Personal Data Notice

This Notice applies to you if:

1. you are a customer and/or prospective customer;

2. you enquire about our products and/or services, participate in our promotional events and/or contests, use our website (“GSC Website”) and/or applications (“GSC Mobile Application”), visit or access any relevant premises/facilities owned, operated or managed by us or our behalf (“Our Premises”);

   (collectively referred to as “Users”)

3. you apply for employment with GSC (“Job Applicants”) or you are a family member of a Job Applicant whose personal data is processed in the course of applying for employment with us.

“Personal data” is defined in the PDPA and refers to any information that relates directly or indirectly to you, from which you may be identified. The personal data processed by GSC includes:

6.1. In respect of Users, the personal data collected and/or voluntarily provided by you during your course of dealings with us in any way or manner including pursuant to any commercial transactions and/or communications made from/with us such as at events organised or participated by GSC, in our forms, agreements, website, and/or other similar documents may include:

1. your personal details (such as name, gender, National Registration Identity Card (“NRIC”) number, passport number, date of birth, race, occupation, Income Tax File Number) and contact details (such as current residential or business address, e-mail address, and phone numbers);
2. name of internet service provider, the website from which you visit GSC Website/GSC Mobile Application, the pages and content which you view, the date and duration of your visit, cookies to track usage patterns, etc from the analytics tools such as Google Analytics and others;
3. your personal interests and preferences to help GSC design the offering of its products;
4. your image via cameras or CCTV cameras when you visit or access Our Premises including the GSC cinema halls;
5. any information which identifies you or makes you identifiable.
    

6.2. In respect of Job Applicants, the personal data collected are:

1. personal details including your name, age, phone number, email address, address, NRIC number, passport number, copy of your identity card or passport, nationality, gender, religion, race;
2. family information such as marital status, details of your family members and next of kin;
3. employment related information such as employment history, your job title or position, your employment location, role description, date of employment, employment references;
4. sensitive personal data including your religious beliefs, details of your physical or mental health or condition, political opinion and criminal conviction records;
5. your image via CCTV cameras in Our Premises;
6. any other personal information provided by you in your resume or curriculum vitae.
    

GSC may process your personal data collected from you or from any of the class of third parties stated in this Privacy Notice, for any one or more of the following purposes (“Purposes”):

7.1. Your personal data is collected from you as Users:

1. to provide you with our product and/or service, including:

   1. verify your identity;
   2. run GSC’s customer loyalty programmes where applicable;
   3. process and facilitate any payment and transactions with GSC including the purchase of movie tickets and other products or services from GSC;
   4. process any communication you send to GSC (for example, answering any queries, dealing with any complaints and/or feedback);
   5. investigate and resolve any ticketing issues or other queries or complaints that you may submit to or raise with GSC;
       

2. to establish and better manage any business relationship GSC may have with you;

3. to help GSC monitor and improve its services to you, GSC’s customer service teams, GSC’s Website and GSC Mobile Application and other GSC related assets and services, and to facilitate and conduct GSC’s staff training and GSC’s quality control and audits;

4. to maintain records required for auditing, security, claims and/or other legal purposes;

5. to investigate, respond to, and/ or defend claims made against, or involving GSC;

6. for compliance with and/or any purposes required by any relevant law, directives, guidelines, orders, rules, regulations and requirements of any governmental or statutory authority or administrative or regulatory or supervisory body (including disclosure thereunder);

7. where you have consented or we are otherwise permitted to do so:

   1. to communicate with you and deliver information that is requested by you to you and/or, in some cases, is targeted to your interests, such as targeted banner advertisements, administrative notices, product offerings, and communications relevant to your use of GSC’s Website, GSC Mobile Application and or GSC services;
   2. to notify and/or invite you to events or activities organized by GSC, its partners or sponsors;
   3. to notify you about benefits, changes to the features, promotions, alerts, newsletter, updates, promotional materials and, special privileges; 
   4. to send you festive greetings and movie-related content;
   5. to conduct marketing and promotional activities (for example, contests, market research and surveys, taking images and videos of you in Our Premises particularly in cinema halls, photobooths and/or promotional movie stands);
   6. to conduct an analysis of our customers to ensure we send you the most appropriate and relevant marketing and promotional materials;
       

8. any other purposes relating or incidental to any of the above.

