2.2 In addition, the Company collects certain Personal Data concerning website visitors by using cookies. For further information on the Company’s use of cookies, please see paragraph 7 below.

In such cases, the Company will further notify the data subject of such additional Personal Data that the Company will collect, the purposes for processing such Personal Data, and other information required to be notified to the data subject, in accordance with the Data Protection Law.

(1) The website visitor provides his/her Personal Data to the Company directly: The Company collects the Personal Data filled in by the website visitors in the ‘Contact Us’ section in the Company’s website.

(2) Personal Data concerning website visitors that the Company automatically collects from the relevant website visitor: The Company may automatically collect certain technical information about the website visitors’ equipment (e.g. IP address), browsing actions and patterns by using cookies and other similar technologies. For further information on the Company’s use of cookies, please see paragraph 7 below.

4.1 The Company will duly collect, use and/or disclose Personal Data concerning website visitors on a limited basis pursuant to the purposes and the lawful basis set out below, and the procedures pursuant to the Data Protection Law.

4.3 The Company may use Personal Data to contact its website visitors for the above purposes via e-mail or telephone.

5.1 The Company retains Personal Data concerning website visitors in electronic/soft copy form in the Company’s computer system and in cloud provided by Sky Net with its server located in Thailand. Password is required before access, both in the computer system and in cloud.

With respect to cookies, please see paragraph 7 below.
5.2 The Company will retain Personal Data concerning website visitors for the following periods:

With respect to cookies, please see paragraph 7 below.

5.3 Except as provided in paragraph 5.4, the Company will ensure to erase or destroy or anonymize Personal Data concerning website visitors upon the end of the relevant retention period set out above, or erase or destroy or anonymize the Personal Data that is irrelevant or unnecessary as per the purpose of collection of such Personal Data or as requested by the relevant website visitor as the data subject who is entitled to such request.

5.4 If a website visitor enters into or continues to have other relationship(s) with the Company (see paragraph 2.3 above for examples), the Company may continue to retain certain Personal Data concerning such website visitor, in which case, the Company will further notify such website visitor as data subject of the relevant retention periods of Personal Data concerning him/her.

6.2 The disclosure mentioned above will be made on a limited basis and the Company will disclose only the Personal Data that are necessary to achieve the lawful purpose of the disclosure.

6.3 In the event that the Company must obtain consent from the relevant website visitor as data subject pursuant to the Data Protection Law for disclosing any of his/her Personal Data to any of the affiliates, the Company will request for such consent and must duly obtain such consent from the relevant website visitor before disclosure.

7.1 What are cookies?
Cookies are text files that are stored in a computer or mobile device via an internet browser. When visiting the Company’s website, the website sends the cookie to the visitor’s computer/mobile device which stores the cookie in a file located inside the visitor’s web browser.

Many internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited internet sites and servers to differentiate the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID.

7.2 How does the Company use cookies and the purposes for the use of cookies
The Company collects Personal Data concerning its website visitors (e.g. browsing actions and patterns) through cookies or other similar technology(ies). The Company’s website also uses cookies to make the Company’s websites operational and gather analytics data (about website visitors’ behaviors).

Through the use of cookies, the Company can provide the visitors of the Company’s website with more visitor-friendly services that would not be possible without the cookie setting. By means of a cookie, the information and offers on the Company website can be optimized with the visitor in mind to make it easier for visitors to utilize the Company’s website.

The website visitor that uses cookies does not have to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the visitor's computer system.

In addition, the Company also uses cookies to establish anonymized statistics of website visitors about the browsing experience on the Company’s website.

7.4 Duration
Certain types of cookies are session cookies which are temporary and will be deleted after the visitor closes the browser.

Certain types of cookies are persistent cookies which encompasses all cookies that remain on the visitor’s hard drive until they are erased by the visitor or the visitor’s browser, depending on the expiration date of each cookie. All persistent cookies have an expiration date written into their code, but the duration may vary. The persistent cookies that the Company’s website uses will last no longer than 12 months, but the visitor can erase them prior to the expiration date.

