The entity responsible for the processing of personal data referred to below is Chery Auto Malaysia Sdn Bhd (hereinafter referred to as “CHERY”, “we” or “us”), a private company with limited liability established under Malaysia laws and regulations, having its statutory seat in 6-01 & 6-02, Level 6, Guoco Tower, Damansara City, No. 6, Jalan Damanlela, Bukit Damansara, 50490 Kuala Lumpur, Malaysia. To ensure compliance with Personal Data Protection Act 2010, CHERY is the data controller of this personal data.
We give top priority to the protection of your personal data, and we process your data in accordance with applicable data protection laws. This statement provides comprehensive information about the processing of personal data when you use our website.
This Privacy Statement does not apply to:
In this Privacy Statement, we will explain to you:
1. What personal data we collect and how do we use it?
We use the collected personal data when you visit our web applications to manage and meet with your service and information requests, to make our products and services as effective as possible, and to protect our IT systems from attacks and other illegal activities.
| Data Processing Purposes | Type of Personal Data | Legal Basis for Processing |
|---|---|---|
| To fulfill requests or service appointments you make to us, including test drives, service and event appointments | Your contact information, including your name, your phone number, and your email address. (note: we may contact you to confirm your booking or request) | Performance of a contract with you or necessary in order to take steps at your request prior to entering into a contract |
| To respond to any feedback, requests, questions, or complaints you may have regarding our products and services (in person, online, telephone, email, etc.) | Your contact information, including your name, your phone number, and your email address. Communication and interactions information, including your request details | Performance of a contract with you or necessary in order to take steps at your request prior to entering into a contract Where you have provided your consent: to administer customers inquiries and requests |
| To participate in surveys or our offline event about your experience with our products and services | Account information Your contact information, including your name Survey or feedback details | Where you have provided your consent |
| Sign up for marketing communications | Your basic information, including contact information Order information | Where you have provided your consent |
| Data Processing Purposes | Type of Personal Data | Legal Basis for Processing |
|---|---|---|
| To fulfill and complete your orders, including reservations, orders and pre-orders, and other transactions entered with us | Your contact information, including your name, your phone number, your email address, and your delivery address Order information financial information | Performance of a contract with you |
| To identify and provide assistance with product update ors safety related recalls | Vehicle Identification Number (VIN), engine number | Necessary for our legal obligations, such as conducting safety-related recalls. |
| Other Processing Purpose | Type of Personal Data | Legal Basis for Processing |
|---|---|---|
| To detect and defend against unauthorized access to data, and to enhance information security. | Device information Network activity information | Where you have provided your consent: to protect the confidentiality, integrity, and availability of IT systems |
| To upload crash logs for troubleshooting | Account information Relevant crash logs | Where you have provided your consent |
| To understand and analyze website UI behavior and usage, so as to improve our services | Analytics data (aggregated data on UI behavior, usage and analytics of website. | Where you have provided your consent (website cookies) |
| Data Processing Purpose | Type of personal Data | Legal Basis for Processing |
|---|---|---|
| To demonstrate compliance with regulatory requirements, | Contact information Order information Vehicle information | Necessary to comply with a legal obligation |
2. What third-party services do we use?
On our websites, we incorporate social plugins from popular social networks like Instagram, Facebook, Twitter, TikTok, and Google. Here’s how they work:
Please note that our website may feature links to external websites beyond our control, and this Privacy Policy does not apply to them. If you access these websites through the provided links, the operators of those websites may collect information from you according to their own privacy policies, which may differ from ours.
3. With whom will we share this data?
3.1 Affiliates and subsidiaries
To assist, operate, enhance, and fulfil services on our behalf based on our legitimate interests to outsource certain operations, we share personal data with our affiliates and subsidiaries.