7.2. Your personal data is collected from you as Job Applicants:

1. to evaluate your suitability for the position applied for at GSC, for the general record keeping purposes of the Human Resource Department;
2. for any background checks on job applicants, including but not limited to education verification, previous employment record checks, reference checks, bankruptcy history, and/or criminal background screening; and
3. other purposes relating or incidental to employment with GSC, whether or not you are subsequently employed.
    

Your personal data is collected directly from you when you:

8.1. Users:

1. register as a GSC member;
2. log in to your account on GSC’s Website or GSC Mobile Application;
3. purchase tickets on GSC’s Website or the GSC Mobile Application;
4. make a food or beverage purchase online on the GSC’s Website or the GSC Mobile Application;
5. visit or access Our Premises including when you use any photobooth and/or promotional movie stands;
6. interact and communicate with GSC at any of its events or activities;
7. communicate with GSC whether through email, phone, GSC’s Website or GSC Mobile Application, social media platforms such as Facebook, Twitter and Instagram as well as other forms of communication;
8. register or subscribe for a specific service or publications of GSC (for example, newsletter or GSC membership registration);
9. participate in any of GSC’s surveys, polls or other similar vehicles used to improve the content of GSC’s Website/GSC Mobile Application or used for GSC’s marketing purposes;
10. enter or participate in any competitions, contests or loyalty programmes organized by GSC;
11. register your interest and/or request for information through GSC’s Website or GSC Mobile Application, online portals or other available channels;
12. respond to any marketing materials that GSC sends out;
13. visit or browse GSC’s website and any other GSC owned platforms and from the cookies embedded on GSC’s website, GSC Mobile Application or any other related tracking mechanism that may be deployed by us from time to time;
14. lodge a complaint with GSC;
15. provide feedback to GSC (for example via GSC’s website or in hard copy); and
16. submit your personal data to GSC for any of the purposes stated above.

8.2. Job Applicants:

1. use or interact with us on the GSC Website;
2. submit information to us or contact us for information;
3. apply for employment.
    

8.3. Other than the personal data obtained from you directly as stated above, GSC may also obtain your personal data from third parties which GSC deals with or are connected with you, and from such other sources where you have given your consent for the disclosure of your personal data and/or where otherwise lawfully permitted (for example, credit reference/reporting agencies, authorised recruitment agencies, educational/financial institutions).
 

The classes of persons to whom GSC may disclose your personal data include:

1. third party service provider(s) for the provision of administrative, communications, payment, event management, security, information technology (IT), data processing, cloud hosting services or other services to GSC;
2. any third party or company that GSC engages or appoints to conduct statistical analysis;
3. GSC’s business partners in relation to any products offered by GSC or the said business partner, including Hong Leong Bank in relation to the GSC-Hong Leong Bank Credit Card;
4. lawyers; and
5. such other authorities, bodies or parties when required by law.
    

GSC may, where necessary, transfer your personal data to a place outside Malaysia if the classes of persons in paragraph 9 above are located or have processing facilities in countries outside of Malaysia. Your personal data may be transferred to any place outside Malaysia for any of the above Purposes. You consent to us transferring your personal data to a place outside Malaysia in these instances. We may also transfer your personal data to places outside Malaysia where permitted by law.

You have the right to request access to the personal data in our possession, or to correct such personal data.  

You may also request for your personal data to be transmitted to another entity subject to our technical capability, feasibility and compatibility with the receiving entity.

You may make such a request by contacting us using the details set out below.

We may decline to comply with your data access, data correction, or data portability request, but we will notify you of the reasons for not being able to do so.

You may exercise your choice to limit the use or the extent of use of your personal data and personal data relating to other persons who may be identified from that personal data, subject always to our contractual rights and/or our rights and obligations under relevant laws and regulations.

