It is recommended for you to thoroughly read the following terms and conditions.
For us, the privacy of our customers is important. Your personal information and business communications which take place on the Platform shall be under this Privacy Policy. This will explain how PhenixBox collect, store and protect the information you provide while visiting and using our Platform and/or Services. If you just visit to browse through products listed on the Platform, you are not required to provide any personal information. Your identity and status will not be disclosed and/or identified, unless you are logged in to the Platform with the username name and password created with Tor Yod Online.
Unless otherwise specified, the terms and conditions of definitions and interpretations defined in the Terms and Conditions shall apply to this Privacy Policy.
1. Collection of Information
When you create an account with us, we will only store the information that is necessary and relevant to our operations, to achieve our objective of providing you with the best services and experiences, which including these information, but not limited to, name, address, email, phone number, bank account/credit/debit card, other information in relation to purchase order and the information collected while you access the Platform and use our Services, including information on device, location and network service providers, for the following purposes:
a) To provide or support your use of services.
b) To process your purchase orders and payments via the Platform.
c) To process the shipment of products you have purchased through the Platform, where we may forward your personal information to our shipping partners.
d) To inform you about shipping and its progress.
e) To compare and cross-check with third parties to verify the information.
f) To manage your account created with us, including, but not limited to, identifying, monitoring and managing your payments made through the internet or online, monitoring downloads from the Platform, analyzing statistics and behavior for developing and customizing format, information and platform content suitable for you.
g) To send out marketing and promotions newsletter on interesting products or services. However, you can unsubscribe at any time through unsubscribe link provided in the newsletter sent to you.
We will only be able to collect your personal information when you provide us with your information voluntarily. If you choose not to provide us with your personal information or choose to withdraw your consent to use your personal information, we may not be able to provide our services to you. You may log-in and modify your personal information that you provide to us at any time.
If you provide us with third party information, it shall assume that you have obtained the consent or permission of the third party involved to disclose and deliver such personal information to us.
By accepting the Privacy Policy, you acknowledge and agree that all information provided by you is valid and not misleading and shall be perpetually kept up to date. And you will inform us of any change made from accessing your account on the Platform.
Information about your purchase order shall be kept with us, however, for security reasons, we cannot retrieve information directly. Nevertheless, you may view your purchase orders and information on your account, marketing / promotional content by logging into your account on the Platform.
2. Disclosure of Personal Data Protection Notice[1]
The companies, as listed in the document “List of Companies within the Group for the Purpose of Personal Data Protection Operations” (collectively referred to as the “Companies”) acknowledge and recognize the importance of the right to privacy and the right to personal data of all persons which are important rights guaranteed and protected by law. As certain data that the Companies needs to receive from you for the benefit of providing services and operating the business of the Companies are of the nature of personal data that are protected by law, the Companies are committed to establishing good standards in the performance and protection of such personal data. In order to ensure that the collection, use or disclosure of such personal data is in accordance with the requirements of the Personal Data Protection Act B.E. 2562, the Companies have prepared this Personal Data Protection Notice to inform you of the details of your personal data that the Companies collect, use or disclose, the period of retention of such personal data, including the need and purpose for collecting, using or disclosing your personal data, and your legal rights. Please carefully read and understand this Personal Data Protection Notice for the benefit of exercising any of your relevant rights to the Companies.
If you have any questions regarding personal data under this Personal Data Protection Notice, you can contact the Companies through the channels that are most convenient for you as detailed below.
How do the Companies collect your personal data?
In collecting your personal data, the Companies will collect your personal data directly from our interaction with you through various channels, such as through you filling in your data in a request form, contract, letter, or other documents; or through electronic systems such as filling in data via the Companies’ website, cookies, applications, or through other channels. In certain cases, the Companies’ may receive your data from other sources, such as referrals about you from your friends or associates, or from any public source that the data are generally disclosed, etc.
In collecting your personal data, the Companies will collect personal data only as necessary under lawful purposes, and only for the purposes that have been notified to you before or at the time of the collection of personal data.
What personal data of yours do the Companies collect?
In the operation of the Companies’ businesses, the Companies are required to collect your personal data for the purpose of operating business and providing services to you. Details are as appear in “Notice of Details relating to the Collection, Use and Disclosure of Personal Data[1]”.
Using your personal data for marketing
The Companies may use your personal data to offer products or services that may be of benefit to you and may contact you from time to time to inform you of existing or new products or services. The Companies may also disclose your personal data to related companies or trading partners so that such related companies or trading partners can inform you of their products or services through various marketing channels by electronic communication, e-mail, telephone, text messages and other forms of communication. This is only to the extent that you have given your consent.
