further processed in a manner that is incompatible with those purposes.

Data Minimization: We will only collect and process personal data that is adequate, relevant, and limited to what is necessary for the purpose for which it is processed.

Accuracy: We will take reasonable steps to ensure that personal data is accurate, complete and up to date, and will rectify or erase inaccurate or incomplete data without undue delay.

Storage Limitation: Personal data will be kept in a form that permits identification of individuals for no longer than is necessary for the purpose for which it is processed.

Security: We will implement appropriate technical and organizational measures to ensure the security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage.

Accountability: We will be accountable for compliance with data protection laws and regulations and will demonstrate compliance by maintaining records of processing activities, conducting data protection impact assessments where necessary, and implementing appropriate measures to ensure compliance.

4. Data collection and Processing

We will only collect personal data for specified, explicit, and legitimate purposes, and will inform individuals of the purposes for which their data is being collected.

Personal data will be collected directly from individuals whenever possible, and we will obtain their consent before collecting, processing or disclosing their data, unless otherwise permitted by law.

We will only process personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed and will ensure that data is accurate and up to date.