www.doitung.com

DoiTung  (“DoiTung”) hereby gives you the confidence that all the personally identifiable information that you have provided to us on www.doitung.com (the “Website”) are important and critical information that we commit to assure the protection and we shall only process those information at the best security information standards and all those personally identifiable information (“PIIs”) shall be kept in strict confidence.

Once you, as the user, either as the individual user or the representatives of your corporate user, enters into this website; contacts; uses any services provided by DoiTung, in particular entering into the sale and purchase transaction of any goods and services of DoiTung; or directly gives your PIIs to DoiTungin any other circumstance, including with the consent granted under the terms and conditions of this Privacy Policy, DoiTung shall deem that you have agreed and accepted to be bound and comply with this Privacy Policy; provided that it is understood that this Privacy Policy is intended to supplement instead of superseding or replacing any consent that you may have given DoiTung in relation to the PIIs process prior to this Privacy Policy.

Please kindly study this Privacy Policy in details, together with the Terms of Services of the Website. If you do not agree to the PIIs process defined by DoiTung hereunder, DoiTung reserves the right to refuse to provide any service to you since the PIIs processing as defined hereunder are critical for the performance of the services to you.

This Privacy Policy shall be applicable to this Website, the communication and/or services provided by DoiTung only and shall not be applicable to the application, services or other website of any third party that may connect to the Foundation’s website that DoiTung does not have any control over. In such circumstance, you should be studying the relevant privacy policy declared and announced by those third parties that are separate from this Privacy Policy.

DoiTung may adjust or amend this Privacy Policy at any time in order to assure the compliance with the relevant laws and regulations and to match with the services provided by the Foundation; provided that DoiTung shall notify you of all the amendment and modification made by announcing the amended Privacy Policy on the website.

PII that DoiTung is processing in the Services Provision and the Communication with the User

The PII being processed pursuant to this Privacy Policy is important and critical for the business operation of the Foundation, in particular the parts that relates directly to the provisions of the services on the Website by DoiTung to the user, ranging from the notice and communication delivery for the transaction effectuation; the communication for the proposal of the quotation that you may be interested in; product or service deliver; the customer relationship management; the introduction of the new services and events; and the planning of new and future products or services. The PII that are required to be processed include the following information:

1. General information relating to you, including name and surname;
2. Contact information, including address, contact address, telephone number and email;
3. User’s transaction information, including the sale and purchase transaction log of your services and/or goods, the product and service details that you have bought and include information and bank account or credit card number used for the purchase of services and goods;
4. Information relating to your preference and interest that DoiTung may process to personalize the Foundation’s recommendation on services and/or products that would fit with your preference and interest;
5. Other technical information that can identify or link to your identity, including IP address, setting and browser connection that the user uses to connect to the Website and may include various types of cookies used in order to track your behavior on the Website;
6. Other information that you may give for the purpose of marketing and sales promotion; the participation in the event, survey, competition, lucky draw; or any other promotional events and activities; and
7. Other PII that you may give to DoiTung during the correspondence and communication for the service performance from DoiTung to you as the user; or any other PII that you may give the consent to DoiTung to process.

DoiTung may collect your PII in the following circumstances:

1. When you contact DoiTung (i.e. when you contact DoiTung for any enquiry or for the effectuation of the transactions undertaken on the Website, on phone or via email);
2. When you register your interest and when you subscribe to get information and news relating to the products and/or services of DoiTung as well as other marketing materials;
3. When you participate in the survey, competition, lucky draw or other promotional events;
4. When you gives your feedback and opinion on the Foundation’s services (i.e. survey gathering on the Website) and/or
5. When you submit any PII to DoiTung for any other purposes.

Objectives for the PII Process Undertaken by the Foundation

The PII that you have provided to DoiTung shall be collected and used for these particular purposes:

1. Notice communication delivery; contact back for the proposal of the quotation as per your request; product and/or service delivery, including after-sale services (i.e. reparation and warranty claim, training on the goods and/or services as well as other support services);
2. Upon the receipt of your consent, use your PII in email or other communication channels, including the social media channel for sending the information and newsletter about DoiTung ’s products and services that may match your interest;
3. Creation and improvement of the business relationship between DoiTung and you that may include the case where DoiTung uses your PII for the employee training or supervisions to assure the service quality (in particular for the customer support staff provided through various channel); for analysis, investigation and complaints resolution; provided that for the PII process for this particular purpose, DoiTung shall re-assess the necessity in doing this again to limit the scope to as necessary only;
4. Management of the communication and correspondence that you may contact DoiTung (i.e. enquiry or complaint management or other feedback submission)
5. Preference analysis where DoiTung may adjust the service provisions and channel, in particular the ones relating to the test and analysis process where DoiTung shall use their best effort in fulfilling your interest and request to the maximum extent and to create the good relationship between DoiTung and you;
6. Prevention and inspection of the fraud or illegal use of the Foundation’s services, i.e. to prevent and protect the legitimate rights of DoiTung in managing and resolving the breach that you may have committed; and to assess and manage the commercial risk or any other associated risks in other aspects of the Foundation;
7. Assessment and participation in the competition, promotional events or other activities for points collection that you may have agreed to enter into under the relevant defined terms;
8. Performance of any legal obligations that DoiTung may have and compliance with the instructions given by the relevant regulatory authorities, for instance, for the tax payment purpose or any other obligations under the Computer Crime Act or the electronic transaction regulations
9. Other purposes that DoiTung may consider related to the objectives already defined above.