Notwithstanding the foregoing, we reserve our rights to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.

You are to put your requests in writing for security reasons and verification purposes. You may also withdraw your consent to the processing of your personal data. However, withdrawing your consent may affect our ability to provide you with certain products and/or services, or prevent us from communicating or continuing to communicate with you, or affect the evaluation of your employment application.

You may make the above requests by contacting us using the details set out below.

Our services, including account creation for the GSC Loyalty Programme, promotions and marketing events, are not directed at minors under the age of 18. We do not knowingly process personal data from minors in connection with these services and if we learn that we have processed such personal data, we will delete the personal data. If you have reason to believe that a minor has provided Personal Data to us in connection with these services, please contact us using the details below. 

We may need to collect, use, disclose and process minors’ personal data as described in this Notice with consent for the following purposes:

1. for your child to apply for employment in GSC;
2. where you provide your child’s personal data in connection with your employment.
    

We may also collect information as described in the Notice such as your contact details including your name, identification number, mobile number or email address, in order to verify your status as the parent or legal guardian and to request your consent as a parent or legal guardian to process your child’s information.

You are responsible for providing accurate, complete and up-to-date personal data, including any third-party personal data you provide. This obligation is a condition for us to provide our products and/or services to you, or for the evaluation of your employment application. 

It is obligatory to provide your personal data to enable us to process it for the Purposes. Should you decline to provide such personal data, it may, amongst others, prevent us from communicating or continuing to communicate with you, or affect our ability to provide you with certain products and/or services, or affect the evaluation of your employment application. 

If you provide personal data on behalf of others (e.g. family members), you confirm and represent that you have informed them of this Notice and have their consent or legal authority to disclose their personal data to us for us to process in accordance with the terms of this Notice.

GSC, when processing your personal data, takes practical steps to protect your personal data from any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction including but not limited to the use of procedural and technical safeguards such as encryption, “firewalls” and secure socket layers.

GSC will keep your personal data for the duration that is necessary to carry out the purpose for which your personal data was collected and also for the Purposes set out in this Notice.

When you use a link from GSC’s Website/ GSC Mobile Application to another third-party website, this Notice is no longer in effect. Once you have used such link, GSC does not have any control over that other third-party website and GSC cannot and shall not be liable or responsible for the protection and privacy of any personal data which you provided whilst visiting such website(s). Your browsing of and interaction on any other third-party website(s) will be subject to that websites’ own rules and policies.

“Cookies” are text files to store your preferences that are placed in the browser of your device. GSC’s Website or GSC Mobile Application may use Cookies to enhance your experience and understand the usage of the GSC’s Website or GSC Mobile Application. Cookies will not provide us with personally identifiable information unless you choose to provide such Personal Data to GSC. Once Personal Data is furnished, however, this information may be linked to the data stored in the Cookie.

GSC’s web server automatically collects information on your domain type, browser used and your IP address for statistical purposes only, which will be used to improve the content of the GSC Website or GSC Mobile Application and not sold to other organizations for any purpose. 

As with most other websites, GSC collects and uses the data contained in log files. The information in the log files include your IP (internet protocol) address, your ISP (internet service provider), the browser you used to visit the GSC’s Website, your screen resolutions and number of colours, the time you visited the Website and which pages you have visited throughout the GSC’s Website.

You may submit your complaints, data access request, data correction request, data portability request, request to limit the processing of your personal data, request to withdraw your consent for the processing of your personal data, and any enquiries regarding your personal data by contacting:

Data Protection Officer

In accordance with the terms of the PDPA, GSC may charge a reasonable fee for the processing of any data access and data portability request. The chargeable fee will take into account the time needed for verifying, locating, retrieving, reviewing and copying the information requested as well as any other associated costs and expenses that may arise from conducting such retrieval. You will be notified of the anticipated fee chargeable, prior to the retrieval of your personal data.

In the event of any inconsistency or conflict between the English language version and the Bahasa Malaysia version, the English language version shall prevail.

For avoidance of doubt, nothing in this Notice shall limit such other rights of yourself or GSC under the PDPA.