ORAPI ASIA PRIVACY POLICY STATEMENT

I. ORAPI Commitment to Data Privacy Protection


The Statement set forth below outlines the Personal Data that ORAPI may collect, how ORAPI uses and safeguards that data, and with whom we may share it. This Statement is intended to provide notice to individuals regarding Personal Data in an effort to be compliant with the data privacy laws and regulations of the jurisdictions in which ORAPI operates as well as compliance with its own Data Privacy Compliance Manual.

ORAPI encourages its customers, suppliers, commercial visitors, business associates, investors and other interested parties to read this Statement. By using our website or submitting Personal Data to ORAPI by any other means, you acknowledge that you understand and agree to be bound by this Statement, and agree that ORAPI may collect, process, transfer, use and disclose your Personal Data as described in this Statement.

II. General Data Privacy Principles


ORAPI is committed to the goal of adhering to these Privacy Principles in all processing of Personal Data.

Notice: ORAPI will notify individuals at the time of collection of data, or a reasonable time thereafter based on the laws and regulations of the relevant jurisdiction, the purposes for which it is collecting and using information about them. This notice shall include information about who can be contacted about inquiries or concerns, the type of third parties that the information may be disclosed to, and choices available for use and disclosure of that data.

Choice: ORAPI provides all individuals the opportunity to opt out of information disclosure to a Third Party not provided in initial notice or use in a manner not provided in initial notice. If the information is considered Sensitive Personal Data as defined by the EU, ORAPI assumes the Data Subject has opted out of having such information disclosed to Third Parties, and a Data Subject must expressly opt in to consent such disclosure.

Onward Transfer (Transfer to Third Parties): The Notice and Choice Principles defined in these principles shall be applied to all onward transfers of personal data. ORAPI will not transfer Personal Data to a Third Party without notice unless one of the following applies:

  • ORAPI can ensure the Third Party is in compliance with the Privacy Shield Principles;
  • The Third Party is subject to the EU Data Protection Directive;
  • The Third Party has certified via agreement that it provides a level of protection equivalent to the Privacy Shield Principles.

Access: ORAPI provides Data Subjects access to their Personal Data and opportunity to correct, amend, or delete that Personal Data when inaccurate, except in certain circumstances allowed in the Privacy Shield Principles.

Security: ORAPI takes reasonable precautions to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alternation, and destruction.

Data Integrity: ORAPI only holds information relevant for the purpose for which it is to be used, as described in this Statement. ORAPI takes reasonable steps to ensure that information is reliable for its intended use, accurate, complete, or current.

Enforcement: ORAPI provides recourse mechanisms to resolve individual concerns or disputes regarding Personal Data. ORAPI provides the procedures as outlined in this Statement for providing verification to individuals that Privacy Shield Principles have been implemented. ORAPI is committed to providing a prompt remedy for any failure to comply with the Privacy Shield Principles, the laws or regulations of other jurisdictions, and/or its own privacy policies and procedures.

III. Personal Data


ORAPI is committed to maintaining all reasonable precautions to assure the privacy and security of Personal Data gathered by ORAPI. During your use of our website or through other communications with ORAPI, Personal Data may be collected and processed by ORAPI. In general, ORAPI collects personal contact information (e.g. name, company, address, telephone number and e-mail address), which you knowingly provide either by registration, survey, answering questions or otherwise for use in our commercial relationship. At times we may collect additional Personal Data that you voluntarily provide, including, but not limited to, job title, additional contact information, date of birth, hobbies, areas of interest, and professional affiliations.

IV. Use of Personal Data


ORAPI’s website is intended to be used by ORAPI customers, commercial visitors, business associates, investors, and other interested parties for business purposes. Personal Data collected by ORAPI through its website or by other means is used in support of our commercial relationship with you, including, but not limited to, the processing of customer orders, orders from vendors, managing accounts, learning about customers’ needs, responding to inquiries, and providing access to information. Also, in compliance with the laws and regulations of the relevant jurisdiction to support our relationship with you:

  • we may share Personal Data with our worldwide affiliates to better understand your business needs and how we can improve our products and services;
  • we may use third party service providers to assist us in collecting, assembling or processing Personal Data in connection with services related to our business relationship;
  • we (or a third party on our behalf) may use Personal Data to contact you about an ORAPI offer in support of your business needs or to conduct online surveys to understand better our customers’ needs; and
  • we may use Personal Data for marketing and promotional activities.

If you choose not to have your Personal Data used to support our customer relationship (especially direct marketing or market research), we will respect your choice. We do not sell your Personal Data to Third Parties, nor share it with third parties except as set forth in this Statement.

V. Third Party Service Providers


ORAPI is the commercial operator of its website and uses service providers to assist in hosting or otherwise acting as data processors, to provide software and content for our sites and to provide other services. ORAPI may disclose Personal Data supplied by you to these Third Parties who provide such services under contract to protect your Personal Data. In addition, where consistent with the laws and regulations of the relevant jurisdiction, ORAPI may disclose Personal Data if such disclosure:

  • is a use of the Personal Data for an additional purpose that is directly related to the original purpose for which the Personal Data was collected;
  • is necessary to prepare, negotiate and perform a contract with you;
  • is required by law or the competent governmental or judicial authorities;
  • is necessary to establish or preserve a legal claim or defense;
  • is part of a corporate restructuring, sale of assets, merger or divestiture; or,
  • is necessary to prevent fraud or other illegal activities, such as willful attacks on ORAPI information technology systems.

