CSS STRATA MANAGEMENT SDN. BHD.
PRIVACY POLICY
CSS respects your privacy and is committed to protecting your personal information that you provide to us. This Privacy Policy explains our policies and practices regarding the use and disclosure of your personal information by CSS. CSS reviews and updates this Privacy Policy from time to time as needed without notice. By using our CSS services, you consent to the collection, use, and disclosure of your personal information by CSS as explained below.
What Information Do We Collect?
When you use our services, you provide us with data that may include the following:
Name and contact data. Your first and last name, email address, postal address, phone number, and other similar contact data.
Credentials. Passwords, password hints, and similar security information used for authentication and account access.
Demographic data. Data about you such as your age, gender, country, and preferred language.
Payment data. Data to process payments, such as your payment instrument number (e.g., a credit card number), and the security code associated with your payment instrument.
Subscription and licensing data. Information about your subscriptions, licenses, and other entitlements to our products.
How Do We Use The Information We Collect?
If not otherwise described in this policy, we may process personal information collected from or about you for any of the following purposes:
▪ To respond to and record your requests, whether it be a product purchase, a downloaded whitepaper, or product demonstrations and evaluations.
▪ To provide the products, communicate with you about our products and fulfill any contractual obligations we may have with you including providing post-purchase technical support, implementation services, and updates for the products.
▪ To set up your account and to provide our services to you and to your End Users.
▪ To manage and verify your account and the identity of users of the products.
▪Processing of payments.
▪ To deliver live or online events such as training seminars or conferences, including third party events we sponsor.
▪ The server log files, to allow you unhindered and trouble-free access to our services and to improve the security of our systems.
▪ To support and troubleshoot our services and to respond to queries.
▪ To respond to feedback, survey data, and product reviews, including for product improvement purposes.
▪ To provide product testing or product demos.
▪ For any other legal, business, or marketing purposes that are not inconsistent with the terms of this policy.
▪ To protect against, investigate and prevent fraudulent, unauthorized or unlawful acts against us, you and third parties.
Further, we process your data in order to inform you about our products and services by means of our newsletter or other information. Sending you such information is based on your consent.
In addition, we process your data to comply with statutory reporting requirements, audit, compliance, risk management, court summonses, court decisions or other court orders.
Disclosure
We share your personal data as necessary to complete any transaction or provide any product you have requested or authorized or otherwise fulfil your request, to inter alia CSS controlled affiliates and subsidiaries.
We may share your information with our business partners, resellers, and subcontractors who use the information to fulfill product orders, process payments, develop and improve products, contact you about product orders or in connection with the performance, operation, and support of the products, perform marketing or consulting services, respond to your requests, or as otherwise appropriate for us to provide you with the products.
We may furthermore disclose your information to:
(i) comply with any applicable law, regulation, legal process or governmental request.
(ii) investigate, detect, prevent or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues.
(iii) prevent harm to the rights, property or safety of us, our users, yourself or any third party.
Data Security
We are committed to making reasonable efforts, in accordance with market best practices, to ensure the security, confidentially and integrity of the Personal Information.We take great care in implementing and maintaining the security of our System and the Personal Information.
Access to the Personal Information is based on the ‘least to know’ concept together with role-based access control systems, ensuring only authorized access to the Personal Information. We employ market best practice security measures to ensure the safety of your End Users’ Personal Information and prevent unauthorized use of any such information.
Although we take steps to safeguard such information, we cannot be responsible for the acts of those who gain unauthorized access or abuse our System, and we make no warranty, express, implied or otherwise, that we will prevent such access.
Retention Of Personal Data
At any time, you or your End Users may request to change, update, correct errors or delete Personal Information by emailing us at supports@cssdecisions.com
Please note that unless you instruct us otherwise we retain the information we collect for as long as needed to provide our services and to comply with our legal obligations, resolve disputes and enforce our agreements.
CSS has an archiving process that determines the period during which the information is available. After the archiving period is reached, the information is archived, and Client can restore it once needed. Our default retention policy is 90 days.
What Are Your Rights?
You may contact us at supports@cssdecisions.com any time and request:
To access, correct or update any personal data relating to you that might be inaccurate, obsolete, incomplete or misleading.
In accordance with the PDPA, once we receive a request, we will acknowledge the receipt of such request. For data amendment and correction, we will consider if the information requires amendment. If there is any disagreement, then we specify the reason in clearly stated terms such as where rights of others will be violated, or regulatory functions will be affected. CSS has rights to refuse to comply with your request for access or correction to the Personal Information and give you a written reason for such an action.
Contact Us
If there are any questions regarding this Privacy Policy, you may contact us through the following details:
Email Address : supports@cssdecisions.com / sales@cssstrata.com
Phone Number : +603-9200 4096
Fax Number : +603-9200 4249
Address : C-3A-5, Level 6 Block C,Viva Home (UE3), 85, Jalan Loke Yew, 55200 Kuala Lumpur.
