Privacy Notice – Customers

Cibes Lift (Thailand) Company Limited (hereinafter referred to as the “Company”) recognizes the importance and duties under Personal Data Protection Act B.E. 2562 with the emphasis on respecting the privacy rights of customers. This includes natural persons acting on behalf of the entity whose personal data is the subject. (hereinafter referred to as “Customer”) and is committed to protecting your personal information securely. and to ensure that the customer’s personal information will be protected in accordance with the Personal Data Protection Law and other relevant laws. The company therefore has prepared this privacy notice. To notify you of the details related to the collection, use, disclosure (collectively, “Processing”), including your legal rights as a data subject. The details are as follows.

Article 1. Who does this Privacy Notice apply to?

This privacy notice covers customer personal information. This includes natural persons acting on behalf of juristic persons who own personal data such as directors, consultants, executives, employees, agents, and any person related to the Company’s personnel. or services of the Company and means including participants in campaigns or marketing activities of the Company People who are interested in the products or services of the company through various channels and/or users of various services of the Company through online and electronic media, as the case may be, including those authorised to act on behalf of customers according to the law, as the case may be, such as those using parental authority of minors caregiver of the incompetent Guardian of the quasi-incompetent, etc.

Article 2. Personal data

Means information about a person that can identify that person either directly or indirectly but does not include information about the deceased, such as name, surname, address, telephone number ID number social security card number Taxpayer Identification Number, e-mail address (email-address), IP Address, Cookie ID, Log File, etc. However, the following information is not personal information, such as information for business dealings that does not identify an individual such as company name, address. of the company Company registration number Work phone number, work email address, email address, company group e.g. [email protected], Anonymous Data or anonymous data that has been de-identified. Individuals can be re-identified by technical means. (Pseudonymous Data), deceased person information, etc.

However, later in this privacy notice If not specifically mentioned, it will be called. “Personal Data” and “Sensitive Personal Data” relating to users of the foregoing services are collectively referred to as “Sensitive Personal Data”. “Personal Information”

In case the company receives a copy of your ID card Or the company takes your information out of the ID card by electronic means. For the purpose of identity verification in establishing a legal relationship and/or any transaction With the company, the information received will also contain religious information. This is considered sensitive data (Sensitive Data). The company does not have a policy to collect sensitive personal data from you. Except in the event that the Company has obtained your consent. The company will determine the management method according to the guidelines and as permitted by law.

Article 3. Personal data collected by the Company

The company collects your personal information as necessary. According to the purpose of using the information that the company Will inform you in the next order In this regard, the types of personal data that the Company stores are classified as follows:

Types of personal information Details
Basic personal information such as title, name, surname, gender, date of birth, age, identification number current address Residential address, e-mail address, telephone number
Other information (a) Contact Data such as address, telephone number, e-mail address, LINE account name (LINE ID), Facebook account name (Facebook ID) and accounts on other social media sites. contact in case of emergency
(b) financial data such as bank account numbers

(c) Company contact information (Communication Data), such as video or audio recording data when contacting the company

(d) Event participation information, such as still images or video recordings.

Article 4. Source of personal data

The company collects personal information. and your sensitive information through the process as follows:

4.1 Information that you provide directly to the Company, such as information appearing in application for service. including supporting documents Request to change personal information or change other information Service requests or other information requests about the products or services of the company Product and/or service complaint information Information used to register to create an account (Account) or Profile (Profile) with the Company to use the Company’s services both offline and online channels. Your contact information with us, whether written or electronic communications. as well as the information you provide to the Company through surveys. Giving suggestions or comments through various channels Including information that you use at the head office or branch office. Customer service centers or booths that showcase products or services, etc.

4.2 Information automatically collected by the Company When you access the service through the company’s system or visit the company’s website via electronic devices such as mobile phones, computers, laptops, etc.

4.3 Information from external sources or reliable public information such as the Department of Provincial Administration, Department of Business Development Commercial resources, websites, applications, social media resources Data Providers, entities or companies or associations or confederations associated with your products or services, etc.

4.4 Information that you contact with the company, employees, employees, agents, business partners or partners of the company. Authorized person or person acting on their behalf Or other persons or other agencies involved or assigned by the Company through the website, applications, social media, telephone, email, meetings, interviews, short messages (SMS), fax, postal mail, VDO, Call Service or any other means. The Company may collect information in the form of text messages. as well as picture and sound

4.5 Information that you participate in activities with the company In terms of marketing activities, contests, sweepstakes, events or competitions organized by or on behalf of the Company and/or business partners or alliances participating in activities with the Company or the Company assigns or permits such activities When you agree and consent to any personal information related to third parties to the Company which such outsiders Including but not limited to those related to customers who use the service. whether in business or in any other ways such as family members, etc. You represent and warrant the accuracy of such personal information. and you represent and warrant that you have fully informed them about this Privacy Notice.

