Privacy Policy of Airfoil Services

Thank you for using Airfoil Services Portal.

 

Your Privacy

This page explains our privacy policy which includes the use and protection of any information submitted by business partners, customers, suppliers and visitors. If you choose to transact using our Portal or send an e-mail which provides personally identifiable data, this data maybe shared where necessary with other departments of Airfoil Services so as to serve you in the most efficient and effective manner.

 

1.0. Controller

We, Airfoil Services Sdn Bhd (No 12, Jalan Teknologi, Taman Sains Selangor 1, Kota Damansara PJU5, 47810 Petaling Jaya, Selangor, Malaysia) (hereinafter also “ASSB”, “we”, “us”), wish to inform you how your personal data is processed when you use our website www.airfoilservices.com (“website”).

If you have any further queries regarding data protection in connection with our website or the services offered, please contact our data protection co-ordinator:

Data Protection Co-ordinator for the Airfoil Services Sdn Bhd

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

2.0. Scope, purpose and legal basis of processing personal data

2.1. Provision of the website and log file creation

Upon visiting our website, the system automatically records data and information about the user’s computer each time the website is accessed. The following data (“technical information”) is collected:

• Information on the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s system accesses our website 
• Websites accessed by the user’s system via our website
• The respective volume of data transmitted

The data is also saved in our system’s log files. This data is not stored together with other personal data of the user.

We collect and use this technical information for purposes of (network) security (for example, to ward off cyberattacks), to better understand our users’ needs, to continuously improve our website and to enable users to access the website from their computers.

The data is saved in log files in order to ensure website functionality. The data also helps us to improve the website and safeguard our information technology systems. The data is not analysed for marketing purposes in this context. 

Art. 6 (1) (f) of the General Data Protection Regulation (GDPR) forms the legal basis for the temporary storage of the data and log files.

 

2.1.1. Use of cookies

Our website uses cookies. Cookies are text files stored in the web browser or by the web browser on the user’s computer system. When a user accesses a website, a cookie may be stored in the user’s operating system. This cookie contains a distinctive character string that allows for unique identification of the browser when the website is accessed again.

Cookies are stored on the user’s computer, which transmits these to our website. Therefore, users have full control over the use of cookies. You may disable or restrict the transmission of cookies by changing your web browser settings. Previously stored cookies can be deleted at any time. This may also be done automatically. If cookies are disabled for our website, you may no longer be able to use all of its functionality.

The Airfoil Services Portal uses only ‘non-persistent cookies’ or ‘per-session cookies’ which serves technical purposes like switching the languages of the Portal. These cookies do not permanently record data and they are not stored on your computer’s hard drive. Once you close your browser, the cookie is deleted.

 

2.1.2. Tracking tools

We use the following tracking tool on our website:

• Sawmill

If details are accessed on our website, the following data (among others) is stored:

• Two bytes of the IP address of the user system accessing the website
• The accessed web page
• The website from which the user has accessed the viewed web page (referrer)
• The sub-pages from which the viewed web page was accessed
• The time spent on the web page
• The frequency of accessing the web page

The software runs exclusively on our website’s servers. The user's personal data is only stored there. Distribution of the data to third parties is prohibited. 

Our legitimate interest pursuant to Art. 6 (1) (f) GDPR in increasing the efficiency of our website is the legal basis for the use of the tool.

The processing of the user’s personal data enables us to analyse the browsing behaviour of our users. By analysing the data collected, we are in the position to compile information about the use of the individual components of our website. This helps us to steadily improve our website and its user friendliness. For these purposes, our legitimate interest in the processing of data is provided by Art. 6 (1) (f) GDPR. The anonymisation of the IP address adequately serves the interests of users in the protection of their personal data.

The data is deleted as soon as it is no longer needed for our record-keeping purposes. 

In our case, this is after 90 days.

 

2.2. Use of the services offered on our website

2.2.1. Contact forms

For the purpose of data processing, reference is made to this privacy policy in the contact form. Alternatively, you can contact us via the e-mail address provided. In this case, your personal data sent in by e-mail will be stored. 

In this context, the data is not disclosed to third parties. The data is used exclusively for processing the conversation.

