What is Personal Data?
Personal Data* means “information about a natural person that enables the identification of such person, whether directly or indirectly, but excluding information of deceased persons specifically.”
Personal Data We Collect
We will collect the following personal data:
- [Identity information such as name, address, contact details, phone number, email]
- [xxx data]
- [yyy data]
- […]
Sources of Personal Data
We may obtain your personal data from two channels:
- 1. We collect your personal data directly from you through the following service provision processes:
- The process of applying for services with us or the process of submitting requests to exercise various rights with us.
- From your voluntary participation in surveys or correspondence via email or other communication channels between us and you.
- Collected from your website usage data through your browser’s cookies.
- […]
- We receive your personal data from third parties as follows:
- [Third parties who disclose information]
- […]
- Data is obtained through the following methods:
- [Methods such as received via email, notified by phone, received as documents]
- […]
Purposes of Data Processing
- [We collect your personal data for….]
- [We collect your personal data for….]
Personal Data Processing
Upon receiving personal data from the sources of personal data, we will take the following actions with your personal data:
- Collect [processing details]
- Use [processing details]
- Disclose [processing details]. The individuals and entities to whom we may disclose your personal data are as follows:
[List or categories (as specific as possible) of those who may receive your personal data]
In addition, we may need to send your personal data to credit bureaus for verification and may use the results of such verification for fraud prevention.
We may need to transfer your personal data to foreign agencies or international organizations.
The list is as follows:
[List]
These agencies have adequate personal data protection measures (appropriate safeguards) and can enforce the rights of data subjects, including legal remedies, the details of which are as follows:
[Brief details of the personal data protection standards of the agency, the country where the agency is located]
Personal Data Retention and Retention Period
Personal Data Retention
The data controller stores your personal data as follows:
1. Storage method: [Store as Soft Copy / Hard Copy]
2. Storage location: [Stored in a room, cabinet with security devices / Stored in a computer / Stored on a Cloud service provided by…]
3. Retention period: As per the topic of Personal Data Processing Period.
4. Upon expiration of the retention period or when we no longer have the right or cannot rely on a lawful basis for processing your personal data, we will destroy such personal data using the following methods: [Destruction methods for Soft Copy / Hard Copy] and will complete the process within [Number of days] days from the end of the aforementioned period.
Personal Data Retention Period
We store personal data as follows:
- [Identity information such as name, address, contact details, phone number, email]
Processing period: 10 years from the date of contract termination. - [xxx data]
Rights of the Data Subject
You have the following rights:
(1) Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data that you have given to us at any time while your personal data is with us.
(2) Right of access: You have the right to access your personal data and request us to make copies of such personal data for you, as well as request us to disclose the acquisition of personal data that you did not provide to us.
(3) Right to rectification: You have the right to request us to correct inaccurate information or supplement incomplete information.
(4) Right to erasure: You have the right to request us to delete your data for certain reasons.
(5) Right to restriction of processing: You have the right to restrict the use of your personal data for certain reasons.
(6) Right to data portability: You have the right to transfer your personal data that you have provided to us to another data controller or to yourself for certain reasons.
(7) Right to object: You have the right to object to the processing of your personal data for certain reasons.
You can contact our DPO/staff to submit a request to exercise the aforementioned rights (contact details appear in the “Contact Channels” section below), or you can study the detailed conditions and exceptions for exercising various rights at [link to details of exercising rights*] or you can learn more at [link to information for personal data subjects such as TDPG3.0, Ministry of Digital Economy and Society website http://www.mdes.go.th]
You do not need to pay any fees to exercise the aforementioned rights, and we will consider and notify you of the results of your request within 30 days from the date we receive such request.
Marketing Activities and Marketing Promotions
During the use of our services, we will send you news and information about marketing activities and marketing promotions, our products, and services that we believe may be of interest to you for the benefit of providing you with efficient service. If you have agreed to receive such news and information from us, you have the right to withdraw your consent at any time by following these steps:
[Steps to unsubscribe from receiving news and information]
Cookies
What are Cookies?
Cookies are text files on your computer used to store details of your internet usage logs or your website visit behavior. You can learn more about Cookies at https://www.allaboutcookies.org/
How Do We Use Cookies?
We will collect website visit information from all visitors through Cookies or similar technologies, and we will use Cookies to improve the efficiency of accessing our services via the internet and to improve the efficiency of using our services online, for the following purposes:
- To enable you to continuously sign in to your account on our website.
- To study your website usage behavior to improve its usability, speed, and efficiency.
- […]
Types of Cookies We Use
We use the following Cookies for our website:
- [Functionality – cookies used to remember customer preferences such as language, etc.]
- [Advertising – cookies used to remember what customers have visited in order to present relevant products, services, or advertisements that match user interests.]
- […]
Managing Cookies
You can configure your browser to reject our Cookies by following these steps:
[Configuration steps, possibly specified for Google Chrome / Safari / Internet Explorer, etc.]
Privacy Policies of Other Websites
This Privacy Policy applies only to our services and the use of our website. If you click on a link to another website (even through our website), you must study and comply with the privacy policy that appears on that website, separate from ours.
Changes to Our Privacy Policy
We will regularly review the Privacy Policy to align with relevant practices, laws, and regulations. If there are any changes to the Privacy Policy, we will notify you by updating the information on our website as soon as possible.
Currently, the Privacy Policy was last reviewed on [dd/mm/yy].
Contact Channels
Data Controller Details:
Name: [Thai and English name (if any)]
Contact Address: [Head office address, data controller’s workplace]
Contact Channels:
[Phone number]
[Email address]
[Website]
[Other contact or news channels: e.g., LINE, Facebook, Instagram, Twitter, or other Social Media]
Details of the Representative (if any):
[Note: For cases where the organization is a natural or legal person located outside the Kingdom, according to Section 5, paragraph two of the Personal Data Protection Act B.E. 2562]
Representative Name: [Thai and English name (if any)]
Contact Address: [Head office address, data controller’s workplace]
Contact Channels:
[Phone number]
[Email address]
[Website]
[Other contact or news channels: e.g., LINE, Facebook, Instagram, Twitter, or other Social Media]
Details of the Data Protection Officer (DPO) (if any):
Name: [Thai and English name (if any)]
Contact Address: [Head office address, data controller’s workplace]
Contact Channels:
[Phone number]
[Email address]
Details of the Supervisory Authority
In the event that we or our employees or staff violate or fail to comply with the laws regarding personal data protection, you can file a complaint with the supervisory authority with the following details:
Name: Personal Data Protection Committee Office
Contact Address: [Address]
Contact Channels:
[Phone number]
[Email address]
Contact / Complaint Period: [Within… days from….. ]
