K C Mahanakorn Co., Ltd. (“Company”) realizes the importance of the personal data protection and has compliance and management of Personal Data which are consistent with Personal Data Protection law and the related laws. The Company would like to notify you of The Company’s compliance with the Personal Data Protection Act, B.E. 2562 (2019) (“Personal Data Protection Act”) as follows:
-
- Personal Data
1.1 The Characteristics of Personal Data
Personal Data means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular.
Sensitive Personal Data means Personal Data pertaining to racial, ethnic origins, political opinions, cult, religious or philosophical beliefs, sexual orientation, criminal records, health data, disability, trade union information, genetic data, biometric data (such as fingerprints or facial recognition data) or of any data which may affect the data subjects in the same manner, as prescribed by the Personal Data Protection Committee.
1.2 The Collection of Personal Data
The Company may collect your Personal Data as follows:
Personal Data
(1) Personal Data including name and surname, the date and place of birth, information contained in an individual’s National identity card, passport and their copies.
(2) Contact information including address, telephone number, fax, e-mail, social media identification such as Line ID.
(3) Work position, work unit or organization
(4) Financial Data such as bank account
(5) Information related to electronic systems access and usage such as IP Address, Browsers, Cookies and chat history in various applications
(6) Other information provided to The Company during company events in which you participated
(7) Copy of important document issued by concerned governmental official (if any)
2. The respect of Personal Privacy
The Company respects Data Subjects’ right of their Personal Data and is also aware of the Data Subjects’ intention for the due protection of their Personal Data. Any Personal Data submitted to The Company will be used only for the stated purposes. The Company has strict security measures and a prevention not to let the unauthorized parties from accessing and using your personal data.
3. Objectives for the Collection, Use, Disclosure, Transfer, and Processing of Personal Data
Your Personal Data will be collected, used, disclosed, transferred, and processed for the following purposes:
Purpose Lawful Bases 1. Identification and contacting for communication, products and services offer, and public relations Contract 2. Product delivery, service providing or receiving, and transactions Contract 3. Issuance of important documents relating to product sale, product delivery, service providing or receiving, acceptance of product and service fees. Contract 4. Business analysis, research, development, and improvement Legitimate interests 5. Implementing agreements or contracts or exercising rights with third persons as necessary Contract 6. Security, protection of right, properties, preventing violations or illegal activities Legitimate interests 7. Performing of necessary related actions and those with similar nature to the purposes mentioned above, the consent for which shall be requested from time to time. Consent
The Personal Data collected by the Company in accordance with the above-mentioned purposes is necessary. In case of your refusal to provide required Personal Data, it may be considered as an infringement of relevant laws or the Company may not be able to perform its obligations under the contracts or facilitate services for you.
In case of any other processing activities of Personal Data, the Company will explicitly inform you and/or solicit your consent
4. The Collection of Personal Data
In the direct collection, use, and disclosure of your Personal Data, The Company shall solicit your consent should it be legally required and shall use the Personal Data only as necessary and only in accordance with The Company’s specified purposes.
However, the Company may collect your Personal Data from other sources, but only as necessary, and carried out in accordance with legal requirements, such as from Affiliate companies of K C Mahanakorn Co., Ltd., vendor, supplier, public media, government agency, or public sector.
5. Disclosure or Transfer of Personal Data
The Company shall keep your Personal Data in strict secrecy and shall not disclose or transfer such data to any third person except under your express consent or an order from a government official or an agency with authority.
For the purposes mentioned above, The Company may disclose and/or transfer your Personal Data to the third person for the benefit of mutual transactions or business operation, including :
- Affiliate companies of K C Mahanakorn Co., Ltd.
- Business partners, service providers, suppliers, trading partners concerned
- Commercial banks or other financial institutions
- State agency or authorities, only according to legal notifications or orders
In the case whereby the Personal Data must be transferred abroad, The Company will comply with the
Personal Data Protection Act, including but not limited to, ministry regulations, notifications, interpretation, or other rules and regulations issued under the Personal Data Protection Act.
6. Personal Data Retention Period
The Company will retain your Personal Data only for the necessary duration, and will collect, use and disclose your Personal Data, as defined in this Policy, in accordance with the duration criteria, namely the period during which you are still related to The Company as a client, and may still retain your Personal Data as long as needed for legal compliance or as per legal prescription, for the establishment of legal claims, legal compliance or exercise of legal claims, or defense of legal claims, or for other purposes in accordance with policies and the internal regulations of The Company.
If it is not possible to specify the Personal Data retention period, the Company will retain the Personal Data as may be expected per data retention standards (such as the longest legal prescription of 10 years).
The Company will proceed proceed to delete/destroy the personal data after the expiration of the afore-mentioned period.
7. Security Measures
The Company has in place adequate and strict security measures, in accordance with Policy and Guidelines on Information Technology of The Company, to prevent Personal Data, loss, access, destruction, use, alteration, correction, and to prohibit unauthorized or unlawful use of Personal Data.
8. Your Rights Relating to the Personal Data According to the Personal Data Protection Act B.E. 2562
You, as the owner of the Personal Data under the Personal Data Protection Act, are entitled to the following rights:
- Right to be informed
- Right to access to the Personal Data
- Right to request for sending or transferring the Personal Data
- Right to object to the collection, use, or disclosure of Personal Data
- Right to request the erasure of Personal Data
- Right to restrict the use of Personal Data
- Right to request for modification or improvement of your Personal Data to be up-to-date, complete, and not to cause misunderstanding
- Right to withdraw the consent
- Right to Complain to authorized officials as prescribed by the Personal Data Protection Act, B.E. 2562 (2019) in case of the Company’s infringement or non-compliance with the Act.
The exception to the above is when The Company is required by law or accounting principle to refuse the exercise of some of your rights. Please be aware that if you do not wish to provide your Personal Data to The Company, The Company may not be able to provide some services to you due to the absence of such Personal Data.
9. Contact channels
Enquires or questions on the Personal Data Protection can be addressed to the following channels:
K C Mahanakorn Co., Ltd.
Address : K C Mahanakorn Co., Ltd.
141, 143 Naradhiwas Rajanakarindra Road,
Chong Nonsi, Yan Nawa, Bangkok 10120, Thailandเบอร์โทรศัพท์: +662 678 2530-40
E-mail : pdpa@kcbkk.com
10. Amendment of the Policy and Guideline on Personal Data Protection
The Company may, from time to time, review this Policy for compliance with the changing guidelines and relevant laws. In case of changes thereto, The Company will provide a public notification through appropriate channels.
Given this date, 17th July 2023