Vendor Privacy Notice

In order for Rapbizz Direct Company Limited (the “Company”) to proceed with the procurement for you as a vendor (the “Vendor”), please kindly study this Vendor Privacy Notice (the “Notice”) before submitting your offer information and any other information to the Company. The Company represent to implement the information security measures in accordance with the standard defined under applicable laws.

Personal data being Processed

During the procurement process between the Company and you, the Company may directly receive your personal data from the quotation, the conversation or interview, or indirectly from other person that may refer the Vendor to the Company. The personal data that the Company would need to process include the following information:

1. Full name, identification card information of you as the individual or your authorized directors, authorized persons, or representatives of your corporate, including contact information such as address, contact address, telephone number, email, and identification documentation of such representatives;
2. Payment information in case of individual Vendor i.e., bank account information and disbursement history of such vendor; and
3. Working experience, performance assessments and measurements, including and any other personal data that the Vendor may submit or disclose to the Company which you are obliged to perform under the agreement executed between the Company and you.

In case you submit personal data of other related persons under your supervision to the Company, including but not limited to name list of your team members or employees who request to provide services and perform other obligations in the Company’s premise, upon the receipt of such personal data, the Company shall deem that the Vendor represent your legitimate rights to disclose those personal data of such related person to the Company and the Company shall, therefore, be entitled to process the personal data of those persons rightfully under this Notice.

Objectives of the Personal Data Processing and Retention Period

The Company would need to process the personal data of you or your related persons for the following purposes:

1. To verify your identity and check the accuracy of all the personal data and other information that the Vendor have submitted for the assessment in the procurement process and to coordinate with the Vendor during the procurement process until the entry into the relevant agreement between the Vendor and the Company; provided that you are not selected in the procurement process, the Company shall reserve the rights to retain your personal data for checking the procurement process for 2 years from the completion of such procurement process;
2. To perform any of the Company’s contractual obligations under the agreement entered into between the Vendor and the Company such as to assess your working performance and quality in order to calculate the consideration to be payable to you, including other performance of other rights and obligations such agreement.
3. To perform the Company’s legal obligations in particular for the accounting and tax payment in case the Vendor is an individual; and
4. To protect Company’s legitimate rights when need to enforce the Company’s right against the Vendor who may not comply with the obligations as defined under the relevant agreement and the right to file a lawsuit.

For the defined purpose to process personal data, the Company would need to store all the personal data that you submitted to the Company for the period of the term in the agreement that the Company may have between each Vendor. In addition, for the purpose to protect the Company’s legitimate rights under the relevant agreements, the Company reserve the right to retain your personal data for the appropriate prescription period for the maximum period of 10 years as for general prescription period. In case the Company have legal obligations to process any personal data, the Company would need to retain your personal data for the period of time as stipulated in such laws.

Disclosure of the Personal Data

If necessary, the Company may need to disclose and/or share your personal data to the following parties: (1) to other customers or vendors of the Company that the Company have necessity to disclose your personal data to perform the Company’s obligations and provide services to such persons; (2) to the  third-party service providers of the Company, including without limitation the Company’s affiliates, consulting company or audit company being engaged to support the Company’s performance of any obligations; provided that the Company shall disclose the personal data only on the necessary basis under the data processing agreement entered into between the Company and such third parties; and (3) to any government authorities that the Company is obliged under the relevant laws or the judgement or government order to disclose such personal data to; provided that the Company shall only disclose personal data on the necessary to perform such statutory obligations solely. 

Data Subject Rights.

The Company respect your statutory rights as the data subject under the relevant laws as follows: right to withdraw consent, right to access and request for copy of personal data, right to revise personal data, right to request for personal data portability, right to object or suspend the process of personal data or right to request for the deletion or de-identification of the personal. You can contact the Company to exercise your rights at Email: [email protected]

Rapbizz Direct Company Limited (the “Company”) would need to collect your personal data as specified under this form and a copy of your ID card attached herewith for the Company’s taxation and accounting preparation and the Company would need to retain your personal data for the period of time as defined in the applicable laws. The Company undertake to maintain the information security of such personal data with the relevant laws and not to disclose your personal data to any person, except to the government authorities that the Company may be required to do so under the applicable laws or the government order. In case you would like to exercise any personal data rights that you may have under the applicable laws, you can contact the Company at Email: [email protected]