If you wish to change any contact method that you have previously informed the Companies or if you no longer wish to receive any of the above marketing information, you can notify the Companies at any time in order to exercise your relevant rights in the “Contact with the Companies” section.
In what cases do the Companies disclose your personal data?
The Companies will retain your personal data without disclosing your personal data to third parties or the public except where it is for purposes that have been notified to you as shown in the “Notice of Details relating to the Collection, Use and Disclosure of Personal Data[2]”, or where your express consent has been received, or where there are legitimate grounds to do so.
Transferring of personal data abroad
In the operation of Companies’ businesses, the Companies will not transfer or disclose your personal data to recipients located abroad, except where it is for purposes that have already been notified to you, or where your express consent has been received, or where there are legitimate grounds to do so.
Data security and personal data protection
The Companies have taken various measures to keep your personal data safe. This includes restricting access of data to personnel who have relevant duties and responsibilities, fostering understanding and conducting training to the Companies’ employees and personnel to comply with appropriate personal data protection standards, assigning duties to both the Companies’ personnel and data processors to comply with appropriate personal data standards, including the duty to prevent data leaks and the duty to implement security measures appropriate to the processing of data.
If you have reason to suspect that your personal data has been violated or if you have questions about the Companies’ protection of your personal data, you can contact the Companies in the “Contact with the Companies” section.
Rights of the data subject
As a data subject, you are entitled to the protections under the Personal Data Protection Act B.E. 2562 as follows:
- Right to withdraw consent
In cases where the Companies have requested and obtained your consent to collect, use or disclose your personal data, you have the right to withdraw such consent to the Companies’ collection, usage, or disclosure of the data at any time. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
- Right to request access and right to obtain a copy of the personal data
You have the right to request access and obtain copies of your personal data collected by the Companies. The Companies will consider your request in order to take appropriate actions within 30 days of the date of receipt thereof. However, the Companies reserve the right to reject such request if such refusal is in accordance with the law or court order and such access to and/or obtaining a copy of personal data may cause damage to the rights and freedoms of other persons.
- Right to request for disclosure of the acquisition of personal data that the Companies have obtained without your consent or from other sources
You have the right to request for disclosure of the acquisition of personal data that the Companies have obtained without your consent. If the Companies have obtained your personal data from a source other than from you directly and intend to collect such data, the Companies will notify you within 30 (thirty) days of the date of such receipt in order to request consent, unless it falls within the legal exemption, in which case, you have the right to request the Companies to disclose the source from which your personal data has been obtained.
- Right to obtain personal data and request the Companies to transfer or forward your personal data to another data controller, in the event that the Companies transform your personal data into a format that can be read or used by an automated device and can be forwarded by automatic means
You have the right to obtain your personal data from the Companies in the event that the Companies transform your personal data to a format that can be read or used by automated equipment or device and can be used or disclosed by automatic means. This right includes the right to request the Companies to transfer or forward personal data in such form to other personal data controllers whenever possible by automated means and the right to directly receive the personal data that the Companies transfer or forward in such form to the other personal data controllers unless it is not possible due to technical conditions. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof. However, the Companies reserve the right to reject any such requests if the forwarding or transfer of personal data is for the exercise of duties for the public benefit or the exercise of duties in accordance with the law of the company or may breach the rights and freedoms of other persons.
- Right to object to the collection, use, or disclosure of the personal data
You have the right to object to the collection, use, or disclosure of your personal data by the Companies in accordance with the law or where it is:
- The collection of personal data in the case where the consent from the data subject is not required because it is necessary for the legitimate interests of the Companies or another juristic person who is not the data controller; this is unless the Companies can prove overriding legitimate grounds for the collection, use, or disclosure of the personal data; or
- The collection, use, or disclosure of personal data is for the purpose of direct marketing.
When the Companies receive your request to exercise such right, the Companies will immediately separate your data from other data. However, the Companies reserve the right to reject your request if the Companies can prove that the collection, use or disclosure of personal data in the case where the consent from the data subject is not required because it is necessary for the legitimate interest of the Companies was based on overriding legitimate grounds, or was for the establishment of legal rights, the compliance with law or exercise of legal claims, or for raising the defense of legal claims. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
- Right to request the Companies to erase or destroy or make personal data unidentifiable
You can request the Companies to erase or destroy your personal data and/or make your personal data become unidentifiable in the following circumstances:
- When it is no longer necessary to retain the personal data according to the specific purpose;
- When you withdraw your consent to the collection, use or disclosure of the personal data and the Companies have no legal grounds for collection, use or disclosure of such personal data;
- When you exercise your right to object to the collection, use or disclosure of personal data and the Companies do not have any grounds to refuse; or
- When the personal data has been unlawfully collected, used, or disclosed.
