1. What is the purpose of this Policy?
This Policy is used to inform you, as the owner of the personal information, of the purpose as well as of the details surrounding the collection, use and/or disclosure of the personal information, including your legal rights in relation to the personal information.
2. What sort of personal information does the Company collect, use and/or disclose?
2.1 Personal information is defined as information that can be used to identify you, either directly or indirectly, including:
2.1.1 Personal information that you directly provide to the Company or through the Company, including data provided by the use of services, contacting us, visits, searches through digital channels, websites, assigned persons or other channels.
2.1.2 Personal information that the Company has received or accessed from any source, such as government agencies, that is not directly from you. In such cases, the Company will collect information from these other sources based on your consent as required by law, unless it is necessary as permitted by law.
Your personal information that the Company collects, uses and/or discloses include:
- Personal information such as name, surname, age, date of birth, marital status, ID number / passport number
- Contact information such as residence, workplace, telephone number, email, LINE ID
- Device or equipment data such as IP address, MAC address, Cookie ID
- Other information such as website usage, sound, still image, animation and any other information that is considered personal information under the Personal Privacy Protection Law
2.2 Sensitive data is defined as personal information that the law deems to be specific to the individual. The Company will collect, use and/or disclose sensitive personal information only when the Company has obtained your explicit consent, or if necessary as permitted by law. (Hereinafter in this Policy, if not specifically mentioned, private and personal information as well as your sensitive data, as in the above, shall be referred to as "Personal Information".)
3. For what purpose does the Company collect, use and/or disclose your personal information?
The Company will collect your personal information for the benefit of products and/or services as well as to comply with any laws that you or the Company must follow, and for any other purposes as specified in this Policy, as follows:
3.1 To enable you to use the Company's products and/or services in accordance with your objectives, and for other purposes deemed necessary by law
3.1.1 To enable you to use the Company's products and/or services according to your requirements, or to meet your requirements before using the Company's products and/or services, such as performing any action related to the use of products and/or services, including assessment, contact, notification, assignment to third party service providers, assignment of rights and/or duties, notification of payment of debts and/or services
3.1.2 To fulfil legal obligations, such as:
- (1) Compliance with orders from legal authorities
- (2) Compliance with insurance laws, tax laws, anti-money laundering laws, prevention and suppression of terrorism and proliferation of weapons of mass destruction financing laws, computer laws and other laws that the Company needs to comply with, including announcements and regulations issued under the aforementioned laws
3.1.3 For operations that are necessary within the legitimate interests of the Company or of other persons or entities, without exceeding a reasonable scope, such as:
- (1) Voice/sound recording
- (2) Maintaining customer relations such as handling complaints, assessing satisfaction, taking care of customers by company employees, notifying or offering relevant products and/or services that are beneficial to you
- (3) Risk management, supervision, internal management within the organization, including referrals to the affiliated companies in the network for these same purposes, under binding corporate rules
- (4) Turning personal information into anonymous data
- (5) Preventing and mitigating risks that may lead to corruption; cyber threats; payment default or breach of contract, such as bankruptcy information; illegal acts like money laundering, financing terrorism and the proliferation of weapons of mass destruction; and offenses relating to assets, lives, bodies, freedom or reputation; this includes the sharing of personal information to raise the work standard of affiliates, entities/businesses in the prevention and mitigation of the above risks
- (6) Collection, use and/or disclosure of personal information of directors, those authorized to act on behalf of or representatives of corporate clients
- (7) Contact, image recording, sound recording related to meetings, trainings, entertainment or having booths
- (8) Collection, use and/or disclose personal information as ordered by the court in relation to protection of assets
- (9) Receipt-delivery of documents/parcels
3.2 In order for you to benefit from the use of products and/or services, as you have consented to, such as:
- (1) To provide you with better products and/or services and those that are aligned with your needs
- (2) To provide you with recommendations, special benefits, advice and news, including the right to participate in special events, whether they concern products and/or services, benefits, promotions, news or special events of the Company or of a person that engages the Company as an agent, broker, dealer, or of a business partner, or of third parties that are relevant to the Company
4. To whom may the Company disclose personal information about you?
The Company may disclose your personal information to others with your consent, or under the disclosure parameters permitted by law. The person or entity that receives the information will collect, use and/or disclose your personal information to the extent that you have given your consent, or under the terms and conditions as stipulated by law or the scope outlined in this Policy. The Company may disclose your personal information for a variety of purposes, such as for providing services to you, for analysis and development of products and/or services, for conducting research or preparing statistical data, for sales promotion and publicity of the Company, for business administration, for the prevention of fraud, for enabling others to provide support services to the Company, for customer identification. The Company may disclose to individuals or entities such as external service providers, Company representatives, subcontractors, financial institutions, accounting auditors, external auditors, legal authorities, any entities or persons interacting or under contract with the Company. This includes management, staff, employees, contractors, agents, consultants of the Company as well as of the person or agency that receives the information.
5. Does the Company send or transfer your personal information overseas?
The Company may need to transmit or transfer your personal information to affiliated companies overseas, or to another recipient, as part of the Company's normal business operations, such as sending or transferring personal information to a server/cloud located in different countries. If the destination country has insufficient standards, the Company will take care of the transmission or transfer of personal information in accordance with the law. Also, we will take steps to protect personal information that are deemed necessary and appropriate in accordance with confidentiality standards, such as having confidentiality agreements with recipients of information in such countries, or, if the recipient is an affiliated company in the same work/business, the Company may choose to implement a personal information protection policy that is reviewed and approved by the relevant legal authority, and we will proceed to transmit or transfer personal information to affiliates in the same work/business overseas in accordance with the aforementioned personal information protection policy instead of following guidelines stipulated by law.
