Privacy Policy

1. Introduction

1. Direct Interactions
   We may collect your Personal Data when you engage us for employment opportunities and in relation to any of our Services, whether in writing, orally or through our website, and/or attend any of our Events (e.g. registration forms, subscribe to our mailing list, and photographs, videos and/or audio recordings taken by us or our representatives at our Events). We may also collect Personal Data to comply with any Services you request, to correspond with you and/or where you submit your Personal Data to us for any other reason (whether voluntary or otherwise).
   
   
2. Automated Interactions
   We may automatically collect your Personal Data when you interact with us (e.g. via the use of our website or electronic communications). For more information on cookies, please refer to Clause 10 below. Additionally, we may capture your image through CCTV recordings when you participate in our Events or are within our premises.
   
   
3. Third Parties
   We may collect your Personal Data from third parties (e.g. recruitment/employment agencies, vendors, business partners, regulatory authorities, your employer or other organizations with whom you have dealings with) for the purposes of recruitment, providing our Services and/or in connection with our Events, including Personal Data in publicly available sources.
   
   Where your Personal Data is collected from third parties, we will only use such Personal Data where you have provided your consent to the third party which would also cover our processing of your Personal Data or where Experia has a legitimate interest to use the Personal Data in order to evaluate the suitability of your employment with us or provide you with our Services.
   
   If you are submitting Personal Data of another individual to us, you confirm that such Personal Data is true and correct. You further confirm that you will not provide us with any Personal Data unless you have ensured that you have obtained all necessary consents and/or have provided any required notices to the individuals. Alternatively, you may provide Personal Data to us if you have another legal justification to provide such information to us so that we can use it for the purposes and on the bases set out in this Policy.
   
   

5. How we collect Personal Data

The type and quantity of Personal Data we collect and how we use it depends on the purpose for which you provided such Personal Data. We will seek to minimise our collection to what is necessary for each relevant function or service.

Generally, we may collect, use, process, store and transfer different kinds of Personal Data about you when you participate in our Events or engage us for our Services, including the following:

• Identification information (including photographs, videos and audio recordings);
• Contact Information;
• Business or employment information;
• Special and dietary requirements;
• Payment information;
• Information relating to the usage of our Services and/or in connection with our Events; and
• Other information you may choose to provide us.

When you seek employment with us, we may collect, use, process, store and transfer the following personal data:

• Identification information (including photographs);
• Contact information;
• Resume;
• Educational qualifications, professional qualifications and certifications;
• Employment history;
• Employment references;
• Employment training history;
• Work related health issues and disabilities; and
• Other information you may choose to provide us.

6. How do we use your Personal Data?

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will only do so if legally permitted and where you are provided with appropriate notice.

To the extent permitted under the PDPA, we may process your Personal Data based on consent. Such consent may be express, based on your agreement to any contract which incorporates these terms or deemed based on the circumstances by which we interact with you. We may also process your Personal Data where permitted by any exception in the relevant schedules to the PDPA.

Notwithstanding the above and where permitted under any other applicable law, and where the GDPR applies, we will generally process your Personal Data in accordance with one or more of the following:

1. it is necessary for the performance of a contract with you;
2. it is necessary in connection with a legal obligation;
3. you have provided us with consent;
4. it is necessary to establish, exercise or defend a legal claim;
5. the information is available in the public domain; and/or
6. it is necessary for our legitimate interest (or those of a third party).

1. to perform our obligations in connection with an Event or in the course of providing our Services;
2. to manage our relationship with you and facilitate the provision of our Services;
3. to monitor, analyse and protect our business, including the activities of individuals at our Events;
4. to facilitate our internal business operations including but not limited to recruitment and employment purposes;
5. to comply with any requests from you;
6. to comply with any legal, regulatory or professional obligation; and/or
7. to personalize your customer experience, develop our business and/or improve on our Services.

Please note that if you choose not to provide us with your Personal Data or choose not to consent to our processing of your Personal Data, we may not be able to provide some or all of our Services to you or respond to your other requests; for job applicants, we would not be able to evaluate your suitability against our employment opportunities.

These purposes may continue to apply even in situations where your relationship with us has been terminated or altered in any way. In such cases, we may still retain personal data relating to you and use or disclose such information for legal or business purposes, including for compliance with the PDPA, GDPR and/or other applicable laws.

7. Disclosing your Personal Data

We may disclose your Personal Data to third parties from time to time, but will only transfer such Personal Data in these circumstances where we are satisfied that it will be subject to an appropriate level of protection and in accordance with any safeguards that may be legally required. Some of these parties may include:

1. third party service providers (e.g. event venues, IT services, data analytics, payment providers);
2. our affiliates or partners;
3. event attendees, exhibitors or sponsors; and/or
4. regulatory or supervisory authorities.

8. Data Protection and Retention

1. Protection and Security
   As part of our commitment to protecting your privacy, we implement appropriate technical and organization measures to protect your Personal Data against accidental, unauthorized or unlawful use, disclosure, access, destruction, loss, change or damage. Some of the measures we have taken include pseudonymization, encryption, limited access and robust retention policies.
   
   Nevertheless, do note that while we will endeavor to take all reasonable measure to protect your Personal Data, you should similarly take all necessary precautions, such as implementing strong passwords, limiting access to your computer and avoiding misplacing any documents or access passes.
   
   
2. Retention
   We keep your Personal Data only for as long as necessary for recruitment and employment purposes, to provide you with the Services, to fulfil our processing purposes, in accordance with our legal obligations and for legitimate business purposes.
   
   The retention period for your Personal Data may vary based on the specific circumstances. Nevertheless, in determining the appropriate period to lawfully retain your Personal Data, we will consider inter alia, the:

1. amount, nature and sensitivity of Personal Data;
2. purposes for which Personal Data is retained;
3. appropriate security measures and, if any, relevant technical constraints; and
4. applicable legal requirements.

Kindly note that if you request that we stop sending you marketing materials, we may keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us. In such instances, we will endeavor to retain only minimal Personal Data to effect the above.

Nonetheless, if you withdraw your consent (where we rely on consent as our legal basis) or object to our processing of your Personal Data, you may at any time request that we erase or delete your Personal Data. Upon receipt of such request, we shall, within a reasonable time, delete or anonymize your Personal Data unless we are legally permitted or required to retain such Personal Data (e.g. ongoing dispute, tax or obligations, accounting purposes, compliance with any legal obligations).

Last updated on 2 July 2021