The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof. However, the Companies reserve the right to reject such request if it is necessary and the Companies have legitimate grounds according to the law to reject such request.
- Right to request the Companies to suspend the use of your personal data
You can request the Companies to immediately suspend the use of your personal data in the following circumstances:
- Where the Companies are in the process of verifying for accuracy and completeness, or updating personal data and not causing any misunderstanding at your request;
- Where the personal data may be erased or destroyed, but you want to suspend the use of the personal data instead of the erasure or destruction thereof;
- When it is no longer necessary to retain the personal data according to the specific purpose, but it is necessary you to request that such personal data be retained for the establishment of legal rights, the compliance with law or exercise of legal claims, or for raising the defense of legal claims; or
- When the Companies are in the process of considering the objection to the collection, use or disclosure of your personal data.
The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof. However, the Companies reserve the right to reject such request if it is necessary and the Companies have legitimate grounds according to the law to reject such a request.
- Right to request the Companies to rectify your personal data to be accurate, current, complete, and not cause misunderstanding
In the case that any change occurs which may affect the personal data that you have provided to the Companies or that the Companies have collected, if it is still within the retention period of the personal data as set out in the “Notice of Details Relating to the Collection, Use and Disclosure of Personal Data”[3], you may request the Companies to rectify or update your personal data at any time. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
- Right to complain in case of breach of the requirements according to the Personal Data Protection Act B.E. 2562
If you find that there is any breach or violation of the requirements according to the Personal Data Protection Act B.E. 2562 with respect to your personal data, you can make a complaint to the Companies and/or the relevant government entity. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
If you wish to exercise any rights above, you can contact the Companies in the “Contact with the Companies” section.
Contact with the Companies
You can contact the Companies through the following channel:
Personal Data Protection Department
Personal Data Protection Officer: Siwate Rojanasoonthon (Dr.)
Contact Channel: https://www.assetworldcorp-th.com/en/home
Address: Asset World Corp Public Company Limited 54th Floor, Empire Tower, South Sathorn Road Yannawa, Sathorn, Bangkok 10120
Use of cookies to collect personal data
Cookies are a form of file containing text. Cookies are created when a user accesses a website on which the server creates a cookie. Cookies will be recorded on your browser when you visit that website. The content in cookies can only be retrieved for viewing or reading by the server that created the cookie and will be sent back to the origin website in each visit. The text contained in cookies often contains data that can identify persons, the name of the website, as well as certain numbers and letters. Cookies store details of your browsing behaviour and what is frequently chosen by you and your browser.
More details about the collection, use and disclosure of your personal data via cookies can be found in our “Cookie Policy[4]”.
Other websites
This website may contain links to other websites. If you click on links to other websites, you may allow third parties to collect and disclose your data. The Companies do not control those other websites and are not responsible for their operations in relation to personal data protection. When you leave the Companies’ websites, the Companies recommends that you read the personal data protection policy of every website you visit.
[1] For website usage, please hyperlink the words ” Notice of Details relating to the Collection, Use and Disclosure of Personal Data ” to the corresponding document
[2] For website usage, please hyperlink the words ” Notice of Details relating to the Collection, Use and Disclosure of Personal Data ” to the corresponding document
[3] For website usage, please hyperlink the words ” Notice of Details relating to the Collection, Use and Disclosure of Personal Data ” to the corresponding document
[4] WCP has drafted a Cookie Policy to support the use of cookies/collection of data by cookies. AWC to please consider and discuss with the IT team. If any cookies will be used to store any data, then please fill out the relevant information in the said policy and hyperlink the Cookie Policy to this policy.
3.Notice of Details Relating to the Collection, Use, and Disclosure of Personal Data
The companies listed in the “List of Companies within the Group for the Purpose of Personal Data Protection Operations” (collectively referred to as the “Companies”) collect, use and disclose your data as detailed in Clause 1 and Clause 2 below. As certain data is personal data protected under the Personal Data Protection Act B.E. 2562, to process such data in accordance with the requirements of the law, the Companies have prepared this document for you to acknowledge details of the collection, use and disclosure of your personal data, and your rights under the law. Please read the document carefully and understand the details for the benefit of exercising your rights.
