Privacy Policy

Last Updated: June 1, 2022

The Digital Council of Thailand (“DCT”) recognizes the importance of protecting users’ personal data. To ensure trust and confidence that personal data will be protected when using DCT’s website (https://www.dct.or.th/) and all related services by DCT, DCT has issued this Privacy Policy to inform users of the details regarding the collection, use, and disclosure of personal data (“Personal Data Processing”), the rights of data subjects, and data security measures in accordance with the applicable laws of the Kingdom of Thailand, including the Personal Data Protection Act, B.E. 2562 (2019) and its amendments, as well as related laws, regulations, and rules.

Before using DCT’s website and all related services, users are requested to carefully read and strictly comply with this Privacy Policy. If you do not agree with any part of the policy, please discontinue use of the website and services immediately. Continued use will be considered acceptance of the terms herein.

1. Definitions

“Personal Data” means any information relating to a person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons in particular.

“Cookies” means any text files placed in the computer and/or communication devices of users (e.g., tablets, smartphones) through a web browser when accessing DCT’s website and all related services.

2. Collected Personal Data

DCT collects users’ personal data related to the use of its website and related services, both current and future, including but not limited to:

  1) Personal data such as name, surname, phone number, email, address, photographs, ID card images and numbers, location data, etc.

2) Website browsing behavior collected through cookies, including:

- IP address

- Web browser type

- Visited web pages

- Visit timestamps

3. Purposes of Personal Data Processing

DCT shall collect use, or disclose personal data only to the extent necessary to achieve specified purposes and  in accordance with the lawful bases, under the following circumstances: 1) To perform a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract, such as identity verification to access DCT’s website and services

2) To comply with a law to which DCT is subjected.

3) For legitimate interests of DCT or any other person.

4) To perform tasks carried out in the public interest by DCT, or to exercise official authority vested in DCT. 

5) To prevent or suppress a danger to a person’s life, body or health.

6) For the purpose relating to research or statistics, in which the suitable measures to safeguard the data subject's rights and freedoms are put in place

In cases where DCT is unable to collect, use, or disclose personal data without obtaining the user's consent, as specified in the aforementioned circumstances, DCT will seek the user's explicit consent on a case-by-case basis prior to processing their personal data. Once the user has given consent for the processing of their personal data, DCT will process the data solely for the purposes disclosed and for which consent has been obtained.

4. Consent and Consequences of Consent's Withdrawal 

1) Users may withdraw their consent at any time.  However, this withdrawal will not affect any prior collection, use, or disclosure of your personal data that was legally consented to before the withdrawal.

2) If a user withdraws their consent previously given to DCT or refuses to provide personal data, DCT may be unable to fully or partially perform its obligations to achieve the purposes outlined in the contractual agreement between the parties. This includes the provision of DCT's website and related services, as well as the implementation of this Privacy Policy.

3) Where the minor is below the age of 20 years, please inform DCT of the details of the holder of parental responsibility over the child. This will enable DCT to obtain consent from the holder of parental responsibility over the child as well.

5. Disclosure of Personal Data

1) DCT may disclose users’ personal data under the stated purposes or legal obligations to:
- Partners or Members of DCT related to the processing

- Relevant DCT staff

- Government agencies or others as required by law

2) The disclosure of personal data to third parties will be carried out solely for the purposes specified herein or as required by laws.

3) In cases where DCT discloses personal data to third parties, DCT shall implement suitable measures to protect the disclosed personal data and to comply with the standards and obligations set forth in the Personal Data Protection Act B.E. 2562 (2019).
4) In the event that DCT sends or transfers the Personal Data to a foreign country, the destination country or international organization that receives such Personal Data shall have adequate data protection standard, and shall be carried out in accordance with the rules for the protection of Personal Data.

6. Data Retention

DCT has established the following details regarding the retention period of personal data, which will be communicated to users:

1) DCT will be retain personal data in both physical (hard copy) and/or electronic (soft copy) formats. Suitable security measures will be implemented to safeguard the personal data, as detailed in Section 7 of this Privacy Policy.

2) DCT shall collect personal data of users only for as long as necessary to fulfill the purposes for which the data was collected, or within the duration of any contractual or legal relationship between the user and DCT, or within the period required to exercise legal claims by the contracting parties.

