Privacy Policy
RUNEXY (Thailand) Co., Ltd. (hereinafter referred to as 「RT」)
Last update: June 23, 2022
Runexy (Thailand) Co., Ltd. considers the privacy and protection of personal data to be important and RT is committed to ensuring that visitors to its website and facilities, customers and potential customers, business partners, employees and recruitment interviewers who interact with It is committed to respecting and protecting personal data and ensuring the confidentiality and privacy of personal data collected and processed in the course of its business. This Privacy Policy ensures that it is processed in accordance with the Thai Personal Data Protection Act BE 2562 (2019).
Unless otherwise defined in this policy, terms and expressions shall have the meanings set out below :
1. “Personal data” means information about an individual, whether direct or indirect, so that the individual can be identified and
It means information about a person, whether direct or indirect, which does not include information about a deceased person.
2. ‘Confidential personal data’ means ‘personal data’ that is protected by law. In particular, because it may seriously affect the rights and freedoms of the ‘data subject’ concerned if it is collected, used or disclosed without his or her permission.
3. “Data subject” means an identified or identifiable natural person
4. “Data Controller” means a person who has the authority and obligation to make decisions concerning the processing of personal data.
5. “Data Processor” means a legal entity or natural person who processes, collects, uses or discloses personal data on the order of a data controller.
6. “Data Protection Officer” (DPO) means a person appointed by the President of RT or the President and who reports directly to the Personal Information Protection Commission in the event of a breach.
7. “Personal Information Protection Commission” (PDPC) An administrative agency responsible for the task and authority to manage, issue, or provide other guidelines for the measures provided for in the Act.
8. ‘Legal Basis’ means the exception granted by law, whereby the data controller has the legal right to process the personal data identified by RT in relation to the specific purposes set out in Article 3 of this Agreement.
Contents
1. What is the purpose of this policy?
2. What are the sources of Personal Data collected by RT?
3. What types of personal data does RT collect, use and disclose?
4. What are the purpose and legal basis for the collection, use and/or disclosure of personal data?
5. Whom can ‘RT’ disclose the personal data of data subjects?
6. Does RT send or transfer personal data to other countries?
7. How long does RT retain personal data?
8. How does RT protect personal data?
9. Accuracy of personal data
10. What are the rights of the data subject regarding personal data?
11. Does RT collect cookies?
12. How can the data subject contact the RT and the data protection officer?
1. What is the purpose of this policy?
This Policy informs data subjects of the details of the purposes for which their personal data will be collected, used and/or disclosed and of their legal rights in relation to their personal data.
2. What are the sources of Personal Data collected by RT?
2.1 Personal data provided directly or indirectly by the data subject to RT. Personal data is provided by a data subject to a contact, visit, website, support center or representative of the data subject when RT provides support for a product or service at the data subject’s request.
2.2 Personal Data that we receive or access from other sources indirectly from the data subject. For example, regarding publicly available information, government agencies and business partners, RT will only collect data from other sources if RT needs to do so or if the data subject has given express consent unless otherwise permitted by legal grounds.
3. What types of personal data does RT collect, use and disclose?
3.1 Personal information
First and Last name, Age, Date of birth, Country identification number, Passport, Online MTG recording record, Thai Identity card, and Driving license.
3.2 Contact Information
Home address, work address, telephone number, email, LINE-ID, FB-ID
3.3 Financial information
Bank account number, Bank account name
3.4 Information about office equipment
IP address, MAC address, Computer Traffic Data
3.5 Other information necessary for RT business
Refers to website visitation records, audio, photographic, videos, financial information, and any other information deemed to be personal data that has been entrusted to RT to provide business activities under the Personal Information Protection Act.
3.6 Confidential Data
Nationality, religion and confidential data are contained in databases commissioned by RT in case of problems and used in case of system operation or service improvements.
4. What are the purpose and legal basis for the collection, use and/or disclosure of personal data?
RT will collect, use and/or disclose personal data of data subjects only as required under the legal basis set out in this policy, as follows.
4.1 Where necessary for the fulfilment of a data subject’s requests or the fulfilment of contractual obligations prior to entering into a contract.
