DCR Group asia Co., Ltd. realizes and attaches great importance to taking care of And to protect the personal information of customers, business partners, contract parties and people related to the Company’s business operations is important. Therefore, the Company has established this Privacy Policy with the objective of and details as follows

Principles and Importance of Personal Data Protection Policy

to provide management about care and protect personal information involved in the Company’s business operations in a concise manner effective as well as complying with legal requirements “Personal Data Protection Act B.E. 2562”, the Company has established this personal data protection policy. The objective is to ensure that the company have a storage policy and take care of your personal information appropriately, concisely, including informing you of the details, the purpose for which the company collects, uses or discloses your personal information as well as your rights as the subject of personal data

The company will not collect, process, use, transfer or disclose your personal information. Unless you have given your consent before or at that time or the “Personal Data Protection Act B.E. 2562” or other laws allow it.

Key Definitions Related to Privacy Policy

personal information
means information about a person by which an individual can be identified. whether directly or indirectly but does not include the information of the deceased in particular.
sensitive personal data
means personal data as provided for in Section 26 of the Personal Data Protection Act B.E. 2019, including racial, ethnic, political opinions cult religion or philosophy sexual behavior Criminal records, health information, disability, trade union information Genetic data, biological data or any other information which affects the owner of personal data in a similar way as announced by the Personal Data Protection Committee.
Processing of personal data
Means any action on personal data such as collecting, recording, copying, organizing, keeping, updating, changing, using, recovering, disclosing, forwarding, disseminating, transferring, merging, deleting, destroying, etc.
personal data subject
means an individual who is the owner of the personal information the Company collects, uses or discloses.
Personal Data Controller
means a person or juristic person who has the authority to make decisions about the collection, use or disclosure of personal information.
personal data processor
means a person or a juristic person who performs the collection, use or disclosure of personal information on the order or on behalf of the personal data controller.
minor
means a person who is not of legal age or under 20 years of age, or has no status as a person who has reached the age of majority under Section 27 of the Civil and Commercial Code
company
means DCR Group Asia Co., Ltd. and the group of companies as shown in the attachment.

Scope of application of the Personal Data Protection Policy

To the extent this Privacy Policy and the effect on the personal data that the Company collects, uses or discloses, and covers the roles, rights and duties of the persons concerned with that personal data, namely the owner of the personal data. Personal Data Controller personal data processor This includes employees of the Company, business partners, contract parties or individuals inside and outside the Company who process personal data on behalf of the Company. or is obliged to process personal data under contracts and conditions with the Company or to support operations or government processes

This policy applies to the personal information of customers, partners, contract parties, company contacts. including the general public with whom the Company collects information and/or data processing and/or forwarding the personal information above Regardless of whether such action is done by the employee Company staff including the contracting party or third parties whose personal data is processed on their behalf or acting on behalf of the company and government agencies Both in terms of providing systems, products and products to the Company such as systems, websites, applications, consultants or other services within the scope of contracts, orders or responsibilities assigned by the Company. or for the execution of orders or a lawful request

source of personal information

For your personal data that the Company collects, processes, uses, transfers or discloses that information. The company may obtain it from the following channels:

  • Information that the Company collects directly from the Personal Data Subject through various channels such as signing contracts, documenting, completing surveys, using products or services. The application, registration, and other service channels are controlled by the Company. or when the Personal Data Subject contacts the Company at the office or through other communication channels controlled by the Company.
  • company website and affiliated companies
  • Social Networks such as Line, WhatsApp, WeChat, Facebook, TIKTOK, LinkedIn and others.
  • Email
  • telephone
  • Forms, business cards, job applications, and other documents
  • other channels

This includes the case of providing personal information of a third party to the Company. You are responsible for providing details under this policy or announcements of products or services, as the case may be. let such person know as well as obtaining consent from that person if it is a case where consent is required to disclose information to the Company

Types of personal data collected

The Company will collect, process, use, transfer or disclose your personal information. Only after the company has received your consent only. except in the case “Personal Data Protection Act B.E. 2562” or other laws allow this The company will ask for your consent in writing to the collection, processing, use, transfer or disclosure of your personal information. or via electronic systems except under the condition that consent cannot be obtained by such means The types of personal data that the Company may collect, process, use, transfer or disclose are as follows:

