TMEH Privacy Policy

Your privacy is critically important to TMEH Group of Companies. We are dedicated to safeguarding the personal information of our website visitors and users.

Home » Privacy Policy

Who We Are and What This Policy Covers?

Your privacy is critically important to TMEH Group of Companies.

We actively ensure the privacy of our website visitors and users. This Privacy Policy explains how we collect, use, and protect your data when interacting with our website and services.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string, to help detect spam.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

By default, WordPress does not include a contact form. If you use a contact form plugin, use this subsection to note what personal data is captured when someone submits a contact form, and how long you keep it. For example, you may note that you keep contact form submissions for a certain period for customer service purposes, but you do not use the information submitted through them for marketing purposes.

Cookies

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Analytics

In this subsection, you should note what analytics package you use, how users can opt out of analytics tracking, and a link to your analytics provider’s privacy policy, if any.

By default, WordPress does not collect any analytics data. However, many web hosting accounts collect some anonymous analytics data. You may also have installed a WordPress plugin that provides analytics services. In that case, add information from that plugin here.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who do we share your data with

We share your data within our company with those departments that require your data to comply with contractual and legal obligations or to pursue our legitimate interests.

In addition, the following entities/bodies may receive your data:
• Contract processors commissioned by us (Art. 28 GDPR) service providers for supporting activities and other responsible bodies within the meaning of the GDPR, especially in the areas of, e.g. IT services, logistics and printing services, external data centers, support/maintenance of data processing/IT applications, archiving, document processing, data destruction, marketing, auditing services, credit institutions. • Public authorities and institutions in the event of a legal or official obligation under which we are obliged to disclose, report or share data or the disclosure of data is in the public interest • Bodies and institutions based on our legitimate interest or the legitimate interest of a third party (e.g. shared with public authorities, credit agencies, debt collection, lawyers, courts) • other bodies for which you have given us your consent for the transfer of data Transfer of your data to a third country or an international organization A transfer of data to countries outside the European Union (EU) or the European Economic Area (EEA), so-called third countries, takes place if it is necessary for the execution of an order/contract from or with you, if it is required by law (e.g. tax reporting obligations), if it is in the legitimate interest of us or a third party or if you have given us your consent. In this context, the processing of your data in a third country may also take place in connection with the involvement of service providers as part of commissioned processing. If there is no EU Commission decision on an adequate level of data protection for the country in question, we ensure that your rights and freedoms are adequately protected and guaranteed by EU data protection requirements through appropriate contracts and measures. We will provide you with the relevant detailed information upon request.

How long do we retain your data?

We process your data during the entire course of our business relationship as necessary; this also includes the initiation and performance of a contract. In addition, we are subject to various retention and documentation obligations that are set out in the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The retention and/or documentation periods specified there are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship. Ultimately, the retention period is also determined in line with statutory limitation periods, which under section 195 et seq. of the German Civil Code (BGB) are generally three years but may be up to thirty years in certain cases. To what extent is automated decision-making used in individual cases (including profiling)? We do not use purely automated decision-making procedures as referred to in Article 22 GDPR. Should we use these procedures in individual cases, we will inform you separately, provided we are required to do so by law.

What rights do you have over your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

Individual social networks

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries. We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/. The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. For details on how they handle your personal information, see the Instagram Privacy Policy: ttps://privacycenter.instagram.com/policy/. The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Contact information

Data protection

The operators of this website and its pages take the protection of your data very seriously. Hence, we handle your data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration. Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data. It also explains how and for what purpose the information is collected. We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access. Information about the responsible bodies (referred to as the “controller” in the GDPR)

a) The controller responsible for data processing on this website is:
TMEH Group of Companies
No.9, Jalan Jasmine 1, Seksyen BB10, Bandar Bukit Beruntung, 48300 Rawang, Selangor.
Phone: +603 – 6028 5722
Email: tmeh@tmeh.com.my

b) The respective independent companies of the TMEH Group of Companies are controllers for their services, such as their own social media presence, applicant management, processing of data from business partners, etc.
These are in detail:
TMEH Group of Companies
No.9, Jalan Jasmine 1, Seksyen BB10, Bandar Bukit Beruntung, 48300 Rawang, Selangor.
Phone: +603 – 6028 5722
Email: tmeh@tmeh.com.my

The controller is the natural person or legal entity that single-handedly or jointly with Others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Additional information

Hosting and Content Delivery Networks (CDN) We are hosting the content of our website at the following provider:

Exabytes Network Sdn. Bhd.
The provider is the Exabytes Network Penang (Headquarters)
1-18-8, Suntech @ Penang Cybercity
Lintang Mayang Pasir 3, 11950
Bayan Baru, Penang.

When you visit our website, your data will be processed on Exabytes’ servers. This may also result in the transfer of personal data to the parent company of Exabytes in Malaysia. The transfer of data to the Country is based on the EU’s standard contractual clauses. For details, please consult: https://www.exabytes.my/contact..

WordPress is our CDN for our website.
For more information, please see the WordPress Data Privacy Policy:
https://wordpress.org/about/privacy/

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within Complianz and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed based on the User’s consent, the Owner shall collect new consent from the User, where required.

EU user consent policy

If your agreement with Google incorporates this policy, or you otherwise use a Google product that incorporates this policy, you must ensure that certain disclosures are given to, and consents obtained from, end users in the European Economic Area, the UK and Switzerland. If you fail to comply with this policy, we may limit or suspend your use of the Google product and terminate your agreement.

Properties under your control

For Google products used on any site, app or other property under your control, or that of your affiliate or your client, the following duties apply to end users in the European Economic Area, the UK and Switzerland.
You must obtain end users’ legally valid consent to:
The use of cookies or other local storage where legally required; and
The collection, sharing, and use of personal data to personalise ads.
When seeking consent, you must:
Retain records of consent given by end-users; and
Provide end users with clear instructions for revocation of consent.
You must identify each party that may collect, receive, or use end users’ data as a consequence of your use of a Google product. You must also provide end users with prominent and easily accessible information about that party’s use of end users’ data.

Properties under a third party’s control

If the personal data of end users of a third-party property is shared with Google due to your use of, or integration with, a Google product, then you must use commercially reasonable efforts to ensure the operator of the third-party property complies with the above duties. A third-party property is a site, app or other property that is not under your, your affiliate’s or your client’s control and whose operator is not already using a Google product that incorporates this policy.