4.1.1 To verify qualifications, to check the status of the legal entity, to verify the accuracy of the information, to provide proof and verify the identity of the data subject, which is necessary for the conclusion of purchase contracts, subscription contracts, lease contracts, contractor contracts or other contracts relating to our business operations
4.1.2 To enter into a contract with a data subject or to fulfil a legal obligation.
4.1.3 To collect, use and disclose personal data of customers and business partners.
4.1.4 To provide services relating to the use of software, cloud services, training, support and products.
4.1.5 To take necessary measures for the following items;
(a) Providing hardware and software
(b) Providing software development and implementation
(c) Providing training support for products
(d) Providing service resolution and/or consulting through telephone support, online support and on-site support
(e) Other purposes set out in the Agreement.
(f) Receipt and delivery of business documents and/or deliveries.
4.1.6 To collect the product and/or service charges under the payment terms agreed by the data subject and RT.
4.1.7 To participate in RT’s events and provide a mailing address to receive any prizes.
4.2 Where RT is required to comply with relevant laws and other applicable laws with which it complies (including regulations made under such laws).
4.2.1 Disclosure of your personal data when requested by government agencies.
4.2.2 Preventing, responding to, and mitigating potential risks from cyber-attacks, suspension of debt payments, breach of contract, and violation of the law (e.g., violations of intellectual property trade secrets, property, life, liberty, and reputation).
4.2.3 Collection of personal data as evidence of compliance, objections, legal claims or retrospective tax audits after the termination of the contract.
4.3 Where it is necessary to act in the legitimate interests of RT or any other person or entity and it does not override the data subject’s reasonable expectations, such as
4.3.1 Maintaining business relationships, including notification or provision of similar products and/or services used by RT staff for customer support and benefits.
4.3.2 Providing convenience, such as providing parking when visiting RT offices.
4.3.3 Risk management, monitoring and control within the organisation, for example, Recording on CCTV.
4.4 Obtaining the data subject’s express consent:
4.4.1 Contacting or recording audio or photographs during meetings, training, seminars, or booth events.
4.4.2 To inquire about new product or IT solution service offerings.
5. To whom may RT disclose the personal data of a data subject?
RT may disclose the data subject’s personal data to a third party only to the extent necessary and permissible based on the consent of the data subject or legal grounds. The person or entity receiving such data will collect, use or disclose personal data to the extent necessary and permissible with the consent of the data subject or in connection with this policy, as detailed below
5.1 Outsourcing for the purpose of providing, developing and delivering services and/or products to data subjects.
5.2 Contacting building management companies in advance to facilitate a visit.
5.3 Requests from government authorities with respect to tax payments, litigation regarding breach of contract, or product-related practices.
5.4 Purposes specified for agreements or contracts to affiliated companies.
5.5 For RT’s subcontractors (cloud service providers, document storage providers, etc.) to provide service support, data storage, backup, etc.
6. Does RT send or transfer personal data to other countries?
RT does not send or transfer personal data.
7. How long does RT retain personal data?
RT will retain a data subject’s personal data for as long as the data subject is in a business relationship with RT (for example, as a customer or supplier) or as necessary in relation to the purposes set out in this policy. However, this does not apply where a longer retention period is required or permitted by law. For example, we will retain as long as necessary in each case to comply with revenue laws, and to establish and review disputes within the legal statute of limitations period not to exceed 10 years.
RT guarantees that personal data will be erased, destroyed or anonymized when no longer required.
8. How does RT protect personal data?
For the storage of personal data, RT will implement IT technology measures to ensure adequate security in the processing of personal data and to prevent the breach use of personal data, which may include restricting access to personal data to relevant persons and requesting personal data. RT has internal policies in place to ensure that data is not used or disclosed by persons for any purpose or without authorization or unlawfully, and RT revises its policies as often as necessary and appropriate in accordance with updated technology and government regulations.
Furthermore, RT’s employees, external contractors and data recipients are obligated to keep personal data confidential in accordance with the confidentiality measures established by RT.
9. Accuracy of personal data
RT guarantees to the data subject that the personal data collected is accurate, complete and up to date. If the data subject wishes to have personal data rectified, the data subject may exercise the right to rectification provided for in 10.7 The rectification will only be effective after verification of authenticity in accordance with the prescribed procedure.
10. What are the rights of the data subject regarding personal data?
The rights of the data subject described below are legal rights that allow the data subject to exercise any of these rights within the limits of current or future amended legal requirements and policies and procedures established by RT. If the data subject is under 20 years of age/prohibited/quasi-incompetent, the data subject’s parents, guardians or representative may request that the rights be exercised on the data subject’s behalf.