  1. 1. General personal information
    1. Personal information such as name-surname, gender, age, date of birth, nationality, ID card number Passport number, etc.
    2. Contact information such as address, telephone number, email, social networks such as Line, WhatsApp, WeChat, Facebook, Twitter, Instagram, TIKTOK, LinkedIn, etc.
    3. Personal profile information, such as education history work history, etc.
    4. User account information such as Username for accessing the company’s system History of using the company’s system
    5. Information related to financial transactions, such as bank account details credit card details Bank account transaction records Buy-sell history Salary slip and income Receipt documents, invoices, tax invoices, etc.
    6. Document information or proof of identity, such as a copy of ID card Copy of driving license Copy of house registration Copy of name-surname change copy of passport Copy of bank account, vehicle registration number, etc.
    7. network information and the Internet such as IP Address, Cookie, Activity Log, etc.
    8. Other information such as photographs, video clips, animations including other personal data that is meant by “Personal Data Protection Act B.E. 2562”
  2. sensitive personal datasuch as your race, religion, criminal history, health information, disability, biometric data, or any other information that affects you in a similar way as “Personal Data Protection Act B.E. 2562” stipulates

Purposes of collecting, using and disclosing personal information

We may collect, process, use, transfer or disclose your personal information only with your consent. or has a legal base that allows it The Company will collect, process, use, transfer or disclose your personal information for the following purposes.

  1. service users, customers, partners or contract parties of the CompanyIn the event that you are a service user, customer, partner or contract party of the Company The Company may collect, process, use, transfer or disclose some or all of your personal information, with the following details:
    1. General personal information such as name, surname, ID card number Passport number, address, telephone number, email, social networks Copy of ID card copy of passport Copy of house registration Bank account details credit card details, etc.
    2. Sensitive personal data such as religion, etc.
    3. general purposes for collecting, processing, using, transferring or disclosing personal data
      1. for use in sales activities and marketing of the company, such as the presentation of products and services, including news releases and various promotions of the company, etc.
      2. for use in issuing documents and send invoice receipt and tax invoice
      3. for use in determining credit limit approval
      4. for use in registering customers in the company’s system
      5. for use in coordinating involved in the procurement process, including the process of payment, claim or return of goods, etc.
      6. for use in the payment process and receive payment Both checking the balance of payments – receiving payments as well as issuing a withholding tax certificate, a summary of input tax – sales tax (Phor.Phor.30).
      7. to be used in connection with contracts or agreements, including for the performance of contracts or agreements as well as for reference or as evidence In the event that the company has a contract or any agreement with you
      8. for use in compliance with the law
    4. Purposes for collecting, processing, using, transferring or disclosing sensitive personal data The company has no policy to store your sensitive personal information in any way. However, if it is necessary for the Company to collect, process, use, transfer or disclose your sensitive personal data, the Company must obtain express consent. except for legal exceptions only
    5. Forwarding, transferring or disclosing personal information in general The Company may be required to forward, transfer or disclose some or all of this information to the Company and/or its agents. which is a contractual party with the company for credit line insurance financial institution Auditor and certifying account Agents/agents or contract parties of companies that provide services such as legal consulting services. or document delivery service including relevant government agencies such as the Revenue Department, etc.
    6. Forwarding, transferring or disclosing sensitive personal information The company has no policy on forwarding, transferring or disclosing your sensitive personal information in any way. However, if it is necessary for the Company to transmit, transfer or disclose your sensitive personal data, the Company must obtain express consent. except for legal exceptions only
  2. person in office space or other areas owned by the companyIn the case of a person in the office area or areas owned by the Company for any reason The Company may collect, process, use, transfer or disclose some or all of your personal data as necessary. The details are as follows.
    1. General personal data such as pictures, animations video([recording and sound recording), etc.
    2. Sensitive personal data such as images, moving images Video ([recording and audio recording)] that may be classified as sensitive personal data according to “Personal Data Protection Act B.E. 2562”
    3. general purposes for collecting, processing, using, transferring or disclosing personal data
      1. for use in maintaining your safety and your assets in the area of ​​the company
      2. for use in maintaining the security of the Company’s assets
      3. In order to comply with the regulations prescribed by law or as requested by government agencies
      4. To use to settle disputes and complaints in the event of a dispute or complaint and/or to support the process of discipline, company regulations
    4. Purposes for collecting, processing, using, transferring or disclosing sensitive personal data
      1. In order to comply with the regulations prescribed by law or as requested by government agencies
    5. Forwarding, transferring or disclosing personal information in general The Company may disclose this information to the relevant government agencies in the event of necessity. or is a compliance with the law or may be disclosed to external service providers for security needs. or to suppress danger to life, health, property, or to settle disputes, complaints, etc.
    6. Forwarding, transferring or disclosing sensitive personal information The Company may disclose this information to the relevant government authorities in case of necessity. or is a compliance with the law or may be disclosed to external service providers for security needs. or suppressing dangers to life, health and property, etc.
  3. Person accessing the website or other company technologies that collect cookies (Cookies)If you are a person who accesses the website or other technologies of the Company where your cookies are stored. The Company may collect, process, use, transfer or disclose some or all of your personal information as necessary. The details are as follows.
    1. General personal data such as information or behavior in using the website or other similar technologies, etc.
    2. Sensitive personal data, such as information that may be classified as sensitive personal data according to “Personal Data Protection Act B.E. 2562”
    3. general purposes for collecting, processing, using, transferring or disclosing personal data
      1. To give visitors a good experience to the company’s website. and perfect from using the website and helps the company to develop the layout, usability and functionality of the website to be more responsive to the user. As well as helping the company to increase efficiency in sales and marketing such as product presentation. and services to better meet the needs of customers, etc.
    4. Purposes for collecting, processing, using, transferring or disclosing sensitive personal data
      1. In order to comply with the regulations prescribed by law or as requested by government agencies
    5. Forwarding, transferring or disclosing personal information in general The Company may disclose this information to the relevant government agencies in the event of necessity. or is a compliance with the law or may be disclosed to a third party service provider for the purpose of improving the efficiency of the use of the website. or other similar technologies, etc.
    6. Forwarding, transferring or disclosing sensitive personal information The Company may disclose this information to the relevant government authorities in case of necessity. or is a compliance with the law or may be disclosed to a third party service provider for the purpose of improving the efficiency of the use of the website. or other similar technologies, etc. The Company must obtain the express consent. except for legal exceptions only

