Personal Data Protection Policy [For Employees (Including Staff On Secondment), Service Contractors, Job Applicants, Coaches, Interns And Other Engaged Individuals]

In this Personal Data Protection Policy (“Privacy Policy”), the words “Institute”, “NYSI”, “we”, “our” and “us” refer to the National Youth Sports Institute, an institute under Singapore Sports School Ltd located at 1 Champions Way, Singapore 737913 and 5D Stadium Lane, Singapore 397778. 

BACKGROUND

This Privacy Policy sets out the basis upon which NYSI may collect, use, disclose or otherwise process personal data of employees (including staff on secondment), service contractors, job applicants, coaches, interns and any others who interact with NYSI (collectively as ‘Engaged Individuals’), in accordance with the Personal Data Protection Act 2012 (“PDPA”). This Privacy Policy applies to personal data in NYSI’s possession or under NYSI’s control, including personal data in the possession of organisations which NYSI has engaged to collect, use, disclose or process personal data for our purposes.

PERSONAL DATA

From time to time, it may be necessary for engaged individuals to supply NYSI with personal data about yourself and other individuals for purposes in connection with your employment, job application or interaction with NYSI. 

Where personal data is submitted by engaged individuals on behalf of another individual or concerns another individual other than themselves, the engaged individuals represent and warrant to NYSI that all the necessary consents (procured in accordance with all applicable data protection legislation, including without limitation the PDPA, for such purposes stated in the relevant sections of this Privacy Policy) have been obtained from the relevant individuals and that the engaged individuals, such persons have retained proof of these consents, which may be required to be provided to NYSI upon request. 

In this Privacy Policy, “personal data” means data, whether true or not, about an engaged individual who can be identified: (a) from that data; or (b) from that data and other information to which NYSI has or is likely to have access. 

Depending on the nature of your interaction with us, the following are (without limitation) some examples of personal data which NYSI may collect from an engaged individual: 

a.     name, gender, NRIC/FIN, passport number, date of birth, nationality and country and city of birth; 

b.     mailing address, telephone numbers, email address and other contact details;

c.     resume, educational qualifications, professional qualifications and certifications and employment references;

d.     employment and training history;

e.     salary information and bank account details; 

f.      details of next-of-kin, spouse and other family members; 

g.     health issues and disabilities; 

h.     photographs; 

i.      performance assessments and disciplinary records; and

j.      any additional information provided to NYSI as an engaged individual.

COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA

We generally do not collect your personal data unless (a) it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us (your “authorised representative”) after (i) you (or your authorised representative) have been notified of the purposes for which the data is collected, and (ii) you (or your authorised representative) have provided consent (express, implied or deemed) to the collection and usage of your personal data for those purposes, or (b) collection and use of personal data without consent is permitted or required by the PDPA or other laws. We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law). To avoid doubt, where our purposes of obtaining personal data is for direct marketing messages, we will obtain express consent from you, which will be obtained through the opt-in method.

PURPOSE

In accordance with our obligations under the PDPA, NYSI will only collect, use and/or disclose your personal data for purposes that a reasonable person would consider appropriate in the circumstances and that you have been informed of (where applicable).

For a job applicant, NYSI will collect and use personal data and may disclose personal data to third parties where necessary for one or more of the following purposes: 

a.     assessing and evaluating your suitability for employment/engagement in any current or prospective position within NYSI;  

b.     verifying your identity and accuracy of your personal details and other information provided; 

c.     responding to queries of job applicants; and 

d.     any other purpose reasonably related to the aforesaid purposes.

For the rest of engaged individuals, NYSI will collect and use personal data and may disclose personal data to third parties where necessary for one or more of the following purposes:

a.     performing obligations under or in connection with your employment/engagement with NYSI, including (without limitation) payment of remuneration and tax;

b.     all administrative and human resources related matters within NYSI, including (without limitation) administering payroll, granting access to NYSI’s premises and computer systems, processing leave applications, administering insurance and other benefits, processing of claims and expenses, investigating any acts or defaults (or suspected acts or defaults) and developing human resource policies;

c.     considering and processing applications for continuing skill development and training, including (without limitation) organising training and staff development programs;

d.     Providing resources and assistance in connection with the performance of duties (including without limitation making business-related travel arrangements on their behalf);

e.     managing and terminating the employment contract, including (without limitation) monitoring internet access and use of NYSI’s intranet email to investigate potential contraventions of NYSI’s internal or external compliance regulations, and resolving any employment related grievances;

f.      conducting disciplinary and security matters and/or arrangements;

g.     carrying out background checks, investigation and screening activities in accordance with legal or regulatory obligations that may be required by the Singapore law or that may have been put in place by NYSI;

h.     producing statistics and research for internal and/or statutory reporting and/or record keeping requirements and performing NYI’s policy/process reviews;

i.      assessing and evaluating your suitability for employment/engagement or continued employment/engagement in any position with NYSI;

j.      responding to requests for information from embassies, public agencies, ministries, statutory boards or similar authorities; 

k.     responding to queries of employees;

l.      ensuring business continuity for NYSI in the event that your employment/engagement with NYSI is or will be terminated; 

m.   facilitating NYSI’s compliance with any laws, customs and regulations which may be applicable to NYSI; 

n.     publishing in internal NYSI’s publications and broadcast such as newsletters and email;

o.      processing your application, registration or event sign-up with us;

p.      supporting and/or dealing with your works, trainings, competitions, health, medical needs, safety and welfare requirements such as but not limited to student support services, counselling, careers advices and health services;

q.      administering and/or managing activities organised and/or held by NYSI. Please do note that photographs(s) or video images of you may be taken during such activities and used, disclosed, processed and published in materials such as newsletters or other publications, yearbooks or any materials/books and you agree to the same;

r.       administering and/or managing the use of facilities including (without limitation) your accommodation needs, provision of Information Technology services and, training and recreation facilities;

s.      contacting you via different modes such as phone/voice call, short text message, email and/or postal mail for NYSI related matters such as but not limited to NYSI’s events, studies, training and competition arrangement, fees and boarding and communicating with you in the event of public transport disruptions, emergencies or other extraneous circumstances such as national disasters, health pandemics, fire drills, evacuation drills and etc.