The legal basis for processing the data transmitted alongside an e-mail is Art. 6, Section 1a, of the GDPR. We process personal data from the contact form only for the purpose of processing the establishment of contact.

 

2.2.2. Statistical analysis

There is a possibility that your data may be analysed in a data warehouse to evaluate the preferences of our registered customers (“statistical analysis”) for the purposes of possible distribution at the Annual General Meeting as well as the optimisation of our website. We undertake this processing in order to acquire a better understanding of what our customers expect from our web presence. This analysis also helps us with auditing and safeguarding security, which is why we perform this processing to protect our legitimate interests, in accordance with Art. 6 (1) (f) GDPR.

 

2.3. Scope and purpose

We only collect and use our users' personal data if and to the extent needed to provide a functional website as well as our contents and services. We use your personal data to provide the services you need, to answer your questions and to operate and improve our websites and applications.

Your personal data is not used for any other purpose, especially not for advertising purposes. Your personal data shall not be transferred to third parties without your consent, except in the cases described below, unless we are legally obliged to provide the data.

 

2.4. Legal basis

If we obtain the consent of the data subject to his/her process personal data, Art. 6, Section 1a, of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for processing said data. Art. 6, Section 1b, of the GDPR serves as legal basis for processing the personal data required to execute a contract to which the data subject is a party. Article 6, Section 1c, of the GDPR serves as legal basis for processing the personal data required to fulfil a legal obligation of our company. 

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6, Section 1f, of the GDPR shall serve as legal basis for processing.

 

2.5. Obligation to provide personal data

The input fields that are mandatory for performing the requested contract or service are marked accordingly on the website. The input is mandatory because of either legal or contractual requirements.

 

3.0. Storage and Duration of data processing

We will store your Personal Data in the country in which we are based ie Malaysia. However, the Company may have back up and storage servers, which are located overseas.

Your data is deleted as soon as it is no longer needed for the specified purposes. However, relevant Personal Data may be retained subject to the conditions below:

(a)  as and when required under legislation; or

(b)  where legal actions have arisen and are pending.

(c)  commercial/operational purposes of Airfoil Services

The Company shall take all reasonable steps to ensure that all Personal Data is destroyed or permanently deleted when no longer required for the Purpose and prepare disposal schedule for inactive data with 12 month period.

 

4.0. Your rights as a data subject

If your personal data are processed, you are concerned in the sense of the General Data Protection Regulation (GDPR) and you have the following rights vis-à-vis the controller:

 

4.1. Right to object pursuant to Art. 21 GDPR

You have the right to object, on reasons relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. 

The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing is necessary for the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.

 

4.2. Disclosure of personal data to third parties or permitted recipients

In order to offer you our products and services, based on our contractual obligations or in accordance with our legitimate interests, we may have to disclose your personal data to third parties internal or external to ASSB. These recipients can be categorised as follows:

• Service providers
• Provider of our CRM tool (newsletter)
• Internet agency (website)
• Shareholder registrar

Personal data may be transmitted to third countries or international organisations as part of this. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with local legal PDPA requirements and GDPR.

We are also legally obliged to provide personal data as and when required under any applicable legislation.

 

5.0. Rights of the data subject

ASSB is committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied.

• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure (“right to be forgotten”), Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to data portability, Art. 20 GDPR

To exercise your rights, please email This email address is being protected from spambots. You need JavaScript enabled to view it.. In order to process your request and for identification purposes, please note that we will process your personal data in accordance with Art. 6 (1) (c) GDPR.

 

6.0. Consent

If you have given your consent to us for processing your personal data, please note that you may withdraw this consent at any time and send your withdrawing request to This email address is being protected from spambots. You need JavaScript enabled to view it..

Please note that your consent can only be withdrawn for future effect and such a withdrawal does not have any influence on the lawfulness of past processing. In some cases, we may be entitled regardless of your withdrawal to continue to process your personal data on a different legal basis – e.g. to perform a contract.

 

7.0. Disclaimer and limitations of these data protection notices

These data protection notices only apply to processing for the website www.airfoilservices.com. Other websites are not covered by these data protection notices and provide their own specific data protection notices.