AFKL Personal Data Management

The Alliance Française Kuala Lumpur (AFKL) is committed to respecting the confidentiality of personal data entrusted to it during its operations, including via its website alliancefrancaise.org.my. This commitment applies to data collection processes, such as inquiries, requests for information, registration, or account creation.

AFKL adheres to Malaysia’s Personal Data Protection Act (PDPA) 2010, as amended in 2024, ensuring all personal data is processed in accordance with the law.

Purpose of Data Collection and Use

Personal data collected through forms, inquiries, and account creation are processed by the appropriate departments (e.g., reception, cultural programming, course administration, or events). This allows AFKL to:

Respond to inquiries.
Facilitate course registration.
Provide updates and relevant services.
Process payments and manage contracts.
Promote events and activities through photos and videos taken during AFKL events.

AFKL will not share personal data with third parties without the explicit consent of the data subject, unless required by law. No additional personal information is collected without the user's knowledge.

Photo and Video Usage

Photos and videos taken during AFKL events may be used for promotional purposes, such as on the website, social media platforms, or printed materials.

AFKL will only retain and use photos or videos of individuals after obtaining their consent.
These images and videos will be stored securely for a maximum of 7 years unless otherwise requested by the individual.

Notices will be displayed at event venues, informing attendees of potential photo or video recordings. Individuals can request the removal of their images from public platforms by contacting AFKL directly.

Data Retention

Personal data will be retained as follows:

For customers: Data is kept for the duration of the commercial relationship and up to seven years after its termination for future service offerings in accordance legal obligations to retain accounting records for up to 7 years as required by Malaysia's Income Tax Act 1967.
For prospects: Data is retained for up to seven years from the last contact or collection.

Data Security Measures

AFKL ensures the security and confidentiality of personal data through:

Secure website protocols (HTTPS).
Strict access controls, including complex passwords and two-factor authentication for data systems.
Continuous monitoring and updates to prevent breaches and unauthorized access.

Additionally, any data shared with third-party processors (e.g., for payment or communication systems) will comply with PDPA requirements, ensuring equivalent levels of protection.

Data Subject Rights

In line with the PDPA Amendment Bill 2024, individuals have the right to:

Access their personal data.
Correct inaccuracies.
Withdraw consent for data processing.
Request the deletion of their data where permissible by law.

Requests can be made by contacting AFKL via the designated Data Protection Officer (DPO) at development@afkualalumpur.org.
AFKL will address these requests promptly, in compliance with the PDPA.

Cross-Border Data Transfers

If personal data is transferred outside Malaysia (e.g., to service providers or partners), AFKL ensures that the recipient complies with equivalent data protection standards, as required under the PDPA 2024 amendments.

Breach Notification

In the event of a data breach causing significant harm, AFKL will notify:

The Personal Data Protection Commissioner of Malaysia.
Affected individuals, providing guidance to mitigate risks.

Complaints

Individuals dissatisfied with AFKL’s data handling practices can file a complaint with the Personal Data Protection Commissioner of Malaysia.

Further details can be accessed through Malaysia's Personal Data Protection Act 2010 and its updates, available here.