Policy and Regulation for Protection of Personal Data of Customer, Partner or Visitor
To comply with the Personal Data Protection Act B.E. 2562 and other applicable laws, including any future amendments to such laws (collectively referred to as the "Personal Data Protection Laws"), Jorakay Corporation Co., Ltd. (the "Company") has prepared this Privacy Notice (the "Notice") to explain in detail how your personal data is collected, used, and disclosed. This notice applies to you as a customer of the Company, as well as individuals associated with the Company's customers, including directors, shareholders, employees, agents, or any other persons acting on behalf of or in the name of the Company's customers.
Definition
| “Personal Data” | Refers to information about an individual that can identify that person either directly or indirectly, excluding information about deceased individuals. |
| “Sensitive Personal Data” | Refers to personal data related to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health information, disability, union membership, genetic data, biometric data, or any other information that could lead to unfair discrimination against the data subject or similarly affect the data subject as defined by personal data protection laws. |
| “Legal Basis” | Refers to the legal grounds under which the collection of personal data is permitted according to personal data protection laws. |
| “Customers” | Refers to an individual who purchase or may purchase products and/or use services provided by the Company, as well as others in similar situations, such as those who contact the Company to request information or services. |
| “Individuals Associated with Customers” | Refers to natural persons related to or representing the customer, such as executives, directors, shareholders, employees, agents, or any other natural person acting on behalf of the customer of the Company |
Types of Personal Data Collected by the Company
The Company will collect all or part of your personal data as specified in this notice, as necessary, to carry out the various purposes of the Company as outlined in this notice.
| Identification Data | This includes title, first name, last name, photograph, national ID number, passport number, bank account number, signature, etc. |
| Contact Information | This includes home address, personal phone number, personal email, Line ID, Facebook, and emergency contact details, etc. |
| Employment Data | This includes job position, department, workplace, work email address bearing your name, etc. |
| Attached Document Data | This includes business cards, copies of ID cards, copies of passports, copies of tax identification cards, purchase orders, quotations, certificates, VAT registration documents, and other relevant documents, etc. |
| Other Data | This includes photographs of company events, still and moving images captured by CCTV, dates and times of visits to the company, feedback or interest in products or services, purchasing behavior, satisfaction with products or services, etc. |
| Sensitive Personal Data | This includes religion, as shown on a copy of the ID card, etc. |
| CCTV Data | This includes moving or still images recorded by the company’s CCTV cameras. |
Sources of Personal Data
The company collects your personal data from the following direct and indirect sources.
| Directly from You |
Through one of the following channels:
|
| From Other Sources or Third Parties |
|
Purpose of Collecting Personal Data
The company will collect your personal data for the purposes and legal bases specified in this notice only. If the company needs to collect additional personal data or use it for purposes beyond those stated in this notice, the company will inform you of the new data collection and/or notify you of the new purposes for such collection. Furthermore, the company will seek your consent for the new collection, use, and disclosure of personal data if required by law, in accordance with personal data protection regulations.
Applicant's Personal Data
| Purpose of Collection | Legal Basis |
|---|---|
| 1. Communications and actions taken prior to entering into a contract with you, or with individuals or entities you represent or act on behalf of, such as scheduling meetings, preparing quotes, negotiating contracts, and defining the scope of agreements. |
General Personal Data
|
| 2. Contracting and performance of the contract, such as communication regarding tasks, processing of orders for goods/services, delivering services as per the contract, shipping products, and monitoring service delivery. This includes disclosing your information to relevant internal personnel, such as shipping service providers, contractors, or external experts involved in executing the contract or resolving issues related to goods and services. The purpose of data collection and disclosure will depend on the type of goods and services you receive from the company. Contracting and contract performance also encompass coordinating with you on related matters, such as requesting changes to contract terms and details or renewing the contract. |
General Personal Data
|
| 3. Customer relationship management activities, such as handling complaints, performance evaluations, soliciting feedback on products, and improving the company's service quality. |
General Personal Data
|
| 4. Charging for goods or services, issuing receipts, and taking any necessary actions to follow up on overdue payments in cases where customers default on their payment obligations for goods and services. |
General Personal Data
|
| 5. Managing organizational and business operations, such as overseeing systems and databases, obtaining business licenses from government agencies, conducting audits and internal reviews, seeking advice from business consultants, disclosing your information to financial institutions for the company’s credit applications, as well as handling mergers, acquisitions, and organizational restructuring. |
General Personal Data
|
| 6. Compliance with applicable laws, such as issuing tax invoices, managing and disclosing accounting information to auditors and government agencies as required by law and authoritative directives. |
General Personal Data
|
| 7. Storing your contact information in the company's database for future business communication, including disclosing your information to affiliated companies for contact and relationship-building to create future business opportunities. |
General Personal Data
|
| 8. Ensuring security within the company's premises, such as monitoring and overseeing areas within the company using closed-circuit television (CCTV) cameras. |
General Personal Data
|
| 9. Analyzing purchasing behavior and surveying satisfaction with services to design promotional activities or improve service delivery. |
General Personal Data
|
| 10. Protecting the company's legal rights or contesting claims affecting the company, including legal proceedings, initiating or defending lawsuits, resolving disputes outside of court, and other actions to safeguard the company’s legal rights or challenge claims against it as permitted by law. |
General Personal Data
|
Impact of Not Providing Personal Data
The company collects your personal data to facilitate communication and perform activities in accordance with contracts with you or on behalf of individuals or legal entities you represent or are employed by, as well as to comply with legal requirements. If you do not provide the required personal data, you or the individuals or legal entities you represent or are employed by may face difficulties in communication necessary for contract formation or execution. In some cases, this may prevent the company from entering into or fulfilling contracts with you or the entities you represent or are employed by. Additionally, it may result in non-compliance with applicable laws by you or the entities you represent or are employed by in certain situations.
