1. WHO ARE WE?
If you have any questions or concerns about our privacy practices, we welcome you to contact us via
Address : SSUP Holdings Co.,Ltd
Data Protection Officer
Street Address : 89/1 Soi Ratchataphan,Ratchaprarop Road Makkasan,Ratchathevee Bangkok 10400
Email : email@example.com
Upon receiving your questions or concerns, our representative will contact you within a reasonable time to response to your questions or concerns. In some case, we may request for further information to verify your identity.
2. WHAT IS PERSONAL DATA?
“Personal Data” means any information relating to an identified or identifiable natural person, directly or indirectly, but not including the information of the deceased persons in particular.
3. WHAT PERSONAL DATA WE WILL COLLECT
We will collect personal data, including but is not limited to:
4. THE SOURCES OF PERSONAL DATA
We may obtain your personal data through one of the following means:
The Company receives personal data directly from you, where the Company will collect your personal data from various service processes including:
Information that we collect from other sources:
5. THE PURPOSES OF PERSONAL DATA PROCESSING
We may collect, use, disclose and/or process your personal data for one or more of the following purposes:
6. HOW WE PROCESS YOUR PERSONAL DATA
After receiving personal data from various data sources, the Company will collect, use or disclose your personal data for the purposes specified in the previous section and will process your personal data only to the extent permitted by law. That is, it is based on a lawful basis for processing the data.
The company may disclose personal data and any information about your use of the service or any other information that the Company collected as described in section 3 above to the Company and/or SSUP Group companies or business partners of the Company and/or SSUP Group companies, including legal government and public agencies, Information technology service providers, banks, payment and transaction service providers, customer support service providers, service providers, marketing and advertising management service provider, business consultants, legal service providers, legal counsels, including any juristic persons or any other person in which the Company and/or you are a party or having legal relations.
In the event that the Company employs other persons to act as a personal data processor, the Company will investigate personal data protection measures and arrange to sign an agreement to control and protect personal data appropriately and in accordance with the rules prescribed by required law.
In some circumstances, we may need to transfer your personal data to another person, foreign branch offices, or international organizations in some countries that may not have appropriate safeguards. In such case, the Companies will make sure that transferring of such information is lawful as specified by the Personal Data Protection Committee, for example your personal data may be disclosed to other companies within SSUP Group companies in accordance with the Binding Corporate Rules (BCRs) or other information transfer agreements.
We conduct internal and external inspection for customer data protection on a regular basis.
7. HOW AND HOW LONG WE KEEP YOUR PERSONAL DATA
The Company has information security measure to maintain and the period of retention of your personal data as follows:
8. YOUR RIGHTS AS A DATA SUBJECT
You, as the data subject, have the following rights in relation to personal data according to PDPA:
Right to consent and withdraw consent
Right to access (or “Rights to be informed”)
Right to data portability
Right to object
Right to erasure
Right to restriction of processing
Right to rectification
You may contact the staff of the Company to file a request to proceed with the above rights, as detailed in section 1, or contact designated channels specified by the Company. However, you do not have to pay a fee to use your rights. However, a fee may be charged accordingly if your request is found to be unfounded, repetitive or excessive.
The Company has the right to refuse that is a dishonest exercise of the right, unreasonable requests, requests that are not provided by law and/or requests that cannot be fulfilled. In addition, the Company has the right to reject your request in accordance with the rules stipulated by the law.
9. IF YOU REFUSE TO GIVE US YOUR PERSONAL DATA
The Company is legally obligated to collect personal data or in order to make a contract between you and the Company. If you choose not to provide personal data, the Company may not be able to provide services to you.
Besides the case that the Company processes personal data for performing of the contract and complying with the laws, in some cases, the Company may require your consent for the collection, use or disclosure of your personal data in accordance with the purposes of personal data processing specified in section 5 to provide you with the best benefits and/or for the Company to be able to provide services that meet to your needs appropriately.
10. MARKETING ACTIVITIES AND CAMPAIGNS
During the period you are using our services, the Company will send you information about marketing activities and campaigns about products and services of the Company, SSUP Group companies, the Company’s selected partners or SSUP Group companies‘ selected partners, which you will be interested in. You can cancel your consent for being informed marketing communications via channels specified by the Company.
What are cookies?
Cookies are text files which are stored on a user’s computer and/or communication devices that you use, such as tablets and smartphones, via a web browser while you enter the Company’s website. Cookies will not cause harm to your computer equipment and/or communication devices. They used to store detailed log data, internet usage or your website visit behavior. You can learn more about cookies from https://www.allaboutcookies.org
You can refuse the collection of information via cookies through your browser settings, which may reduce the optimum performance of the website and application.
12. PERSONAL DATA OF MINORS
With the nature of the services including the products of the Company, the Company may collect, use or disclose personal data about individuals under 20 years of age. The Company will comply with the Personal Data Protection Law in connection with the processing of minors’ personal data.
13. COLLECTION AND USE OF PERSONAL DATA FOR THE ORIGINAL PURPOSE
The Company will process the personal data under the law applicable at present and the Company is entitled to continue to collect and use the personal data which has been collected prior to the effective date of provisions of the “PDPA” for the existing purposes. If you no longer want the Company to collect and use such personal data after the PDPA is fully effective, you may withdraw your consent through the channels to be further publicized by the Company.
Please read the privacy policies of any third party websites or services that you access from our websites or services.
Cookies and use of our website