นโยบายความเป็นส่วนตัว

Privacy Notice of HK Estate (HK Management And Service Group Company Limited)

HK Estate suggests our Subscriber understand this Privacy Policy, We provide this privacy notice to inform our customers of our policy concerning this policy, which prescribes the process of data collection, storage, use, and disclosure including other rights of Subscriber (“Data Subject”). Therefore, HK Estate would like to announce the Policy as follows:

Personal Data

“Personal Data” means any information pertaining to a Data Subject, which enables the identification of the Data Subject, whether direct or indirect.

Data collection

We collect, use, or disclose your personal data following:

Type of Personal Data

Personal Data

Personal data

  • ข้อมูลการติดต่อรวมถึง ชื่อ นามสกุล รหัสไปรษณีย์ อีเมล และเบอร์โทรศัพท์
  • Contact data (including names, postal addresses, email addresses, and numbers)
  • ข้อมูลส่วนตัวรวมถึง เพศ อายุ ข้อมูลบนบัตรที่ออกโดยหน่วยงานของรัฐ ภาพจากกล้องวงจรปิด
  • Personal detail (including gender, age, National Registration Identity Card, CCTV)
  • ข้อมูลบัญชีผู้ใช้รวมถึง ข้อมูลการเข้าสู่ระบบ อีเมลและข้อมูลอื่น ๆ ที่ท่านได้ให้ข้อมูลผ่านบัญชีผู้ใช้นั้น
  • User Account Information (including log-in details, email address, and other information provided through your account)
  • ข้อมูลทางการเงินรวมถึง เงินเดือน เลขบัญชีธนาคาร ข้อมูลบัตรเครดิต
  • Financial Information (including salary record, bank account information, credit card information)
  • ข้อมูลการทำธุรกรรมรวมถึง สถานะการชำระเงิน ประวัติการทำธุรกรรม ใบเสร็จ ใบแจ้งหนี้
  • Transaction Information (including payment status, transaction history, receipt, invoice)
  • ข้อมูลการสมัครรับข่าวสาร หรือกิจกรรมทางการตลาดรวมถึง ข้อมูลความยินยอมในการสมัครรับข่าวสารจากบริษัท บริษัทในเครือ หรือพันธมิตรทางธุรกิจ
  • Subscription Information (including consent record of the Company, its affiliates, or Business Partners)
  • ข้อมูลพฤติกรรมการใช้บริการรวมถึง เช่น ข้อมูลเกี่ยวกับการใช้งานของลูกค้าบนเว็บไซต์หรือแพลตฟอร์มใดๆ การใช้ผลิตภัณฑ์และบริการ ตำแหน่งของท่านในการเข้าเยี่ยมชมโครงการ ข้อมูลเกี่ยวกับความชอบ หรือ ความคิดเห็นของท่าน
  • Behavior Information (including users’ behavior on websites or any platforms, consumer behavior for product and service, your location when you have visited our projects, your preferences and opinions.
  • ข้อมูลที่รวบรวมโดยระบบอิเล็กทรอนิกส์และเทคโนโลยีอื่นๆ ที่คล้ายคลึงกันรวมถึง ล็อคไฟล์ หมายเลขประจำเครื่องคอมพิวเตอร์/ (IP Address) ซึ่งข้อมูลประเภทนี้จะถูกรวบรวมในขณะที่ใช้แพลตฟอร์มออนไลน์
  • Information collected by electronic systems and other similar technologies including Log file or IP Address, which these information will be collected while you are using the online platform.

Sensitive Personal data

  • ในบางกรณีบริษัทอาจเก็บข้อมูลอ่อนไหว รวมถึง ศาสนา เชื้อชาติ ชาติพันธุ์ ประวัติอาชญากรรม และข้อมูลชีวภาพ ซึ่งบริษัทจะขอความยินยอมจากท่านโดยชัดแจ้งเท่านั้น ทั้งนี้ เว้นแต่กฎหมายจะอนุญาตให้เก็บรวบรวมโดยไม่ต้องขอความยินยอม
  • In some cases, we may request your explicit consent to collect sensitive information, including religion, race, ethnicity and criminal records, unless allowed or required by the applicable laws.

Sources of your personal data

We may get your personal data from the following channels:

Collect personal data directly from you (“Data Subject”)

  •   Online platforms: we may collect your personal data when you register for an account, participate in a survey, contest, or promotional offer, subscribe to receive promotional communications, or otherwise connect with us.
  •   Offline interaction: we may collect your personal data offline, such as when you visit our offices, contact us via phone, or attend our events or give us business cards. 
  •   Our affiliates and business partners: in this case, we will consider and take appropriate measures to ensure that we can collect your data without violating the applicable laws.

Collect personal data from Other sources

  •   Open-source material such as public websites.