10.1 Withdrawal of consent: If the data subject has given consent to RT to collect, use or disclose the data subject’s personal data (whether before or after the effective date of the Personal Data Protection Act), the data subject shall be legal. You reserve the right to withdraw such consent at any time (such as a contract) unless restricted by or if the data subject has a business relationship with RT. Withdrawal of the data subject’s consent may affect the data subject’s interests or benefits in relation to product and/or service support. For example, the data subject may no longer be able to receive useful promotions or new offers, products and/or services that meet their needs.
10.2 Data access: the data subject has the right to access the personal data of the data subject under the responsibility of RT and may request a copy of such data on behalf of the data subject. The data subject has the right to request disclosure of the personal data resource to RT, even if the data subject has provided such data to RT via a third party.
10.3 Data Portability: A data subject may request that (i) RT organize and automatically process or disclose such Personal Data in a form that is automatically machine-readable or usable unless it is not technically feasible for RT to do so, Rt may send or transfer such Personal Data directly to another data controller directly; (ii) RT sends or transfers such Personal Data directly to the data subject.
10.4 Objection: The Data Subject has the right to object to the collection, use or disclosure of the data subject’s personal data at any time. However, this does not apply if the action is excluded from the consent granted and is carried out for the legitimate interests of RT, a business entity or an individual, and is subject to the reasonable expectations of the data subject or is carried out to perform a public function. If the data subject objects, RT will only continue to collect, use and/or disclose the data subject’s personal data if (i) RT’s legal basis is more important than the data subject’s fundamental rights, (ii) the legal rights require it, (iii) it complies with the law, or (iv) it defends legal proceedings in the circumstances. continue to use and/or disclose it. On the other hand, RT will clearly separate its personal data from other data. Furthermore, the data subject has the right to object to the collection, use or disclosure of the data subject’s personal data carried out for purposes related to marketing, scientific, historical or statistical research.
10.5 Erasure or destruction of data: The data subject has the right to request RT to erase, destroy or anonymise the data subject’s personal data if the data subject believes that the collection, use or disclosure of the data subject’s personal data is contrary to relevant legislation, or that such data is no longer necessary for the purposes under this policy, or if the data subject requests withdrawal of consent or objects to the above object to the processing, they have the right to request RT to erase, destroy or anonymise the data subject’s personal data.
10.6 Data restriction: the data subject has the right to request RT to restrict the processing of personal data during the review period of the data subject’s objection or when it is no longer necessary. In addition, Although RT must erase or destroy the data subject’s personal data in accordance with the relevant law, the data subject may request RT to continue to store the personal data for the purpose of establishing, exercising or defending a legal claim.
10.7 Correction of data: the data subject has the right to correct, update, fill in and make the personal data of the data subject not misleading.
The exercise of the above rights may be restricted in accordance with relevant law; RT may be required to refuse or be unable to fulfil a data subject’s request because of a law or court order, a request from a data subject in breach of a public duty, a right or the freedom of others. If RT rejects the request, RT will inform you of the reason. RT will respond to the data subject’s request within 30 days from the date of receipt of all documents and full verification of the data subject’s identity, in accordance with RT’s procedures, to either provide the data subject with the data subject’s request in accordance with the data subject’s request or refuse the data subject’s request.
Furthermore, you have the right to lodge a complaint with the Personal Data Protection Commission if you believe that the collection, use or disclosure of your personal data or the response to your request is in breach or does not comply with relevant legislation.
In this regard, Various rights can be applied for through the contact points listed in Article 12.
11. Does RT collect cookies?
No cookies are collected.
12. How can I contact the RT and Data Protection Officer?
Data subjects may contact RT or the Data Protection Officer through the following channels if they wish to make a proposal or query regarding the collection, use and /or disclosure of the data subject’s personal data and to exercise their request to exercise their rights under this policy.
12.1 If you wish to exercise any of the rights set out in this Privacy Policy, please contact us via the following channels;
12.1.1 th-mls-sales@runexy.co.jp
12.1.2 Contact RT head office by telephoneThe Personal Data Protection Officer
12.2 If you have any suggestions or queries regarding this privacy policy, please contact our Privacy Officer by telephone or by email: th-mls-sales@runexy.co.jp.
RUNEXY (Thailand) Co., Ltd.
TEL 02-258-5870
253 Asoke Building 28 Floor, No.253, Sukhumvit 21 Rd. (Asoke),
Klongtoey Nua, Wattana, Bangkok 10110 Thailand