Privacy Notice
This privacy notice (“the Notice”) was made for you as the user of HITEC FOOD EQUIPMENT CO., LTD. (hereinafter called “processing activity”) to learn and understand the forms of collecting, using and disclosing (“processing”) personal data operated by HITEC FOOD EQUIPMENT CO., LTD. (hereinafter called “the Company”) as the data processor of the personal data collected from you to operate under this processing activity.
We will operate the work of collecting, using or disclosing your personal data as follows:
1. The Legal Basis for the Processing of Personal Data
The Company will collect your personal data with related authorities under the legal basis for the processing of personal data as follows:
-
Consent: The Company processes Personal Data based on consensual basis. In the event that you have provided explicit consent to the Company, we will process your Personal Data within the scope of the purpose we have informed you.
-
Contract: The Company processes Personal Data under the contractual basis. We use this legal basis when the processing of Personal Data is necessary to fulfill the contract for which you are a part of, or to use in fulfilling your request prior to entering into the contract. For example, processing your Personal Data is crucial to our ability to provide products and services as well as internal processes in achieving contractual objectives.
-
Legal Obligation: The Company processes Personal Data in accordance with legal compliance, such as the prevention and detection of irregular transactions which may involve with illegal activities. For example, the Company has legal obligation to report your Personal Data to the Revenue Department or other government affairs as required by law.
-
Public Task: The Company processes Personal Data under the necessity to carry out the mission for the public, or perform duties as the government agency has assigned to the Company.
-
Vital Interest: The Company processes Personal Data under the necessity emergency medical situation to protect life and death of Data Subject or another natural Person.
-
Legitimate Interest: The Company processes Personal Data under the necessity to take steps for the Company’s legitimate interests or other individual or juristic persons which are not overriding your interests or fundamental rights and freedoms of the data subject.
-
Research Objective: The Company processes Personal Data under the necessity to achieve the purpose relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics.
However, if you do not provide Personal Data to us, it may affect your inconveniences and may not be in compliance with our contract. Furthermore, it may affect certain legal compliance which can result in penalties.
For example, Consulting firms and legal consulting firms, telemarketing company, Business partners Banks, agency companies, recruitment agencies external service providers (such as suppliers, vendors, or outsourcing) and/or government agencies or relevant regulatory agencies.
2. Your personal data that the Company collects, uses and/or disclose are such as
-
Personal information such as name, surname, age, date of birth, marital status, national identification number, passport number, a copy of house registration, a copy of identification card issued by a government agency, photograph, signature;
-
Contact information such as home address, contact address (where different from your home address), telephone number, E-mail, LINE account ID and/or other social media contact channels;
-
Financial information such as bank account numbers, credit card numbers and/or debit card numbers, financial institutions where you do transaction with, monthly salary, salary statement, salary certificate;
-
Vehicle related information and geographical location such as number plate, color, brand, model, and/or communication equipment and/or electronic equipment;
-
Sale and purchase of goods and services transaction information, including but not limited to, receipt/refund of money information, date of payment, time of payment, amount of payment, purchase or purchase order number, date/time of receipt or delivery of goods, information about service usage, date/time of service usage, contact history (between you and the Company), a Person’s message regarding the acceptance of goods, goods warranty information, complaints and claims, and other information in relation to the purchase of goods and services;
-
Data related to devices or machines such as IP address, MAC address, Cookie ID; and
-
Other information such as website-visiting data, voice, still picture, moving picture, and other information deemed personal data under the Personal Data Protection Laws.
3. Purposes of collecting, using and/or disclosing your Personal Data
-
3.1 For your benefits in using the Company’s products and/or services that meet your own purposes and for other purposes necessary under laws.
-
3.2 To allow you to use the Company’s products and/or services that meet your purposes under your contract with the Company or to take steps at your request prior to using the Company’s products and/or services (Contractual Basis)
-
3.3 To comply with relevant or applicable law (Legal Obligation), for instance,
- to comply with an order from a competent authority; and/or
-
to comply with Financial Institution Law, Life Insurance Law, Non-life Insurance Law, Tax Law, Computer Law, Bankruptcy Law, and other laws to which the Company is subject both in Thailand and in other countries including regulations and rules issued pursuant to such laws.
