The Company would need to process your personal data for the following purposes:
(1) to manage the whistle-blowing complaint that you have raised to the Company through the process specifically defined in the Whistle-Blowing policy announced by the Company;
(2) to record the whistle-blowing process in the internal document for the purpose of future work improvement, quality control, problem analysis and future improvement of the whistle-blowing process itself.
The Company would need to collect and retain your personal data for the defined purposes for the period of time that the Company would need to proceed with the whistle-blowing issues raised by you and for the additional period of time as necessary for the Company to monitor and to take any action needed to protect the Company’s legitimate interest; provided that, in all circumstances, the Company commits not to cause excessive impact on you as the data subject.
Generally, your personal data shall be kept confidential; however, in these necessary circumstances, the Company may need to disclose your personal data to the legal counsel of the Company being engaged to assist the Company in the legal proceeding to protect the legitimate interest; provided that the Company commits to only disclose your personal data only on the necessary basis and to ensure that the data recipient shall maintain the same level of confidentiality measures as the Company.
The Company represent to implement the appropriate information security measures that would match with the sensitivity of your personal data in order to prevent the unauthorized access, use, change, amendment or disclosure of your personal data and the Company shall review those measures from time to time pursuant to the relevant laws.