Article 5. Purpose of collection, use and disclosure of personal data

The company collects, uses or discloses your personal data. With the objectives under the data processing base as follows

5.1 Contractual Basis For the performance of contracts that you are a party to, such as employment contracts, sales contracts, service contracts. or any other contract or to process your request/application prior to entering into a contract, as the case may be.

5.2 Compliance with the law (Legal Obligation) to perform duties as required by law, such as labor protection laws. Social Security Law tax law Electronic Transactions Law civil and commercial law, etc.

5.3 Legitimate interest for the legitimate interests of the Company, not exceeding the extent that you can reasonably expect. which will not infringe on your fundamental rights or freedoms

5.4 Consent (Consent) The company will ask for your consent. Where the law requires consent or the Company has no reason to use the above processing bases to process personal data collected from you.

Purpose of collection, use and disclosure of personal data of customers The company collects, uses or discloses your personal information. with the following objectives

Objectives of operations Details Data processing bases
for the processing of your request before entering into a contract or for the performance of a contract to sell products and/or services to you or comply with any contract which you are a contracting party subscription information, delivery, accounting and financial operations after sales service and return and take any action for you to receive goods and/or services or as you have requested performance of contract
for the management of advertising and public relations advertising , Doing marketing campaigns, analyzing, developing products, contacting customers to give advice or present products including management of advertising media public relations which you are the presenter or appear as part of the company’s public relations media • Consent
• Legitimate interests

for operational management (Operation) and after-sales customer care Review and analyze personal data
to develop the company’s online service channels in order for you to receive services from the company quality The fastest and most comfortable

to be able to access or transfer

Account information, member numbers or personal codes which the company has provided services to you through more than 1 computer and/or other electronic devices and for the company to be able to monitor access to accounts, member numbers or personal codes of you effectively To prevent unauthorized use or access by other people or fraudulent use or in a wrongful way Including to improve the service of the company to be more appropriate and efficient.

• Legitimate interests
• Consent

• contract base

• Legitimate interests

• contract base

• Contract performance

• Legitimate interests

• contract base

Information Technology Management set up an information system to collect data data processing Connect information with customers, representatives
Prepare and provide information technology system services to process customer information from the use of websites, applications and social media of the company such as Facebook, Line, etc.

• Compliance with the law
• Legitimate interests

• Consent

• Contract performance

• Legitimate interests

• Consent

to be able to manage develop and implement any in order to be able to conduct business more efficiently management of goods and/or services (including websites and applications); detecting and preventing fraud; or other crimes Customer and potential relationship management Maintenance and use of IT systems
Measuring the effectiveness of a company’s marketing policies and to measure the effectiveness of the Company’s advertising through various channels.

• Compliance with the law
• Legitimate interests

Article 6. Disclosure of your personal data

to carry out the purposes stated in this Privacy Notice your personal information may be disclosed or delivered to various agencies Within the company and individuals or entities outside as follows:

6.1 Within the company, your personal data It may only be disclosed or delivered to the departments within the Company that are relevant and have their roles to the extent necessary for the purpose. by these individuals or teams of the Company will be allowed to access your personal data as necessary and appropriate

6.2 Outside the company, your personal data May be disclosed or delivered to external organizations as follows

6.2.1 Government agencies regulator or other agencies as required by law such as the Revenue Department, Department of Business Development Ministry of Commerce auditors, governments, courts, legal execution departments or any other agencies that reside legal authority

6.2.2 Organizations or third parties The company may disclose your information. to organizations or third parties that have Contact us for the purpose of verifying your transactions and in order to provide you with services or provisions. products to meet your needs

Article 7. Obtaining Consent and Possible Consequences of Withdrawing Consent

7.1 In the event that the Company collects, uses or discloses personal data based on your consent. You have the right to withdraw your consent given to the Company at any time. The withdrawal of this consent will not affect the collection, use or disclosure of personal data for which you have given consent.

7.2 If you are a minor under the Civil and Commercial Code Before giving consent, please inform the company of the details of the person using parental authority. so that the Company can proceed to obtain consent from the user of parental authority as well

You may withdraw your consent to the collection, use or disclosure of all or part of your Personal Data. As stated in this Privacy Notice by informing the company

If you withdraw your consent for the Company to collect, use or disclose your personal data due to reasons or purposes other than marketing operations. The Company may not be able to perform procedures or services and/or manage the products or merchandise or your relationship and/or account with the Company. This may cause you to lose benefits in using the company’s services to the same extent as if you have given your consent to the collection, use or disclosure of personal data to the company.

