CBM Personal Data Policy
INTRODUCTION
1. This policy is to let you have an idea of how CBM manages personal data.
2. The purpose of this document (“Privacy Policy”) is to inform you of how CBM manages personal data which is subject to the Singapore Personal Data Protection Act (No. 26 of 2012) (“the PDPA”) and other applicable data protection laws, including the European Union (“EU”) General Data Protection Regulation (“GDPR”) where applicable. Please take a moment to read this Personal Data Policy so that you know and understand the purposes for which we collect, use and disclose your personal data.
3. By interacting with CBM, accessing CBM’s websites, submitting information to CBM (whether through our websites or otherwise), or signing up for any products or services offered by us, you agree and consent to CBM (including Subsidiaries) (collectively, CBM), collecting, using, disclosing and sharing amongst ourselves your Personal Data, and disclosing such Personal Data to CBM’s authorised service providers and relevant third parties in the manner set forth in this Personal Data Policy.
4. It is to be interpreted in conjunction with Singapore Personal Data Protection Act (No. 26 of 2012)
AIM
5. This policy aims to let employees of CBM and public users know and understand the purposes for which CBM collect, use and disclose your personal data.
DETAILS OF POLICY
6. Application
6.1 It applies to all directors, officers, employees of CBM and its subsidiaries (CBM), and public users.
6.2 This Policy supplements but does not supersede nor replace any other consent you may have previously provided to CBM nor does it affect any rights which CBM may have at law in connection with the collection, use or disclosure of your Personal Data. CBM may from time to time update this Policy to ensure that this Policy is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. Subject to your rights at law, you agree to be bound by the prevailing terms of the Policy as updated from time to time on our website (www.cbm.com.sg). Please check back regularly for updated information on the handling of your Personal Data.
YOUR PERSONAL DATA
1. What types of Personal Data do we collect?
1.1 In this Personal Data Policy, “Personal Data” refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.
1.2 Examples of such Personal Data you may provide to us include (depending on the nature of your interaction with us) your name, NRIC, passport or other identification number, date of birth, gender, nationality, contact number(s) (including telephone, mobile and facsimile numbers), residential and/or mailing addresses, email address and any other information relating to yourself and any individuals which you have provided us in any forms you may have submitted to us, or via other forms of interaction with you.
COLLECTION OF PERSONAL DATA
2. Collection of Personal Data
2.1 Generally, CBM collects your Personal Data in the following ways: • When you submit forms relating to any of our products or services;
When you register for or use any of our services on websites owned or operated by us or when you register as a member of websites owned and/or operated by us, or use services on such websites, or participate in any of our social media offerings (such as through our Facebook pages);
When you interact with our customer service and marketing / leasing officers, including during face-to-face meetings or by way of telephone conversations;
When you use our services;
When you request that we contact you;
When you are contacted by, and respond to, our marketing representatives and agents;
When you respond to our request for additional Personal Data;
When you subscribe or ask to be included in our email or other mailing lists;
When you respond to our promotions and other initiatives;
When you respond to our market surveys;
•When you submit a job application to our Group;
When you enter into an agreement with us, including options to purchase, sale and purchase agreements, leasing agreements, tenancy agreements, licensing agreements, or any other short term occupation agreements or letters of offers;
When we receive references from business partners and third parties, for example, where you have been referred by them;
When your images are captured by us via CCTV cameras while you are within our premises or photographs or videos taken by us or our representatives when you attend events hosted by us; and
When you submit your Personal Data to us for any other reason.
2.2 When you browse our websites, you generally do so anonymously but please see section 5 on the “Use of Cookies” and section 6 on the “IP Address”.
2.3 If you provide us with any Personal Data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), including where you have named them as a co-purchaser or tenant or licensee or as a member of your immediate or extended family, or where you refer a third party to us for the purposes of us offering our products and/or services to that third party, by submitting such information to us, you represent to us that you have obtained the consent of the third party for you providing us with their Personal Data for the purposes set out below.
3. How do we use Personal Data and to whom do we disclose it?
3.1 Our business is to understand and meet your needs and provide you with the services that you require. To do this effectively we need to collect a range of personal data about you.