-
3.4 To take necessary steps for the Company’s legitimate interests or other individual or juristic person which are not overriding your reasonable expectations (Legitimate Interest), for instance,
-
to record voice conversation with call center or images from CCTV while entering and/or in buildings;
-
to maintain relationship with customers, e.g. complaint handling, satisfaction survey, customer service by the Company’s staff, notification or offer on any products and/or services of the same types you are using for your benefits;
-
to manage risks, monitor, manage within organization including to refer such tasks to affiliated companies in the conglomerate under the Personal Data related policy of the conglomerate (Binding Corporate Rules);
-
to anonymize your Personal Data (Anonymous Data);
-
to prevent, respond, and minimize potential risks arising from corruption, cyber threat, debt default or contractual breach (e.g. bankruptcy related data), law violation (e.g. money laundering, terrorism and proliferation of weapon of mass destruction financing, offences related to property, life, body, liberty or fame); including sharing Personal Data to enhance work standards of affiliated companies/other companies in the same business in order to prevent, respond, and minimize the above risks;
-
to collect, use and/or disclose the Personal Data of directors, representatives, agents of customers that are juristic person;
-
to contact, voice or image recording during meetings, trainings, seminars or booth activities;
-
to collect, use, and/or disclose the Personal Data of person under court’s receivership order; and
-
to receive - dispatch parcels.
-
Business Partner selection: such as, to evaluate suitability and qualifications of you and the Business Partner; to issue request for quotation; to execute contract with you and the Business Partner;
-
Business purposes: such as, to manage the contractual relationship with the Business Partner; to communicate with you and the Business Partner about products, services and projects between us; to proceed with the transaction made by Business Partner (e.g., delivery, exchange and return of products, invoice and receipt issuance); to perform any obligations and/or request made by Business Partners;
-
Relationship management: such as, to create a vendor code; to register in lists/directories of Business Partner; to provide support services and keep tracks and records;
-
to ensure safety and prevent or suppress a danger to life, body or health of the person;
-
3.5 To enable you to receive benefits from using products and/or services according to your given consent, for instance,
-
For you to receive products and/or services that are better and suitable for your need;
-
For you to receive offers, privileges, recommendations and other information including eligibility to attend special activities;
regardless of being products and/or services, privileges, promotions, information or special activities of the Company, business partners or a third party associated with the Company, depending on your given consent.
4. Disclosure of Personal Data to any Third Parties
The Company will disclose your Personal Data to other persons or entities under your consent or other legal basis for the purposes specified in this Policy. For example, Personal Data Processors, business partners, external service providers, the Company’s agents, sub-contractors, financial institutions, auditors, external auditors, credit rating companies, asset management companies, the National Credit Bureau, competent authority, prospective assignees and/or assignees in any transaction or business merger of the Company, any corporations or individuals under relationship or contract with the Company; including executives, staffs, employees, contractors, agents, the Company’s advisor and of those person or entity who receive the data, etc.
Personal data processors are obliged to process the personal data only to the extent required for the specific in the agreement and under the Company's instructions, and unable to use the personal data for any purposes other than specified in the scope of engagement or for any unlawful purposes.
5. Transfer of Personal Data to other countries
When it is necessary, the Company may send or transfer your Personal Data to affiliated companies/companies in the same business located in other countries or to other receivers in ordinary course of the Company’s business, e.g. sending or transferring the Personal Data to be stored on server/cloud in other countries.
If the receiving countries do not maintain adequate standard levels, the Company will ensure that the sending and the transferring are in compliance with legal requirements and will put in place the Personal Data protection measures as necessary, appropriate and in consistent with confidentiality measures. For example, entering into confidentiality agreement with receivers in such country; or in case of affiliated companies/companies in the same business being the receivers, setting out the Personal Data policy that is audited and certified by competent authorities under relevant law and controlling the sending and transferring to comply with such policy instead of legal requirements.
6. Personal Data Protection Measures
The Company provides appropriate security measures for preventing the unauthorized or unlawful loss, access to, use, alteration, correction, or disclosure of Personal Data, and such measures will be reviewed by the Company when it is necessary, or when the technology has changed in order to efficiently maintain the appropriate security and safety.
