GDPR Compliant - catkereta.com

GDPR Compliance Statement for Affan Maju Garage (AM Garage)

Introduction
At Affan Maju Garage (AM Garage), we are committed to ensuring the privacy and protection of our customers' personal data in compliance with the General Data Protection Regulation (GDPR). This GDPR Compliance Statement outlines how we collect, process, and store personal data when providing our services.

1. Data Controller
Affan Maju Garage (AM Garage) is the data controller responsible for the processing of your personal data. Should you have any questions or concerns regarding the use of your personal data, please contact us at:

Affan Maju Garage (AM Garage)
No.Lot pt 14120 Jalan Kampung Kemensah Jeram Ulu Kelang, Ampang, Malaysia
Phone: 018-235 2936
Email: hello.amgarage@gmail.com
Website: catkereta.com
WhatsApp: http://Wassap.my/60182352936/ketukcat

2. Personal Data Collected
We may collect and process the following types of personal data:

Identification Information: Name, address, phone number, email address.
Vehicle Information: Vehicle make, model, year, registration number.
Payment Information: Bank account details, payment records, transaction history.
Communication: Emails, messages, and service-related communications.

3. Legal Basis for Data Processing
Affan Maju Garage processes your personal data based on one or more of the following legal grounds:

Consent: We may collect and process your personal data if you have provided your explicit consent.
Contractual Obligation: Processing is necessary to provide the services you have requested, such as vehicle repairs, bodywork, or other automotive services.
Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services or handling customer inquiries.
Legal Compliance: We may be required to process personal data to comply with legal or regulatory obligations.

4. How We Use Your Personal Data
Your personal data is used for the following purposes:

To provide and improve our services, including vehicle repairs and bodywork.
To communicate with you regarding appointments, service updates, and inquiries.
To process payments and issue invoices.
To comply with legal and regulatory requirements.

5. Data Sharing
We do not share your personal data with third parties, except in the following circumstances:

With service providers or partners that assist in delivering our services (e.g., payment processors, parts suppliers).
To comply with legal obligations or court orders.
If you have given us explicit consent to do so.

6. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Once your personal data is no longer required, we will securely delete or anonymize it.

7. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that any inaccurate or incomplete data be corrected.
Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, subject to legal requirements.
Right to Restrict Processing: You can request a restriction on how your data is processed.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
Right to Object: You can object to the processing of your personal data in certain circumstances.
Right to Withdraw Consent: You can withdraw your consent for data processing at any time, where consent is the legal basis for processing.

8. Data Security
We take appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include secure data storage and encryption of sensitive information.

9. Data Breach Notification
In the event of a data breach that compromises your personal data, we will notify you and the relevant supervisory authority without undue delay, as required by the GDPR.

10. Updates to this GDPR Compliance Statement
We reserve the right to update or modify this GDPR Compliance Statement as needed to reflect changes in our data processing practices or legal obligations. Any updates will be communicated via our website or other appropriate channels.

11. Contact Information
If you have any questions or wish to exercise your rights under GDPR, please contact us at: