Privacy Policy

Section 1 Introduction

            ICOCO (Thailand) Company Limited recognizes the importance of personal data. In order to comply with the Personal Data Protection Act B.E. 2562 (2019), the Company, as the Data Controller, has the legal duty to inform you of the purposes of collecting, using and/or disclosing personal data, as well as to inform you of your rights as the data subject. Therefore, this Privacy Notice has been established as a guideline for the Companys operations as follows:

 

Section 2 Definition

"Company"                                         ICOCO (Thailand) Company Limited

 

"You/Your"                                         Customers, service users, partners of the Company, including visitors or                                                                        users of the website or those who contact the Company as the data subject.

 

"Personal Data"                                 Information relating to a person that enables the identification of such                                                                          person, whether directly or indirectly, but excluding information of

                                                              deceased persons specifically.

 

"Sensitive Personal Data"              Personal data regarding race, ethnicity, political opinions, religious or                                                                              philosophical beliefs, sexual behavior, criminal records, health information,                                                                  disability, labor union information, genetic data, biometric data (such as                                                                      facial recognition data, iris scan data, fingerprint data) or any other data                                                                      that may similarly affect the data subject as prescribed by the Personal

                                                              Data Protection Committee.

 

"Processing"                                      The collection, use and/or disclosure of your personal data as the data                                                                          subject.

 

"Data Controller"                               A natural or juristic person who has the authority and duty to make                                                                               decisions regarding the collection, use or disclosure of personal data.

 

"Data Processor"                               A natural or juristic person who collects, uses or discloses personal data as                                                                  instructed or on behalf of the Data Controller.

 

"Data Protection Officer"                A person who provides advice, inspects operations, coordinates and                                                                              cooperates with the Office of the Personal Data Protection Committee                                                                          regarding the collection, use or disclosure of personal data.

 

Section 3 Collection of Personal Data

            The personal data that the Company may collect from you will depend on the method through which you engage in transactions with the Company, such as when you use services and provide information through the Companys website or when you provide information through channels prepared by the Company such as telephone, Company documents, Company applications, communication applications, when you enter into a contract or transaction with the Company and submit documents and copies of documents related to you or when you purchase the Companys products or services, etc. depending on the various transactions in which you provide information, as follows:

3.1        Contact information, including name, surname, email, address, telephone number, social media account name and other related contact information used for communication.

3.2        Identification information, including information contained in copies of identification cards and passports, still images and motion images.

3.3        Login and security information for system access, including username, password, authentication methods and other information related to system access.

3.4        Service-related information, including service history and profile information such as name, surname, gender, job position, interests and other information related to the services received.

3.5        Financial information, including bank account numbers, proof of receiving payments and proof of payment transactions.

3.6        Browser and device information, including browser type and version, device used, device location, applications, type and version of plugins, computer, data connection networks, internet service providers, protocol address (IP Address), including user information and browsing history on the website.

 

Section 4 Retention Period of Personal Data

               The Company will retain your personal data for as long as necessary to fulfill the purposes notified to you or as specified in this notice. In the event of termination of the employment contract with the Company or in the case where services or transactions with the Company have ceased, the Company will retain your personal data for a period of 10 years after the expiration of the contract or as required by law or according to the statute of limitations or as determined by governmental authorities or for the purpose of exercising legal claims. After the retention period has ended, the Company will delete or destroy the personal data or make the data anonymous so that it can no longer identify you.

 

Section 5 Purpose of Processing

                The Company will use personal data to carry out your requests for services or transactions agreed between you and the Company. If the Company needs to use your personal data beyond the purposes specified, the Company will seek your consent. The collection of data is for the following purposes:

5.1    For communication with you, which includes communicating information regarding management and other information related to the provision of services, providing technical support regarding the Companys website, as well as sales promotions and offering the Companys products and services.

5.2    For providing services related to electrical systems, communication systems, air conditioning systems, ventilation systems, sanitary systems, internal piping systems, fire protection systems or any other services as agreed between you and the Company.

5.3    For providing consultation regarding services agreed between you and the Company, including providing recommendations, assistance and after-sales services.

5.4    For recording the Companys accounts payable and accounts receivable, issuing invoices, issuing tax invoices, processing payments and receipts, including carrying out various financial transactions and accounting operations of the Company.

5.5    For the development of the Companys products and services, the design of new products and/or services of the Company or the enhancement of existing products and/or services of the Company Group, including inspection and quality improvement.

5.6    Legal Obligation: To process your personal data for compliance with the law as requested by legally authorized government agencies or to be used as evidence in the case of crimes or accidents occurring within or around the buildings and premises, including compliance with lawful orders from government agencies and related officers such as preparing tax reports for submission to the Revenue Department, accounting audits by auditors or external examiners etc.

5.7    Contract: To process your personal data for the fulfillment of the contract agreed upon between the data controller and the data subject or to proceed according to the data subjects request prior to entering into the contract, including contract management between the Company and customers or partners.

            In the event that the Company is required to collect your personal data for the performance of a contract, compliance with the law or necessity for entering into a contract, if you refuse to provide personal data or object to the processing for the said purposes, it may result in the Company being unable to carry out or provide all or part of the services you have requested.

 

Section 6 Disclosure of Personal Data

                The Company will disclose your personal data only for the purposes notified to you by the Company. The Company will disclose your personal data in the following cases:

6.1    Affiliates or companies within the Company group: The Company may disclose personal data to employees or personnel of affiliated companies as necessary for the management or processing of data according to the purposes notified.

6.2    Service providers who are personal data processors appointed or hired by the Company to manage or process personal data on behalf of the Company for various services such as providing security services, information technology services or other services related to the Companys business operations or which may be beneficial to you.

