Privacy Notice

 

I. General Information

ControlExpert appreciates your visit to this website (“this website”, “our website”). Your privacy is important to us, and we want you to feel comfortable visiting our site.

 

This privacy notice explains how ControlExpert processes your personal data when you visit and use our website, ensuring transparency about what data we collect, how we use it, and your rights as a data subject under the PDPA.

 

“Personal data” means any information in respect of commercial transactions relating directly or indirectly to an identified or identifiable individual (“data subject”), as defined under the PDPA.

 

This privacy notice does not have a binding contractual character; it is for your information only. It applies to any information obtained by ControlExpert through your use of this website. It does not apply to any websites controlled by third parties not affiliated with ControlExpert that this website may link to (“Third Party Sites”). Please review the privacy notices of Third Party Sites, as ControlExpert is not responsible for and has no influence on their content or privacy practices.

 

We are committed to safeguarding your privacy and to processing your personal data responsibly, fairly and lawfully in accordance with the PDPA. Please take a moment to read this Privacy Notice carefully to understand our practices and how we protect your data.

 

If you have any questions or concerns regarding your data, our contact details are provided below.

 

This privacy notice may be updated from time to time — please check it on a regular basis.

 

1. Contact Details of the Data Controller

The data controller responsible for the processing of personal data on this website is:

 

ControlExpert GmbH
Marie-Curie-Straße 3
40764 Langenfeld
Germany
A company of the Solvd Group

 

Email: info@controlexpert.com

 

2. Contact Details of the Data Protection Officer (DPO)

If you have any queries about how we use your personal data, or wish to exercise any of your rights below, you can contact our Data Protection Officer by email via the details below:

 

Email: apac.dataprotection@controlexpert.com

 

3. Your Rights as a Data Subject

As a user of this website and to the extent provided under the PDPA, you have the following rights:

  • Right to Access: request confirmation of, and access to, personal data we process about you (Section 30, PDPA).
  • Right to Correction: request correction of personal data that is inaccurate, incomplete, misleading or not up to date (Section 34, PDPA).
  • Right to Withdraw Consent: withdraw any consent you have given for the processing of your personal data at any time (Section 38, PDPA).
  • Right to Prevent Processing Likely to Cause Damage or Distress: request that we stop or do not begin processing your personal data where it is likely to cause you unwarranted damage or distress (Section 42, PDPA).
  • Right to Prevent Processing for Direct Marketing: request that we stop or do not begin processing your personal data for direct marketing purposes (Section 43, PDPA).
  • Right to Data Portability: request the transfer of personal data you have provided to us, in a structured and commonly used format, to another data controller, once the relevant regulations under the PDPA Amendment take effect and to the extent technically feasible.

 

To exercise these rights, contact us at the details in Section I.2 above.

 

You also have the right to lodge a complaint with the Personal Data Protection Commissioner:

 

Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi)
Level 6, Block D, Complex D, Federal Government Administrative Centre,
62502 Putrajaya, Malaysia

 

Website: www.pdp.gov.my

 

4. Security Measures

In accordance with the Security Principle under the PDPA, we implement reasonable technical and organisational measures to protect your personal data processed by ControlExpert via this website from loss, misuse, unauthorised access, modification or disclosure.

 

These measures include, among others, encryption, access controls, and regular security reviews.

 

5. Data Sharing and Recipients

We may share your personal data with:

  • Service Providers who support us as data processors: for example, hosting providers or IT service providers.
  • Authorities: where required by applicable law.

 

6. Cross-Border Data Transfers

We primarily process your personal data within the European Economic Area (EEA), where our servers and IT infrastructure are located.

 

Where personal data is transferred to a place outside Malaysia (including to Germany or other EEA countries), we ensure this is done in accordance with Section 129 of the PDPA, i.e. we only transfer personal data to a place outside Malaysia where:

  • that place is specified by the Minister, by notification published in the Gazette, as a place with a law substantially similar to the PDPA or that otherwise ensures an adequate level of protection in relation to the processing of personal data, at least equivalent to the protection afforded under the PDPA; or
  • one of the other statutory grounds under Section 129 PDPA applies — for example, you have given your consent to the transfer, the transfer is necessary for the performance of a contract between you and us, or the transfer is necessary to protect your vital interests.

 

Where we transfer your personal data to other companies within the Solvd Group or the wider Allianz family of companies located outside Malaysia, we do so under intra-group data transfer arrangements that incorporate contractual safeguards (such as the Allianz Binding Corporate Rules or equivalent standard contractual clauses) designed to ensure your data receives a comparable standard of protection.

  • The public version of the Allianz Binding Corporate Rules can be found at this link.

 

Where required, we agree additional measures with the recipient in the destination country to ensure your data remains adequately protected.

 

7. Hyperlinks to Other Websites

Our website may include links to third-party websites. This privacy notice does not apply to those sites.

 

We recommend reviewing their privacy notices before providing any personal data.

 

8. Changes to this Privacy Notice

This privacy notice may be updated from time to time — please check it on a regular basis.

 

II. Visit to Our Website

In the following section, we inform you about the personal data we process when you visit our website.

 

1. Access to our Website

When you visit our website, certain data is processed automatically to provide access to the website or requested functionalities (e.g. accessing and displaying PDF documents) and to ensure its proper functioning.

 

This includes the following data:

  • Requested URL
  • The website from which you visited us
  • Date and time of access
  • Duration of your visit
  • Browser type and version
  • Operating system
  • IP address

 

This processing is technically necessary to provide the website and functionalities you request (Section 6, PDPA).

 

This data is processed for the duration of your visit (session-based) and deleted as soon as you leave the website. No data is stored beyond this.

 

2. Log Files

Data processed:

  • Requested URL
  • The website from which you visited us
  • Date and time of access
  • Duration of your visit
  • Browser type and version
  • Operating system
  • Anonymised IP address

 

This data is technically necessary for the operation of the website and is processed to improve the stability and functionality of our website.

 

Log files are generally deleted no later than seven days after they are created. However, in the event of errors or malfunctions, the affected log files may be retained until the issue is resolved.

 

3. Cookies and Similar Technologies

We currently do not use cookies or similar technologies on our website, other than technically necessary cookies required for the provision of this website as described above.