PDPA Notice

PDPA Notice


This Personal Data Protection Notice (“Notice“) describes how Spanco Sdn. Bhd. and its respective respective subsidiaries, associated companies and jointly controlled entities, including Spanco Services Sdn. Bhd., Yeston Sdn. Bhd., Autofleet Sdn. Bhd., Fleet Insurance Agency Sdn. Bhd. and Overall Fleet Management Sdn. Bhd.(“SPANCO“) use your Personal Data.

In the event of any conflict between the English and other language versions, the English version shall prevail.

Spanco shall have the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on Spanco’s website (“Website“) at the following link: https://www.spanco.com.my. By continuing to communicate with Spanco, by continuing to use Spanco’s services or by your continued engagement with Spanco following the modifications, updates or amendments to this Notice, such actions shall signify your acceptance of such modifications, updates or amendments.

Collection of Personal Data

  1. “Personal Data” means information about you, from which you are identifiable, including but not limited to your name, identification card number, driving license number, car registration number, address, telephone number, email address, fax number, credit card details, race, gender, date of birth, nationality, your occupation, your designation in your company, your company details, the industry in which you work in, any information about you which you have provided to Spanco in registration forms, application forms, insurance documentation or any other similar forms and/or any information about you that has been or may be collected, stored, used and processed by Spanco from time to time. Where you are a customer, Spanco may also collect sensitive personal data such as data relating to your health, religious or other similar beliefs as well as data relating to the commission or alleged commission of an offence by you for purposes of insurance coverage, and you hereby expressly consent to the use of such sensitive personal data, and sensitive personal data will form part of the definition of “Personal Data”.
  1. The provision of your Personal Data is voluntary. However if you do not provide Spanco your Personal Data, Spanco will not be able to provide you services or products which you request or if you are a vendor, supplier or service provider, Spanco will not be able to engage you to provide services or products.

Sources from which your Personal Data may be obtained

  1. In addition to the Personal Data you provide to Spanco directly, Spanco may collect your Personal Data from a variety of sources such as:-
  • From the company or ministry you work with;
  • From various entities or divisions under Spanco; or
  • By using the Website.

Purposes of Processing

  1. Spanco may use and process your Personal Data for the purposes related to the services or products you have requested and for business and activities of Spanco which shall include, without limitation the following (“the Purpose“):-

a. Where you are a customer of Spanco:

  • to perform and enforce the terms of any contract entered into with you;
  • to assist you in applying for the relevant insurance coverage for the services you have requested;
  • to contact and correspond with you regarding various matters pertaining to the services you have requested, such as to process your vehicle order, to identify the location of the vehicle, to send you reminders when your vehicle is due for service, and to send you notifications about road tax, summons etc.;
  • to process payments relating to any products or services you have requested;

b. Where you are a supplier, vendor or business partner of Spanco:

  • for the purposes of engaging you to provide services or products;
  • for the purposes of carrying out or enforcing the obligations in the contract you have entered into with Spanco;
  • to process payments relating to any products or services you have supplied or provided;

c. Generally (applicable to all):

  • to respond to questions, comments and feedback from you;
  • to communicate with you for any of the purposes listed in this Notice;
  • for internal administrative purposes, such as auditing, data analysis, and to improve our services;
  • for purposes of detection, prevention and prosecution of crime;
  • for Spanco to comply with its obligations under law;

and you agree and consent to Spanco using and processing your Personal Data for the Purpose and in the manner as identified in this Notice.

Marketing and promotional purposes

  1. In addition to the Purposes, Spanco may also use and process your data for other purposes such as  (“Marketing Purposes“):-
  • to notify and invite you to any events, activities or conferences organised by Spanco;
  • to send you greetings such as festive greetings, congratulatory notes and/or thank you notes;
  • to send you our newsletters (eg. Majalah Prihatin), updates, mailers and promotional materials;

by way of letters, emails or short message service (SMS).

