You have reached the TCS privacy addendum for ASEAN, China mainland, Hong Kong SAR, Republic of Korea, Taiwan, Singapore and Philippines. To go back to the general TCS privacy notice, please click here. For TCS Privacy notice
1. FOR RESIDENTS OR DATA SUBJECTS IN SINGAPORE
When we collect and use personal information about you, we shall be subject to the applicable laws including Personal Data Protection Act 2012 (PDPA). We have adopted the Personal Data Protection Principles contained in the PDPA. Below you will find the additional specific provisions applicable to you as a residents or data subject within Singapore. We generally do not collect your personal data unless (a) it is provided to us voluntarily by you or (b) collection and use of personal data without consent is permitted or required by the PDPA or other laws.
DISCLOSURE OF PERSONAL INFORMATION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside Singapore for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside Singapore. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside Singapore. It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal.
Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
- Right to withdraw consent . You may withdraw consent at any time by giving reasonable notice, unless it would frustrate the performance of a legal obligation; With regard to the withdrawal of consent, You should be cognisant of the fact that the withdrawal of certain types of consent may affect the ability of the organisation to continue providing you with the requested services.
WHAT WE MAY NEED FROM YOU
If you exercise one of the above rights, we may need to request specific information from you to help us confirm your identity and that you are entitled to make such a request. This is to ensure that personal data is not disclosed to any person who has no right to receive it.
PRIVACY STATEMENT ENQUIRES AND COMPLAINTS
We have appointed Data Protection Officers (DPOs) to oversee compliance of TCS with applicable data protection laws and with this privacy notice. If you want to exercise one of the above rights in connection to your personal data or if you have any queries or complaints about our privacy notice or how we handle your personal data, please contact us by writing to us at dpo.singapore@tcs.com
2. FOR RESIDENTS OR DATA SUBJECTS IN MALAYSIA
When we collect and use personal information about you, we shall be subject to the applicable laws including The Personal Data Protection Act 2010 (“PDPA”). We have adopted the Personal Data protection principles contained in the PDPA. Below you will find the additional specific provisions applicable to you as a residents or data subject within Malaysia.
DISCLOSURE OF PERSONAL INFORMTAION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside Malaysia for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside Malaysia. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside Malaysia. It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal. You may request a copy of your person data records.
Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
Right to Object to direct marketing and profiling. You can inform us if you want us to cease processing your personal data for the purposes of direct marketing.
- Right to withdraw consent . You may withdraw consent at any time by giving reasonable notice, unless it would frustrate the performance of a legal obligation;
3. FOR RESIDENTS OR DATA SUBJECTS IN PHILIPPINES
When we collect and use personal information about you, we shall be subject to the applicable laws including Data Privacy Act of 2012 (DPA) and Implementing Rules and Regulations of the Data Privacy Act (“IRR”). We have adopted the data privacy principles contained in the DPA and IRR. Below you will find the additional specific provisions applicable to you as a residents or data subject within Philippines.
DISCLOSURE OF PERSONAL INFORMTAION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside Philippines for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside Philippines. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside Philippines. It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal.
Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
Right to Object to direct marketing and profiling. You can inform us if you want us to cease processing your personal data for the purposes of direct marketing.
- Right to be forgotten. You shall let us know if you wish to suspend, withdraw, order the blocking, removal or destruction of your personal data
4. FOR RESIDENTS OR DATA SUBJECTS IN HONG KONG SAR
When we collect and use personal information about you, we shall be subject to the applicable laws including Personal Data (Privacy) Ordinance (the “PDPO”). We have adopted the Data privacy principles contained in the PDPO. Below you will find the additional specific provisions applicable to you as a residents or data subject within Hong Kong SAR.
DISCLOSURE OF PERSONAL INFORMTAION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside Hong Kong SAR for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside Hong Kong SAR. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside Hong Kong SAR. It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal. You may request a copy of your person data records.
Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
Right to Object to direct marketing and profiling. You can inform us if you want us to cease processing your personal data for the purposes of direct marketing.
Right to be forgotten. You shall let us know if you wish to suspend, withdraw, order the blocking, removal or destruction of your personal data
5. FOR RESIDENTS OR DATA SUBJECTS IN THAILAND
When we collect and use personal information about you, we shall be subject to the applicable laws including Personal Data Protection Act B.E. 2562 (2019) (the “Thai PDPA”). We have adopted the privacy principles contained in the Thai PDPA. Below you will find the additional specific provisions applicable to you as a residents or data subject within Thailand.
DISCLOSURE OF PERSONAL INFORMTAION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside Thailand for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside Thailand. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside Thailand. It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
- Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal.
- Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
- Right to withdraw consent or your refusal to provide personal data. You may withdraw consent at any time by giving reasonable notice, unless it would frustrate the performance of a legal obligation; With regard to the withdrawal of consent or your refusal to provide personal data, you should be cognisant of the fact that the withdrawal of such consent or your refusal to provide personal data, may affect the ability of the organization to continue providing you with the requested services.