t.       dealing with complaints related matters;

u.      carrying out research, analysis and development activities, including (without limitation) data analytics, surveys and/or profiling to improve any of the NYSI’s programs;

v.      responding to requests for information from local hospitals, embassies, public agencies, ministries, statutory boards or similar authorities.

w.     conducting publicity and/or the development of promotional materials to showcase and market your achievements as an affiliate of NYSI, publishing your image and/or personal data on public media platforms. You hereby grant NYSI permissions to use your name, photograph, video images, personal story and information you provide to NYSI in the institute’s promotional materials and

x.        contact you for fund raising activities for NYSI selected causes by various modes of communication platforms including (without limitation) phone/voice call, short text message, email, social media and/or postal mail; and

y.       any other purpose reasonably related to the aforesaid purposes.

The purposes listed in the above clauses may continue to apply even in situations where your employment/engagement with NYSI has been terminated or altered in any way, and for a reasonable period thereafter (including, where applicable, a period to enable NYSI to enforce its rights under any contract with you).

WITHDRAWING CONSENT

The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request NYSI to stop collecting, using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing or via email to NYSI’s Data Protection Officer.

Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and, if necessary, for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within ten (10) business days of receiving it.

Withdrawal of consent does not affect NYSI’s right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.

ACCESS TO AND CORRECTION OF PERSONAL DATA

If you wish to make (a) an access request for access to a copy of the personal data which NYSI holds about you or information about the ways in which NYSI uses or discloses your personal data, or (b) a correction request to correct or update any of your personal data which NYSI holds, you may submit your request in writing or via email to NYSI’s Data Protection Officer.

A fee may be charged for an access request. We will inform you of the fee before processing the request.

Depending on the request that is being made, NYSI will only need to provide you with access to the personal data contained in the documents requested, and not to the entire documents (or systems) themselves.

We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within 30 days after receiving your request, we will inform you in writing within 30 days of the time by which we will be able to respond to your request.  If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so.

Where we are not required to provide you with any personal data or make a correction requested by you under the PDPA, any such request for the same shall be refused. In such situations, and in accordance with our obligations under the PDPA, we will preserve, for not less than 30 days after the date of refusal or such other prescribed period, a copy of the personal data concerned. Such copy of the personal data concerned shall be a complete and accurate copy of the personal data concerned.

PROTECTION OF PERSONAL DATA

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and the use of privacy filters to secure all storage and transmission of personal data by us, and disclosing personal data both internally and to our authorised third party service providers and agents only on a need-to-know basis.

You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.

ACCURACY OF PERSONAL DATA

NYSI generally relies on personal data provided by you (or your authorised representative). In order to ensure that the personal data is current, complete and accurate, you should inform the Human Resource Department of any changes to your personal data in writing.

RETENTION OF PERSONAL DATA

NYSI may retain your personal data for as long as it is necessary to fulfil the purposes for which they were collected, or as required or permitted by applicable laws.

NYSI will cease to retain your personal data as soon as it is reasonable to assume that such retention no longer serves the purposes for which the personal data were collected, and are no longer necessary for legal or business purposes. At such point in time, NYSI will either cease to retain the documents containing personal data or we may remove the means by which the personal data may be associated with particular individuals (that is, to anonymise the data). In the latter case, NYSI will take steps to minimise the risks of re-identification of the individual involved.

DATA BREACH NOTIFICATION

In the unlikely event that NYSI suffers a Data Breach (defined below) in relation to personal data, NYSI will assess whether the Data Breach is notifiable, and notify the affected individuals and/or the Personal Data Protection Commission (“PDPC”) where it is assessed to be notifiable. To be clear, a Data Breach within NYSI does not trigger any obligation to notify affected individuals and/or the PDPC.

For the purposes of this section, “Data Breach” in relation to personal data means (a) the unauthorised access, collection, use, disclosure, copying, modification or disposal of personal data; or (b) the loss of any storage medium or device on which personal data is stored in circumstances where the unauthorised access, collection, use, disclosure, copying, modification or disposal of the personal data is likely to occur.

EFFECT OF POLICY AND CHANGES TO POLICY

From time to time, we may update this Privacy Policy without any prior notice to ensure that our Privacy Policy is consistent with regulatory changes. Should any revision(s) be made to this Privacy Policy, updates will be published on our public site (https://www.nysi.org.sg/about-nysi/personal-data-protection-policy-for-employees-including-staff-on-secondment-service-contractors-job-applicants-coaches-interns-and-other-engaged-individuals) Subject to your legal rights in Singapore, the prevailing terms of the Privacy Policy shall apply.

This Privacy Policy forms a part of the terms and conditions governing your relationship with us and should be read in conjunction with such terms and conditions (“Terms and Conditions”). In the event of any inconsistency between the provisions of the Privacy Policy and the Terms and Conditions, the provisions of the Terms and Conditions shall prevail.

QUERIES

If you have any questions relating to our collection, use, disclose and/or process of your personal data or the matters set out in this document, please contact our Data Protection Officer.