This Data Processing Agreement (“Agreement”) is entered into by and between you (“User”) and SME Cloud Sdn Bhd (“Company”, “we”, “us”, “our”), the provider of the eSSHEpro platform. This Agreement applies whenever we process Personal Data on your behalf.

1. Definitions

“Personal Data” refers to any information relating to an identified or identifiable natural person.

“Processing” refers to any operation or set of operations performed on Personal Data, whether or not by automated means.

2. Processing Instructions

We will only process Personal Data in accordance with your instructions, unless we are required to do so by law. We will inform you of any legal requirement before the processing, unless that law prohibits such information on important grounds of public interest.

3. Security Measures

We have implemented appropriate technical and organizational measures to protect Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. We will regularly review these measures to ensure they remain appropriate and effective.

4. Subprocessing

We will not engage another processor without your prior specific or general written authorization. In the case of general written authorization, we will inform you of any intended changes concerning the addition or replacement of other processors and give you the opportunity to object to such changes.

5. Assistance

We will assist you in ensuring compliance with your obligations under applicable data protection laws, including assisting in responding to requests from data subjects and supervisory authorities, and in ensuring the security of the processing, the notification of personal data breaches, and the conduct of data protection impact assessments.

6. Data Subject Rights

We will assist you in facilitating the exercise of data subject rights. Data subjects may request access to their personal data, as well as rectification, erasure, restriction of processing, data portability, and the right to object to processing.

7. Termination

Upon termination of the services, we will, at your choice, delete or return all Personal Data to you and delete existing copies, unless the law requires storage of the Personal Data.

8. Contact Us

If you have any questions about this Agreement, please contact us at:

Company Name: SME Cloud Sdn Bhd

Address: Suite 10-21, Kenwingston Business Centre, 63000, Cyberjaya, Selangor, Malaysia

Email: legal@smecloud.my

This Data Processing Agreement was last updated on [23 July 2023].