WHAT WE MAY NEED FROM YOU
If you exercise one of the above rights, we may need to request specific information from you to help us confirm your identity and that you are entitled to make such a request. This is to ensure that personal data is not disclosed to any person who has no right to receive it.
PRIVACY STATEMENT ENQUIRES AND COMPLAINTS
We have appointed Data Protection Officers (DPOs) to oversee compliance of TCS with applicable data protection laws and with this privacy notice. If you want to exercise one of the above rights in connection to your personal data or if you have any queries or complaints about our privacy notice or how we handle your personal data, please contact us by writing to us at dpo.thailand@tcs.com
6. FOR RESIDENTS OR DATA SUBJECTS IN TAIWAN
When we collect and use personal information about you, we shall be subject to the applicable laws including Personal Information Protection Act 2015 ('PDPA'), and the Enforcement Rules of the Personal Data Protection Act ('the Enforcement Rules'). We have adopted the privacy principles contained in the Acts mentioned above. Below you will find the additional specific provisions applicable to you as a residents or data subject within Taiwan.
DISCLOSURE OF PERSONAL INFORMTAION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside Taiwan for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside Taiwan. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside Taiwan It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal. You may also request a copy of your personal data
Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
Right to be forgotten. You shall let us know if you wish to cease use and processing of your personal data .
- Right to withdraw consent. You may withdraw consent at any time by giving reasonable notice, unless it would frustrate the performance of a legal obligation;
7. FOR RESIDENTS OR DATA SUBJECTS IN REPUBLIC OF KOREA (SOUTH KOREA)
When we collect and use personal information about you, we shall be subject to the applicable laws including The Personal Information Protection Act (“PIPA”) and other sectoral laws. We have adopted the privacy principles as stipulated in PIPA and other sectoral laws. Below you will find the additional specific provisions applicable to you as a residents or data subject within South Korea.
Please click here For the korean version of tcs privacy notice for the simplified Korean version of TCS privacy addendum of Republic of Korea(South Korea)
DISCLOSURE OF PERSONAL INFORMTAION TO OVERSEAS RECIPIENT
We may disclose your personal information to a third-party service providers and related body corporates located outside South Korea for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal information in the cloud within or outside South Korea. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal information on the cloud located within or outside South Korea. It is TCS’s policy which requires TCS to share your personal information overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal information are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
Request access to your personal information. You can contact us by email and request access to your personal information. In normal circumstances, we will give you full access to your personal information, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal.
Request correction of your personal information. You may request amendments or corrections, if your personal information is inaccurate, irrelevant or outdated, or incomplete
Right to Object to direct marketing and profiling. You can inform us if you want us to cease processing your personal data for the purposes of direct marketing.
- Right to be forgotten. You shall let us know if you wish to suspend, withdraw, order the blocking, removal or destruction of your personal data
8. FOR RESIDENTS OR DATA SUBJECTS IN INDONESIA
When we collect and use personal data about you, we shall be subject to the applicable laws that address personal data protection issues. The key laws and regulations includes without limitation , Law No. 27 of 2022 on Personal Data Protection (“PDP Law”), Law No. 11 of 2008 on Electronic Information and Transaction, as amended by Law No. 19 of 2016 ("EIT Law") and its implementing regulations: (i) Government Regulation No. 71 of 2019 on Implementation of Electronic Systems and Transactions ("GR 71"); and (ii) Menkominfo Regulation No. 20 of 2016 on Protection of Personal Data in Electronic Systems (“Reg 20”). We have adopted the privacy principles contained in the Acts stated herein. Below you will find the additional specific provisions applicable to you as a residents or data subject within Indonesia.
DISCLOSURE OF PERSONAL DATA TO OVERSEAS RECIPIENT
We may disclose your personal data to a third-party service providers and related body corporates located outside Indonesia for the purposes indicated in the privacy notice. Please note that some of our third-party service providers may include cloud-based service provider who may store and process personal data in the cloud within or outside Indonesia. TCS or its related body corporates may, for the purposes indicated in the privacy notice, store, process or use your personal data on the cloud located within or outside Indonesia. It is TCS’s policy which requires TCS to share your personal data overseas in a way that requires the strictest privacy and security standards, during transit and at the overseas location. We take reasonable steps to ensure that the overseas recipients of your personal data are bound by a substantially similar or comparable privacy standards.
YOUR RIGHTS
Changes to your personal data
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal data
Under certain circumstances, by law you have the right to:
- Request access to your personal data. You can contact us by email and request access to your personal data. In normal circumstances, we will give you full access to your personal data, however there may be some legal or administrative reason to deny you access (for example, where providing access would result in a serious threat to person’s safety or where the access would be unlawful) - in which case we will tell you our reason for the refusal.
- Request correction of your personal data. You may request amendments or corrections, if your personal data is inaccurate, irrelevant or outdated, or incomplete
WHAT WE MAY NEED FROM YOU
If you exercise one of the above rights, we may need to request specific information from you to help us confirm your identity and that you are entitled to make such a request. This is to ensure that personal data is not disclosed to any person who has no right to receive it.
