ANNOUNCED ON June 1, 2022.
Dear Our Valued Customers,
Hitachi Channel Solutions (Thailand) Co., Ltd. (“we”, ”us” or “our”) values your privacy and strives to protect your personal data or personal data relating to the individuals connected to your business (“Personal Data”) based on the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). We, therefore, arrange to have and provide this Privacy Notice to you in order to notify our collection, use, and/or disclosure (collectively referred to as “Processing” or “Process”) of Personal Data.
This Privacy Notice explains:
1. What kind of Personal Data do we collect?
We will collect your Personal Data only if it is necessary and we have proper reasons to Process your Personal Data. We may collect many kinds of your Personal Data, depending on the circumstances and nature of requested products and/or services.
We may collect your Personal Data from a variety of sources, including but not limited to:
In some cases, we may collect your Personal Data from third parties, such as our business partners, banks, websites or other online channels, etc.
The categories of your Personal Data that we may collect are subject to the applicable laws, including but not limited to:
In case you are required to provide the Personal Data of third parties to us, you agree to notify such third parties that we may Process their personal data and inform the content of this Privacy Notice to such third parties. You agree and confirm that you will conform to all requirements under the PDPA. This includes the obligation to obtain consent prior to or during the collection of third parties’ personal data in accordance with the form and content designated by us.
2. How do we use your Personal Data?
We will use your Personal Data only if it is necessary and we have proper reasons to Process the Personal Data. When we Process your Personal Data, we will rely on one or more of the legal bases as follows: -
The PDPA and other regulations provide protection for sensitive Personal Data more stringently. We will not Process this type of Personal Data without your consent unless the PDPA allows us to do so.
The purposes for which we may Process your Personal Data, which is subject to the applicable laws and legal bases of Processing, are: -
Purposes of Processing Personal Data | Lawful Basis | |
---|---|---|
Products and services |
|
|
Customer support |
|
|
Business operation and improvement |
|
|
Security and risk management |
|
|
Except as described in this Privacy Notice, we will not Process your Personal Data for any purposes other than the purposes described to you in this Privacy Notice. If other purposes are needed, we will notify you prior to the Processing.
In case you refuse to give us your Personal Data
Under the circumstance that it is necessary for us to collect your Personal Data in accordance with the PDPA or under the contract terms with you, and you decline such collection, we may not be able to meet the obligations that have been agreed upon with you or to enter into a contract with you. In this given circumstance, we may refuse to deliver the products and/or services to you.
3. Who do we disclose your Personal Data to?
We will share your Personal Data only if it is necessary and we have proper reasons to Process the Personal Data, including where: -
We may need to share your Personal Data for the purposes mentioned above with others, including but not limited to: -
Cross-border Transfer of Personal Data
Your Personal Data may be transferred to and Processed in other countries.
When we transfer your Personal Data overseas, we will ensure that those countries have an appropriate level of Personal Data protection and that the transfers are lawful. We may need to transfer the Personal Data in this way to carry out our contract with you, fulfill the legal obligations, protect the public interests and/or maintain our legitimate interests. In some countries, the law might compel us to share certain Personal Data, e.g., with tax authorities, etc. Even in this case, we will only share Personal Data with people who have the right to see it.
4. Retention of Personal Data
We will retain your Personal Data for as long as it is necessary to carry out the purposes that are specified in this Privacy Notice so that we can continually perform our obligations to you. If we do not need to retain the Personal Data for longer than it is legally required or necessary, we will destroy, delete or anonymize it, the anonymization of which aims to remove personal identifiers, and the remaining data does not identify any particular individuals. However and in the case where we are unable to destroy, delete or anonymize the Personal Data (e.g., the Personal Data is stored permanently in our backup database, etc.), we will ensure that your Personal Data will be protected with an appropriate security measure, separated from further Processing activities, and destroyed, deleted or anonymized as soon as we are able to do so.
5. Accuracy of your Personal Data
We need your cooperation to ensure that your Personal Data provided to us and under our care is up to date, complete and accurate. Please inform us of any change to your Personal Data through our contact channels specified in Article 9 Contact us below.
6. What are your privacy rights and how does the PDPA protect you?
Your Rights
How to Exercise Your Rights
You may exercise your rights at any time by notifying us via the contact channels specified in Article 9 Contact us below, without having to pay any fees. However, we may charge a reasonable fee if your request does not have a rigid ground, is duplicated, or is more than necessary. We may also refuse to proceed with your request under those situations.
Our Process upon Your Request
Upon your notification, we may need to contact you for filling in our request form and we will start proceeding with our internal process. We may request certain information from you in order to verify your identity and guarantee your right under the PDPA which is considered a security measure to ensure that your Personal Data will not be disclosed to those who is not authorized to access the Personal Data. We may also contact you for more information about the request for a quicker response.
We will make effort to respond to your legitimate request within 30 days. Under some circumstances, we may take more than 30 days depending on the complexity or duplication of your request. In such case, we will inform you of the status of your request.
Handling of Complaints
In the event that you wish to make a complaint about how we Process your Personal Data, please contact us at the contact channels provided in Article 9 Contact us below and we will try to consider your request as soon as possible. This does not prejudice your right to file the complaint with a government authority or Personal Data Protection Committee.
7. Security of your Personal Data
Information is our asset and therefore we place great importance on ensuring the security of your Personal Data. We regularly review and implement up-to-date physical, technical, and organizational security measures when Processing your Personal Data. We have internal policies and controls in place to ensure that your Personal Data is not lost, accidentally destroyed, misused, or disclosed, and is not accessed except by our employees in the performance of their duties. Our employees are trained to handle the Personal Data securely and with utmost respect according to our policies, failing which they may be subject to disciplinary action.
8. Revision of our Privacy Notice
We keep our Privacy Notice under a regular review and update, hence subject to regular changes. The date of last revision of the Privacy Notice can be found on the top of this Privacy Notice and you can, at all times, find the latest Privacy Notice via https://www.hitachi-ch.com/th/en/utility/privacy/index.html.
9. Contact us
Should you have any questions regarding the protection of your Personal Data or wish to exercise your rights, please contact us through the following channels: -