3.2 In general, CBM collects, uses and discloses your Personal Data for the following purposes:
to provide you with the products or services that have been requested;
to help us profile, review, develop, manage and enhance our products and services, including by analysing future customer needs;
to communicate with you and respond to your queries, requests and complaints;
to provide ongoing information about our products and services which may be relevant to you;
to handle disputes and conduct and facilitate investigations and proceedings;
to protect and enforce our contractual and legal rights and obligations;
to prevent, detect and investigate crime, including fraud and money-laundering, and to analyze and manage other commercial risks;
to manage the infrastructure and business operations of CBM and to comply with internal policies and procedures;
to facilitate any proposed or actual business transactions (which may extend to any reorganization, merger, acquisition or sale) involving CBM;
to facilitate any proposed or actual business assignment, transfer, participation or sub-participation of any of our rights and obligations in respect of your relationship with us;
to comply with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by relevant authorities; and
purposes which are reasonably related to the aforesaid.
3.3 In addition, CBM may collect, use and disclose your Personal Data for the following purposes, depending on the nature of our relationship with you:
3.4 If you are a visitor to any of our premises or premises managed by us:
to conduct security checks and monitoring;
to contact you for emergency purposes;
to track and manage car park use by updating the car park management system; and
any other purpose directly relating to any of the above.
3.5 If you are a prospective tenant or a tenant:
To coordinate viewings of the property;
to conduct appropriate due diligence checks to ensure suitability of tenant;
to administer the lease and/or licence including the verification of your identity, preparation of documentation, including letters of offer, other relevant leasing/legal documentation and applications for any relevant licences which may be required;
to administer the lease and/or licence agreement obligations of the parties;
to facilitate follow-ups on outstanding payments due and where necessary, and to update your bank account details and business records;
to deliver correspondences or notices as may be required under the lease or licence;
to set up new residential, office, industrial and retail units for tenants; and
any other purpose directly relating to any of the above.
3.6 If you are a resident at one of the properties managed by us: • to manage and process your occupation of the properties;
to administer your said occupation including the verification of your identity, preparation of documentation, including tenancy agreement, and other relevant leasing documentation;
to update your bank account details and business records to facilitate follow-ups on outstanding rent arrears and other sums;
to deliver correspondences or notices after you have terminated the lease or ownership of the properties in the properties that managed by us;
to contact you for emergency purposes; and
any other purpose directly relating to any of the above.
3.7 If you have a membership account with us: • to verify and process your personal particulars and payments (including but not limited to billing and process of payment instructions, direct debit facilities or credit facilities) in relation to provision of the services which you may be entitled to or which you may have requested for;
to communicate with you to inform you of changes and development to the policies, terms and conditions, other administrative information, including for the purposes of servicing you in relation to products and services offered to you and for receiving of marketing and promotional materials sent via SMS, calls, emails, direct mailer and all the foregoing; and
any other purpose directly relating to any of the above.
3.8 If you are a vendor, a prospective vendor or a contractor or an employee thereof: • to manage the outsourcing relationship;
to conduct background checks and due diligence;
to contact you for emergency purposes;
to process any payments of invoices and claims including payments to any accounts payable;
to ensure the security of our premises; and
any other purpose directly relating to any of the above;
3.9 If you submit an application to us as a candidate for employment: • to process your application including pre-recruitment checks;
to provide or obtain employee references or other references where relevant for background screening/vetting;
to collect information about your suitability for the position applied for;
to organise training and staff development programs;
to assess your performance;
to administer benefits and payroll processing;
to provide you with tools to facilitate or as required for you to do your job;
to communicate with you as required by CBM to comply with its policies and processes, including for business continuity purposes; and
any other purposes relating to the aforesaid.
3.10 If you are an existing employee, for further information please also refer to the "CBM Employee Data Protection Policy" that will be separately made available to you by CBM.
3.11 For all of the purposes mentioned above, you should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with products and services you have requested.
3.12 Where you have specifically provided us with additional consents, CBM may also collect, use and disclose your Personal Data for the following purposes: • subscribing you to our mailing list;
• providing marketing and promotional information to you about our services, products and benefits including offers, promotions, loyalty and reward programmes;
• sending you regular updates on the products and services, offers and promotions of our business partners and/or our affiliates;
• sending you regular updates, news, survey requests, promotions and event invitations relating to consented mall;
administering contests, competition and conducting lucky draws, including, where necessary, in order to announce the results of these contests, competitions and lucky draws and identify and contact the winners, and in order to publicise and conduct marketing strictly related to these contests, competitions and lucky draw;
sending you invitations to our corporate events, feedback sessions etc.;
making appointments with you and conducting courtesy visits at your property; and
conducting market research, evaluation of homeowners’ satisfaction, and gathering customer feedback to enable us to develop special offers and marketing programmes.
3.13 In relation to particular products or services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data. If so, then we will collect, use and disclose your Personal Data for these additional purposes as well, unless we have specifically notified you otherwise.