PRIVACY STATEMENT ENQUIRES AND COMPLAINTS
We have appointed Data Protection Officers (DPOs) to oversee compliance of TCS with applicable data protection laws and with this privacy notice. If you want to exercise one of the above rights in connection to your personal data or if you have any queries or complaints about our privacy notice or how we handle your personal data, please contact us by writing to us at dpo.indonesia@tcs.com
9. FOR RESIDENTS OR DATA SUBJECTS IN MAINLAND OF THE PEOPLE’S REPUBLIC OF CHINA (“PRC” or “CHINA”)
When we collect, store, use, process, transfer, provide, disclose and delete (for purpose of addendum of China, collectively referred to as the “Process”, “Processing” or “Processed”) your personal information, we shall be subject to the relevant legal basis and principles under the PRC Personal Information Protection Law (“PIPL”) and other relevant laws. Below you will find the additional specific provisions applicable to you as a resident or data subject within China. Please click here for the simplified Chinese version of TCS privacy addendum of China.
CROSS-BORDER TRANSFER OF PERSONAL INFORMATION
Where it is necessary for us to provide your personal information to a recipient outside the territory of China due to any business need or any other need, we will inform you of the name and contact information of the overseas recipient, the purpose and method of the Processing, and the type of personal information involved, as well as the way for you to exercise your rights provided for by the PIPL against the overseas recipient.
Where it is necessary for us to transfer your personal information to a recipient outside the territory of China for the purpose of human resources management and the conclusion of the standard contract or personal information protection certification as required by the relevant PRC authorities shall be exempted.
We will take necessary measures to ensure that the activities of Processing of your personal information carried out by overseas recipients meet the standards of personal information protection provided under the PIPL.
We will not provide any of your personal information stored within the territory of China to a foreign judicial or law enforcement body, unless approved by the relevant PRC authorities.
CONSENT
The legitimate interest under the General Data Protection Regulation may not be applicable in China. We will obtain your consent for Processing of your personal information as required by the PIPL and other relevant laws.
In the event of any change of the purpose or method of Processing or the type of personal information we Process, we will re-obtain your consent.
We will secure your separate consent in the following data Processing activities:
Processing of sensitive personal information;
Use of personal information in automated decision-making;
Provision of personal information to another personal information processor
Disclosure of the personal information we Processed; or
Provision of personal information to an overseas recipient.
PERSONAL INFORMATION PROTECTION IMPACT ASSESSMENT
Prior to conducting any of the following activities, we will conduct a personal information protection impact assessment and keep a record of Processing. The personal information protection impact assessment reports and records of Processing will be retained for at least 3 years:
Processing of sensitive personal information;
Use of personal information in automated decision-making;
Contracting of the Processing of personal information to another party, provision of personal information to another personal information processor, or disclosure of the personal information;
Provision of personal information to an overseas recipient; or
Any other activity of Processing of your personal information that will have a material impact on personal rights and interests.
YOUR RIGHTS
Changes to your personal information
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the following rights:
Right to know and make decisions. You have the right to be informed and to decide on the Processing of your personal information, as well as the right to restrict or deny other person from the Processing of your personal information, unless otherwise provided by the relevant laws and regulations of PRC.
Right to access and make copies. You have the right to access or make copies of your personal information from us, unless otherwise provided by the relevant laws and regulations of PRC.
Right to transfer. We will provide a way for transfer where you request to transfer your personal information to another personal information processor you designate, provided that the conditions prescribed by the PRC national cybersecurity authority are met.
Right to correct and complete. Where you discover that your personal information is incorrect or incomplete, you have the right to request us to correct or complete your personal information.
Right to delete. We will delete your personal information under the circumstances required by the PIPL. In case we fail to do so, you have the right to request the deletion in such circumstances as described by the law.
However, where the retention period prescribed by the relevant laws and regulations of PRC has not expired, or it is technically difficult to delete the personal information, we will cease the Processing of the personal information, except for the storage and any necessary measure taken for security protection.
Right to request explanation. You have the right to require us to explain our rules of Processing of personal information.
Right to withdraw. You have the right to withdraw your consent to the Processing of your personal information carried out based on your consent. We will provide an easy way to withdraw consent. Your withdrawal of consent shall not affect the validity of any activity of Processing of your personal information already carried out before the withdrawal based on your consent.
We establish an accessible mechanism for receiving your requests above to exercise your rights. We will provide an explanation of reasons where any of your request to exercise your rights is not practical.
PRIVACY STATEMENT ENQUIRES AND COMPLAINTS
We have appointed Data Protection Officer (DPO) in China to oversee compliance of TCS with PIPL and other applicable data protection laws, the privacy notice and this addendum. If you want to exercise one of the above rights in connection to your personal information or if you have any queries or complaints about our privacy notice or how we handle your personal information, please contact us at dpo.china@tcs-china.com