3) Upon expiration of the data retention period or when there is no longer a lawful basis for processing the user's personal data, DCT will take appropriate steps to delete, destroy, or anonymize the data in a way that prevents identification of the data subject within a reasonable timeframe.

7. Data Security

DCT has established appropriate security measures—both physical and electronic—to prevent unauthorized access, loss, destruction, use, alteration, or disclosure of personal data, as well as prevent unauthorized use of such data.

8. Links to external websites, applications, and services.

DCT’s website and related services may contain links to external websites, applications, or services operated by third parties. These third parties may collect personal data from users. Consequently, DCT wishes to inform users that this Privacy Policy applies solely to the processing of personal data collected through DCT's website and related services. DCT is not responsible for any damage arising from the processing of personal data by third parties, even if such third-party services are linked from DCT's website or related services.

9. Rights of the Data subject
Users, as data subjects, have the following legal rights:

1) Right to Access: User is entitled to request access to and obtain copy of the Personal Data related to him or her, which is under the responsibility of DCT. 

2) Right to Withdraw Consent: User may withdraw his or her consent at any time, unless there is a restriction of the withdrawal of consent by law, or the contract which gives benefits to the data subject.

3) Right to Data Portability: Request DCT to send or transfer the Personal Data in such formats to other Data Controllers if it can be done by the automatic means, unless it is impossible to do so because of the technical circumstances.

4) Right to Object: Object the processing of their personal data at any time. However, if the processing of personal data is carried out for the legitimate interests of the DCT or a third party, or for the performance of a task carried out in the public interest, DCT may continue processing the personal data only if it can demonstrate that its legitimate interests outweigh the fundamental rights and freedoms of the data subject.

5) Right to Erasure: Request DCT to erase or destroy the Personal Data, or anonymize the Personal Data to become the anonymous data which cannot identify the data subject, If a user believes that their personal data has been unlawfully collected, used, or disclosed under PDPA law or DCT is no longer necessary in relation to the purposes for which it was collected, used or disclosed or the data subject withdraws consent on which the collection, use, or disclosure is based on, and where DCT has no legal ground for such collection, use, or disclosure.

6) Right to Restrict Processing: Request DCT to restrict the use of the Personal Data, in case when DCT is pending examination process in accordance with the data subject's request, or  when it is the Personal Data which shall be erased or destroyed pursuant to, but the data subject requests the restriction of the use of such Personal Data instead. 

7) Right to Rectification: Request DCT to ensure that the Personal Data remains accurate, up-to-date, complete, and not misleading.

10. Cookies Policy

When accessing the Digital Council of Thailand's (DCT) website (https://www.dct.or.th/) and all related services, DCT records information related to your usage in the form of cookies. These cookies do not harm your computer or communication devices and are used solely to store log data and track your internet usage or website visitation behavior. This Cookies Policy explains the functionality, purposes of cookies, and how to delete them to protect your privacy, as detailed below:

1) DCT records information related to users' visits to DCT’s website or related services through cookies or similar technologies. DCT utilizes cookies to enhance users' access to services and to improve the overall quality of services provided.

2) Users have the option to refuse the collection of information via cookies by adjusting their browser settings. Please note that such adjustments may impact on the optimal performance of the website and applications.

11. Continued Use of Previously Collected Data

DCT will process personal data in accordance with the applicable laws currently in force. DCT reserves the right to continue collecting and using personal data previously collected before the enforcement of the Personal Data Protection Act B.E. 2562, provided that such processing aligns with the original purposes for which the data was collected. Should users wish to withdraw their consent for the continued collection and use of their personal data after the enforcement of the Personal Data Protection Act B.E. 2562, they may do so by notifying DCT through the channels that will be publicly announced.

12. Contact Us

If the user has any suggestions or inquiries regarding the processing of personal data, including requests to exercise their rights under this Personal Data Protection Policy, the user can contact DCT through the following channels:

Digital Council of Thailand (DCT)  

Location: 111 True Digital Park, Unicorn Building, 7th Floor, Unit 714, Sukhumvit Road, Bangjak Sub-district, Phra Khanong District, Bangkok 10260, Thailand.

Website: https://www.dct.or.th  

Tel: +66 2 020 2000  

Email: contact@dct.or.th

13. Policy Updates

DCT reserves the right to amend or update this Privacy Policy in the future, in accordance with applicable laws and regulations. Any such changes will be publicly announced through DCT's official website.