3.2 Services providers and business partners as data processors:
We share data with our services providers and partners to maintain our business operations, our relationship with you, and provide you with our services:
| Categories of providers | Reasons for sharing |
|---|---|
| IT-providers and their sub-processors | Personal data is transferred to IT-providers who supply general business support systems to us, such as software and data storage providers. |
| Authorized retailer(s) (and its sub-processors) | Personal data is transferred to authorized retailer(s) for the purpose of communication and administration of the handover of cars (if applicable). |
| Marketing and advertising suppliers | To assist, operate and fulfil services with marketing services or with digital advertising. |
| Cloud service providers | To enhance vehicle function and provide cloud service. |
3.3 Law enforcement and government authorities
To fulfil our legal obligations, we may be required to disclose information in response to subpoenas, court orders, or lawful requests from government authorities conducting investigations. This includes compliance with law enforcement requirements, regulatory inquiries, and the verification or enforcement of our policies and procedures. We may also disclose information in emergency situations to prevent or halt potentially illegal, unethical, or legally actionable activities. When we receive a request for personal data from a law enforcement authority, we assess the necessity and proportionality of the requested information.
4. How do we transfer your data outside your region?
In principle, the personal data we collect is stored within the countries of your place of residence, within Malaysia. In some cases, your personal data may be processed outside your country of residence. Regardless of where your personal data is processed, we apply the same protections as described in this Statement. We transfer your personal data in accordance with the legal frameworks required by different jurisdictions. Recipients of your personal data are required to adhere to the same level of privacy safeguards as mandated by applicable data protection laws.
5. What rights do you have in relation to your personal data?
You possess legal rights in relation to the personal data that we process about you. These rights may vary based on the jurisdiction in which you’re situated, and the specific nature of the data processing involved. Broadly speaking, your rights pertain to the ability to:
You have the right to lodge a complaint with your local data protection supervisory authority or with any other data protection authority in Malaysia. However, we would appreciate it if you first contacted us to try to solve your issue – you can find our contact details in Section 9.
6. How long do we retain your data?
We retain data related to our provided services in accordance with legal obligations. If you are a customer, we will keep your data for the duration of any contractual relationship you have with us, and, where permitted, beyond the end of that relationship for as long as necessary to fulfil the purposes set out in this Privacy Statement.
We retain the data we collect from or about you for the period necessary to fulfil the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law. Once the data is no longer necessary for these purposes, we either delete it or retain it in an anonymized form. In determining the appropriate retention period, we take into account various criteria, including the type of services requested by or provided to you, the nature of our relationship with you, the potential impact on the services we provide to you if we delete certain data about you, and the retention periods mandated by law.
7. How do we protect your data?
We strive to maintain high security standards and have implemented robust technical and organizational measures to protect your data, in accordance with the current, general state of technology. We ensure that your personal data is adequately secured against loss, falsification or unauthorized access. However, please note that the transmission of information via the internet is not completely secure. While we do our best to protect your personal data, we cannot guarantee 100% security of your data transmitted to us.
Once we have received your personal data, we use strict procedures and security features to prevent unauthorized access. In the unfortunate event of a personal data incident, we will report it and take remedial measures in accordance with the requirements of the law and regulatory authorities.
8. Privacy of children
We do not knowingly collect or use any personal data from children (we define ‘children’ as minors younger than 18) without prior, verifiable consent which is given or authorized by the holder of parental responsibility over the child. We do not knowingly allow children to order our vehicles, communicate with us, or use any of our online services.
If you become aware that a child has provided us with personal data, please contact us at cherycareline@chery.my . We will take all reasonable measures to delete the information as soon as possible and to not use such information for any purpose, except where necessary to protect the safety of the child or others as required by law.
9. How can you contact us and make a request？
If you have any questions about the processing of your personal data, we recommend reading through this Privacy Statement first. To make a query, raise a concern, or exercise your data subject rights, please feel free to contact us via:
E-mail Address: cherycareline@chery.my
Mailing Address: 6-01 & 6-02, Level 6, Guoco Tower, Damansara City, No. 6, Jalan Damanlela, Bukit Damansara, 50490 Kuala Lumpur, Malaysia
We take your privacy seriously and aim to respond to you within 21 days or within the timeline specified by the relevant local privacy protection law, after confirming your identity.
If you believe that we have not adequately addressed your complaints or concerns, you have the right to lodge a complaint with a competent data protection authority.
10. How will we update this Privacy Statement?
We may update this Privacy Statement, for example, to reflect changes in our business operations and measures for protecting personal information. If we make changes to this Privacy Statement, we will notify you. Where changes to this Privacy Statement significantly impact the nature of our data processing or have a substantial effect on you, we will provide sufficient advance notice, allowing you the opportunity to exercise any applicable rights.