In addition, the Company may collect, process, use, transfer or disclose your personal information in the process. or another step However, the Company will collect, process, use, transfer or disclose your personal information with your consent. or in accordance with the objectives prescribed by law as follows:

  1. to achieve objectives related to historical documentation or archival for public benefit or related to research studies or statistics which have provided appropriate safeguards to protect the rights and liberties of the personal data subject as prescribed by the Committee
  2. To prevent or suppress a danger to the life, body or health of a person.
  3. is necessary for the performance of a contract to which the Personal Data Subject is a party; or to be used to perform the request of the personal data subject before entering into that contract
  4. It is necessary for the performance of duties in the performance of duties in the public interest of the Personal Data Controller. or to perform the duties of the use of state powers given to the Personal Data Controller
  5. It is necessary for the legitimate interests of the Personal Data Controller. or of a person or entity other than the Data Controller. unless such benefits are less important than the fundamental rights of the personal data subject.
  6. It is in compliance with the law of the personal data controller.

Minor personal information The incompetent and the quasi-incompetent

Where the Company may collect, process, use, transfer or disclose personal information of minors incompetent person and quasi-incompetent people The company will seek the consent of the authorized person to act on its behalf. or take action in accordance with applicable legal requirements

Forwarding or transferring personal data abroad

In the event that the Company has a necessity to forward your personal information to a foreign country The Company will ensure that the destination country to which the Company will forward or transfer personal data to it have adequate personal data protection standards and in compliance with the requirements prescribed by law

Period of retention of personal information

We will only collect your personal data for as long as it is necessary for the processing for the purposes of this policy. Unless it is necessary to keep personal data for any other reason, such as to comply with the law or investigate disputes. The Company may be required to retain information for longer periods than specified.

Providing services by third parties or sub-providers.

The company may be assigned or undertake the employment of a third party to process personal data instead or acting on behalf of the company It may be in the form of services in various fields, such as being a job administrator. Subcontracting work in any other step or process Including hiring – sending documents or is a job in the form of outsourcing

by assigning agents or a third party carry out the processing of that personal data The company will require a documented agreement. To identify the rights and duties of the Company as a personal data controller and third party that the company hires or entrusted as a personal data processor including setting details of personal data, purpose, scope and other relevant details to ensure that the agent or a third party will process personal data to the extent assigned by the Company. under the agreement

In the event that the processor of the personal data entrusts the subprocessor (subprocessor) to process the personal data on behalf of or on behalf of the processor of the personal data. The Company shall direct the Personal Data Processor to provide a documented agreement between the Personal Data Processor and the Subprocessor in a format and standard not lower than the Agreement between the Company and the Personal Data Processor.