--------------------------------------------------------------

Privacy Policy

Last Updated: June 1, 2022

The Digital Council of Thailand (“DCT”) recognizes the importance of protecting users’ personal data. To ensure trust and confidence that personal data will be protected when using DCT’s website (https://www.dct.or.th/) and all related services by DCT, DCT has issued this Privacy Policy to inform users of the details regarding the collection, use, and disclosure of personal data (“Personal Data Processing”), the rights of data subjects, and data security measures in accordance with the applicable laws of the Kingdom of Thailand, including the Personal Data Protection Act, B.E. 2562 (2019) and its amendments, as well as related laws, regulations, and rules.

Before using DCT’s website and all related services, users are requested to carefully read and strictly comply with this Privacy Policy. If you do not agree with any part of the policy, please discontinue use of the website and services immediately. Continued use will be considered acceptance of the terms herein.

1. Definitions

“Personal Data” means any information relating to a person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons in particular.

“Cookies” means any text files placed in the computer and/or communication devices of users (e.g., tablets, smartphones) through a web browser when accessing DCT’s website and all related services.

2. Collected Personal Data

DCT collects users’ personal data related to the use of its website and related services, both current and future, including but not limited to:

  1) Personal data such as name, surname, phone number, email, address, photographs, ID card images and numbers, location data, etc.

2) Website browsing behavior collected through cookies, including:

- IP address

- Web browser type

- Visited web pages

- Visit timestamps

3. Purposes of Personal Data Processing

DCT shall collect use, or disclose personal data only to the extent necessary to achieve specified purposes and  in accordance with the lawful bases, under the following circumstances: 1) To perform a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract, such as identity verification to access DCT’s website and services

2) To comply with a law to which DCT is subjected.

3) For legitimate interests of DCT or any other person.

4) To perform tasks carried out in the public interest by DCT, or to exercise official authority vested in DCT. 

5) To prevent or suppress a danger to a person’s life, body or health.

6) For the purpose relating to research or statistics, in which the suitable measures to safeguard the data subject's rights and freedoms are put in place

In cases where DCT is unable to collect, use, or disclose personal data without obtaining the user's consent, as specified in the aforementioned circumstances, DCT will seek the user's explicit consent on a case-by-case basis prior to processing their personal data. Once the user has given consent for the processing of their personal data, DCT will process the data solely for the purposes disclosed and for which consent has been obtained.

4. Consent and Consequences of Consent's Withdrawal 

1) Users may withdraw their consent at any time.  However, this withdrawal will not affect any prior collection, use, or disclosure of your personal data that was legally consented to before the withdrawal.

2) If a user withdraws their consent previously given to DCT or refuses to provide personal data, DCT may be unable to fully or partially perform its obligations to achieve the purposes outlined in the contractual agreement between the parties. This includes the provision of DCT's website and related services, as well as the implementation of this Privacy Policy.

3) Where the minor is below the age of 20 years, please inform DCT of the details of the holder of parental responsibility over the child. This will enable DCT to obtain consent from the holder of parental responsibility over the child as well.

5. Disclosure of Personal Data

1) DCT may disclose users’ personal data under the stated purposes or legal obligations to:
- Partners or Members of DCT related to the processing

- Relevant DCT staff

- Government agencies or others as required by law

2) The disclosure of personal data to third parties will be carried out solely for the purposes specified herein or as required by laws.

3) In cases where DCT discloses personal data to third parties, DCT shall implement suitable measures to protect the disclosed personal data and to comply with the standards and obligations set forth in the Personal Data Protection Act B.E. 2562 (2019).
4) In the event that DCT sends or transfers the Personal Data to a foreign country, the destination country or international organization that receives such Personal Data shall have adequate data protection standard, and shall be carried out in accordance with the rules for the protection of Personal Data.

6. Data Retention

DCT has established the following details regarding the retention period of personal data, which will be communicated to users:

1) DCT will be retain personal data in both physical (hard copy) and/or electronic (soft copy) formats. Suitable security measures will be implemented to safeguard the personal data, as detailed in Section 7 of this Privacy Policy.

2) DCT shall collect personal data of users only for as long as necessary to fulfill the purposes for which the data was collected, or within the duration of any contractual or legal relationship between the user and DCT, or within the period required to exercise legal claims by the contracting parties.