- Collection and Use of Personal Data
In the business operations of the Companies, the Companies collect and use your personal data as follows:
| Types of Data Subject | Personal Data Collected and Used | Purpose of Collection and Use | Legal Basis for the Collection and Use |
| Customers | Name and surname, Address, E-mail, Contact number, Name card, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Copy of house registration, Behavior in using services and buying products, Service usage, purchase and payment history, AWC Connext Application ID, LINE ID, Signature, Tax ID number, and other relevant data | – For business operation of the Companies
– For database for contact and coordination – As supporting document for contract – To notify when payment is due – For the exercise of legal rights and necessary performance under laws relevant to products and services |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law |
| Name and surname, Address, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Bank account detail, Signature, and other relevant data | – For preparation of collection letter
– For the preparation of financial statement and relevant reports, as required by laws – For issuing the quotation, invoice, and receipt – To refund the security deposit to customers who are the tenants of projects – For the exercise of legal rights and necessary performance under laws relevant to products and services |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | |
| Copy of ID card or passport, Copy of house registration, Leased room number, Vehicle registration, Signature, Copy of vehicle registration book, and other relevant data | – For database of the tenants of projects who rent monthly parking space
– To issue the monthly parking tickets for customers who are the tenants of projects |
Necessary for the legitimate interests of the Companies, to perform contractual obligations | |
| Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Address, ID card or passport number, Behavior in using services and buying products, Service usage, purchase and payment history, AWC Connext Application ID, LINE ID, Facebook ID, Google ID, user ID of other social media, and other relevant data | – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal, call center, AWC Connext Application, LINE, and others
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development |
Consent of the data subject | |
| Potential Customers of the Companies | Name and surname, E-mail, Contact number, Name card, and other relevant data | – For database for contact and coordination
– For database for contact in case of available area for rent |
Necessary for the legitimate interests of the Companies, to perform contractual obligations |
| Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Address, ID card or passport number, Behavior in using services and buying products, Service usage, purchase and payment history, AWC Connext Application ID, LINE ID, Facebook ID, Google ID, user ID of other Social Media, and other relevant data | – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal, call center, AWC Connext Application, and others
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development
|
Consent of the data subject | |
| Accident victims in the project’s area | Copy of ID card, passport or driver’s license (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Contact number, Photo of incident, Medical certificate, and other relevant data | – To proceed with exercising rights under insurance contracts
– For the preparation of incident report |
Necessary for the legitimate interests of the Companies, consent of the data subject |
| Service Providers, Suppliers, Professional Advisors, Business Partners, Contractors | Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Photo, Copy of ID card or passport (consists of Name and Surname, Gender, Nationality, Date of birth, Age, Address, Photo), Work permit, Bank account detail, Name card, LINE ID, and other relevant data | – For the business operations of the Companies
– For database for contact and coordination – As supporting document for contract – For the exercise of legal rights and necessary performance under laws relevant to products and services – For preparation of the Companies’ asset control register (in case of sale of Companies’ assets) |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law |
| Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Bank account detail, Signature, and other relevant data | – For issuing invoice and receipt
– For preparation of collection letter – For preparation of financial statement and reports, as required by laws |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | |
| Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Photo, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Work permit, Bank account detail, Name card, LINE ID, and other relevant data | – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal, call center, AWC Connext Application, LINE, and others
– For survey, analysis and market research, behavior analysis, Companies’ products and services development |
Consent of the data subject | |
| Visitors to the projects’ area | Copy of ID card, passport or driver’s license (when used instead of ID card) (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Vehicle registration number, and other relevant data | – For database and to be used as reference or tracking in case that the visitor causes any problems or damages to the customers who are tenants
– As reference for collecting the parking fee |
Necessary for the legitimate interests of the Companies, to perform contractual obligations |
| Press, Government Authorities Officers and Organization Officers | Name and surname, Job title, Address, E-mail, Contact number, and other relevant data | – For database for contact and coordination | Necessary for the legitimate interests of the Companies |
| Natural persons in the Companies’ projects areas that has CCTV | Video from CCTV around the project area and other relevant data | – As evidence and supporting information data in the case of an accident or incident.