Article 8. Sending or Transferring Personal Data Overseas

8.1 The company may send or transfer your personal data to other persons both domestically and internationally. Where necessary to perform a contract to which you are a party Or is an action under a contract between the company and another person or juristic person for your benefit. or to be used to process your request before entering into a contract or to prevent or suppress a danger to the life, body or health of you or another person. To comply with the law or it is necessary to carry out a mission in the interests of the public.

8.2 The Company may store your information on a computer, server or cloud provided by other parties. and may use third-party programs or applications in the form of providing ready-made software and ready-made platform services to process your personal data. Personal data can be accessed by unrelated parties. and the Company will require those other persons to have appropriate personal data security protection measures.

8.3 In the event that it is necessary to send or transfer your personal data to foreign countries The Company will comply with personal data protection laws and take appropriate measures to ensure that your personal data is protected and that you can exercise your rights regarding your personal data as required by law. Including the company will require the person who receives your personal data to have appropriate measures to protect your data. and only process such personal data as necessary. and take steps to prevent unauthorized use or disclosure of personal information by others.

Article 9. Retention and period of retention of your personal data

9.1 The Company will keep your personal data for as long as necessary. taking into account the necessity and purpose for which the Company must collect used and processed This includes complying with applicable legal requirements.

9.2 The company will continue to collect, use and disclose your personal data. Even if you terminate your relationship with the Company As required by law for legitimate interests or collecting it in a form that makes it impossible to identify people either directly or indirectly, such as “anonymous data” (Anonymous Data) or “anonymous data that can no longer be identified by means Technical” (Pseudonymous Data)

9.3 The Company may keep your personal data for as long as necessary to achieve the purpose of data processing. Your personal information as described in this Privacy Notice. The company will keep your personal information for no more than 10 years from the date you terminated the relationship. or last contact with the company The Company may retain your personal information for longer than required if permitted by law.

9.4 The Company will conduct an investigation to remove or destroy personal data. making it impossible to permanently identify the owner of the personal information or otherwise to limit all personal data after the expiration of the retention period.

Article 10. How does the Company protect your personal data?

The company prioritizes the security of your personal information as the first priority, such as encryption, restriction of access to personal information. To ensure that our personnel and third parties acting on behalf of the Company are adhering to the appropriate standards of personal data protection. This includes the obligation to prevent the leakage of information and the Company to take appropriate security measures in relation to the processing of information.

The company will keep your personal data carefully in accordance with technical measures and administrative measures. (Organizational measures) to secure the appropriate processing of personal data. and to prevent personal data breaches The company has established policies, regulations and criteria for personal data protection. Including measures to prevent recipients of information from using the company. or disclose information outside the objectives or without power or wrongful and the company has improved the policy Such rules and regulations periodically as necessary and appropriate. In addition, executives, employees, contractors, agents, consultants and recipients of information from the Company are obligated to maintain the confidentiality of personal information in accordance with the confidentiality measures set by the Company.

The company has reviewed Regularly update the procedures and security measures of the Company’s personal information. To obtain a level of security of personal information suitable for the risk. and ensure the confidentiality of personal data, completeness, availability and flexibility of processing personal data on an ongoing basis. including protection Loss and collection, access, use, alteration, alteration or unauthorized disclosure of personal data. The Company’s personal data security applies to all types of personal data processing. whether the processing of personal data is electronic or document format

Article 11. Rights of data subjects

You have the right to do the following:

(1) Right to withdraw consent

If you have given consent for the Company to collect, use and/or disclose your personal data (Whether it was the consent you gave before the date the Personal Data Protection Law comes into force or thereafter), you have the right to withdraw your consent at any time during the period your personal data is with us. Unless there are restrictions on that right by law or there is a contract that benefits you.

However, withdrawing your consent may affect your use of the product. and/or services such as you will not receive benefits New promotions or offers not receiving a better product or service that meets your needs Or did not receive information that is useful to you, etc., for your benefit. Therefore, they should study and inquire about the impact before withdrawing their consent.

‍(2) Right to access personal information

You have the right to access your personal data. and request the company to make a copy of such personal data for you including requesting the Company to disclose the acquisition of personal data in the Company’s possession. and obtaining a copy of that personal data will affect your rights and the liberties of others or the company must comply with the law or a court order prohibiting the disclosure of such personal information

(3) Right to transfer personal data

You have the right to obtain your personal data in the event that the company has prepared that personal data in a format that can be read or used by tools or devices that work automatically. And can use or disclose personal information by automated means. including having the right to request the Company to send or transfer personal data in such form to other data controllers when it can be done by automated means. and have the right to obtain personal data that the company sends or transfers personal data in such form directly to another data controller Unless it can’t be done because of technical reasons.