3) Upon expiration of the data retention period or when there is no longer a lawful basis for processing the user's personal data, DCT will take appropriate steps to delete, destroy, or anonymize the data in a way that prevents identification of the data subject within a reasonable timeframe.

7. Data Security

DCT has established appropriate security measures—both physical and electronic—to prevent unauthorized access, loss, destruction, use, alteration, or disclosure of personal data, as well as prevent unauthorized use of such data.

8. Links to external websites, applications, and services.

DCT’s website and related services may contain links to external websites, applications, or services operated by third parties. These third parties may collect personal data from users. Consequently, DCT wishes to inform users that this Privacy Policy applies solely to the processing of personal data collected through DCT's website and related services. DCT is not responsible for any damage arising from the processing of personal data by third parties, even if such third-party services are linked from DCT's website or related services.

9. Rights of the Data subject
Users, as data subjects, have the following legal rights:

1) Right to Access: User is entitled to request access to and obtain copy of the Personal Data related to him or her, which is under the responsibility of DCT. 

2) Right to Withdraw Consent: User may withdraw his or her consent at any time, unless there is a restriction of the withdrawal of consent by law, or the contract which gives benefits to the data subject.

3) Right to Data Portability: Request DCT to send or transfer the Personal Data in such formats to other Data Controllers if it can be done by the automatic means, unless it is impossible to do so because of the technical circumstances.

4) Right to Object: Object the processing of their personal data at any time. However, if the processing of personal data is carried out for the legitimate interests of the DCT or a third party, or for the performance of a task carried out in the public interest, DCT may continue processing the personal data only if it can demonstrate that its legitimate interests outweigh the fundamental rights and freedoms of the data subject.

5) Right to Erasure: Request DCT to erase or destroy the Personal Data, or anonymize the Personal Data to become the anonymous data which cannot identify the data subject, If a user believes that their personal data has been unlawfully collected, used, or disclosed under PDPA law or DCT is no longer necessary in relation to the purposes for which it was collected, used or disclosed or the data subject withdraws consent on which the collection, use, or disclosure is based on, and where DCT has no legal ground for such collection, use, or disclosure.

6) Right to Restrict Processing: Request DCT to restrict the use of the Personal Data, in case when DCT is pending examination process in accordance with the data subject's request, or  when it is the Personal Data which shall be erased or destroyed pursuant to, but the data subject requests the restriction of the use of such Personal Data instead. 

7) Right to Rectification: Request DCT to ensure that the Personal Data remains accurate, up-to-date, complete, and not misleading.

10. Cookies Policy

When accessing the Digital Council of Thailand's (DCT) website (https://www.dct.or.th/) and all related services, DCT records information related to your usage in the form of cookies. These cookies do not harm your computer or communication devices and are used solely to store log data and track your internet usage or website visitation behavior. This Cookies Policy explains the functionality, purposes of cookies, and how to delete them to protect your privacy, as detailed below:

1) DCT records information related to users' visits to DCT’s website or related services through cookies or similar technologies. DCT utilizes cookies to enhance users' access to services and to improve the overall quality of services provided.

2) Users have the option to refuse the collection of information via cookies by adjusting their browser settings. Please note that such adjustments may impact on the optimal performance of the website and applications.

11. Continued Use of Previously Collected Data

DCT will process personal data in accordance with the applicable laws currently in force. DCT reserves the right to continue collecting and using personal data previously collected before the enforcement of the Personal Data Protection Act B.E. 2562, provided that such processing aligns with the original purposes for which the data was collected. Should users wish to withdraw their consent for the continued collection and use of their personal data after the enforcement of the Personal Data Protection Act B.E. 2562, they may do so by notifying DCT through the channels that will be publicly announced.

12. Contact Us

If the user has any suggestions or inquiries regarding the processing of personal data, including requests to exercise their rights under this Personal Data Protection Policy, the user can contact DCT through the following channels:

Digital Council of Thailand (DCT)  

Location: 111 True Digital Park, Unicorn Building, 7th Floor, Unit 714, Sukhumvit Road, Bangjak Sub-district, Phra Khanong District, Bangkok 10260, Thailand.

Website: https://www.dct.or.th  

Tel: +66 2 020 2000  

Email: contact@dct.or.th

13. Policy Updates

DCT reserves the right to amend or update this Privacy Policy in the future, in accordance with applicable laws and regulations. Any such changes will be publicly announced through DCT's official website.

--------------------------------------------------------------