– For the exercise of legal rights and necessary performance under laws |
Necessary for the legitimate interests of the Companies |
| Directors of the Companies and their Family Members | Name and surname, Gender, Date of birth, Address, E-mail, Contact number, Education background, work experience, resume, , Copy of ID card, passport or driver’s license (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Photo, Food allergy, Vehicle registration number, Bank account detail, and other relevant data | – For database of Companies
– For verification of information in relation to conducting a transaction with related person(s) – For the exercise of legal rights and necessary performance under laws |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law
|
| Company’s shareholders and their proxies | Name and surname, Address, Contact number, Date of birth, Address, Photo, Amount of shares held, Shareholder registration number, Signature, Copy of ID card (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), and other relevant data | – For database of Companies
– For identity verification to attend the shareholders meeting – As information for the preparation of the shareholders meeting – For the exercise of legal rights and necessary performance under laws |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law |
| Sellers (natural persons) who sell products via the online platform of the AEC Trade Center project | Name and surname, Address, E-mail, Contact number, Date of birth, Gender, Age, Marital status, Nationality, ID card number, Username, Password, Bank account detail, and other relevant data | – For management of online platform of AEC Trade Center project
– For database of Companies – For contact and communication, and for exercise of any legal claim |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law |
| – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development |
Consent of the data subject | ||
| Name and surname, Bank account detail, and other relevant data
|
– For transferring money obtained from the products sold to the Sellers
– For bookkeeping (accounting)
|
Necessary for the legitimate interests of the Companies, to perform contractual obligations | |
| Name and surname, Address, Contact number, and other relevant data | – For picking up the products for delivery to the buyers | Necessary for the legitimate interests of the Companies, to perform contractual obligations | |
| Buyers (natural persons) who buy the products via the online platform of the AEC Trade Center project | Name and surname, Address, E-mail, Contact number, Date of birth, Gender, Age, Marital status, Nationality, ID card number, Username, Password, Customer ID, Behavior of using online platform, Bank account detail, and other relevant data | – For management of the online platform of the AEC Trade Center project
– For database of the Companies – For contact and communication, and for exercise of any legal claim |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law |
| – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development |
Consent of the data subject | ||
| Name and surname, Bank account detail, and other relevant data | – For transferring money in case of products return and refund
– For bookkeeping (accounting) |
Necessary for the legitimate interests of the Companies, to perform contractual obligations | |
| Name and surname, Address, Contact number, and other relevant data | – For processing the products delivery | Necessary for the legitimate interests of the Companies, to perform contractual obligations |
- Disclosure of Personal Data
In the business operations of the Companies, the Companies disclose your personal data to third persons as follows:
| Types of Data Subject | Personal Data to be Disclosed | Purpose of Disclosure | Legal Basis for the Disclosure | Categories of the Recipient(s) |
| Customers | Name and surname, Address, E-mail, Contact number, Name card, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Behavior in using services and buying products, Service usage, purchase and payment history, AWC Connext Application ID, and other relevant data | – For complying with relevant laws
– For the exercise of legal rights and necessary performance under laws relevant to products and services – For development of AWC Connext application |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | – Government authorities (upon request) such as Revenue Department, Stock Exchange of Thailand, Ministry of Commerce, Comptroller General’s Department, Department of Provincial Administration
– Data processor of the Companies who provides service of developing AWC Connext application – Professional advisor, such as financial advisor or legal advisor – Service providers such as system service, document storage service or internal audit service – Asset World Corp PLC, as the data processor, responsible for the accounting, and document storage for the Companies |
| Potential Customers of the Companies | Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Address, ID card or passport number, Behavior in using services and buying products, Service usage purchase and payment history, AWC Connext Application ID, LINE ID, Facebook ID, Google ID, user ID of other social media, and other relevant data | – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal, call center, AWC Connext Application, LINE, and others
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development |
Consent of the data subject | Companies on the list in “List of Companies within the Group for the Purpose of Personal Data Protection Operations” |
| Accident victims in the project’s areas | Copy of ID card, passport or driver’s license (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Contact number, Photo of incident, Medical certificate, and other relevant data | – To proceed with exercising rights under insurance contracts
– For preparation of incident report |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to prevent or suppress danger to a person’s life, body, or health, to comply with and exercise rights under the law, consent of the data subject | Asset World Corp PLC |
| – To proceed with exercising rights under insurance contracts | Necessary for the legitimate interests of the Companies, to perform contractual obligations, to prevent or suppress danger to a person’s life, body, or health, to comply with and exercise rights under the law, consent of the data subject | Insurance companies | ||
| Natural persons in the Companies’ projects areas with CCTV | Video from CCTV around the project area and other relevant data. | – As evidence and supporting data in the event of an accident or any incident
– For the exercise of legal rights and necessary performance under laws |
Necessary for the legitimate interests of the Companies | Victims, injured persons, tenants, police officers, insurance companies |
| Service Provider, Supplier, Professional Advisor, Business Partner | Name and surname, E-mail, Contact number, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), and other relevant data | – For the business operations of the Companies
– For database for contact and coordination – As supporting document for contract |