  1. If you do not consent to Spanco processing your Personal Data for the Marketing Purposes, please contact Spanco using the contact details provided below.

Transfer of Personal Data

  1. Your Personal Data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia, in the following circumstances:-
  • where your insurance includes additional coverage in countries outside of Malaysia, and your insurance application is required to be provided to insurance companies located outside of Malaysia for this purpose; and/or
  • where Spanco’s servers or back-up servers are located outside of Malaysia.
You understand and consent to the transfer of your Personal Data out of Malaysia as described herein.

Disclosure to Third Parties

  1. Your personal data may be transferred, accessed or disclosed to third parties for the Purposes and/or the Marketing Purposes. Further, Spanco may engage other companies, service providers or individuals to perform functions on its behalf, and consequently may provide access or disclose to your Personal Data to such service providers or third parties. The third parties referred to in this section include (without limitation):-

a. Where you are a customer of Spanco:

  • Insurance companies or principals for purposes of extending insurance coverage to you;
  • Spanco’s accredited service centres;
  • Spanco’s business partners and suppliers, such as Proton Edar Sdn. Bhd.;
  • Creative and marketing agencies who develop marketing material on Spanco’s behalf;

b. Generally (applicable to all):

  • Service providers, including, information technology (IT) service providers;
  • Professional advisors and external auditors, including legal advisors and financial advisors;
  • Other entities and divisions within Spanco; and
  • Governmental authorities (including governmental concessionaires such as MY E.G. Services Berhad) to comply with statutory, regulatory and governmental requirements.
  1. Your Personal Data may also be shared in connection with a corporate transaction, such as a sale of a subsidiary or a division, merger, consolidation, or asset sale, or in the unlikely event of winding-up.

Access & Correction Requests and Inquiries, Limiting the Processing of Personal Data

  1. Subject to any exceptions under applicable laws, you may request to access and/or correct your Personal Data as well as request for Spanco to limit the processing of your Personal Data for the Marketing Purposes, by using the contact details below.
    In the event you have an inquiries or complaints in relation to your Personal Data, you may also use the following details to contact Spanco:-

MIS Senior Manager

  1. Please note that where you choose to limit the processing of your Personal Data for certain purposes, this may affect Spanco’s ability to engage you or provide you the services or products which you request.
  1. In respect of your right to access and/or correct your Personal Data, Spanco has the right to refuse the your requests to access and/or make any correction to your Personal Data for the reasons permitted under law, such as where the expense of providing access to you is disproportionate to the risks to your or another person’s privacy. Spanco also reserves the right to impose a fee for access of your Personal Data in the amounts as permitted under law.

Links to Third-Party Websites

  1. The Website may contain links to third parties’ websites. Please note that Spanco is not responsible for the collection, use, maintenance, sharing, or disclosure of data and information by such third parties. If you provide information directly to such sites, the privacy policy and terms of service on those sites are applicable and Spanco is not responsible for the information processing practices or privacy policies of such sites.

Personal Information from Minors and Other Individuals

  1. Spanco does not knowingly collect Personal Data from individuals under 18 years of age. As a parent or legal guardian, please do not allow the minor under your care to submit Personal Data to Spanco. In the event that such Personal Data is provided to Spanco, you hereby consent to the processing of the minor’s Personal Data and personally accept and agree to be bound by this Notice and take responsibility for his or her actions.
  1. In some circumstances you may have provided personal data relating to other individuals (such as your spouse, family members or friends) for the Purpose or the Marketing Purposes and in such circumstances you represent and warrant that you are authorised to provide their personal data to Spanco and you have obtained their consent for their personal data be processed and used in the manner as set forth in this Notice.

Acknowledgement and Consent

  1. By communicating with Spanco, using Spanco’s services or by virtue of your engagement with Spanco, you acknowledge that you have read and understood this Notice and agree and consent to the use, processing and transfer of your Personal Data by Spanco as described in this Notice.