Privacy and Personal Data Protection Policy

Seminari Theoloji Malaysia (“STM”) and Pemegang Amanah Seminari Theoloji Malaysia Berdaftar (“PEMEGANG”) are committed to protecting your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (“PDPA”) and its Amendment Act 2024 (“The Amendment”). We recognize the importance of safeguarding the personal data you entrust to us and are dedicated to managing, protecting, and processing this information responsibly.

This Policy outlines how we collect, use, disclose, and process your personal data. Please read it carefully before sharing your personal information with us.

1. Collection of Personal Data

• • We collect and store your personal data when you register with STM and/or PEMEGANG. Personal data may also be obtained through various means, including but not limited to:
    • Applications, surveys, or registration forms (e.g. students, alumni, membership, event participants).
    • STM’s social media pages and groups when you join, follow, or interact with them.
    • Public spaces at STM or event venues organized by STM where you voluntarily share your information.
    • Correspondence related to queries, complaints, or feedback.

1.1 Types of Personal Data Collected

• • STM may collect and process the following types of personal data:
    • Full Name
    • Identification Number or Passport Number
    • Address and Contact Details (telephone number, email, etc.)
    • Personal Information (gender, marital status, religion, ethnicity, date of birth)
    • Additional Information, if applicable (medical history, education level, employment details, photographs, financial information for payments, religious affiliation, family details, etc.)

2. Purposes of Collection, Use, and Disclosure

Your personal data may be used for, but is not limited to, the following purposes:

• • Maintaining accurate records.
  • Administering and processing payments for products, services, or facilities.
  • Responding to queries, complaints, and feedback.
  • Generating reports for regulatory authorities.
  • Producing anonymized or aggregated data for statistical analysis.
  • Complying with legal or regulatory obligations.
  • Maintaining security records.
  • Conducting marketing and communication activities (newsletters, promotions, etc.).
  • Responding to emergencies.

3. Retention of Personal Data

STM will retain your personal data only as long as necessary to fulfil the stated purposes, comply with legal obligations, and protect the interests of both STM and you.

4. Transfer of Personal Data

Your personal data is processed at STM’s administrative office in Negeri Sembilan, Malaysia. If you are located outside Malaysia and provide information to us, your data will be transferred to Malaysia, where it will be processed in accordance with this Policy. By submitting your information, you consent to such transfers.

STM ensures that adequate security measures are in place to protect your personal data before any transfer to third parties or international locations occurs.

5. Third-Party Links

Our website may contain links to third-party websites that operate under their own privacy policies. STM and PEMEGANG are not responsible for the privacy practices or content of these external sites.

6. Data Protection and Security

STM is committed to ensuring that your personal data is stored securely and protected against unauthorized access, loss, damage, or modification. We implement administrative and technical safeguards, including encryption and access control measures, in accordance with the PDPA.

7. Consent and Withdrawal of Consent

By submitting your personal data to STM and/or PEMEGANG, you consent to its use as outlined in this Policy.

If you wish to withdraw your consent, you may do so in writing via email. We will process your request within a reasonable time and inform you of any implications, including potential legal consequences that may affect your rights and services received. Please note that withdrawing consent does not affect our right to collect, use, or disclose data where permitted or required by law.

8. Access and Correction of Personal Data

You may request to:

• • Access and verify your personal data.
  • Correct inaccurate or outdated information.
  • Limit or cease processing of your personal data.
  • Raise concerns or inquiries regarding data processing.
  • Object to the use of your personal data for marketing purposes.
  • Request deletion of data after its intended purpose is fulfilled.

For any inquiries or requests, please contact:

• • Name: Ps. Kelly Oon
  • Department: Academic
  • Designation: Data Protection Officer
  • Email: kelly.oon@stm2.edu.my

• • Name: Ms Yap Hai Yen
  • Department: Academic-Postgraduate
  • Designation: Data Protection Officer
  • Email: haiyen@stm2.edu.my

• • Name: Chan Eik Kent
  • Department: Library
  • Designation: Data Protection Officer
  • Email: asst_librarian@stm2.edu.my

• • Name: Chan Hon Yee
  • Department: Administration
  • Designation: Data Protection Officer
  • Email: admin@stm2.edu.my

We will process your request within a reasonable time based on its complexity. If we do not receive a request from you, we will assume authorization to continue processing your personal data.

9. Policy Updates

STM reserves the right to update this Privacy Policy at any time. Changes will be posted on our website and will take effect immediately. We encourage you to review this Policy periodically to stay informed about our data protection practices.

10. Language

In accordance with Section 7(3) of the PDPA, this Privacy and Personal Data Protection Policy is issued in both Bahasa Malaysia and English. Additional translations may be provided at the discretion of STM and/or PEMEGANG.