Necessary for the legitimate interests of the Companies, to perform contractual obligations | Companies on the list in “List of Companies within the Group for the Purpose of Personal Data Protection Operations” |
| Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Photo, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Work permit, Bank account detail, and other relevant data | – For complying with relevant laws
– For the exercise of legal rights and necessary performance under laws |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | – Government authorities (upon request) such as Revenue Department, Stock Exchange of Thailand, Ministry of Commerce, Comptroller General’s Department, Department of Provincial Administration
– Professional advisors, such as financial advisor or legal advisor – Service providers such as system service, document storage service or internal audit service |
|
| Name and surname, Bank account detail, and other relevant data | For financial transactions | Necessary for the legitimate interests of the Companies, to perform contractual obligations | Relevant banks | |
| Name and surname, Gender, Age, Date of birth, E-mail, Contact number, Photo, Copy of ID card or passport (consists of Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Work permit, Bank account detail, Name card, LINE ID, and other relevant data | – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal, call center, AWC Connext Application, LINE and others
– For survey, analysis and market research, behavior analysis, Companies’ products and services development |
Consent of the data subject | Companies on the list in “List of Companies within the Group for the Purpose of Personal Data Protection Operations” | |
| Sellers (natural persons) who sell products via online platform of AEC Trade Center project | Name and surname, Address, E-mail, Contact number, Date of birth, Gender, Age, Marital status, Nationality, ID card number, Username, Password, Bank account detail, and other relevant data | – For management of online platform of AEC Trade Center project
– For database of the Companies – For contact and communication, and for exercise of any legal claim |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | Asset World Corp PLC, as the data processor, who is responsible for the management of online platform of AEC Trade Center project, such as online marketing, accounting and tax filing for Companies |
| – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development |
Consent of the data subject | Companies on the list in “List of Companies within the Group for the Purpose of Personal Data Protection Operations” | ||
| Name and surname, Bank account detail, and other relevant data
|
– For transferring money obtained from the products sold to the Sellers
– For bookkeeping (accounting)
|
Necessary for the legitimate interests of the Companies, to perform contractual obligations | – Asset World Corp PLC, as the data processor, who is responsible for the management of online platform of AEC Trade Center project, such as online marketing, accounting and tax filing for Companies
– Banks that provide payment system service |
|
| Name and surname, Address, Contact number, and other relevant data
|
– For picking up the products for delivery to the buyer
|
Necessary for the legitimate interests of the Companies, to perform contractual obligations | Delivery service providers (in case of using the delivery service in online platform that is provided by the Companies) | |
| Buyers (natural persons) who buy the products via online platform of AEC Trade Center project | Name and surname, Address, E-mail, Contact number, Date of birth, Gender, Age, Marital status, Nationality, ID card number, Username, Password, Customer ID, Behavior of using online platform, Bank account detail, and other relevant data | – For management of online platform of AEC Trade Center project
– For database of the Companies – For contact and communication, and for exercise of any legal claim |
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | – Asset World Corp PLC, as the data processor, who is responsible for the management of online platform of AEC Trade Center project, such as online marketing, accounting and tax filing for the Companies |
| – For advertising, marketing, presenting products and services, providing benefits and special offers for the Companies’ products and services through various channels, such as e-mail, mobile SMS, postal
– For survey, analysis and market research, customer’s behavior analysis, Companies’ products and services development |
Consent of the data subject | Companies on the list in “List of Companies within the Group for the Purpose of Personal Data Protection Operations” | ||
| Name and surname, Bank account detail, and other relevant data | – For transferring money in case of products return and refund
– For bookkeeping (accounting)
|
Necessary for the legitimate interests of the Companies, to perform contractual obligations | – Asset World Corp PLC, as the data processor, who is responsible for the management of online platform of AEC Trade Center project, such as online marketing, accounting and tax filing for Companies
– Banks that provide payment system service |
|
| Name and surname, Address, Contact number and other relevant data | – For processing the products delivery
|
Necessary for the legitimate interests of the Companies, to perform contractual obligations | – Delivery service provider (in case of using the delivery service in online platform that is provided by Companies)
– Sellers (in case the Buyers request the Sellers to deliver the products) |
|
| Customer ID, Customer’s behaviours in using online platform | – For data analysis and online platform development of the AEC Trade Center project | Necessary for the legitimate interests of the Companies, consent of the data subject | – Data processors of the Companies providing data analytics services (Google Analytics) | |
| Directors of the Companies and their Family Members | Name and Surname, Gender, Date of birth, Address, E-mail, Contact number, Education background, Work experience, Resume, Copy of ID card, passport or driver’s license (which includes Name and surname, Gender, Nationality, Date of birth, Age, Address, Photo), Photo | – For compliance with applicable laws.
– To facilitate directors in performing tasks or doing various transactions
|
Necessary for the legitimate interests of the Companies, to perform contractual obligations, to comply with and exercise rights under the law | – Relevant government agencies such as the Stock Exchange of Thailand, the Securities and Exchange Commission, the Ministry of Commerce, and embassies
– Service providers such as air ticket booking agents – Others requesting information, such as Siam Commercial Bank for making journals. |
- Retention Period of Personal Data
The Companies will retain your personal data for (a) 30 years from the collection date, for the case that the personal data is in electronic format and for the case that personal data is in document format such as license, drawing, meeting minutes and documents evidencing ownership, and (b) 10 years from the collection date for the case that the personal data is in other formats.