Purpose of Collect, Use, or disclose your personal data

  •   To provide service which is requested by you, for example, in case you subscribe for information and promotion, the Company will only store and use basic information such as first name, last name, e-mail address, and telephone number for any subsequent communication with you
  •   To improve website performance, create a marketing plan, analyze data usage, evaluate the performance of service, and improve and develop products and services of the Company.
  •   To communicate and provide information relating to products and services of the Company and/or its Affiliates, including related privileges or promotion of the said products or services or any future change concerning the Privacy Policy for personal data protection.
  •   To comply with contracts to which you are a party or of which the Company uses services, such as to share your location information where the Company uses the location service of a third party.
  •   To pursue any legal actions, such as to prevent or cease any loss of life or damage to the body or health of a person, for educational study or statistics to provide an appropriate measure to protect your rights and freedom.
  •   To serve any other purposes which have been notified at the time of collection of your Personal Data or any other purposes concerning any of the above purposes.

We will not use or disclose your personal data UNLESS it is necessary for the purposes set out above or disclosed to any person in the Company or the parties involved in the contract, as required by law, governmental authority, supervision organization, or with your consent.

Disclose personal data to others

The company will not disclose your personal information to other individuals and juristic persons who are not affiliated companies of the company (“other people”) unless it is disclosed to achieve the purpose of collecting and processing personal information as specified in this privacy notice. The company may disclose your personal information to other people such as 

We may share or transfer your personal data to the following recipient to fulfill the purposes under this Policy. The recipients may be located or have the server(s) located in Thailand or outside Thailand. The recipients can be categorized as follows: (for each type including representatives its employees and directors)

(a)   HK Management and Service Group Companies

As the HK Estate is under the  HK Management and Service Group Companies, by the nature of the internal management, we may share or disclose your personal data to other entities within  HK Management and Service Group Companies to fulfill and under the purposes of this Policy. To share and transfer, the company will make sure that your personal information will be shared or transferred safely and have an appropriate standard for the protection of personal data.

(b)    Third Party Service Providers

The Company may share your personal data with third party service providers in the event that the Company hires or appoints third party service providers to process your personal data for/ on behalf of the company for the purposes specified in this Policy, including for website administrative management, delivery of products/services, marketing, data storage, IT solution, payment system. 

(d)    Business partners 

We may share your personal data with our business partners when they jointly offer products or services jointly with us; or when we offer their products/services to you.

(e)   Third parties required by law 

To comply with the applicable laws or regulations, we may be required to disclose or share your personal information with competent authorities, courts, or any other persons, whose right is specifically defined by laws or if there is reason to believe that such disclosure is necessary to protect the rights of the Company or third parties.

Where the Company discloses or transfers personal data to any third parties, other than HK Management and Service Group Companies, the Company will enter into an agreement with the third party setting out the purposes of processing and the respective obligations of each party in place to protect data against unauthorized or accidental use, access, disclosure, damage, loss, or destruction.

Retention period of personal data

We will only retain the personal data for as long as necessary to fulfill the purposes for which we collected it and to the extent permitted by the Personal Data Protection Act B.E. 2562 or other applicable laws.

We have prepared schedules to specify the appropriate retention periods to ensure that when we no longer need to use your personal data we will remove it from our systems and records and/or take steps to anonymize it so that you can no longer be identified from it.

Storage period

  1. Contact information, including name, address, email, and phone number   10 years
  2. Personal information, including gender, age, ID card information   10 years
  3. User account information, including login information, emails, and other information you provide through that account 10 years
  4. Transaction information, including payment status, transaction history, receipts, invoices –inquiries pending from accounting department 10 years
  5. Subscription information or marketing activities, including consent to subscribe to news from the company’s affiliates or business partners 10 years
  6. Service behavior data, including information about the use of any website or platform, purchases of products and services, or opinions 10 years
  7. Information collected by electronic systems and other technologies such as IP address lock files, where information is collected during the use of online platforms 10 years
  8. Photos, video, and/or sound from company events, seminars, or other promotional activities where photos are characterized as capturing the atmosphere 10 years
  9. Sales-related information, including interaction history, number of sales, or phone calls 10 years
  10. CCTV images 60 days from the date of recording

International transfer of personal data

Where your personal data is transferred to a third party or servers located outside Thailand, the company will take any necessary measures to ensure that personal data is transferred safely with appropriate privacy protection measures.

Right of Data Subject

You can exercise your rights under the PDPA, details as specified below, through the channels prescribed by us:

  1. Right to withdraw consent The right to withdraw your consent, at any time, where we process personal data based on consent at any time. However, we may continue processing your personal data based on another legal basis.
  2. Right to access and obtain a copy The right to receive a copy of your personal data processed by us and to obtain other information about how we collect/process your personal data and why we process your personal data. Your personal data will generally be provided to you in electronic form.
  3. Right to data portability The right to ask that we transfer the personal data to another data controller (or ask us to do so if technically feasible) where our lawful basis for processing the personal data is consent or necessity for the performance of our contract with you and the processing is carried out by automated means.
  4. Right to object The right to object to any processing which is based on our legitimate purpose or other legal ground.
  5. Right to restrict The right to request to restrict the processing of your personal data.
  6. Right to erasure The right to request the erasure, destruction, or anonymization of your personal data.
  7. Right to rectification The right to rectify inaccurate, incomplete, or misleading personal data relating to you.