VI. Non-Personal Data Collected Automatically


When you access ORAPI’s website, we may automatically (i.e., not by registration) collect non-personal data (e.g. type of Internet browser and operating system used, domain name of the website from which you came, number of visits, average time spent on the site, pages viewed). We may use this data and share it with our worldwide affiliates to monitor the attractiveness of our websites and improve their performance or content. In this case, processing is performed on an anonymous basis and at ORAPI’s discretion.

VII. Other Online Data


In addition, certain online technical applications or other interactions you have with ORAPI may require the entry of business and technical data. By providing the requested information, you are consenting to the processing and storage of such information by ORAPI. Unless ORAPI is advised that you want this information removed from ORAPI’s server, such information may be retained by ORAPI and used for future commercial communications. A request for removal of this information can be made at the contact information provided below. ORAPI will take all reasonable precautions to assure that no such information will be provided or divulged to other Third Parties, except, if applicable, those Third Parties performing site hosting, maintenance, and related site service activities.

VIII. “Cookies” – Information Stored Automatically on Your Computer


Cookies are information stored automatically on a website user’s computer. When a user views ORAPI’s website(s), ORAPI may store some data on the user’s computer in the form of a “cookie” to automatically recognize the user upon future visits to ORAPI’s website(s). ORAPI will make reasonable efforts to ensure compliance with the laws and regulations of relevant jurisdictions with regard to cookies.

IX. Children


ORAPI will not knowingly collect Personal Data from children under the age of 18. ORAPI’s website(s) is not intended for individuals under 18 years of age.

X. Security and Data Integrity


ORAPI will take reasonable precautions to protect Personal Data in its possession secure against the risk of loss, misuse, unauthorized access, disclosure, alteration and destruction. ORAPI periodically reviews its security measures in an effort to ensure the privacy of Personal Data.

ORAPI will use Personal Data only in ways that are compatible with the purposes for which it was collected or subsequently authorized by you. While ORAPI will take reasonable steps to ensure that Personal Data is relevant to its intended use, accurate, complete, and current, ORAPI is also relying upon each individual to assist in providing accurate updates of his or her Personal Data.

XI. Links to Other Websites


ORAPI website(s) may contain “links” to websites owned and operated by Third Parties. By accessing these links, which are provided for your convenience, you will leave our site and will be subject to the privacy practices of the other website. This Statement does not apply to any personal information you provide to unrelated Third Parties.

XII. Data Retention


In general, ORAPI will retain Personal Data for as there is a need for the data, plus 10 years, or as otherwise required by the laws and regulations of a particular jurisdiction. For example, data will be retained during the time period that you are authorized to use ORAPI website(s), including any ORAPI tools accessible through our website(s). Upon termination of such authorization, your Personal Data related to use of ORAPI website(s) will be removed.

XIII. Data Access and Correction


Upon request, ORAPI will grant individuals reasonable access to Personal Data that it holds about them. In addition, ORAPI will take reasonable steps to permit individuals to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete. ORAPI also relies upon each individual to assist in providing accurate updates of his or her Personal Data. In order to access, correct, amend, or delete the Personal Data ORAPI holds about an individual, the individual should contact the following:

TEL: +65 6265 2888 | EMAIL: sin.marketing@orapi.com.sg

XIV. Privacy Shield Dispute Resolution and Arbitration


The Federal Trade Commission has jurisdiction regarding investigation and enforcement of ORAPI’s compliance with the Privacy Shield.
In compliance with the Privacy Shield and Safe Harbor Principles, ORAPI commits to resolve complaints about our collection or use of your personal information. Employees in the EU or EEA with inquiries or complaints regarding ORAPI’s privacy policy and compliance with Privacy Shield should first contact your human resources manager or ORAPI’s general data privacy contact at:

TEL: +65 6265 2888 | EMAIL: sin.marketing@orapi.com.sg

In addition, personal data subjects may submit a complaint to an independent recourse mechanism. ORAPI commits to cooperate with the panel established by the EU data protection authorities (DPAs) and comply with the advice given by the panel with regard to personal data transferred from the EU. The following link may assist you in finding the appropriate DPA: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

Individuals located in the EU or EEA have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms. Information regarding arbitration can be found here: https://www.privacyshield.gov/article?id=ANNEX-I-introduction

XV. Changes to this Statement


ORAPI reserves the right to modify this Statement from time to time in order that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Statement, ORAPI will post the revised Statement on our website.

XVI. Liability


If a third party service provider providing services on ORAPI’s behalf processes personal data from the EU or EEA in a manner inconsistent with the Privacy Shield Principles, unless ORAPI can prove that we are not responsible for an event giving rise to damages claimed by any claimant or regulatory body, ORAPI will be liable to such claimant or regulatory body for such damages.