- Rights of the Data Subject
As a data subject, you are entitled to protection under the Personal Data Protection Act B.E. 2562 per details as shown in Attachment 1.
- Contact with the Companies
In the case that you wish to exercise any of your rights mentioned under “Rights of the Data Subject” above, you may notify your intention to exercise such rights to the Companies via the following channels:
- Companies’ Personal Data Protection Unit
- Data Protection Officer: Siwate Rojanasoonthorn (Dr.)
- Contact Channel: https://www.assetworldcorp-th.com/en/home[email protected]
- Address: Asset World Corp Public Company Limited
- 54th Floor, Empire Tower, South Sathorn Road,
- Yannawa Sub-district, Sathorn District, Bangkok 10120
Attachment 1
Rights of the Data Subject
As a data subject, you are entitled to the protections under the Personal Data Protection Act B.E. 2562 as follows:
- Right to withdraw consent
In cases where the Companies have requested and obtained your consent to collect, use or disclose your personal data, you have the right to withdraw such consent to the Companies’ collection, usage, or disclosure of the data at any time. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
- Right to request access and right to obtain a copy of the personal data
You have the right to request access and obtain copies of your personal data collected by the Companies. The Companies will consider your request in order to take appropriate actions within 30 days of the date of receipt thereof. However, the Companies reserve the right to reject such request if such refusal is in accordance with the law or court order and such access to and/or obtaining a copy of personal data may cause damage to the rights and freedoms of other persons.
- Right to request for disclosure of the acquisition of personal data that the Companies have obtained without your consent or from other sources
You have the right to request for disclosure of the acquisition of personal data that the Companies have obtained without your consent. If the Companies have obtained your personal data from a source other than from you directly and intend to collect such data, the Companies will notify you within 30 (thirty) days of the date of such receipt in order to request consent, unless it falls within the legal exemption, in which case, you have the right to request the Companies to disclose the source from which your personal data has been obtained.
- Right to obtain personal data and request the Companies to transfer or forward your personal data to another data controller, in the event that the Companies transform your personal data into a format that can be read or used by an automated device and can be forwarded by automatic means
You have the right to obtain your personal data from the Companies in the event that the Companies transform your personal data to a format that can be read or used by automated equipment or device and can be used or disclosed by automatic means. This right includes the right to request the Companies to transfer or forward personal data in such form to other personal data controllers whenever possible by automated means and the right to directly receive the personal data that the Companies transfers or forwards in such form to the other personal data controllers unless it is not possible due to technical conditions. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof. However, the Companies reserve the right to reject any such requests if the forwarding or transfer of personal data is for the exercise of duties for the public benefit or the exercise of duties in accordance with the law of the company or may breach the rights and freedoms of other persons.
- Right to object to the collection, use, or disclosure of the personal data
You have the right to object to the collection, use, or disclosure of your personal data by the Companies in accordance with the law or where it is:
- The collection of personal data in the case where the consent from the data subject is not required because it is necessary for the legitimate interests of the Companies or another juristic person who is not the data controller; this is unless the Companies can prove overriding legitimate grounds for the collection, use, or disclosure of the personal data; or
- The collection, use, or disclosure of personal data is for the purpose of direct marketing.
When the Companies receive your request to exercise such right, the Companies will immediately separate your data from other data. However, the Companies reserve the right to reject your request if the Companies can prove that the collection, use or disclosure of personal data in the case where the consent from the data subject is not required because it is necessary for the legitimate interest of the Companies was based on overriding legitimate grounds, or was for the establishment of legal rights, the compliance with law or exercise of legal claims, or for raising the defense of legal claims. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
- Right to request the Companies to erase or destroy or make personal data unidentifiable
You can request the Companies to erase or destroy your personal data and/or make your personal data become unidentifiable in the following circumstances:
- When it is no longer necessary to retain the personal data according to the specific purpose;
- When you withdraw your consent to the collection, use or disclosure of the personal data and the Companies have no legal grounds for collection, use or disclosure of such personal data;
- When you exercise your right to object to the collection, use or disclosure of personal data and the Companies do not have any grounds to refuse; or
- When the personal data has been unlawfully collected, used, or disclosed.
The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof. However, the Companies reserve the right to reject such request if it is necessary and the Companies have legitimate grounds according to the law to reject such request.
- Right to request the Companies to suspend the use of your personal data
You can request the Companies to immediately suspend the use of your personal data in the following circumstances:
- Where the Companies are in the process of verifying for accuracy and completeness, or updating personal data and not causing any misunderstanding at your request;
- Where the personal data may be erased or destroyed, but you want to suspend the use of the personal data instead of the erasure or destruction thereof;
- When it is no longer necessary to retain the personal data according to the specific purpose, but it is necessary you to request that such personal data be retained for the establishment of legal rights, the compliance with law or exercise of legal claims, or for raising the defense of legal claims; or
- When the Companies are in the process of considering the objection to the collection, use or disclosure of your personal data.