How security measures and quality of data

We have implemented (have required third parties to implement) appropriate technical and physical measures to safeguard and protect personal data from unauthorized or unlawful processing and against accidental or unlawful destruction, loss or alteration or damage, unauthorized disclosure of, or access to, personal data.

What are the marketing and promotional activities

Generally, the Company will only process only personal data that is necessary to fulfill and in a lawful manner, which the lawful basis can be classified, as follows:

1.The purpose for which we have obtained your consent 

  •   Marketing and Communications

When we cannot rely on another lawful basis, we will request your consent for the purpose of marketing and communication, including offering products or services of us, our affiliates, or business partners.

  •   Sending or Transferring your personal information overseas 

Unless allowed or required by applicable laws, when we have to transfer your personal data to a country without adequate personal data protection standards for a personal data, we will request your consent before such transfer. 

  •   Collection of sensitive data

When you voluntarily provide your sensitive data to us, it means that you have permitted us to use your sensitive data for the following purposes: 

 (a)   Health Information, including congenital disease, blood group, and food allergy, is collected for food preparation during the events. 

(b)   Religion is collected for the benefits of providing facilities to suit you; 

(c)   Race/Nationality may be collected when you provide the national registration identity card

(d)   Criminal Record is collected for fraud prevention and security purposes

Please note that your sensitive data in the form of anonymized information may be used for statistical purposes to develop products or services that will be more suitable for you.

2.Contract

We may process your personal data where we need to perform under the contract that we are about to enter into or have entered into with you, whether verbal or written contract, which includes the following circumstances:

(a)   Considering your eligibility and suitability before entering into a contract or providing a service to you. 

(b)   Taking any action in connection with contractual obligations between the Company and you, inkling contacting you to fulfill your obligation, sending the relevant documents.

(c)   Verifying your identity when you prefer to exercise your rights under the contractual obligation between the Company and you. 

3.Legitimate Interest

We may rely on our legitimate interests or third parties’ legitimate interests to process your personal data. In this case, necessity, the data subject’s fundamental rights and interests will be considered. The following circumstances constitute a legitimate interest:

(a)    We may rely on our security purpose, including when we collect visitors’ information, request ID cards in exchange for visitor cards and record CCTV.

(b)    We may rely on our internal management purpose, including when the company of HK Management And Service Group Companies enter into the event of merger or reorganization or similar event, we may transfer your personal data to third parties as part of such event on need to know basis.

(c)   We may process your personal data to enhance and improve products and services for you and all customers of HK Management And Service Group Companies. 

(d)    We may process your personal data for marketing and communications purposes which will not materially affect the fundamental rights and the data subjects have the right to opt-out at any time. 

(e)   During the event, seminar, or any other sale events, whether the online or physical event, the photograph/ video, or audio may be recorded as a part of the event’s atmosphere. 

(f)   Where we have a relationship with any juristic person, we may collect personal data of relevant individuals, including copies of ID cards and contact details of authorized representatives.

(g)   We may collect sales activities including interaction history, number of sales, appointment, or contact records for performance analysis and enhancement purposes.

4.Other legal basis for processing your personal data

In addition to legal grounds specified in 1. – 3., the Company may rely on other legal grounds to process your personal data, including where processing is necessary for compliance with a legal obligation; and where processing is necessary to protect the vital interests of a data subject or another person; where processing is necessary for performance of a task carried out in the public interest in the exercise of official authority vested in the controller. The other legal grounds are processing for various purposes, including: 

(a)   to comply with the requirement on the financial report required by auditors and/or government authorities and to cooperate with law enforcement entities, government authorities, regulators, and/or the court’s order regarding legal proceedings or investigation. 

(b)   to comply with the Computer Crime Laws in Thailand, we may need to record a Log file.

Notwithstanding the foregoing, we may use your anonymized data for any purpose without your consent.

What are the actions, practices, and policies regarding personal data

We reserve the right to update this policy for any reason, including but not limited to complying with relevant laws of Thailand, Thailand government policy, regulations, and other obligations of a similar nature. 

Any changes to this Privacy Policy will become effective upon publishing the Privacy Policy.

Data Protection Officer

Attn: Personal Data Protection Office 

Address: 36/159, Motorway Rd., Khlong Song Ton Nun Subdistrict, 

Lat Krabang District, Bangkok 10250

Tel: 064-142-8888

081-462-6666

Email: info.hkestate@gmail.com

Edition as of September 4, 2024

นัดหมายชมทรัพย์

กรุณากรอกข้อมูล เจ้าหน้าที่จะติดต่อกลับโดยเร็วที่สุด