DoiTung is obliged to process and store your PII for the purposes defined above throughout the period of time that DoiTung shall have the contractual obligations to provide any services to you or as long as DoiTung has the legal obligation to do so that may be extended to survive the termination or the expiration of the contractual relationship. DoiTung also reserves the right to retain your PII for the purpose of protecting and preserving the Foundation’s rights against the criminal offences or legal violation against you in the case of the illegal action, including without limitation the intellectual property rights infringement or the violation of the terms of services defined by DoiTung for the period of time that DoiTung considers necessary to undertaken those actions. Also, for the PII process that is being undertaken on the consent basis, DoiTung will retain your PII for so long as until you have withdrawn your consent. By using the Website and the services provided by DoiTung, the user shall be deemed to accept the Privacy Policy at all times.

Disclosure of the PII

Generally, your PII shall be kept in strict confidence by DoiTung; provided that in certain circumstances, DoiTung may have certain necessity to disclose the PII to these groups of people in order to fulfill DoiTung’s contractual or legal obligations:

1. To disclose to the outsourced service providers (including without limitation the affiliates or other business partners) that have been engaged to provide direct services to DoiTung in the performance of any obligation to you, for instance the relevant professional counsel, the third party logistic service provider and other third party service providers engaged to provide performance assessment of the system and website; provided that always that DoiTung shall disclose your PII only for the specified objectives and solely on the need-to-know basis.
2. To disclose DoiTung ’s operational information that may include your PII to the storage service providers on cloud (that may be located in Thailand or abroad); provided that for the utilization of this particular services, DoiTung assure to set the high confidential configuration and setting to assure the security in your PII at the level that reflects the level of confidentiality and risk exposure;
3. To disclose the User’ PII to third party in the legal proceedings to protect DoiTung’s legitimate rights or to detect and prevent any fraud on the system or the services of DoiTung that may impact the third party’s rights; provided that such disclosure shall be done on the limited and specific purposes as defined.
4. In case that DoiTung is obliged under the applicable laws, court judgment or administrative order to disclose any PII of any particular users, DoiTung would need to do so only on the necessary basis.
5. Other entity whom you may give consent to DoiTung explicitly to disclose your PII to.

Cookies that DoiTung use on Website and service provision

Cookies are text files stored on the User’s computer browser directory or program data subfolder in order to keep data log of the User’s internet usage and the User’s behavior or interaction on the Website. For the performance of the Website, DoiTung needs to use 2 types of Cookies for various purposes as defined below:

1. Strictly Necessary Cookies are essential for the User to browse the Website and use its features, such as accessing secure areas of the Website; and
2. Other Cookies that may include Functionality Cookies used to record information about choices that the User have made in the Website such as personal settings, languages, and fonts so this would allows DoiTung to tailor our Website features that would match the User’s preference setting; Performance Cookies used to assess the performance in any part of the Website; and Advertising Cookies used to record the User’s on-site behavior and history of the Website visited and this would allow DoiTung to provide the User the services and products that suit the User’s preferences and to assess the success of each function of the Website.

For the use of Strictly Necessary Cookies, DoiTung needs to use this cookies for the performance of the Website in full capacity and without this type of cookies, DoiTung shall not be able to provide the designated services to the User. For other types of cookies, DoiTung will only use those cookies upon the receipt of the User’s consent.

Even though the use of Cookies would enhance the performance in providing services in any features of the Website to the User, the User shall be entitled to disable the Cookies setting on the User’s browser at their own will; provided that the User shall acknowledge that the Cookies-disabled setting may impact the efficiency and the performance of the Website as defined in details for each type of Cookies above.

Direct Marketing

Upon the receipt of the User’s consent, DoiTung may use your PII in order to give information relating to the new products and/or serivces that DoiTung and/or the affiliates or business partner may have that may match with your interest or beneficial to you; provided that DoiTung will continue to do so until the User has withdrawn the consent given.

Representation on the Appropriate Information Security of the PII

DoiTung represents and guarantees that DoiTung shall use the most appropriate security measures to prevent the unauthorized access, amendment or disclosure of the PII in any form or in any circumstance by either internal or external persons and DoiTung commits to review those measures on the regular basis with the strong commitment to use the best industrial practice and to be in strict compliance with the applicable laws.

Data Subject Rights

DoiTung acknowledges and accepts the User’s rights as the data subject over their PII as defined under the applicable laws that include the following rights:

1. Right to access; to request for the copy of all the PII; and to rectify or update their own PII;
2. Right to request for the PII that DoiTung has processed in the readable forms by the tools or automatic mechanics and to request for the data portability to other data controller;
3. Right to object to the PII process being undertaken;
4. Right to request for the erasure or de-identification of any PII that does not have any necessary basis to process, i.e. after the consent withdrawal;
5. Right to request for the PII process suspension in case that request for erasure is being exercised or when such PII is not necessary;
6. Right to withdraw consent that has been given for the PII process for specific purpose.

The User can contact DoiTung in order to make the request to exercise any defined rights through the defined channel without any charge and DoiTung will consider and notify the User of the Foundation’s determination within 30 days after the receipt of the User’s valid request.

Contact Us:

Data Controller:

• Name: Mae Fah Luang Foundation under Royal Patronage
• Address: 1875/1  Rama IV Rd, Lumphini, Pathum Wan District, Bangkok 10330
• Telephone: 0 2252 7114 Ext. 231
• E-mail: communication@doitung.org, dpo.marcom@doitung.org