Security of personal information

the company has prepared and/or choose to use a personal data collection system with appropriate mechanisms and techniques as well as have security measures as “Personal Data Protection Act B.E. 2562” and related laws including limiting access to your personal data from employees, employees and agents of the Company. or to prevent your personal information from being used, disclosed, destroyed or accessed without permission.

Connecting to external websites or services

In some cases, the Company’s website, service or contact There may be links to other websites, services or means of contact of other persons or entities. They may have different personal data protection policies. The company asks you to study the privacy protection policy of the website. or that service provider in its entirety before using the service The company would like to inform you that The company is not related and has no authority to supervise Responsible for your personal information including the privacy protection policy of that website or service in any way, and the company is not responsible for the actions and damage caused by the website or that service at all

Rights of personal data subject

The “Personal Data Protection Act B.E. has the right to own personal data as follows:

  1. Right to request access to personal data You have the right to request access and obtain a copy of your personal data about yourself. which is under the responsibility of the company or requesting to disclose the acquisition of such personal data that he did not give consent However, the Company may refuse to request access to your personal data in the event of a legal refusal or court order. or accessing and obtaining a copy of that personal data will affect that may cause damage to the rights and the freedom of others
  2. Right to request correction of personal data to be accurate, complete and up-to-date In the event that you find that your personal information is inaccurate You have the right to ask the company to fix it. to be accurate, complete and up-to-date
  3. Right to obtain personal information You have the right to obtain your personal information from the Company. In the event that the Company has made personal data in a form that is readable or generally usable by means of or a device that works automatically and can use or disclose personal information by automatic means as well as having the right to request the Company to transmit or transfer personal data in such form to other personal data controllers whenever possible by automated means. as well as to obtain personal information that the company sends or transfer personal information in such form to other personal data controllers directly unless by technical condition it is not possible
  4. Right to delete or destroy personal data You have the right to request that the Company delete or destroy personal information or make your personal information unable to identify the person who owns the personal information further in accordance with “Personal Data Protection Act B.E. 2562” stipulates
  5. Right to request suspension of use of personal data You may request the Company can suspend the use of your personal information In the following cases
    1. When the Company is in the process of investigation as requested by the Personal Data Subject, the Personal Data should be corrected to be current, complete and not misleading.
    2. When personal data of the personal data subject is collected Unlawful use or disclosure
    3. When personal data is no longer necessary for retention for the purpose of collecting personal data But the subject of personal data is required to keep it in order to establish legal claims. Compliance or exercise of legal claims or raising the defense of legal claims
    4. when the Company is proving the legitimate grounds for collecting personal data of the personal data subject; or investigate the need for collecting, using or disclosing personal information. for public benefit due to the personal data subject has exercised the right to object to the collection, use or disclosure of personal data
  6. Right to withdraw consent In the event that you have given us your consent to collect, use, transmit or disclose your personal information You have the right to withdraw your consent for the duration of your personal data being kept by the Company. Unless there is a limitation of rights by law requiring the company to continue to keep your personal information.
  7. The right to object to the processing of personal data You have the right to object to the collection, use, transmission or disclosure of your personal information. Unless the Company has legitimate grounds for refusing your request.

However, participation or the right to access and/or correct personal data You have the right to access your personal data. by notifying the request through the company’s contact channels such as Call Center, Email, office or company website The company will notify the existence. and details of personal data such to you If you see Your personal information is invalid. or not current You can notify me of corrections. You can change your personal information. Including you have the right to ask the company to move your personal data, object to processing, request to suspend the use. or proceed to delete your personal data. unless the company may have the right to refuse or limiting the rights of data subjects as required by personal protection laws The Company will endeavor to respond to requests at Your lawful request within 30 days, but in some cases it may take more than 30 days if your request is complex or you submit multiple requests, in which case the Company will notify you and report the progress of the case to you.

Updates to the Privacy Policy

The Company may amend, add or update this Privacy Policy. which the company will announce to you on the website https://www.doorandwindow.asia/privacy-policy with the date of the last amendment The company recommends that you check this policy regularly. Your continued use of the products or services on the Company’s website after the Privacy Policy has been changed will constitute your acceptance of the changed Policy.

Inquiries or exercise their rights as the subject of personal data

If you have questions or wish to correct, delete data, exercise your rights or contact other matters related to your personal data. Please contact us through the channels as detailed below.

Contact

Phone : +6677969900
Email : info@dcrgroupasia.com