GDPR Commitment

1. Our GDPR Commitment

GlobalPartsHub Technology Sdn Bhd is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This statement outlines how we comply with GDPR requirements when processing personal data of individuals in the European Union and European Economic Area.

2. Data Controller Information

Data Controller: GlobalPartsHub Technology Sdn Bhd
Address: Unit 22-16, Q Sentral, 2A, Jalan Stesen Sentral 2, Kuala Lumpur Sentral, 50470 Kuala Lumpur
EU Representative: [To be appointed as required under GDPR Article 27]
Data Protection Officer: dpo@globalpartshub.com
Contact: privacy@globalpartshub.com

3. Lawful Basis for Processing

We process personal data only when we have a lawful basis under GDPR Article 6:

Consent (Article 6(1)(a)): When you have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications).
Contract (Article 6(1)(b)): When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation (Article 6(1)(c)): When we need to process your data to comply with legal obligations (e.g., tax, accounting, anti-money laundering).
Legitimate Interests (Article 6(1)(f)): When processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.

4. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

Right to Access (Article 15): Obtain confirmation that we are processing your personal data and request a copy.
Right to Rectification (Article 16): Have inaccurate personal data corrected and incomplete data completed.
Right to Erasure / "Right to be Forgotten" (Article 17): Request deletion of your personal data in certain circumstances.
Right to Restriction of Processing (Article 18): Request that we restrict processing in specific situations.
Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing.
Right to Lodge a Complaint (Article 77): Lodge a complaint with a supervisory authority in the EU.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, please:

Email us at: privacy@globalpartshub.com
Use the subject line: "GDPR Rights Request"
Specify which right(s) you wish to exercise
Provide sufficient information to verify your identity

We will respond to your request within one month, which may be extended by two additional months if necessary, taking into account the complexity and number of requests.

6. International Data Transfers

As our operations are based in Malaysia, personal data may be transferred outside the EU/EEA. We ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions for transfers to countries with adequate data protection
Binding Corporate Rules where applicable
Specific derogations for particular situations (Article 49)

7. Data Security Measures

We implement appropriate technical and organizational measures to ensure data security (Article 32):

Pseudonymization and encryption of personal data
Ongoing confidentiality, integrity, availability, and resilience of systems
Ability to restore data availability and access in case of incidents
Regular testing and evaluation of security effectiveness
Access controls and authentication mechanisms
Security incident response and breach notification procedures

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

Active accounts: Duration of contractual relationship plus 7 years for legal compliance
Marketing data: Until consent is withdrawn or 2 years of inactivity
Transaction records: 7 years from transaction date (legal requirement)
Technical logs: 12 months for security purposes

9. Contact Information

For any GDPR-related inquiries or to exercise your rights, please contact:

Data Protection Officer
GlobalPartsHub Technology Sdn Bhd
Unit 22-16, Q Sentral, 2A, Jalan Stesen Sentral 2
Kuala Lumpur Sentral, 50470 Kuala Lumpur
Email: dpo@globalpartshub.com
Privacy Email: privacy@globalpartshub.com
Phone: +65 6789 1234