隐私政策（PRIVACY POLICY）
CSS 尊重您的隐私，并致力于保护您向我们提供的个人信息。本隐私政策说明了 CSS 关于您个人信息的收集、使用及披露的政策与做法。CSS 将根据需要不时审查及更新本隐私政策，恕不另行通知。
当您使用 CSS 服务时，即表示您同意 CSS 根据以下说明收集、使用及披露您的个人信息。
我们会收集哪些信息？
当您使用我们的服务时，您可能会向我们提供以下数据：
姓名及联系资料。包括您的名字、姓氏、电邮地址、邮寄地址、电话号码及其他类似联系资料。
账户凭证。包括密码、密码提示及用于身份验证和账户访问的安全信息。
人口统计资料 。包括您的年龄、性别、国家及偏好语言等资料。
付款资料。 用于处理付款的数据，例如付款工具号码（如信用卡号码）及相关安全验证码。
订阅及授权资料, 有关您订阅、授权及使用我们产品资格的信息。
我们如何使用所收集的信息？
除本政策另有说明外，我们可能会基于以下目的处理您的个人信息：
▪ 回复并记录您的请求，包括产品购买、白皮书下载、产品演示及评估等。
▪ 提供产品服务、与您沟通产品相关事项，并履行与您之间的合同义务，包括售后技术支持、实施服务及产品更新。
▪ 建立您的账户，并向您及您的终端用户提供服务。
▪ 管理及验证您的账户及产品用户身份。
▪ 处理付款。
▪ 举办线上或现场活动，例如培训讲座、研讨会或我们赞助的第三方活动。
▪ 使用服务器日志文件，以确保您能够顺畅访问我们的服务，并提升系统安全性。
▪ 支持及排除服务故障，并回应查询。
▪ 回应反馈、调查数据及产品评价，包括用于产品改进。
▪ 提供产品测试或产品演示。
▪ 用于任何不违反本政策条款的法律、商业或市场营销用途。
▪ 防止、调查及阻止针对我们、您或第三方的欺诈、未经授权或非法行为。
此外，我们也可能基于您的同意，通过电子通讯或其他方式向您发送有关产品及服务的信息。
我们亦可能为遵守法定申报要求、审计、合规、风险管理、法院传票、法院判决或其他法律命令而处理您的数据。
信息披露
我们将在完成交易、提供您所要求或授权的产品及服务，或满足您的请求时，按需要与 CSS 控制下的关联公司及子公司共享您的个人数据。
我们也可能与业务合作伙伴、经销商及分包商共享您的信息，以便：
完成产品订单 处理付款, 开发及改进产品, 就产品订单与您联系, 提供产品相关的运营、, 支持及维护服务, 提供市场推广或咨询服务, 回应您的请求, 或协助我们向您提供产品及服务
此外，我们也可能在以下情况下披露您的信息：
(i) 遵守任何适用法律、法规、法律程序或政府要求。
(ii) 调查、侦测、防止或处理非法活动、其他不当行为、涉嫌欺诈或安全问题。
(iii) 防止损害我们、用户、您本人或任何第三方的权利、财产或安全。
数据安全
我们致力于根据市场最佳实践，采取合理措施确保个人信息的安全性、保密性及完整性。我们非常重视系统及个人信息安全，并持续实施及维护相关安全措施。
个人信息的访问采用“最少知情原则（Least-to-Know）”及基于角色的访问控制机制，仅授权人员可访问相关信息。
我们采用符合市场最佳实践的安全措施，以确保终端用户个人信息的安全，并防止未经授权的使用。
尽管我们已采取合理措施保护信息安全，但对于任何未经授权访问或滥用系统的行为，我们无法承担责任，亦不保证能够完全防止此类行为发生。
个人数据保留
您或您的终端用户可随时通过电邮联系 supports@cssdecisions.com，要求修改、更新、更正错误或删除个人信息。
除非您另有指示，否则我们将在提供服务所需期间，以及为履行法律义务、解决争议及执行协议所需期间保留所收集的信息。
CSS 设有资料归档机制，以决定信息的保存期限。在达到归档期限后，相关信息将被归档，客户可在需要时恢复数据。我们的默认数据保留期限为 90 天。
您的权利
您可随时通过 supports@cssdecisions.com 联系我们，并提出以下要求：
查阅、更正或更新任何与您相关且可能不准确、过时、不完整或具有误导性的个人数据。
根据《个人数据保护法》（PDPA），在收到您的请求后，我们将确认收到该请求。对于数据修改及更正申请，我们将评估相关信息是否需要修改。如存在争议，我们将明确说明原因，例如可能侵犯他人权益或影响监管职能等情况。CSS 有权拒绝您查阅或更正个人信息的请求，并将以书面形式说明原因。
联系我们
如您对本隐私政策有任何疑问，可通过以下方式联系我们：
电子邮件： supports@cssdecisions.com / sales@cssstrata.com
电话号码： +603-9200 4096
传真号码： +603-9200 4249
地址：
C-3A-5, Level 6 Block C,
Viva Home (UE3), 85, Jalan Loke Yew,
55200 Kuala Lumpur.
