You may share your Information through various forms and in various places within our Service. The type of Information you may share about you includes but is not limited to:
a. Profile information, such as your full name, gender, date of birth, email addresses, website information, telephone number, postal address, and profile photographs;
b. Educational and employment background;
c. Contacts and connections;
d. Social media handles and other social media profile information that you make available to us or to the public, including Facebook, Twitter, Linkedin, Google and etc;
e. Digital wallet information, and financial information such as credit card, bank account or other payment details;
f. Details of any Service that we provide to you; and
g. Communication preferences and records of any communications.
Your Information may be used for the purposes including but not limited to:
a. To verify your identity when you are dealing on ONTO and/or to determine your eligibility for any of our Service;
b. To respond to your communications to us;
d. To enable us to provide our Service and personalize your experience;
e. To detect, diagnose, and fix problems affecting our Service and to improve our Service;
f. To process transactions;
g. To comply with applicable legal obligations and other rules, regulations, codes of practice, and orders and directions of competent governmental authorities that we are obligated to follow, and to manage related risks;
h. To prevent, detect, investigate, and prosecute threats, fraud, misconduct, or unlawful activity;
i. To create, develop, operate, deliver, and improve our Service;
j. To enforce our agreements and resolve disputes; and.
Your Information may be shared and cross-border transferred in the following ways:
a. With authorities in response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law, regulation or legal process;
b. With the service providers on ONTO if you link your account to their services (you may cancel the link with such third party online services at any time);
c. With the service providers on ONTO where aggregate information is disclosed which cannot be reasonably be used to identify you; and
d. With any other person where certain information has been displayed publicly;
Your Information may be transferred to other countries or districts for processing, and by using the Service you consent to the transfer, use, and processing of your Information to countries or districts outside of Singapore.
We will not sell, resell, lease, or license your Information to any third parties. However, you mayauthorize the service providers on ONTO to use your personal data only as instructed by you in a manner that is necessary to provide these services to you.
Your Information in connection with the use of the Service will not be stored electronically by us..
You are at all times responsible for your own privacy settings. We are not responsible, and accept no liability, for the functionality, privacy, or security measures of any other organization or third party websites, applications, or services.
We will provide protection of your rights concerning Information in compliance with PDPA:
a. You may request access to your Information in connection with the Service and information about how your Information have been shared and transferred within a year before your request;
b. You may decide to withdraw your consent to use of your Information in any manner or for a particular purpose. Please note that any withdrawal of your consent may have consequences, including your inability to use the Service or parts thereof, or our inability to provide you with any service update notifications or other support services available via the Service from time to time;
c. Any request for access to or correction of your Information, or any notice for withdrawal of consent to use your Information should be addressed to our Data Protection Officer below. To protect your privacy and security, we will take reasonable steps to verify your identity before processing any access or correction request or withdrawal notice;
d. You may also withdraw consent to the use of your Information by deleting your account in the Service. We will endeavour to delete the Information, or any information which may identify you, within 30 days from the deletion of your account.
The following acts of collection, use and disclosure of your Information are specifically exempted from the requirements of the PDPA:
a. That are clearly in the interest of the individual and consent cannot be obtained in a timely way;
b. In response to an emergency, or necessary for the national interest;
c. For an investigation or legal proceedings; and
d. For the provision of legal services.
For EU residents, we will endeavor to act on all requests that we receive in relation to our data processing activities:
a. The right to be informed;
b. The right to rectification;
c. The right to erasure;
d. The right to restrict processing;
e. The right to data portability;
f. The right to object.
EU residents may submit a request to exercise these rights by sending the request to our Data Protection Officer identified below. Such request should, at a minimum, contain:
a. Your full name, address and any other details you wish to give to help identify you and the information you want;
b. The nature of your request (i.e. access, rectification, etc.), and depending on the nature of it, which time period the request pertains to (date from, date to).
We will respond to all data subject requests within 30 days. If the request requires more than 30 days to investigate, we will notify you why we need more time. It may take us up to 3 months to respond to complex requests. You will not be charged a fee for exercising your rights.
15. We may deny a request under the following circumstances:
a. If the request is not legal;
c. If the identity of the requester cannot be verified;
d. If we have an overriding legitimate interest.