For retention of your Personal Data, the Company implements technical measures and organizational measures to ensure appropriate security in the Personal Data processing and preventing Personal Data breach. The Company has set out policies, rules and regulations on Personal Data protection, e.g. security standards of information technology and measures to prevent data receivers from using or disclosing the data outside the purposes or without authorization or unlawfully. The Company has amended the policy, rule and regulation as frequently as necessary and appropriate.
Moreover, the Company’s executives, staffs, employees, contractors, agents, advisers and data receivers are obligated to keep the Personal Data in confidence pursuant to confidentiality measure provided by the Company.
7. The Period for which Personal Data will be Retained
The Company will retain your Personal Data within the period necessary for the purposes specified in this Policy in order to comply with legal requirements, accounting requirements and/or protect interests of the company except for the case that the longer period of retention is required by laws. After the expiration of the retention period, or if your Personal Data is no longer required, the Company will erase, destroy, or anonymize such Personal Data.
For Personal Data retention, your Personal Data will be retained in the form of documents within office of the Company or upon server accessed and operated by the Company or authorized service providers only.
8. Your Rights as the Data Subject
If the Company collects, uses, or discloses your Personal Data subject to the purposes specified in this Policy, you have the following rights pursuant to the Personal Data Protection Act B.E. 2562 (2019):
-
Right to be informed: the right to be informed with regard to the collected Personal Data, methods of collection, purposes of the use of the Personal Data, people and/or third parties who will receive the Personal Data, and the period for which the Personal Data will be retained.
-
Right to access the data: the right to access and obtain a copy of your Personal Data which is under the responsibility of the Company.
-
Right to transfer the data: the right to request the sending or transferring of your Personal Data to any other data controller.
-
Right to object: the right to object to the collection, use, or disclosure of your Personal Data at any time.
-
Right to be forgotten or removal of data: the right to request for the erasure, destruction, or anonymization of your Personal Data.
-
Right to restrict the data processing: the right to request for the temporarily restriction of the use of your Personal Data.
-
Right to amend the data: the right to request for the Company to make your Personal Data accurate, complete, and up-to-date.
-
Right to complain: the right to complain to the Company or the Personal Data Protection Committee if you believe any of your rights have been violated by the Company causing damage to you as the Data Subject.
-
Right to request for a disclosure: the right to request for the disclosure by the Company of the method(s) used to obtain your Personal Data if you have never consented to provide this information.
-
Withdrawal of consent: the right to withdraw the given consent at any time when the data is with the company except that your rights have been limited by law or agreement which is for your benefit.
If you wish to exercise the foregoing rights, you are required to make a written statement. The Company will use its best efforts to perform actions in due course and no later than the period prescribed by law. The Company will strictly comply with the laws concerning your rights as the Data Subject.
The exercising of rights to request the erasure, destruction, or anonymization of your Personal Data, temporary restriction of use, or withdrawal of consent may result in the Company being unable to render services to you.
9. Revision of the Personal Data Protection Policy
The Company reserves the rights to revise and amend this Personal Data Protection Policy as deemed necessary and appropriate without prior notice. Any revision or amendment will be announced and published on the Company’s Website or by any other appropriate method. The Company encourage you to check the Personal Data Protection Policy on this page regularly for updates.
10. Information about Cookies
The Company’s Website uses cookies and other tools to help distinguish you from other users of the website. This allows the Company to improve the website and to provide you with a quality experience when using the website, gather overall statistics without revealing the identity of owner of the personal data in order to help the Company reaches users’ needs and objectives of accessibility. By continuing to use this website, you are agreeing to cookies being placed on your computer.
11. Contact the Company
If you have any queries in relation to this Personal Data Protection Policy or if you wish to exercise the rights specified in Clause 8, or if you wish to withdraw the consent for the collection, use, or disclosure of your Personal Data, please contact the Company at:
HITEC FOOD EQUIPMENT CO., LTD., 1970,1971,1972 Moo1, Sukhumvit Soi 74, Samrong Nuea, Muang Samutprakarn, Samutprakarn, 10270 Thailand (E-mail: ga@hitec-th.com, Tel: 02-026-3543)
This Personal Data Protection Policy is prepared in accordance with the Personal Data Protection Act B.E 2562 (2019) and published in both Thai and English on the Company’s Website.
This Policy is announced on 1st June 2022 and shall be effective from the date until further notice.
@hitec
@hitec_service
