Privacy Policy

This policy is published in English. Translations are provided for convenience; where they differ, the English text applies.

Version 1.0, December 14, 2018

Introduction

www.innoteva.com, hereinafter "this website", is owned and operated by Innoteva Sdn. Bhd., a Malaysian private company registered in Kuala Lumpur, under Companies Act 2016, with the New Registration Number: 201801007421 (hereinafter "Innoteva"), domiciled at DPulze Cyberjaya, 63000 Selangor, Malaysia.

Innoteva is committed to protect privacy and security of your personal information that we may collect and process with your consent when you use this website.

Scope

This Policy applies to all users who visit, or otherwise uses, this website and all the functionality it provides. Please read this Policy carefully before using the website or submitting any personal information to it.

You are encouraged to review this Policy whenever you visit this website to make sure that you understand how any personal information you provide is used.

By using this website, you agree to and accept this Privacy Policy without any reservation.

Collection, Storage and Removal of Information

In order to analyze website visitor's behavior and to provide a better service, Innoteva may record standard technical information about the website visitors, such as their IP address, browser and operating system versions, and the referring websites.

Innoteva collects Personally Identifiable Information (PII) (e.g. names, titles, postal addresses, email addresses, etc.) only when voluntarily submitted by you via existing functionality of this website for a specific purpose (e.g. service request). Innoteva may also collect the information, including PII, voluntarily submitted by you via alternative or non-digital means (e.g. email, fax, postal service, etc.) for a specific purpose (e.g. sales inquiry, job application, etc.)

The information you provide is used only to fulfill your specific request(s) unless you give a prior explicit permission to use it in another manner.

Innoteva securely stores and processes the information submitted as long as reasonably required to pursue the initial purpose of the information submission.

The information can be deleted if requested to do so in writing or via an automated functionality (e.g. unsubscribe link will remove your subscription and the related PII).

Once deleted, the information cannot be recovered and any claims for interrupted or undelivered service because of the information removal will be null and void.

Please contact us at removal@innoteva.com with "Remove my PII Data" in the subject for any information deletion requests. Emails with different subject will be undelivered.

Disclosure of Personal Information to Third Parties

Innoteva will never voluntarily disclose your personal information to any unauthorized third party unless:

(a) Innoteva is required to do so by Malaysian law or other applicable law; or

(b) Innoteva is trying to protect against or prevent actual or potential fraud; or

(c) Innoteva is investigating fraud that has already taken place.

We will make our best reasonable effort to inform you that your data was requested whenever we are legally permitted to do so.

Cookies

This website may use cookies and other tracking technologies to provide a better user experience and provide information publicly available on our website to you in the most convenient form and format.

Personally Identifiable Information is not collected via our cookies and other tracking technologies, however, if you previously provided the personally identifiable information, the cookies may be tied to such information.

Commitment to Information Security

We undertake our best reasonable effort to keep your personal information secure. Only the authorized employees of Innoteva have access to this information.

Inquiries

If you have any questions, concerns, or comments about this Policy, please contact Innoteva by e-mail: hello@innoteva.com

Changes

Innoteva reserves the right to make reasonable and good faith changes to this Privacy Policy at any time and without prior notice.

Any changes will be posted online without delay. Any substantial changes, or changes that may considerably impact your privacy or security, will be promptly communicated to you by email or any other available mean of communication.

The changes will only apply on a going forward not retroactive basis.

Measurement

This website counts page views on its own servers. It uses no analytics service, no tag manager and no third-party script, and nothing runs in your browser for this purpose.

Nothing is stored on your device and nothing is read from it, so no banner is shown for measurement.

Your network address and browser identification are used momentarily to compute a one-way digest, together with a secret that is generated each morning and destroyed at the end of that day. Only the digest is kept, and only for the day it belongs to. Your network address itself is never stored, and once the day's secret is destroyed the digest cannot be linked back to you.

What is retained is a daily count per page and per language, and a daily count of referring websites by host name only.

We rely on our legitimate interest in understanding which pages are read, in order to decide what to publish next. You may object to this processing by writing to the removal address given above.

Security logging

This website keeps a record of the requests that matter to its security: those that failed, those that reach the administration area, and those asking for addresses only an automated scanner asks for. An ordinary successful visit to a public page is not recorded here.

For such a request we keep the network address in full, the browser identification, the address requested, the result, and an identifier that links requests made in the same session. The address is not shortened, because a shortened address cannot show who acted, and showing who acted is the whole purpose being relied on.

When a request fails, its content may be kept as well, so that the attempt can be understood. Fields whose names indicate a password, a token or a key are replaced before anything is written, and uploaded files are never kept. This content is deleted after seven days.

Records are deleted after thirty days. A record connected to a detected security incident is kept for up to twelve months, so the incident can be investigated and reported.

We rely on our legitimate interest in the security of this website and its network, which Recital 49 of the General Data Protection Regulation recognises for this purpose. You may object to this processing, or ask what is held about you, by writing to the removal address given above.