7.5 Consent
The Company’s website visitors will be requested to provide their consent for Statistics Cookies/Performance Cookies. The visitors may have seen a pop up to this effect on his/her first visit to the Company’s website. Although the said pop up will not usually appear on subsequent visits, the website visitors may withdraw their consent at any time – please see paragraph 7.6 below for further information.

7.6 How to manage/disable cookies?
The data subject may, at any time, prevent the setting of cookies through the Company’s website by means of a corresponding setting of the internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an internet browser or other software programs. This is possible in all popular internet browsers. Please be aware that if the data subject deactivates the setting of all cookies in the internet browser used (including Necessary Cookies), functions of the Company’s website may not be entirely usable.

(1) The Company will classify the types of Personal Data concerning website visitors and clearly establish on who has the right to access each type of such data.

(2) The Company will store Personal Data concerning website visitors securely.

(3) The Company will set up a system to check and erase, destroy, or anonymize Personal Data concerning website visitors as specified in paragraph 5.3 above by appropriate means.

(4) The Company will ensure that the Company’s personnel must enter their individual username and/or password before accessing and using the Company's computer system. Such username and password will be strictly kept confidential.

(5) The Company will take steps to prevent other persons to whom the Company disclose Personal Data concerning website visitors from unauthorized or undue use or disclosure of such data.

(6) The Company will notify any data breach incident with respect to Personal Data concerning website visitors to the Office of the Personal Data Protection Committee without delay within the period specified by the Data Protection Law. If such data breach has a high risk of affecting the rights and freedoms of an individual, the Company will promptly notify the relevant data subject(s) of the incident with a plan to remedy the damage resulting therefrom without delay.

A data subject is entitled to the rights in relation to the Personal Data concerning him/her as prescribed in the Data Protection Law as follows:

(1) Right to Withdraw Consent In case the Company relies only on a data subject’s consent as its lawful basis to collect, use and/or disclose the Personal Data, the data subject may, at any time, withdraw his/her consent. The Company will notify such data subject that withdraws his/her consent of the effects that may occur as a result of his/her consent withdrawal at the time of withdrawal.

(2) Right of Access A data subject has the right to access and request a copy of Personal Data concerning him/her which are under the responsibility of the Company or request the Company to disclose its acquisition of such Personal Data for which he/she did not give consent.

(3) Right to Data Portability A data subject has the right to receive the Personal Data concerning him/her from the Company in case the Company has made such Personal Data in the format that is commonly used and readable by automatic machine and can be used and disclosed by automatic means. A data subject also has the right to request the Company to send or transfer the Personal Data in such format to other data controller(s) if it can be done by automatic means and/or request to obtain the Personal Data in such format that the Company sends or transfers to other data controller(s), unless it is technically unfeasible.

(4) Right to Object A data subject has the right to, at any time, object to the collection, the use or the disclosure of Personal Data concerning him/her under certain circumstances prescribed under the Data Protection Law.

(5) Right to Erasure A data subject has the right to request the Company to erase or destroy or anonymize Personal Data concerning him/her under certain circumstances prescribed under the Data Protection Law.

(6) Right to Restriction of Processing A data subject has the right to request the Company for restriction of its use of Personal Data concerning him/her under certain circumstances prescribed under the Data Protection Law.

(7) Right to Rectification A data subject has the right to request the Company to rectify inaccurate Personal Data concerning him/her and ensure that the Personal Data concerning him/her is up-to-date, complete and not-misleading.

(8) Right to Lodge Complaint A data subject has the right to lodge a complaint with the competent authority or committee under the Data Protection Law in the event that the Company including its employee(s) or contractor(s)/service provider(s) violate or fail to comply with the Data Protection Law.

The data subject can submit his/her application to the Company to exercise the rights under subparagraphs (1) – (7) above as per any channel set out in paragraph 12 below.