6. How long does the Company keep your personal information?
The Company will keep your personal information for the period necessary during your tenure as a customer or in connection with the Company, or throughout the period necessary to achieve the objectives involved in this Policy, which may need to be kept for later if required or permitted by law; for example, when stored in accordance with the Anti-Money Laundering Law, for the purpose of providing proof in cases of disputes within the timeframe required by law for a period not exceeding 10 years.
The Company will delete or destroy personal information, or make it unidentifiable back to you, when the information is no longer required or at the end of the above mentioned period.
7. How does the Company protect your personal information?
The Company will keep your personal information well, in accordance with technical and organizational measures, or per measures required by law, to maintain appropriate security in the processing of personal information and to prevent personal information breaches. The Company has established policies, regulations and criteria for the protection of personal information, such as information technology security standards, as well as measures to prevent recipients leaving the Company to use or disclose the information outside of their intended purposes or without authority to do so. The Company also updates the policies, rules and regulations periodically when necessary and appropriate, in order to maximize the protection of your personal information.
In addition, any executive, staff, employee, contractor, agent, consultant and recipient of information from the Company is required to maintain the confidentiality of personal information as a measure of confidentiality set up by the Company.
8. What are your rights regarding personal information?
Your rights in this section include legal rights that you should know. You can request the exercise of various rights under the terms stipulated by law and the policies in place now or those that will be amended in the future, as well as the criteria specified by the Company. In the event that you are not at least 20 years old or are limited in your ability to engage in legal acts, you can apply for the rights by having your father and mother, a legal guardian or a authorized representative appointed by law make your request known.
8.1 Right to withdraw consent: If you have given your consent for the Company to collect, use and/or disclose your personal information (either the consent you provided before the date on which the Personal Information Protection Law came into force or after), you have the right to withdraw your consent at any time for the duration your personal information is with us, unless it is restricted by law or there is a current contract that benefits you. In the latter case, withdrawal of your consent may affect your use of the products and/or services where, for example, you will fail to receive new offers, receive a product or service that is better and meets your needs, or receive information that is useful to you, etc. Therefore, for your benefit, you should study and enquire about the implications before withdrawing your consent.
8.2 Right to access information: You have the right to request access to your personal information, which is under the responsibility of the Company, and request that the Company make a copy of the said information for you, including letting you know how the Company has obtained your personal information.
8.3 Right to request data transfer: You have the right to obtain your personal information in the event that the Company has prepared such personal information in a format that can be read or used by automated tools or devices, and can use or disclose personal information by automated means. You also have the right to request that the Company send or transfer such personal information to another personal information controller when it is possible to do so by automated means, and have the right to obtain the personal information that the Company has sent or transferred in such form directly to another personal information controller, unless this is not possible due to technical reasons. In this regard, the personal information above must be the personal information that you have given us your consent to collect, use and/or disclose, or is it the personal information that the Company is required to collect, use and/or disclose in order to enable you to use the Company's products and/or services according to your requirements, as under an agreement with the Company, in order to fulfil your requirements before using our products and/or services, or as other personal information as stipulated by law.
8.4 Right for objection: You have the right to object to the collection, use and/or disclosure of your personal information at any time. Should you submit an objection to the collection, use and/or disclosure of your personal information for the purpose of performing the necessary operations within the legitimate interests of the Company, another person or juristic person without exceeding reasonable limits or to further public benefits, we will likely continue to collect, use and/or disclose your personal information only where we can reasonably state that the benefits outweigh your basic rights, or is it for the confirmation of legal rights, for legal compliance, or to engage in any prosecution under the law, as applicable. Moreover, you also have the right to object to the collection, use and/or disclosure of personal information for the purposes of marketing, scientific research or statistics.
8.5 Right to request deletion or destruction of information: You have the right to request deletion or destruction of your personal information, or to make your personal information unidentifiable back to you, if you believe your personal information has been unlawfully collected, used and/or disclosed within the confines of applicable laws, or that the Company no longer needs to keep your information for the purposes involved in this Policy, or if you have exercised the right to withdraw your consent or the right to object, as stated above.
8.6 Right to request for suspension of personal information: You have the right to request temporary suspension of the use of your personal information in the event that the Company is in the process of investigation, pursuant to your request to correct your personal information or upon objection, or any other case where the Company no longer needs the information and must delete or destroy your personal information in accordance with the applicable law, but you request that the Company suspend use of the information instead.
8.7 Right to rectify the information: You have the right to request rectification of your personal information to be accurate, current, complete and not misleading.
8.8 Right to lodge a complaint: You have the right to lodge a complaint with the relevant legal authority if you believe that collection, use and/or disclosure of your personal information is in violation of in non-compliance with applicable laws.
8.9 The exercise of the aforementioned rights may be limited under applicable law, or by order of a legal authority. There are cases where it is necessary for the Company to refuse or fail to proceed with your request to exercise any of the above rights, such as in compliance with the law or court orders, for the public benefit, when there is violation of the rights or liberties of others, etc. If the Company refuses the above request, we will inform you of the reason for the refusal.
The Company makes every effort to keep your personal information accurate and truthful at all times.
You can verify that your personal information is correct. If you find that your personal information is incomplete, inaccurate, or want to delete or want to refuse to use the information, please contact:
Knight Frank Chartered (Thailand) Co., Ltd. Tel. 02-643. -8223 ext. 126,199 or pdpa@th.knightfrank.com