In this regard, your personal data above must be personal data that you have given consent to the company in collecting, using and/or disclosing. Or it is personal data that the Company needs to collect, use and/or disclose in order for you to be able to use the Company’s products and/or services according to your wishes for which you are a contracting party with the Company. or to process your request before using the Company’s products and/or services. or other personal data as required by the authorized person under the law

(4) Right to object to data processing

You have the right to object to the collection, use and/or disclosure of your personal data at any time. If the collection, use and/or disclosure of your personal data is done for necessary operations under the Company’s legitimate interests. or of another person or juristic person without exceeding the extent that you can reasonably expect or to carry out missions for the public interest If you file an objection The Company will continue to collect, use and/or disclose your Personal Data only where the Company can demonstrate legal reasons that it takes precedence over your basic rights. or to assert legal rights compliance with the law or litigation in legal proceedings, on a case-by-case basis.

You also have the right to object to the collection, use and/or disclosure of your personal data for marketing purposes. or for scientific research purposes. history or statistics as well

(5) Right to request deletion of personal dataYou have the right to delete or destroy your personal data. or make your personal information non-identifiable. If you believe that your personal data has been collected, used and/or disclosed unlawfully according to relevant laws. or deems that the Company is no longer necessary to retain it for the purposes related to this Privacy Notice. or when you have exercised your right to withdraw your consent or exercise your right to object as notified above Unless the company has to comply with the law. or claiming rights under relevant laws to retain such information

(6) Right to request suspension of use of personal information

You have the right to temporarily suspend the use of your personal data in the event that the company is in the process of investigating your request for correction of your personal data or objection. or any other case where the company is out of necessity and has to delete or destroy your personal data in accordance with relevant laws, but you request the company to suspend the use instead

(7) Right to rectification of personal data

You have the right to request the Company to correct your personal data to be accurate, current, complete and not misleading.

(8) right to complain

You have the right to lodge a complaint with the relevant legal authority. If you believe that the collection, use and/or disclosure of your personal data violates or does not comply with applicable laws.

If you have concerns or questions about the Company’s practices, about your personal information Please contact the company. By using the contact details in Section 15 of this Privacy Notice. Has violated personal data protection laws You have the right to submit a complaint to an expert committee appointed by the Personal Data Protection Committee in accordance with the rules and procedures prescribed by the Personal Data Protection Law.

In the event that the data subject submits a request to exercise rights under the personal data protection law When the company has received such request It will be processed within the period specified by law. However, the Company reserves the right to refuse or not to process such requests in case of law.

The Company has all rights and sole discretion to accept, process your request or reject your request.

Your exercise of rights may be limited under applicable law. And there are some necessary cases where the company may refuse or be unable to process your request for the above rights, such as having to comply with laws or court orders. public interest The exercise of rights may violate the rights or liberties of other persons, etc. If the Company refuses the above request. The company will also inform you of the reason for the refusal.

Article 12. Links to Third Party Websites

To use the service of the company’s website There may be links to other social networks, platforms and websites operated by third parties. The Company endeavors to only link to websites that meet the privacy standards. However, the Company cannot be held responsible for the content or the privacy standards of such other websites. unless otherwise specified Any personal information you provide to third party websites will be collected by such parties and subject to Notice/policy on the protection of personal information of such third parties (if any) in such case. The company asks you to study and comply with the announcements/policies on personal data protection that appear on those websites separately from the company.

Article 13. Changes to the Privacy Notice for Customers

The Company will regularly review the privacy notice for customers to comply with the guidelines and relevant laws and regulations. If there are changes to the privacy notice for customers The Company will notify you of any significant changes to this Privacy Notice together with an updated Privacy Notice. through appropriate channels. The company recommends that you review the changes to the privacy notice This edition is periodic.

Article 14. Contact channels

If you see that the processing of your personal data is not in accordance with the Personal Data Protection Act B.E. 2562, you have the right to complain to the Personal Data Protection Officer.

personal data protection officer
(Data Protection Officer)

Main contact : Cibes Lift (Thailand) Co., Ltd.
‍E-mail address: [email protected]

‍Tel. 02-114-6500

Company Contact Address Cibes Lift (Thailand) Co., Ltd. (Head Office)
Taxpayer Identification Number 0105559027366

‍891/49-52 Rama 3 Road, Bang Phongphang, Yannawa, Bangkok 10120

Article 15. Governing Law

You acknowledge and agree to this Privacy Notice. It is governed by and constructed in accordance with the laws of Thailand and the courts of Thailand shall have jurisdiction over any disputes that may arise.

Announced on May 31, 2022