3.14 We may also be required to collect, use or disclose your data for ‘legitimate interests’ as defined in the PDPA. Such lawful interests may include, but are not limited to, evaluative purposes, recovery or payment of debt owed, threats to safety and security, detection and prevention of fraud, IT and network security, preventing misuse of services, and carrying out other necessary corporate due diligence.
3.15 Your Personal Data will be protected and kept confidential, but subject to the provisions of any applicable law, this Personal Data may, depending on the product or service concerned and for the purposes listed above (where applicable), be disclosed to the following parties:
other divisions or subsidiaries within CBM
agents, contractors, third party service providers and specialist advisers to CBM who have been contracted to provide CBM with administrative, operational or other goods and services, such as telecommunications, information technology, payment, payroll, processing, training, market research, storage, or archival;
any third-party business partners who offer goods and services or sponsor contests or other promotional programs, whether in conjunction with CBM or not;
insurers, credit providers, courts, tribunals and regulatory authorities as agreed or authorised by law;
the Credit Bureau, or in the event of default or disputes, any debt collection agencies or dispute resolution centres;
any business partner, investor, assignee or transferee (actual or prospective) to facilitate business transactions (which may extend to any reorganization, merger, acquisition or sale) involving CBM;
our professional advisors such as our auditors and lawyers;
relevant government, statutory or regulatory authority (including securities exchange) or law enforcement agency in order to comply with any laws or rules and regulations imposed by such authority or any order, notice, directive or judgment of any court, tribunal, arbitration or mediation body;
anyone to whom we assign or transfer or may assign or transfer any of our rights and duties;
banks, credit card companies and their respective service providers; and
any other party as may be consented to by you, as specified by that individual or the contract.
4. Do Not Call (‘DNC’) Provisions
4.1 If you have provided us with your Singapore telephone number(s) and have indicated that you consent to receiving marketing or other promotional information via your Singapore telephone number(s), then from time to time, CBM may contact you using such Singapore telephone number(s) (including via voice calls, text, fax or other means) with information about our products, services (including discounts and special offers), and other event invitations even if these telephone number(s) are registered with the DNC Registry. You may however advise in writing should you wish not to be contacted by us at your telephone number(s) for such purposes.
5. Use of Cookies
5.1 When you interact with us on our websites, we automatically receive and record information on our server logs from your browser. When you visit our websites, we may assign one or more cookies to your computer. A cookie is a small encrypted text file placed in the 'Cookies' folder on your computer's hard disk, and may be used to collect information and statistics relating to your access to our websites, including information on how you arrive at our websites, what kind of browser you are on, what operating system you are currently using, your IP address, and your click stream information and time stamp (for example, which pages you have viewed, the time the pages were accessed and the time spent per web page on our websites). The cookie will provide a unique identifier to your computer and each time you visit our websites from the same computer, our server will recognise a return visitor and allow us to increase the functionality of our websites on your computer.
5.2 The cookies placed by our server are readable only by us, and cookies cannot access, read or modify any other data on your computer.
5.3 Most browsers automatically accept cookies, but cookies can be enabled or disabled by modifying the settings in your browser. To find out how to do this, and for more information on cookies, please visit http://cookiepedia.co.uk/how-to-manage-cookies. To find out how to disable Flash cookies at Adobe.com, please visit http://www.adobe.com/products/flashplayer/security for details. If you choose not to allow us to place a cookie on your computer, you may be restricted from some services offered on our websites, and some of
6. IP Address
6.1 An IP address is a number that is automatically assigned to your computer when you sign up with an Internet Service Provider.
6.2 When you visit our website, your IP address is automatically logged in our server. We use your IP address to help analyse trends, administer the website, and track users' movements. From your IP address, we may identify the general geographic area from which you are accessing our website. However, we will not be able to pinpoint the exact geographic location from which you are accessing our website. Generally, we do not link your IP address to anything that can enable us to identify you unless it is required by applicable laws and regulations.
7. Third-Party Sites
7.1 Our websites may contain links to other websites operated by third parties, such as our business partners. We have no control over, and are not responsible for the privacy practices of websites operated by third parties that are linked to our websites. We encourage you to learn about the privacy policies of such third-party websites. Once you have left our website, you should check the applicable privacy policy of the third-party website to determine how they will handle any information they collect from you.