Disclosure and Transfer of Personal Data Domestically and Internationally
To achieve the purposes for collecting personal data as specified in this notice, the company may, in certain cases, need to disclose your personal data to individuals or organizations, including but not limited to the following:
- Individuals or departments within the company, includes executives, supervisors, employees, contractors, and/or internal personnel of the company as necessary for processing your personal data.
- Service providers and agents hired by the company, such as auditors, legal advisors, business consultants, or other external specialists, including transportation service providers and subcontractors.
- Other companies in the corporate group, business partners, and external service providers and agents, includes entities within the corporate group, business partners, and external service providers and agents hired by the company.
- Government agencies, such as the Revenue Department, the Board of Investment, etc.
- Commercial banks and the bank of Thailand.
- Law enforcement authorities, courts, arbitrators, lawyers, and other entities involved in legal proceedings and dispute resolution involved in legal processes and dispute resolution.
- Entities related to business transactions, such as those involved in mergers, acquisitions, or corporate restructuring.
In certain cases, the company may need to transfer your personal data to an international affiliate for the purposes mentioned above. The company will ensure that the destination country has adequate data protection measures in place in accordance with the applicable laws. If the company must transfer personal data to a country with insufficient data protection standards or where no legal standards are established, the company will comply with legal requirements to ensure the transfer is lawful. This may include obtaining your consent where required by law or implementing appropriate measures to uphold your rights and ensure effective legal remedies as stipulated by the law.
Retention Period for Personal Data
The company will retain your personal data for no more than 5 years from the date the legal relationship between you or the entity you represent and the company terminates. In cases where the company collects your personal data but does not establish a legal relationship with you or the entity you represent, the company will retain your personal data for no more than 2 years.
Personal data may be retained beyond the specified period if necessary for compliance with applicable laws and for protecting the company’s legal rights or addressing any claims against the company. In such cases, personal data will be retained for the duration necessary to achieve these objectives and/or within the timeframe prescribed by law.
You have the legal rights to take actions concerning your personal data collected by the company as follows:
- Right to withdraw consent: You have the right to withdraw your consent for the collection, use, or disclosure of your personal data, in whole or in part, at any time during the period the company retains your personal data. Withdrawal of consent does not affect the legality of the data collection, use, or disclosure that occurred before the consent was withdrawn.
- Right to access and copy personal data: You have the right to access your personal data and request a copy of it from the company. You may also request information about the sources of personal data that you did not provide directly to the company.
- Right to request data portability: You have the right to request the company to transfer or send your personal data to another person or to yourself, in accordance with legal conditions.
- Right to object to collection, use, or disclosure: You have the right to object to the company's collection, use, or disclosure of your personal data under the conditions prescribed by law.
- Right to request deletion of personal data: You have the right to request the company to delete, destroy, or anonymize your personal data, subject to legal conditions.
- Right to request suspension of personal data use: You have the right to request the company to suspend the use of your personal data, in accordance with legal conditions.
- Right to request correction of personal data: You have the right to request the company to correct any inaccurate information or to add any incomplete information.
- Right to lodge a complaint: You have the right to file a complaint with the Office of the Personal Data Protection Committee if you believe that the company or its employees or contractors have violated or failed to comply with data protection laws.
You can exercise these rights by submitting a written request to the company using the contact information provided below. If the company is unable to fulfill your request, it will explain the reasons for the denial along with its response.
Request Form: Click here. Jorakay Corporation Co., Ltd. 10 Krungthepkreetha Road, Thapchang, Saphansung, Bangkok 10250
Email : info@jorakay.com
Privacy Policy Changes
The company reserves the right to amend or update this privacy notice as necessary. This notice was last updated on March 30th, 2023.
Company Contact Information
Jorakay Corporation Co.,Ltd.
10 Krungthepkreetha Road, Thapchang, Saphansung, Bangkok 10250
Phone: 02-7201000 Email: info@jorakay.com
(Office Hours: Monday-Friday, 08:00 – 17:00)