Personal Information Collection Statement
Client and Client’s Employees Personal Information Collection Statement
1. It is often necessary for our current or prospective individual clients, or, where our clients are corporate or business entities, their individual representatives and employees (collectively referred to as "clients" and otherwise referred to as "client", "you" or "your") to provide to Marsh Insurance Brokers (Malaysia) Sdn Bhd* (hereinafter referred to as "MARSH", "we", "our" or "us", and references to Marsh include the appropriate Marsh Affiliate(s)) personally identifiable data about yourselves ("Personal Information") in connection with our business process execution, including delivery of services and/or products, preparation of proposals, provision of quotations, arranging insurance cover, managing claims, client relationship management and conducting internal conflicts checks. Such Personal Information may include information or data provided by you or other parties or from other source, and may include, but is not limited to, historical or existing data and/or data to be collected in the future. Such Personal Information may be subject to applicable data protection, privacy and other similar laws and may include copies and other details of identity documents, proof of address and other contact details, religious, philosophical or political affiliations, information concerning age, marital status, racial or ethnic origin, education, genetic or sexual life, physical or mental health or medical condition/diagnosis, dietary preference, commission or alleged commission of any offence or proceedings for any offence committed or alleged to have been committed, the disposal of such proceedings or the sentence of any court in such proceedings.
When you provide MARSH with Personal Information relating to your employees, dependents and/or other individuals that you represent, you will observe the provisions of any data protection or privacy legislation as applicable from time to time the extent applicable to this Agreement. This includes, without limitation: (i) an obligation, if any, for you to obtain any required consent(s) in respect of the transfer of information to MARSH by the provider or any third party relating to an identified or identifiable individual that is subject to applicable data protection, privacy or other similar laws and (ii) any obligation with respect to the use, disclosure and transfer by MARSH of personal information as necessary to carry out its obligations under this Agreement.
2. Personal Information you provide will be collected, used and otherwise processed by MARSH for the following purposes:
2.1 client relationship management procedures, including any potential conflict checks as may be required;
2.2 the delivery of services or products to the client;
2.3 those purposes specifically provided for in any particular service or product offered by MARSH;
2.4 conducting marketing and client profiling activities in connection with insurance and related services and products (including those provided by MARSH, other members of the Marsh, its Affiliates and selected third parties for the purpose of improving our services to the client or that we think may interest the client);
2.5 credit assessments and other background checks of the client as MARSH may determine to be necessary or appropriate;
2.6 MARSH’s internal record-keeping;
2.7 collection of outstanding payments from clients;
2.8 prevention of crime (including but not limited to fraud, money-laundering, bribery);
2.9 meeting any legal or regulatory requirements relating to MARSH's provision of services and products and to make disclosure under the requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular, code applicable to MARSH or its Affiliates; and
2.10 purposes ancillary or relating to any of the above (including but not limited to information relating to your insurance program for research, benchmarking and statistical analysis).
3. MARSH may provide or disclose this Personal Information to its Affiliates for the purposes stated in paragraph 2 above.
Collection and Disclosure
4. Personal Information provided to MARSH will generally be kept confidential but you hereby consent and authorize MARSH to collect, provide or disclose your Personal Information for the purposes stated in paragraph 2 above to:
4.1 any person to whom MARSH is compelled or required to do so under law or in response to a competent or government agency;
4.2 relevant parties arranging insurance or providing claims services or benefits administration services or wellness services such as insurance companies, health maintenance organisations, agents and service providers (including but not limited to consultants, service call centres, market research and quality assurance companies),
4.3 Marsh’s Affiliates;
4.4 government agencies and industry regulators;
4.5 MARSH’s auditors, accountants, lawyers or other financial or professional advisers; and
4.6 such sub-contractors or third party service or product providers as MARSH may determine to be necessary or appropriate, in accordance with paragraph 2 and paragraph 7.
4.7 Such person(s) as you may instruct or require.
5. You further consent to provide, and for your employer, insurer(s), health maintenance organizations, agents and/or third party service or product provider(s) to provide to MARSH your Personal Information for the purposes set out in paragraph 2 above.
6. Failure to provide such Personal information may result in MARSH being unable to provide clients with the services and/or products requested.
Safeguards
7. MARSH confirms that MARSH has implemented the appropriate administrative and security safeguards and procedures in accordance with the applicable laws and regulations to prevent the unauthorized or unlawful processing of your Personal Information and the accidental loss or destruction of, or damage to, your Personal Information.
Data Transfer
8. Where MARSH consider it necessary or appropriate for the purposes of data storage or processing or providing any service or product on our behalf to you, we may transfer your Personal Information to an Affiliate or third party service or product providers within or outside the country in which MARSH is established, under conditions of confidentiality and similar levels of security safeguards.
Your Rights of Access and Correction
9. You have the right to request access to and correction of information about you held by MARSH and you may:
9.1 check whether MARSH holds or uses your Personal Information and request access to such data;
9.2 request that MARSH correct any of your Personal Information that is inaccurate, incomplete or out-of-date;
9.3 request that MARSH specify or explain its policies and procedures in relation to data and types of Personal Information handled by MARSH; and
9.4 communicate to MARSH your objection to the use of your Personal Information for marketing purposes whereupon MARSH will not use your Personal Information for these purposes; and
9.5 withdraw, in full or in part, your consent given previously,
in each case subject to any applicable legal restrictions, contractual conditions, reasonable internal policies/procedures, a reasonable time period (in accordance with applicable laws) as well as, in the case of an access request, a reasonable fee (where permitted under applicable laws and as MARSH may notify you in writing upon receipt of your request).
10. Written requests for access to Personal Information or correction and/or deletion of Personal Information or for information regarding policies and procedures and types of Personal Information handled by MARSH may be sent to the privacycoordinator@marsh.com.