6.3    Government agencies, regulatory agencies or other agencies authorized by law, including officers or agencies with legal duties or authority such as the Securities and Exchange Commission (SEC), Office of the Personal Data Protection Committee, the Royal Thai Police, courts etc.

6.4    Partners, contractors or counterparties of the Company related to the Companys business operations.

6.5    State enterprises or private entities such as banks, financial institutions, insurance companies, hospitals etc.

6.6    The Companys advisors such as external auditors, financial advisors (FA), internal audits, lawyers or legal advisors etc.

6.7    Any persons or entities to whom you have given consent to disclose your personal data.

 

Section 7 Rights of Personal Data Subjects

               The Company recognizes the importance of your rights as a personal data subject. You have the right to request the Company to take actions regarding your personal data within the scope permitted by law as follows:

7.1     You have the right to know or request a copy of your personal data under the responsibility of the Company or request the Company to disclose the acquisition of data for which you have not given consent.

7.2     You have the right to request the Company to correct your data to be accurate, up to date, complete and not misleading in the event that you believe that any personal data concerning you is inaccurate, outdated, incomplete or may cause misunderstanding.

7.3     You have the right to withdraw your consent for the Company to collect, use and/or disclose your personal data at any time, unless such withdrawal is restricted by law or contract that benefits you such as when you still have obligations or legal commitments with the Company. However, such withdrawal of consent may result in your inability to receive services or conduct transactions with the Company or may cause the services you receive from the Company to be less effective.

7.4     You have the right to request to receive your personal data from the Company in the event that the Company has made such personal data in a format that is readable or generally usable by automatic tools or equipment and can be used or disclosed by automated means. You also have the right to request the Company to transmit or transfer such data to another personal data controller when it can be done by automated means or you have the right to request to receive the data that the Company transmits or transfers in such format directly to another personal data controller unless it is technically unfeasible.

7.5     You have the right to object to the processing of your personal data at any time in the following cases:

7.5.1 In the case where the data is collected out of necessity for the performance of a task carried out in the public interest by the Company or for legitimate interests of the Company.

7.5.2 In the case where the processing of personal data is for direct marketing purposes.

7.5.3 In the case where the processing of personal data is for scientific, historical or statistical research purposes, unless it is necessary for the performance of a task carried out in the public interest by the Company.

7.6     You have the right to request the Company to delete, destroy or anonymize your personal data for certain reasons.

7.7     You have the right to request the Company to suspend the use of personal data in the following cases:

7.7.1 When the Company is in the process of verifying, as requested by you, that your personal data is accurate, up to date, complete or not misleading.

7.7.2 When the personal data is subject to deletion or destruction because it has been unlawfully processed but you request the restriction of its use instead.

7.7.3 When the personal data is no longer necessary for the Company to retain but you require the Company to continue retaining it for the establishment, compliance or exercise of legal claims or for the defense of legal claims.

7.7.4 In the case where you exercise your right to object to the processing of personal data and the Company is in the process of verifying the objection and deciding whether to deny your exercise of such right.

7.8     You have the right to file a complaint with the Expert Committee under the Personal Data Protection Law in the event that the Company or the data processor including employees or contractors of the Company or the data processor, violates or fails to comply with the personal data protection law or any notifications issued under such law.

The Company reserves the right to consider requests for the exercise of the above rights and to proceed as required by the personal data protection law. If you wish to exercise the above rights, you may do so by completing the Data Subject Rights Request Form and sending it via email to [email protected] or you may contact through the channels specified in Section 10.

 

Section 8 Cookie

              The Companys website uses cookies, which are small pieces of data stored in text files that are saved on your computer or other devices when your browser loads the Companys website. Cookies are used to store your information, including your preferences and interests. Such information will be beneficial to you when you access or visit the Companys website in the future.

When you use the browser service, you can change your browser settings to disable cookies. However, please be informed that if you disable cookies, refuse or accept only certain cookies, it may affect your use of the website or various services that the Company can provide to you.

 

Section 9 Closed-Circuit Television (CCTV)

               The Company records and stores CCTV footage installed around the Companys buildings and premises as part of security measures to prevent potential dangers to individuals accessing the buildings or premises and to prevent damages to the Company.

9.1    The Company processes your personal data under the following bases:

9.1.1 Legitimate Interest: The Company processes your personal data to ensure the security of you, employees, service users and other individuals entering the buildings and premises as well as to safeguard the Companys assets by preventing unauthorized persons from entering restricted areas and for investigating incidents that occur within the buildings and premises.

9.1.2 Legal Obligation: The Company processes your personal data to comply with legal obligations as requested by legally authorized government agencies or to be used as evidence in cases of crimes or accidents occurring within or around the buildings and premises.

9.2    The Company retains CCTV footage for approximately 10 days from the date of recording. After the specified retention period, the footage will be automatically deleted from the system or the Company will delete or anonymize the personal data so that it can no longer identify individuals.

 

Section 10 Contact Channels

                 If you wish to contact or have any questions or inquiries regarding the details of personal data processing, including your rights as the data subject under this notice or if you find that your personal data has been misused, you may contact the Company through the following channels:

 
Details of the Data Controller:

Name: ICOCO (Thailand) Company Limited

Address: 263, Village No. 3, Phaeng Phuai Sub-District, Damnoen Saduak District, Ratchaburi 70130

Telephone No.: 032-240761

Website: www.icocothailand.co.th

Email: [email protected]

 

Details of the Data Protection Officer (DPO)

Address: 263, Village No. 3, Phaeng Phuai Sub-District, Damnoen Saduak District, Ratchaburi 70130

Telephone No.: 032-240761

Email: [email protected]