privacy-statement

 

BDCB may collect personal data directly from members of the public, stakeholders and its employees where necessary, or should it be deemed as reasonable or practical to do so. When BDCB collects the personal data, BDCB will inform them how the personal data is used or disclosed unless it is apparent at the point of collection. In some cases, it may be necessary, reasonable or practical for BDCB to collect personal data from other persons, with or without individual knowledge or involvement as part of our statutory functions and for recruitment purposes.

For visitors to BDCB's premises, BDCB may collect personal data prior to entry for identity verification and security purposes. BDCB also operates CCTVs at exterior perimeters and within its premises for safety of the visitors and its employees, and for crime prevention and crime detection, which may collect photos, videos, or voice recordings of individuals.

a. the sensitivity of the data that have been collected

b. the amount, distribution, and format of the data; 

c. the method of storage; 

d. the state of technological development; and

e. the cost and reasonableness of implementation of the safeguards.

Safeguards for data protection shall be assessed by BDCB from time to time, as and when required. In some occurrences, it is necessary for BDCB to process sensitive or special categories of personal data such as racial or ethnic origin, biometric data and data concerning health as well as criminal data as part of its functions as described above. In such cases, BDCB will apply additional care as required by law. 

Where data is to be transferred to a third party (other than the individual or BDCB), BDCB shall take reasonable measures to ensure that the data which is to be transferred will not be processed inconsistently with this policy.

a. the individual's consent is obtained; 

b. the use or disclosure is clearly in the interest of the individual;

c. it is impracticable to obtain the consent of the individual to that use or disclosure;

d. if it were practicable to obtain such consent, the individual would be likely to give it; 

e. use or disclosure of the data is for legal, medical, or security reasons, for example, when data is being used or disclosed for the detection and prevention of fraud or for law enforcement;

f. if data use or disclosure assists the individual to fulfil a statutory requirement;

g. data is being used or disclosed in an emergency that threatens the life, health or security of an individual;

h. use or disclosure of data which is generally available to the public;

i. use or disclosure of data is necessary to render a service which the individual has applied for;

j. disclosure is made to an institution whose purpose is the conservation of records of historic or archival importance and disclosure is for such purpose; 

k. a service provided requires interaction with a third party, or is provided by a third party on our behalf; 

l. it is pursuant to legal action or law enforcement; or

m. it is to perform our statutory functions and exercise powers under the law.

In instances where BDCB appoints a third-party service provider to process personal data on behalf of the organisation, BDCB will instruct such provider to only process such personal data for the specific purposes as required by BDCB.

If BDCB discloses any individual personal data to any person, BDCB will require such person to appropriately safeguard the personal data provided to them.

Under certain circumstances, an individual may have the right to:

Withdraw Consent:

• For processing of personal data
  
• Request for erasure of individual personal data
• Object to the processing of individual personal data

Request to Access Personal Data:

• Request for confirmation whether individual data is being processed
• Request copy of personal data
  

Request for Correction:

• Request to correct or complete individual personal data held by BDCB

Data Portability

• Request to provide individual personal data in a manner that allows the individual to transmit such personal data to a third party, or to directly transmit such personal data to a third party.

The rights set out above are not absolute and are subject to a number of important exemptions and limitations. BDCB has the right to allow or deny individual requests, at its discretion.

[a]  have enquires or feedback on BDCB's data protection policies and procedures;

[b]  need more information on, or access to, data which you have provided to us in the past; or

[c]  have any questions or concerns about the collection, use, processing, protection, disclosure, or transfer of your personal data.