1. DATA CONTROLLER

Bahru Stainless Sdn. Bhd, with registration number 200801010142 (811430-H), and registered address at PTD 4069, (PLO 108) Jalan Rumbia 4, Tanjung Langsat Industrial Complex, 81700 Pasir Gudang, Johor, is the owner of the domain BahruStainless (the "Website").

To contact Bahru Stainless Sdn. Bhd please use the General Contact Form provided for this purpose on the Website.

2. DATA COLLECTED

By simply browsing the Website and using cookies, Bahru Stainless Sdn. Bhd collects data from data subjects, such as the type of browser used, their operating system and IP address, in order to improve their browsing experience and manage the Website. However, please consult the Cookies Policy in order to obtain more information on the cookies used on the Website.

Additionally, in order to send queries, Bahru Stainless Sdn. Bhd will require personal data from the user, such as name, surname and e-mail address through the different contact forms available on this Website. These forms will additionally indicate which personal data are compulsory, and that failure to provide this compulsory data may make it impossible for Bahru Stainless Sdn. Bhd to fulfil the request made by the data subject.

3. PURPOSE OF THE PROCESSING OF PERSONAL DATA

Personal data of the data subjects will be processed for the following purposes:

• Provide the information that the data subject has requested through the various forms made available to the user on the Website.
• Provide the information that the data subject has requested though the corresponding email address provided through the Website.
• Perform the correct management and investigation, where appropriate, of the complaints made via the Complaints Channel on the Website.

With regard to the personal data collected through the use of cookies, the data subject may consult the different purposes of processing in the Cookies Policy.

Bahru Stainless Sdn. Bhd will only process the personal data provided for the aforementioned purposes. In the event that the information is used for a different and incompatible purpose, Bahru Stainless Sdn. Bhd will request prior consent from the data subject. It may be necessary for Bahru Stainless to engage Third party companies, Service providers or Individual to perform certain services on behalf of Bahru Stainless. In such event, the data subjects hereby agree and consent to Bahru Stainless disclose and transfer your personal data to these third parties, within or outside Malaysia. Bahru Stainless shall also disclose and transfer the personal data to any statutory bodies, regulatory bodies and/or governmental authorities where legally required to do so.

4. LEGAL GROUNDS FOR THE PROCESSING

The legal basis for the processing of personal data is the consent granted by the data subject through the sending of the corresponding form or email.

However, the processing of data carried out for the purpose of managing and investigating the complaints submitted through the Website's Complaints Channel is lawfully based on Bahru Stainless Sdn. Bhd's legitimate interest.

With regard to the cookies included in the Website, the legal basis that enables Bahru Stainless Sdn. Bhd to process the personal data of the data subject is detailed in the Cookies Policy.

5. RECIPIENTS OF ASSIGNMENTS AND TRANSFERS

Bahru Stainless Sdn. Bhd is the main recipient of the data collected from the data subjects. However, in order to carry out the purpose for which the user's personal data have been collected, it is sometimes necessary to communicate this personal data to Acerinox Group companies, which are listed on this Website.

Given the international nature of the Acerinox Group, international transfers of personal data may be carried out, although appropriate measures are guaranteed in the processing of the data. In such event, you hereby agree and consent to the disclose of your personal data and the international transfer of your personal data outside Malaysia.

If you do not agree or consent to Bahru Stainless processing your personal data for the purpose stated herein, please notify to Bahru Stainless by writing to us via the contact details set out in Item 7 below.

6. DATA STORAGE

Bahru Stainless Sdn. Bhd will only store data subjects' personal data to the extent that they are necessary for the purpose for which they were collected and according to the legal basis that legalises the processing.

In particular, Bahru Stainless Sdn. Bhd shall maintain the personal data collected via the contact forms made by the data subjects for the time necessary to respond thereto, provided that the data subject has not withdrawn their consent or excercised their rights to deletion, erasure or limitation of the processing.

In the event that the data subject exercises any of the aforementioned rights, Bahru Stainless Sdn. Bhd may keep the personal data, without making use of the data, insofar as this data may be necessary for the exercise of its right of defense against potential claims or in the event that legal, judicial or contractual responsibilities could arise that should be taken care of and for which their recovery could be necessary.

In the particular case of the data contained in the Complaints Channel, this personal data shall be kept for the time necessary to carry out the reception and investigation of the alleged act. In any case, 6 months after receipt of the complaint, the personal data shall be deleted from the system.

7. RIGHTS OF THE DATA SUBJECTS

The data subject can exercise their right to access their personal data and the information relating thereto, as well as request the rectification of inaccurate data or, where appropriate, request the deletion thereof when the data are no longer necessary for the purposes for which they collected, or request the portability of their data, where appropriate. The data subject may also request the limitation of the processing of their personal data.

In the event that the personal data have been collected in order to respond to the inquires raised, the data subject may, in addition to the aforementioned rights, withdraw their consent at any time, without affecting the legality of the processing made before the withdrawal of consent.

The data subject may exercise the aforementioned rights, under the terms and conditions provided for in current legislation, by writing to the registered office of Bahru Stainless Sdn. Bhd, at PTD 4069, (PLO 108) Jalan Rumbia 4,Tanjung Langsat Industrial Complex, 81700 Pasir Gudang, Johor , Email : rodrigo.garcia@acerinox.com , indicating the right they wish to exercise and attaching a scanned copy of their ID or equivalent document valid in law to prove their identity.

8. SECURITY MEASURES

Bahru Stainless Sdn. Bhd has adopted the appropriate technical and organisational measures to guarantee an adequate level of security for the personal data it processes and has implemented other means and additional measures within its capacity to prevent the loss, alteration, processing or unauthorised access to personal data.

9. MODIFICATIONS TO THE PRIVACY POLICY

Bahru Stainless Sdn. Bhd reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence.