The Family Planning Association of Thailand (hereinafter referred to as ‘the Association’) would like to provide you with an understanding of this privacy policy. This policy explains how the Association handles your personal data, including the collection, storage, usage, and disclosure of your information, as well as your rights concerning your data. This is to ensure that you are informed about the data protection policy of the Association and that the Association is aware of the importance of safeguarding the personal data of its customers, employees, and partners. To this end, the Association has implemented measures to collect, store, and protect data in accordance with the relevant laws, regulations, and standards concerning personal data protection.
meaning
“Personal Data” means any information relating to an individual which enables that person to be identified, whether directly or indirectly, but does not include information of the deceased in particular. “Data Controller” means a person or juristic person who has the authority and duties to make decisions regarding the collection, use, or disclosure of Personal Data. “Data Processor” means a person or juristic person who processes the collection, use, or disclosure of Personal Data in accordance with the order or on behalf of the Data Controller. The person or juristic person who does so is not the data controller. “Data subject” means customers, employees, business partners, who are natural persons. “Person” means a natural person.
Purpose of the protection policy Personal Information
The Association has established a personal data protection policy to protect customers’ information. In conducting various transactions with the Association to ensure that it is secure, reliable, and for the data subject to be effectively protected and protected from unauthorized use of the personal data of the data subject. In addition, to provide remedies for the personal data subject in accordance with relevant laws.
Limited Collection of Personal Information
The collection of personal data will be done with the purpose, scope and use of lawful and fair means. In collecting and storing data, as well as collecting and storing personal data only to the extent necessary for the provision of services or services by any other electronic means under the objectives of the Association only. The association will provide the data subject with electronic acknowledgement and consent in accordance with the association’s methodology.
The Association collects your information through 2 channels:
1.Information you present and provide to the Association
2.Information we collect through third-party services
The Association may collect your personal data in connection with your interests and services used. Religion or philosophy Your health information, biometric data, disability, disability identity or any other information that will be useful in providing the service. The above actions The Association will ask for your consent before collecting, unless:
3.1. Comply with laws such as the Personal Data Protection Act. Electronic Transactions Act Telecommunications Business Act Anti-Money Laundering Act Civil and Criminal Code Code of Civil and Criminal Procedure, etc.
3.2. It is for the benefit of the investigation of the investigating officer or the judgment of the court.
3.3. For your benefit and consent cannot be obtained at that time.
3.4. It is necessary for the legitimate interests of the association or of persons or juristic persons other than the association.
3.5. It is necessary to prevent or suppress the danger to life. or a person’s health.
3.6. It is necessary for the performance of a contract to which the personal data subject is a party, or to take steps at the request of the personal data subject before entering into such contract.
To achieve the objectives related to the preparation of historical documents or archives, for the public interest, or for study, research, and statistics, appropriate preventive measures have been provided.
3.8 Usage behavior data through the following tools: Google Analytics, Google AdWords, Hotjar and Facebook Pixel to analyze the platform’s capabilities and plan future platform development.
Purpose of collecting personal data
The Association will collect, use, update and disclose the personal data of the data provider in accordance with the purpose. It will be collected only to the extent necessary for the provision of services and operations of the Association mainly for the benefit of the data subject and other legal purposes for the following purposes:
4.1) To be used for processing, management, consideration, provision of services and operations relating to the business of the Association that currently exists and may occur in the future, including any for the benefit of the data subject, as well as used for the preparation of accounting, financial statements and accounting information of the Association.
4.2) To submit personal data to the National Credit Information Association Co., Ltd. for use in applying for loan approval or any other relevant government agencies for the benefit of credit consideration to the data provider.
4.3) To be used for monitoring and collecting installments under the hire-purchase agreement and any other liabilities (if any) from the data subject, which the Association has legal rights to.
4.4) To amend, cancel and/or renew hire-purchase agreements, employment contracts and any other contracts between the data subject and the association.
4.5) To be used as information for analysis, propose, use for market research and/or promotional activities and/or for the benefit of creating databases and using the information to offer benefits according to the interests of Data Subject and/or Service Improvement operation or products of the association.
4.6) To comply with regulations, announcements, regulations, including any other requirements to which the Association is obliged to comply with the law.
4.7) To present information, monitor, coordinate and provide after-sales service as well as for the preparation of electronic services.
4.8) To take any other relevant actions to achieve the aforementioned objectives.
Restrictions on Use of Personal Information
The Association will collect personal information in accordance with the standards required by law and will not use or open it. Disclose such data to third parties without the consent of the data subject, except for the purposes stated above or as required by law to disclose the personal data to relevant agencies or persons as follows:
5.1) Business groups, business alliances of the association, including relevant government agencies. To provide services for processing, management, Consider providing services and operations that the data subject receives and may receive in the future.
5.2) National Credit Information Association Limited including associations of the same business or business group or other related agencies.
5.3) Employees, Delegates agent Persons or juristic persons who provide debt collection services and/or auditors of the Association and/or services and operations in connection with the Association’s business that exist and may arise in the future.
5.4) Employees, Delegates agents, individuals, juristic persons or any other entities to comply with legal requirements or establish contractual rights of the association;
Rights of the Data Subject
The Association recognizes the importance of the rights of the personal data subject, and therefore has determined the rights of the data subject to process their personal data collected by the Association in accordance with the law. as follows
6.1) Request access to and obtain a copy of personal data relating to oneself which is under the responsibility of the Association in accordance with the rules and procedures prescribed by the Association, or request disclosure of the acquisition of such personal data without his/her consent.
6.2) Obtain personal data about yourself from the Association in the event that the Association has made the Personal Data in a format that can be read or generally used by automated tools or devices and can be used or disclosed by automated means.
6.3) Object to the collection, use, or disclosure of personal data about oneself that is permitted by law to be collected without the consent of the data provider at any time.
6.4) Request the Association to erase, destroy or anonymize the personal data to which the personal data belongs In cases as required by law.
6.5) Request the Association to suspend the use of personal data. In cases as required by law.
6.6) Inform the Association to ensure that the Personal Data is accurate, current, complete and not misleading.
6.7) Complaint in the event that the Data Controller or Data Processor, including employees or contractors of the Data Controller or Data Processor, violates or fails to comply with the Personal Data Protection Law.
Withdrawal of consent
The data subject can withdraw the consent given to the association for the collection. Use or disclose the aforementioned personal data at any time. By informing the Association and the reasons therefor. The Association will act as notified unless there is a restriction on the right to withdraw consent by law or a contract that benefits Data subject. The withdrawal of consent of the personal data subject will not affect the collection, use, or disclosure of personal data that the personal data subject has given consent to before.
Denial and recording
In the event that the data subject requests the Association to take the action specified in Clauses 6.1-6.7 or Article 7, the Association will act as requested within a reasonable time and in accordance with the Association’s procedures, except in the following cases: The Association may refuse to do so.
8.1) In this condition, it is not possible to do so.
8.2) It is a legal refusal or court order and access to and obtain a copy of such personal data will have a negative impact on the rights and freedoms of other persons.
8.3) The transmission or transfer of personal data is in the public interest or legal obligation, or the exercise of such rights may violate the rights or freedoms of other persons.
8.4) The collection, use, or disclosure of personal data has demonstrated more important legitimate grounds.
8.5) The collection, use or disclosure of personal data is for the establishment of legal claims, compliance or exercise of legal claims, or the defense of legal claims, in the event that the Association refuses to comply with the request of the data subject to take any action in accordance with clauses 6.1-6.8 or 7, the Association will prepare a report recording the refusal together with the reasons for refusal to be kept in the Department. departments or any other agency within the association that rejects the request of the data subject;
Data Security and Quality Measures
The Association recognizes the importance of maintaining the security of your Personal Data, so the Association has established appropriate measures to maintain the security of Personal Data in accordance with the confidentiality of Personal Data to prevent loss. Accessing, destroying, using, converting, correcting or disclosing personal data without rights or unlawfully, as well as preventing unauthorized use of personal data. In addition, the Board of Directors of the Association has prepared a policy. Procedures, manuals, guidelines and training for knowledge in storage Use and disclose personal data for employees at all levels of the association to maintain Use and disclose personal data in accordance with the standards of the Association and in accordance with relevant laws.
Data Protection Officer
The Association has complied with the Personal Data Protection Act B.E. 2562 (2019) by appointing a Data Protection Officer (DPO) to monitor the Association’s actions related to the collection, use, and use of Personal Data Protection Office. Use and disclose personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) and laws related to personal data protection. In addition, the association has established regulations Instruct relevant parties to take the prescribed actions in order to ensure the smooth implementation of the policy on personal data protection. It is also in accordance with the policies of the Personal Information Management and Cybersecurity Supervisory Committee of the Association.
Retention and Destruction Period of Personal Data
The Association will retain the data as received from the data subject only for as long as necessary to carry out the purposes mentioned above. Except in cases specifically required by law, it shall be kept for a longer period or it is necessary for the establishment of legal claims. Compliance or exercise of legal claims, or defense of legal claims, or for the performance of contracts to which the Association is legally entitled.
Contact Channels
Planned Parenthood Association of Thailand
8 Soi Vibhavadi-Rangsit 44, Vibhavadi-Rangsit Road, Chatuchak District, Bangkok
Telephone : 0-2941-2320
Email : info@ppat.or.th