The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof. However, the Companies reserve the right to reject such request if it is necessary and the Companies have legitimate grounds according to the law to reject such a request.
- Right to request the Companies to rectify your personal data to be accurate, current, complete, and not cause misunderstanding
In the case that any change occurs which may affect the personal data that you have provided to the Companies or that the Companies have collected, if it is still within the retention period of the personal data as set out in the “Notice of Details Relating to the Collection, Use and Disclosure of Personal Data”, you may request the Companies to rectify or update your personal data at any time. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
- Right to complain in case of breach of the requirements according to the Personal Data Protection Act B.E. 2562
If you find that there is any breach or violation of the requirements according to the Personal Data Protection Act B.E. 2562 with respect to your personal data, you can make a complaint to the Companies and/or the relevant government entity. The Companies will consider your request in order to take appropriate actions within 30 (thirty) days of the date of receipt thereof.
If you wish to exercise any rights above, you can contact the Companies in the “Contact with the Companies” section.
4. Personal Information Updates
You may update your personal information at any time by logging into your account on the Platform. Or if you have problem updating your personal information, you can notify us through the contact details listed below.
You agree that your updated personal information will processed by us to our shipping and/or payment partners or our affiliates, with whom we share your personal information, only if your personal information is still required for the purposes stated above.
5. Access to Personal Information
When you create an account with PhenixBox, by logging into your account on the Platform, you may see details of your purchase orders which including, but not limited to details on paid and shipped orders or orders that are still undergoing payment and/or shipping process. You can also manage your information on shipping address, payment details or your subscription to newsletters. You agree to keep your username, password, and order details confidential and will not disclose the same to unauthorized third parties. Whereby we will not be responsible for any damage occurred from misuse of usernames, passwords and order details, except otherwise provided in the Terms and Conditions.
6. Personal Information Security
To protect the security of stored data, including your personal information, We have a guideline to restrict access to personal information, provide technological approach in accordance with industry’s standard to prevent unauthorized computer access and to discard your personal information when such information is no longer required for legal purposes and/or for purpose of performing obligations under any further Terms and Conditions pertaining to the Platform and Services.
When setting up a password, we recommend using a series of numbers, letters or symbols in your password. And you will be responsible for whatever actions taken under name or through your account, include any consequence, control of personal information or any information provided by you to us, any act executed on your behalf. You will notify us and change your password if you have any reason to believe that your password has been revealed or is no longer confidential. For the security of account and any information pertained therein, we strongly recommend that you always sign out and close the browser if you are not using a personal device to access the Platform. You acknowledge and agree that we shall not be held responsible for misuse of passwords, except for misuse as a result of our willful misconduct or gross negligence or if you have reason to believe that your personal information is compromised in the Platform, you can notify us through the contact details listed below.
7. Minor
In case the person using the Platform is under the age of 18, he/she must be under supervision of a parent or legal guardian only.
8. Data Collection
For the use of analyzing and evaluating which will help us in having better understanding about your needs and interests and in providing you with great experience when accessing the Platform in terms of speed, security and convenience, including enhancement of privacy protection, you agree that we or our authorized service providers may use the following methods to collect any information while you accessing the Platform.
a) Cookies placed on the internal memory of your browser or on the device you are using when you access the Platform;
b) Web Beacon: a small graphic image placed on the Platform;
c) or other similar programs used for storing platform usage information.
When you access the Platform, the server will remember and automatically save the information sent from your browser, including, but not limited to, IP address of your computer, the type of browser you use when accessing the Platform, the website you have accessed before you log on to the Platform, the pages you visit on the Platform, the amount of time you spend browsing the site, the product or information you search for on the Platform, the date and time of your visit and other statistic data.
9. Spam, Spyware and Computer Viruses
To prevent spam, spyware, computer viruses, including any other prohibited materials which are considered to be undesirable and are possible to cause damage to the Platform and/or Services, including other users on the Platform, systems and devices, you agree not to post any messages or taking any action that would be importing spam, spyware or computer viruses via the Platform. You will set up communication settings based on the Platform’s policy. If you would like to report suspected spam, spyware, computer viruses including any other prohibited materials, you can notify us via the contact details listed below.
10. Privacy Policy Updates
We reserve the right to update our privacy policy at any time. The update of the Privacy Policy shall be effective immediately and you shall be deemed to have acknowledged when the updated Privacy Policy is announced or published or broadcasted.
11. Contacting Tor Yod Online
If you have any inquiries, comments or need assistance, you can contact us via email: [email protected]