8. How to contact us
8.1 If you: • have any questions, complaints or feedback relating to your Personal Data or our Personal Data Policy;
would like to withdraw your consent to any use of your Personal Data as set out in this Personal Data Policy; or
would like to obtain access and make corrections to your Personal Data records under our control or in our possession, please contact CBM as follows:
Email: feedback@cbm.com.sg
Call: 65130808
Write in: Data Protection Officer
CBM Pte Ltd
865 Mountbatten Road,
#07-01, Katong Shopping Centre,
Singapore 437844
8.2 To enable us to process your request efficiently, please forward us your name and your email or correspondence address so that we can forward to you a Request to Access Personal Data Form or a Request to Correct Personal Data Form for your completion and return to us for our processing.
8.3 Please note that if your Personal Data has been provided to us by a third party, you should request such third party to make such queries, complaints, and access and correction requests to CBM on your behalf.
8.4 If you withdraw your consent to any or all use of your Personal Data in our possession, depending on the nature of your request, CBM may not be in a position to continue to provide its products or services to you. Your withdrawal of consent may accordingly constitute a repudiatory breach of your obligations under the agreements which you may have with CBM, which may result in the termination by CBM of the same. CBM’s legal rights and remedies in such event are expressly reserved.
9. Data Transfer
9.1 In the event where sharing of information about you, with and between our business corporations and associates is necessary, we will take reasonable steps to ensure that your Personal Data transmitted outside of your country of residence is adequately protected. In addition, we will ensure that such transfers comply with the requirements of the applicable data protection laws.
10. Data Retention
10.1 We may retain your Personal Data for as long as it is necessary for the purposes it has been collected, and (i) in most cases, up to 7 years; or (ii) in respect of our activities in the EU, up to 10 years, unless otherwise permitted by applicable law or in order to defend legal claims. Where we no longer require your Personal Data for those purposes, we will cease to retain such Personal Data.
11. Individual Rights
11.1 You have the following rights, under applicable data protection laws (except where the exercise of these are restricted under applicable laws – for example, due to judicial proceedings or the carrying out of investigations), which can be exercised by contacting the relevant Data Protection Officer.
you have the right to obtain from us confirmation as to whether or not your Personal Data is being processed and to request a copy of your information.
you are entitled to rectification of your Personal Data. We understand that this information changes frequently with changes of address and other personal circumstances. We encourage you to contact us as soon as possible to enable us to update any Personal Data we have about you. Incomplete or outdated Personal Data may result in our inability to provide you with products and services you have requested;
in certain circumstances, you have the right to request to have your Personal Data deleted or the processing of which restricted;
if we process your information based on our legitimate interests explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is necessary for legal reasons. Where we use your data for direct marketing purposes, you can always object using the unsubscribe link in such communications or by contacting us at the details below;
to prevent any processing of Personal Data that is causing or is likely to cause unwarranted and substantial damage or distress to you or another individual;
to be informed about any use of your Personal Data to make automated decisions about you where such decisions produce legal effects or have similarly significant effects on you, and to obtain meaningful information about the logic involved, as well as the significance and the envisaged consequences of this processing; and
to lodge a complaint about the way in which your Personal Data is being used to a supervisory authority.
11.2 If you withdraw your consent to any or all use of your Personal Data in our possession, depending on the nature of your request, CBM may not be in a position to continue to provide its products or services to you. Your withdrawal of consent may accordingly constitute a repudiatory breach of your obligations under the agreements which you may have with CBM, which may result in the termination by CBM of the same. CBM’s legal rights and remedies in such event are expressly reserved.
11.3 Where mandated under the applicable data protection laws, your exercise of the rights described or referred to above shall be free of charge. In all other situations, we may charge a fee to cover the cost of verifying the request and locating, retrieving and copying any material requested.
11.4 If you want to exercise any of your rights or if you wish to raise a complaint, you may contact our Data Protection Officer at the contact details provided on this page.
12. DPO Appointment
12.1 We have appointed Data Protection Officers to oversee our management of your Personal Data in accordance with this Policy and the applicable data protections law. We train our employees who handle your Personal Data to respect the confidentiality of your Personal Data, and we regard breaches of all applicable data protection laws very seriously.
13. Policy Review
13.1 This Policy will be reviewed from time to time by us. We may also from time to time update this Policy to take account of new laws and technology, changes to our operations and practices and the changing business environment. If you are unsure whether you are reading the most current version, please contact us.
13.2 In the event of any inconsistencies between the English version and other translations of this Policy, the English version shall prevail.
14. Governing Law
14.1 This Personal Data Policy shall be governed in all respects by the laws of Singapore.
CONCLUSION
This policy is reviewed on 11 December 2023.